last executing test programs: 4m33.384991058s ago: executing program 2 (id=756): syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb143, 0x1000, 0x2, 0x196}) io_setup(0x9, &(0x7f0000000240)=0x0) io_getevents(r4, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r5, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r6) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r8, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x4000814) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x40, r9, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x40}, 0x4, 0x700000002000000, 0x0, 0x80}, 0x40000) 4m32.394958163s ago: executing program 2 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000380)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @local, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10000, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x850, 0x30, 0xffff, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x1, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xa, 0x1000008, 0xfff, 0x8001, 0x0, 0x4, 0x3, 0x4a82, 0x5, 0x100, 0xd, 0x4, 0x9, 0x4, 0x5, 0x6, 0xf17a, 0x6, 0x800080, 0x9, 0x80000001, 0x6e1e28f3, 0x9, 0x101, 0x9, 0x80, 0xad, 0x1, 0x0, 0x80, 0x0, 0x8, 0xfffffffc, 0x171d, 0x40, 0x2, 0x464, 0x40, 0x0, 0x4, 0x2, 0xa0000, 0x5, 0x8, 0x3, 0xffffff96, 0x7, 0x5, 0x8, 0x6, 0x9c4, 0xfd, 0x3, 0x9, 0x7, 0x4ba, 0x8001, 0xd, 0x0, 0x8, 0x4, 0x16d, 0xbb, 0xfffffff5, 0x9, 0x1, 0xacf, 0xa, 0x3, 0x8001, 0x6, 0x2, 0xda9, 0x6, 0xf, 0x9e05, 0x2d1, 0x80000001, 0x5, 0xfff, 0x600, 0x3, 0x0, 0xc76, 0xe2, 0x9, 0xfffffff9, 0x0, 0x0, 0x6, 0x9, 0x5, 0xdbff, 0x5, 0x10, 0x7, 0xe7, 0xfffffffb, 0x8, 0x1, 0x9, 0x0, 0x5, 0x9, 0x3, 0x3, 0x4, 0x3, 0xfffffff9, 0x10000, 0x0, 0x2, 0x80000000, 0x8001, 0xa, 0x52, 0x7b03, 0x6, 0xec00, 0xfffffffb, 0x5, 0x0, 0xb91470fb, 0x3, 0x3, 0x4, 0xa, 0x6d, 0x2, 0x3, 0x8, 0x412e, 0x24, 0xfffffff7, 0x6, 0x9, 0x2, 0x6, 0x0, 0xeaf, 0x75a0, 0x479, 0x5, 0x268, 0x200, 0x1, 0x400, 0x167, 0x9, 0x7, 0x8, 0xf, 0xdf, 0x1, 0xb, 0xa4, 0x7, 0xc6, 0x5b0, 0x9, 0x8, 0x2, 0x4, 0x1ee, 0x8, 0x1, 0xf725, 0x6, 0x6c0, 0x5, 0x1, 0x0, 0x1baac88f, 0x5, 0x400, 0x5, 0xff, 0x3, 0x1ff, 0x4, 0xceb, 0x3, 0xff, 0x5, 0xdc, 0x9, 0xfffffff0, 0x0, 0x800, 0x6, 0x8eb, 0xfffffffc, 0x8, 0x36919bdd, 0x5, 0x2, 0x8, 0x5, 0x81, 0x892c, 0x3, 0x2, 0x7ff, 0xef83, 0x4, 0x80, 0xffff, 0xda, 0x0, 0x5, 0xa, 0x80000000, 0x93c, 0x0, 0xa, 0x0, 0x7, 0x7, 0x8, 0x100, 0x3, 0xfaa6, 0x1, 0x1, 0x5, 0x6, 0x1, 0x3, 0x0, 0x8, 0x7f, 0x9710, 0xa, 0x81, 0x2, 0x6, 0x401, 0x9, 0x7, 0x80000000, 0x5, 0x3, 0x6, 0x7ff00000, 0x401, 0xd3d, 0x3, 0x5, 0x200, 0xe, 0x7, 0x3, 0x9, 0x4009, 0x2]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x10001, 0x59e9, 0x5, 0x1ffe, 0x7f, 0x1, 0x1000, 0xffffffff, 0x7, 0x1c00, 0x4, 0x6, 0x16c800, 0xf, 0x1, 0x20081, 0xff, 0x9, 0xf760, 0x6, 0x2, 0x4, 0x0, 0x101, 0x5, 0x3f, 0x1, 0x655, 0x8c5f, 0x6, 0x7, 0x1, 0xb, 0x7077, 0x10, 0x0, 0x0, 0xffff, 0x200, 0x63a08ec6, 0x800, 0xa373762, 0x9, 0x6, 0x9, 0xffff2cbd, 0x6, 0x6, 0x4, 0xfffffffb, 0xa, 0x8, 0x1, 0xffff, 0x8, 0x7, 0x5, 0x5, 0x5a, 0x1, 0x0, 0x1, 0x3, 0x6, 0x3, 0x5, 0x597, 0x1, 0x1, 0x2, 0x8, 0x0, 0x8, 0x100, 0x6, 0xfffffff7, 0xa, 0x6, 0x401, 0x3, 0x0, 0x5, 0x5, 0x7ff, 0x1, 0x7, 0x2, 0x3ac, 0x3, 0x0, 0xe559, 0xb, 0x7fffffff, 0x39, 0x125e, 0x6, 0x1, 0xc5d5, 0x7, 0xffff051b, 0x1, 0x0, 0x200, 0x8, 0xb5, 0x8001, 0x7, 0x4, 0x3, 0x2, 0xc4a, 0x0, 0xe, 0x5, 0x800, 0x4c18575, 0xe, 0x2, 0x8, 0x1000, 0x2e, 0x3, 0x3, 0x0, 0x88, 0x401, 0x8, 0xa, 0x94f, 0x3, 0xcf0, 0x22, 0x3, 0x0, 0x9, 0x4, 0x10, 0xb, 0x6, 0x3, 0x9, 0x7, 0x1800000, 0x7fffffff, 0x8, 0x32, 0x10000, 0x5, 0x8, 0xc0000000, 0x8, 0x8, 0xa8, 0xf, 0x4040, 0xfffffffb, 0x3, 0xc14, 0x6, 0xfffffffb, 0x1, 0x0, 0x9, 0x2, 0x8, 0x3, 0x1, 0xb, 0x4, 0x6, 0x3, 0x9, 0x20000002, 0xfffffe01, 0xa22, 0x7, 0xfffc, 0x6, 0x5c5e, 0x7, 0x4, 0x8, 0x5, 0x5, 0x9, 0x6, 0x5, 0x6, 0x2, 0x5, 0x0, 0x64, 0xb, 0x2, 0x3, 0x5, 0x42a1d4b5, 0x6, 0x4, 0x4, 0x5, 0x6, 0x834f, 0xb, 0x80000000, 0x5, 0x2, 0x101, 0x0, 0xfffffffe, 0xb, 0x8001, 0x8000, 0xfffffffd, 0x6, 0x80000001, 0x7a39f194, 0xcf, 0x5e249f10, 0x6, 0x1, 0x2, 0x6, 0x80000000, 0x3, 0x8, 0x4, 0x6, 0x4cb, 0x3, 0xf0, 0xfffffffd, 0x0, 0x1, 0x8, 0x7, 0x6, 0x2, 0x4, 0xd56, 0xd, 0x275b, 0x0, 0x3ff, 0xfffff292, 0x3, 0x3, 0xffffff80, 0xf, 0xd9, 0x7a, 0x6, 0x7, 0x6, 0x1]}], []]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x850}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) fsmount(r6, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc0, 0x0, [0x0, 0x3]}}) 4m31.462883637s ago: executing program 2 (id=763): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000100)={r4, 0x0, 0x6, 0x0, 0x1, [0x0], [0x4, 0x1, 0x0, 0x3], [0x0, 0x0, 0x0, 0x40000], [0x0, 0x9, 0x1]}) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000370400000000ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="83450500000000001c0012800900010069706970000000000c000280080089d6f93d7258a23a217ec3f52004b2724d9a133c2369f95e1f4accd06abbf197196018d7672a8ec62d65c2e70714a9d8034ba8695a3de3f17865f4fc2c578741c0c46d1191772b1a09684d27e25af2bbe6725b5a096fa14e0f892e52188c02b6380d668ff9115920982298b2f0d079467513fa0e7a87d74411", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000002c0)={r5}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) r10 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r10, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x5000000}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x8}, 0x28) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x28, 0x15, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0xfffffffffffffee5, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 4m30.530746107s ago: executing program 2 (id=765): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000180), 0x1, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r5}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f00000001c0)={0x8, r2}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r7, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno', @ANYRESHEX=r8]) close(0x3) 4m29.141497879s ago: executing program 2 (id=769): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r2) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x2) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a3348484bb8df93fe521fe1040f858fb0192fdb61165ae96e54e95f986e1991666a28ea84021377f854fb46b740fc923244159bca8f8f9df6582f8c01dc05733e2e55fc52557ead879afe7c49146aea5741c8105fe87b521f427bf000000000000000000000000000000000000000000000000000000000000004f701390124865885190ca06cb4f206ba657fc27bf050e5038735848f0cf75411468e4dfe3b6b09f3604b8e53e9e597e20f046c1cd9dcbced8b86658007017e0"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0100000000000300"/28], 0x50) pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 4m25.45701726s ago: executing program 2 (id=775): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, 0xd, 0x6, 0x3, 0x8000000000000001, 0x0, 0x0, 0x80}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000300)={@private1, @local, @remote, 0x2, 0x5, 0x4f, 0x400, 0x9, 0x1800200}) r6 = syz_pidfd_open(r0, 0x0) process_madvise(r6, 0x0, 0x0, 0xf, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000b40)={0x0, 0x0, '\x00', @bt={0xfffffffb, 0x8518, 0x0, 0xffffffff, 0x2, 0x4000000000000000, 0xe, 0xe}}) sendmsg$NFT_BATCH(r8, &(0x7f0000010100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xe98f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 4m9.837495221s ago: executing program 32 (id=775): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, 0xd, 0x6, 0x3, 0x8000000000000001, 0x0, 0x0, 0x80}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000300)={@private1, @local, @remote, 0x2, 0x5, 0x4f, 0x400, 0x9, 0x1800200}) r6 = syz_pidfd_open(r0, 0x0) process_madvise(r6, 0x0, 0x0, 0xf, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000b40)={0x0, 0x0, '\x00', @bt={0xfffffffb, 0x8518, 0x0, 0xffffffff, 0x2, 0x4000000000000000, 0xe, 0xe}}) sendmsg$NFT_BATCH(r8, &(0x7f0000010100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xe98f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 32.3694175s ago: executing program 4 (id=1336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='nsfs\x00', 0x40, &(0x7f0000000440)='syzkaller\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r10 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r10, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) fcntl$notify(r7, 0x402, 0x80000020) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000ad0400000000000000000000000000009301440c132f9821ab364d90e2d42af9e2fcf6030bb37e93ea755c01e51203cc89a1aa7af13bce83d235273516c198ec4dc08aba2e3763e76f204df95095f7ddf6ed2c5e3001b5a1bed2fd5fbb4e3b28a4d9bb7beefadb0f0ff78e392ad6073fae45f640a0c363d6d021cc4fcd4a78d5177af56412be41fae6ad4c1f576f2db6ae77eaf482e67cb9e191d8de1978f2895666e820649d6c0e8ada5b99d5d73d58508cbc156e5ed87adbba523184ce48a84163f18dbc209ebe5bf3b758c8db9762225284366005001abf08540125041a37dbca421118aeef0e20b7cf90006b66e02e437dca23d61b16f6d401010000000000002ca01ce5c683033f965b613cebb064142fcbf545d32b81139b81fb69caf0271a119f4d230193250fabed4f77fa6c4f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) r13 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x109502, 0x0) write$sndseq(r13, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x2, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c850}, 0x24040080) 22.539824539s ago: executing program 4 (id=1360): syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb143, 0x1000, 0x2, 0x196}) io_setup(0x9, &(0x7f0000000240)=0x0) io_getevents(r4, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r5, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r6) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r8, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000814) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x40, r9, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x40}, 0x4, 0x700000002000000, 0x0, 0x80}, 0x40000) 16.909018527s ago: executing program 4 (id=1377): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r2) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x2) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a3348484bb8df93fe521fe1040f858fb0192fdb61165ae96e54e95f986e1991666a28ea84021377f854fb46b740fc923244159bca8f8f9df6582f8c01dc05733e2e55fc52557ead879afe7c49146aea5741c8105fe87b521f427bf000000000000000000000000000000000000000000000000000000000000004f701390124865885190ca06cb4f206ba657fc27bf050e5038735848f0cf75411468e4dfe3b6b09f3604b8e53e9e597e20f046c1cd9dcbced8b86658007017e0"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0100000000000300"/28], 0x50) pread64(r3, 0x0, 0x0, 0x40000000009) 15.318924202s ago: executing program 4 (id=1381): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x200) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$snddsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r6, 0x29, 0xcf, 0x0, 0x0) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40e02, 0x8) r9 = creat(&(0x7f0000000500)='./bus\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x100, 0x4, '\x00', 0x0, @fallback=0x24, r8, 0x8, &(0x7f0000000480)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff]}, 0x94) syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000070100400020000000020000000000004898ed5c80ab7cd833c544951fea3a29c290"]) r10 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r10) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 12.123388384s ago: executing program 4 (id=1388): syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb143, 0x1000, 0x2, 0x196}) io_setup(0x9, &(0x7f0000000240)=0x0) io_getevents(r4, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r5, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r6) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x4000814) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x40, r8, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x40}, 0x4, 0x700000002000000, 0x0, 0x80}, 0x40000) 11.553129762s ago: executing program 3 (id=1390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x80) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x3, 0x0, 0x4000) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x40) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x14}, 0x10) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 10.993634586s ago: executing program 3 (id=1391): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xfff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0x1}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x2, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x7, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x16b, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0x6, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x2a34, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x6, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x3, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x5, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0x57ae807c, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x8, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x18, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0x3b, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0xa6c, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0xa, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x9748, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) accept4$x25(r3, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000004008500000086000000c500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.48733045s ago: executing program 3 (id=1393): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x9, 0x1, 0xc45, 0x1012, 0xc7, 0x2, 0x7, 'syz0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 8.084223354s ago: executing program 0 (id=1396): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000400)=0x200000000) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota') r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000004) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x41, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r8, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004940)=@delchain={0x1e88, 0x64, 0x100, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x6}, {0xe, 0xffff}, {0x0, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1e5c, 0x2, [@TCA_BPF_NAME={0xa, 0x7, './bus\x00'}, @TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_ACT={0x1de8, 0x1, [@m_police={0x56c, 0x15, 0x0, 0x0, {{0xb}, {0x470, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x6, 0x6, 0xefffffff, {0xf6, 0x1, 0x44ab, 0xb6, 0x400, 0x2}, {0x0, 0x2, 0x4a54, 0x800, 0x401, 0x8}, 0x1, 0x4, 0x1000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0xe1, 0x77c, 0xffffff00, 0x9, 0x7, 0xe1d, 0x8f, 0x7, 0x4d11, 0xc8, 0x7, 0xd, 0x5, 0x4, 0xad, 0xcd3, 0xfff, 0x24000000, 0x5, 0x656, 0x8, 0x9, 0xb, 0x8, 0x1, 0x400, 0xc11, 0x8, 0x3, 0x3, 0xfffffffe, 0xfffffff7, 0x7, 0x3, 0x7, 0x4, 0x4, 0xd8, 0x80000001, 0x74f6, 0x8, 0x0, 0x0, 0x5, 0x2, 0x2, 0x9, 0xffff824a, 0x1, 0xe, 0xffffffff, 0xfffffff9, 0x3, 0x8, 0x3, 0xfffffff9, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd5d8, 0x2df, 0xffffffff, 0x4, 0xfffffff8, 0x8, 0x8, 0x4, 0x3, 0x200, 0x1, 0x1, 0x80000000, 0x7ff, 0x3, 0x2, 0x0, 0x80000000, 0x7e, 0xfab6, 0x5, 0x6, 0xfebf, 0x3, 0x45400000, 0xf5, 0x3, 0x3, 0x40, 0x3, 0xd97, 0x4, 0x10001, 0x7ff, 0x0, 0xe, 0xffffffff, 0x8, 0x401, 0x1, 0xfffffffe, 0xfffffffe, 0x80000001, 0x1, 0xfffffff9, 0x80, 0xffffffff, 0x5, 0x8, 0x9, 0xffffff80, 0x5, 0xfffffffa, 0x7, 0xfffffee8, 0x8, 0x4, 0xc, 0x9, 0x6, 0x7, 0x7ff, 0x0, 0x2, 0x4, 0x6, 0x5, 0x7, 0xc9, 0x4, 0x7, 0x1, 0x2, 0xfffffff8, 0x4, 0x200, 0xb, 0xbc57, 0x1, 0x5, 0x3, 0x10000, 0x36dc, 0x2, 0x0, 0x3, 0xfffffc01, 0x4, 0x5, 0xfffffa33, 0x8, 0x4, 0x7fff, 0x3, 0x7, 0x9, 0x5, 0x10000, 0x4957, 0x6, 0x8, 0xffffffff, 0x2, 0xc886, 0x7, 0x8, 0x9, 0x0, 0x10001, 0x2, 0x6, 0x5, 0x3, 0x1, 0x2, 0x1, 0xc6f, 0x5, 0x1, 0x9e1820bf, 0x2, 0xffff, 0x1c191755, 0x6, 0x8, 0x4, 0x7ff, 0x5, 0x5, 0x0, 0x0, 0x46, 0x9, 0x10001, 0x7fffffff, 0x4, 0x0, 0x4, 0x1, 0x8, 0x1, 0x8000000, 0x2, 0x401, 0x2, 0x4, 0x7fffffff, 0x7, 0x7f4, 0x1, 0x4, 0x3, 0x2, 0x0, 0x3, 0xe89, 0x41c, 0xffff0000, 0x9bf, 0xffff, 0x401, 0x1, 0x9, 0x2, 0x6, 0x1, 0xfffffffd, 0x2, 0xd, 0x0, 0x3, 0x8, 0x0, 0x2, 0x9, 0x2, 0x3, 0x7, 0x6, 0x7, 0x9, 0x3, 0x200, 0x4, 0x8, 0x3, 0x2, 0x8, 0x2, 0x3, 0x7, 0x400, 0x0, 0x0, 0x9]}]]}, {0xd4, 0x6, "607c956f7cef93d7a3cd2a054d59954e545e9a99e95c6a73487c4f49ccc4eeaa0e27028241f60e933bc21318be70431b3ee08b907b2d0a224bff7c8cc5958443764529507c0547f2336f1ccd0f67fb33f2f730566ce745254a6cba7bf0b6eec68513cf94748f7f02f6f925b0b488e30405491cb38861d6da855cadb9f280042a8aaf31a0862a21fd2db1dd90f553983758c51bcd60cd0e31ae089b93f728f100da9f845c69a7f77de0bad6699b5467d09f2e27d1fa118cba9eae92ef390c0cecc4b42fd5bb1ee745439c156ce7b5fd2a"}, {0xc, 0x7, {0x6dfb7ae9731b9c9c, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x74, 0x1d, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}]}, {0x3f, 0x6, "1d1536a8642168d40b42742f86f130d91d891d818f6464c1e922bcfefaf2c6020a683fb365d291cddc1a8c38f7237d2ba676297ac22a9a25a9112e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x19c, 0x19, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x660}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffc00, 0x3, 0x2, 0x4, 0xf4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1bab, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xe61, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7f, 0x8000, 0x7, 0x7, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x197f, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0xaf26a8821264bbd6, 0x0, 0x34d16929}}]}, {0xe9, 0x6, "0ebab4e07802ea50ade010b2574b76873b16707efabf6f5547ec4ce081d4ec6ce03c93033bf0f12a92fdec3475bf21f1e5ce175e95ba9f726e4b9ef5c40682e7df66928eb57bd53c2eaa9d6347640102902fc73018aee0661b80adcbd452023bbd852c806f084d82eeb02c9d8f27990dfdcd13f4adb590ecff4c6f56e322b7e059810df0abaf63a9a203bf967b913c79b3b16fd3bae31a8bac5c6e79fcefa581bb15ecc9160a05e3415f38b75ace42fb807322a53a2865e9c760e746b78f421f4707c62f1b268382caddbdaa95c33524f5d86e7012637d44eaf21ab6e46eb7df5fe24bc08d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x110, 0x12, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}]}, {0xdd, 0x6, "66c67a4cdffadeb75e59c99e607704ac97e8c843c20da6309b8bffb2d62bca9ca79228528af6c9560636eb6ad82ecef8607b77124d24047644ca5477d738d3362070a06eb0a4b56762c1950c333a185d3ffdd8724b7b7cfde720522a8137a1e77efb2a8ac6d9d053fbe63824a43447b352424bd47da8882492d8ef2bfd81a3d4beced44eb15d7d96d5a31b31df088ca53d6ead63793ce792fda469861dcbabee94f0e3c4a2358bcbfedbaee5aa236a65ebd3ed308880c8f945bb453c58e2411b16ec946b1ebff8ce438082f6298059b06cf6e4aab1a1eac823"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mirred={0x1fc, 0x1e, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7f, 0x20000000, 0x80000001, 0x4}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x7, 0x2, 0x401}, 0x0, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0xffffffffffffffff, 0x4fa2}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7, 0x0, 0x6, 0x2}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x4, 0x9, 0x8}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6f7, 0x0, 0x3, 0x9, 0xff}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x3, 0x5, 0x9, 0x80000000}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x8, 0x4, 0x7fff}, 0x3, r6}}]}, {0xd0, 0x6, "803419ed726441ba04e8f744909e336ee5487130fc05fae0750ec5d657c55421920f020ec95b54765bdacdba0b9865a3d570d0be1190c7dd051b506ef312ef032aa3640a2b7a8e7ce2b2e28d12a795a97488385745bc46e32f032e3f18172e97be4a75f9201634b8708d6c21f661637643d64313affb1883262e474e58471a6e9d5b6a24cb496c1036c55aa41e72e30fc2bb49620fe70099109890877a889e9cbd3e5dd1ce404a89821f99d9ba5cb3850a171834832e2c219ae32227b9b7b3a00ef455a2d90e266f6b396d06"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0xf8, 0x8, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x85f, 0x10000006}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xb58}}, @TCA_GACT_PARMS={0x18, 0x2, {0x18, 0x100, 0x5, 0x34, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x8, 0xffffffffffffffff, 0x3, 0x401}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x1, 0x1, 0x9, 0x7}}]}, {0x69, 0x6, "2ae94bcb71d38c4d0a22596093aaae7367ccae200aa385d7b8904683c91ed67be21946afcc69788411defe35c074139f88dd28b363cb26cf40b0fcb50b4ff2c49ba9d7c493442038621fc868cdc4123a95ad5d58cc6aee5acc20c0018291ee51542a47181e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x1078, 0x14, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x10}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x86, 0x1, 0x3, 0x1}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x9, 0x20000000, 0x6, 0x40}}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfaddc}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0xdc, 0x14, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "37182095ac78ba0291971cce435304f7"}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x40}}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x41}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010100}, @TCA_CT_LABELS_MASK={0x14, 0x8, "56ed4f114d4d1a61a5f50c440000c478"}]}, {0x2e, 0x6, "ba3bc965ba9d4d5ae4e543d7c987ab8033091d351fb3d1e5d5cdafb65a790be069b2fa0286ebdbd440af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x110, 0xe, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x100, 0x5, 0xc29c, 0x40}, 0x71e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x639, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcb, 0x3, 0x8, 0x1, 0xfffff7b5}, 0xff}}]}, {0x8a, 0x6, "7305b83c5173e7dc7aafe35f558c076d7a2d71b03bd16aa318291593ef8bd9f3f9b90c05f7e4860afdda44dd0359b58a458e6583fbdef95834c0ddb2ca64f335e0e9fa219196ea82a05470f41a6e6efe71eb6517531579c993ef1a67c95e34310097f113c8acdd38472aea5a939327e74c19c9be612008b0cdf6309793c9a5dc13f8064e247a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xdf54, 0x6, 0x9, 0x80000000}]}}, @TCA_BPF_NAME={0xa, 0x7, './bus\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xf4, 0x1, 0x6, 0x3}, {0x2, 0x7, 0x20, 0x7f}, {0x7fff, 0x7, 0xff, 0x2}, {0x95, 0xf, 0x7, 0x6}, {0xe9, 0x2b, 0x1, 0x9}]}}]}}]}, 0x1e88}}, 0x1000000) write$vhost_msg(r1, &(0x7f0000000340)={0x1, {&(0x7f0000003900)=""/4103, 0x1007, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000640)={0x2, 0x0, {&(0x7f00000007c0)=""/175, 0xaf, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 7.649939201s ago: executing program 5 (id=1398): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x100}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000200)={0xe, {0x26, 0xff, 0xdf}}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10}, 0x18) 6.910728279s ago: executing program 0 (id=1399): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000b80)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4800}, 0x4010) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(0x0, 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000440)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000700)=@ethtool_per_queue_op={0x4b, 0xf, [0x2000f68f, 0x8, 0x9, 0x10001ff, 0x8, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x203, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x9b5, 0xce, 0x2, 0x3, 0xe52f, 0xaa8, 0x80000000, 0x1, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x67a, 0xd, 0x7, 0x81, 0x6, 0x6, 0x3da, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x800, 0xfffff801, 0x2b, 0xa, 0x0, 0x6, 0x3, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000004, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x3ff, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0xdb4bf975, 0x9, 0xd, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x0, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0xb, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x9, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa], "354d52859e67242784b2d116258cd674e6f7a8a6a4121e789c83baf4c3a50a398640a4dc2fc81b58dbb571267492b55e6c08c88024448cb2ef70a24171f84c9efbacb6b98c218e44bd5e54b7fcfbb9df68a48f2a788ee358d193c551deed"}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) 6.681744761s ago: executing program 5 (id=1400): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x3, 0x200, "fe0140", 0x0, 0xf}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2465af98, 0x21}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "bce682834ccbf7cdd26a"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "abf817b5e5a4dc1589529fcf66"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xf, 0x4, "46bcc5d7d7103175d71f5a"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20048020}, 0x2010) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8d, 0xed, 0x2f, 0x40, 0x1004, 0x61aa, 0xd13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7b, 0x0, 0x0, 0x2, 0x6, 0x0, 0x3}}]}}]}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="94010000100001000000000000000000fc0000000000000000000000000000000000000000000000000100000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004000000000048000200656362286369706865725f6e756c6c"], 0x194}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004340)=""/102376, 0x18fe8) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300627269"], 0x118}, 0x1, 0x0, 0x0, 0x4040994}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) r7 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c00070905", @ANYRES16], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x6) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r6, 0x7}}, 0x10) 5.974263905s ago: executing program 0 (id=1401): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020480) socket(0x26, 0x2, 0xfffffffc) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000180)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x22030180) 5.945821267s ago: executing program 3 (id=1402): pivot_root(0x0, &(0x7f00000004c0)='./file1\x00') gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x25, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd7000000000", @ANYRES32=r4, @ANYBLOB="05980000002000001400128008000100677265000800028004001200ba66"], 0x34}}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32=r6, @ANYRES16], 0x4c}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x2000, r8}, 0x0) landlock_restrict_self(r7, 0x0) 4.737415917s ago: executing program 4 (id=1405): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffe, 0x2}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(r1, &(0x7f0000000540), 0x0, 0x4040880) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'veth1_to_bond\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r5) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x3, 0xb49, 0x9, 0x5, 0x0, 0x3}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x2) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000029000b0027bd72000008000005000004f8f362d0f0f4e97098b58296bf8a62a43cd9c4d7041e7f8d620c59e6a34c3a394c5b82d9daf65dc664b43bada99fcabe26f1472a067cc5771b049bdf909cda144b46a10cf11494"], 0x14}}, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) pwrite64(r8, &(0x7f00000004c0)="2ad0f8654ad1097e98d1bbe495953836040e41cb0f6c783efd616c41a12ecc83b3c0fe64985caababc5d9d4ea437f5d1658a3435a10d038a78a8fb306d", 0x3d, 0x9) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x38, 0x1, [@m_vlan={0x34, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "6b05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x408d4) 4.657877418s ago: executing program 1 (id=1406): socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xe) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20082, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0xc000) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={0x0, @ethernet={0x306, @random="fc06839d09fe"}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x1, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='bridge_slave_1\x00', 0x6, 0x7, 0x9}) 4.488989625s ago: executing program 3 (id=1407): r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$SEM_STAT(r0, 0x2, 0x12, 0x0) semop(r0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0xe65b}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) r1 = semget$private(0x0, 0x0, 0xc1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfff6}, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x0, 0x40, 0x8, 0xab9, 0x75, 0x3, 0x348, 0x8, 0x3ff}, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000280)=0x40000002) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000000c0)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000009c0)={0xf, {"a2e3ad214fc752f90b5e09094bf70e0dd038e7ff7fc6e5539b1b48078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d07420736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e2c5070000179c6f30e065cd5b91cd0ae17d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3bb469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918070000003f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860421c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2f09000000000000007747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847354b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042ffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9d1a3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdfa1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442748af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500", 0x1009}}, 0x1006) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @local}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x74, 0x11, 0x839, 0x8, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff3, 0xffff}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x89}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x12}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x400}, {0x8}]}, 0x74}}, 0x20040000) 4.45455676s ago: executing program 1 (id=1408): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000280)={0x1, 0x1, 0x27f}) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) removexattr(0x0, &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x97) ftruncate(r2, 0x8800000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000300)=0x5) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(0xffffffffffffffff, r2, 0x0, 0x578410eb) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3def", @ANYRES64=r2], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) sendto$inet6(r4, &(0x7f0000000240)='\f', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$kcm(0x29, 0x5, 0x0) 4.40018909s ago: executing program 5 (id=1409): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x3c, &(0x7f00000000c0), 0x1, 0x0, 0x4d, 0x40044}}], 0x30, 0x4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000003940)={@local, @local, 0x0}, &(0x7f0000003980)=0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000580)="2493624e243d2d363339e6704c6f1ea0463ac482b3c16278b74ce144e4a6f88c8dedb9b6bac0e348a1e5e2e9bce001a9e0166df5a11932de4b53dafb82823a0d1740e831e62f4897fea949db51fd212fa8466b4e7726db259889b10d37b3cfc444588131992099cf93d07bf3c1b8f944aeaf79f17cf647790a9e8186cb64b05d5094504797bddfe215c11fd5164c3cce9518105acb72f01a58a17a944d2d9c3965f59a82b757bb5d7e", 0xa9}, {&(0x7f00000006c0)="563554932b040a0f8e5386587e7f1972091f7ac352f0dfcc81156f2340c5f59518b6d8b8b2bf4512bc51f43cc94c41bf77de7c2467243771a9051258cd7d43ba33a80f655edd52714274785b90b749dd1edebaa68c27f7eb718bf67cdd9f97c2ce054418430f3080899db587f6beca676523f0faf3b5dcde45ac2bcc79fbc59efeef9de89ae0aab3e61ebc7e6353eab8b21c7f597ca5bb815abe7502482039f0f9d4a74c33b58a6f443c91c2880b1cc7aad46770cbcdbd24ba3c87f5c8c0869959d0629416e6c9f3e9", 0xc9}, {&(0x7f00000002c0)="15fd55005754292c6cb32f9c49199c567c0ebf6012a6062f57da88c1060fe6b3365dc9ee", 0x24}, {&(0x7f00000007c0)="78c2e04fb0ebbc92ddcf199eae2c6b4400b09df2e3b4ad8ba4fb5e03690f0563e5eb8d613d37a8c27c26779b1c2329cb2a3d667e8273b2c5e52ff3968e2885e1ab502d505aa06ffa6888881f1a77629fdf86a670e9fdd8a21b7541b8bb1f8eca5794f5f9d2e7369e48c135c07957e3ed594b9381b593da61f352f997766d12fc0e523abe176bbeb2273796933d7058f7cb455a2499784b2685bfaf167ff53b81b79477c848d4585fe934bce47a43da1dda3d9ab16fa6ed21c427854d6f2332ba1898a2d32bb67e0014764a6d957ff6b6ab5571c54ab2a8f63db088a4ce3a3eb24c", 0xe1}, {&(0x7f00000008c0)="73d3ffac4bc62e2f334caa2f24afefed3cb38902cd3cab57565ebcf0e28055fbb76a4c7b352b5d39ee871fd3eeaf76b014f4433ec377efb26e42fce637c16896379163267d21f1a57c73ad86eab14f3ebe8eccf90a14e4577e32e449a04189a34c188cc220b0a1e3b0e6c90076f97dca89bf95097c20e0437d9831b7f59f008ea3806b8751bcf00a0ef07322f55b9e0587256e8e1cc8daa7c998d2a63f4a2b5f02ca03fea1b9488eb02d46caafcd984d7b6860fa7c7478550b1bec7d5eef7ccbcd9f8aa3f4020369492805a1df95e6e90bbc4db3f0a07e990359fd81a901348623fb9d69ff63be", 0xe7}, {&(0x7f00000009c0)="674bfe28c9225cc86b06f6d340b1d3b870f0aa6032500af7dd7470397527a2bdd8264d2cfaaace91907d0f9eb0e6e250cc03abca6a7047fb298c4aee769c502a060923970bc53ff3fc0f03414825e3c3ef909fbc6d9a6a517b380683fd890c3fa490fc1e8b5c7f75e7883c7b77f2fdd19dd9f29d", 0x74}, {&(0x7f0000000a40)="d82a227519d3446a253813a17bca4aa95cfe3ff97e799079d3c841c356482db5455173d896bf8f6fe8dc32679291e342500c1083b0bf59191453590d83bddc3c30e7ebb59464f7cbf364fce3a6c8aed3b590e82d9550d6b6350ff11bdc1df2edea62c983049493cd6dbacc04056065c9a542a51935bbbe88d8f25c35d58eb8d1415b95742561f7", 0x87}, {&(0x7f0000000b00)="57cd3c83e919fd5d90bcf8fb35b62e71759d38e6e08e1b7b933e8d667e212cb03b360484ccc8561d62341f4ff51ddd3f90bac5f5427f26f179b2cb832a2abd6ea740467bda17", 0x46}, {&(0x7f0000000b80)="b4d03be5bf83e51ea2c66b367bbdf410854dafdda4d97a9ae61182b74c1248b9e88f27cbc34af1f0e1f306fe307f22324e6babaa3ea700c289e28a1d9f11daf85f217029a227151a94f67681b5f6d7346b56b7681899a7b7f139075d22f98315eac8492dd16cce14f4d029c875a6778a3274563cccc79a3d0a5cc27b6b0829f20099ece229af3c043e6c4915c65f78b098ce7801bd803685eb98a7a7b183f4dee96447112bff24b06b049303e6342d9462093fcaaefcfae7b8d4db16de40d0775e4fcd2a8fc28c86a1f89c85b31dfbfe4a0487ab63fcf8204335856149ee16f708b7e371990eaa0f2bb2d0526c53", 0xee}, {&(0x7f0000000c80)="3789991d227f1f25a1af00ffccdae11a30658684273f17a974cc9ed5b49e1b527218575a26cee4466ce8c8ffe7c4ebe3c6fe829515ca24fb19618dae2a87b8f25eb7ca899c713f1ddb9ed48fc0fd32d1fe528dfb0baaac8cf353d218c99d25e6d5bdc154a9", 0x65}], 0xa, &(0x7f0000003d40)=ANY=[@ANYBLOB="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"], 0x98}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f40)}, {0x0}, {&(0x7f0000001040)="65f97183b95bbbde2f59557db4f9d2517ddddef2f461db70f727e852cdb3121dead56155df63dbaea48a815b60bea6a31ea55109c40e7a15a2121e0e3fe8e6d71e3855a55227a726363fcb9d2ab983c44b0cb04979d08b3cb1119d83b95e0e0d1e2593617c713d4fb0a5bab81dc23820b1f85575617d3c512aae572ef890acff1def236fbe4580a77fb6c2b0100755408688fbb2c7e6", 0x96}], 0x3, &(0x7f0000001180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x48b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}}, {{&(0x7f00000011c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000003640)=[{&(0x7f0000001200)="7301f6ddec0dff4bf2f9a77ee1", 0xd}, {&(0x7f0000001240)="9c7fe4f213d5867c7ee0c9a7657462ac3be711feee98de83e66cc3abd8687d8bac60ec5508c2c52a3adada7eb992e83fc916db421d936d1f030b9a320a086a09cc92ca00", 0x44}, {&(0x7f00000012c0)="13ea744d8076dcdd06283454784d2568d107b948782397d587bea543d6630065576dddffe1", 0x25}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="6fe083c9aa6a730f8ce79270ab59d03f8cbf3717ed1d39a0a78437df09864dfad56b5acf7d437d7d2bc759ff3e3e04bd6e0c3d248ca0f29ab3ea74bd5ece1873b16af2dbac33fcee00b82ebfa7089d861f88cf21bb99ca0fc3f2a3d79d1145921e8bdf805571ce8cd0869703cccd72bdef48a24ad6e15e5835c1e9718eb680432de4bc5de638230bf781b8a65f29d0fdc9a3884aa689d4592b2dd3ee", 0x9c}, {&(0x7f00000033c0)="e5b8185e8ab6d653fcf0e6fe1bac04ef08afff80d169340ec11ef93b20e35dc898b36277585ce8b05b92ee104b97ec13c5660d9c2a299a3c412e7ae7a15ba7e8ca462ce7443c95998eeb50fcc8002ef93ab748df22edf25e18cbf90ba787f4f090f81c429339f5fc492beeb130fba63722c37d0b9b8620195f3287074194cd8cc3d8131440a6a4bc1c6b96478fb969364c0253dff804e491de8e89ceea7a340c148ca1b8082b166ca32f5f61523aba9073c09ef4e476ea8c5feb2fd3edcefbc88bdc0816d1e32f2d51dc84eb615a1e29a9496e4f2f6dc36f963e8bf815533225d37212788a46a14c0c5567ea", 0xec}, {&(0x7f00000034c0)="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", 0xfd}, {&(0x7f00000035c0)="ef94e0af37052b393b00f7c9244834df701379c507b8ec5ca0fb5a64e8f889895c9f146a9975866ceef1dc8934c2274a54db8615cc8d75a6c4eab5da3280183a5761274b88edd2072dd12a19ce61758d0a73e567360d33", 0x57}], 0x9, &(0x7f0000003700)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x85, 0x3, 0x7, [{@remote, 0x31ae0471}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0xd}, {@broadcast, 0x100}, {@remote, 0x8}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x71}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x88}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000037c0)="a5d11a7e5fdfeebe67492da04dbf344dd26213685e53c6a8aa393c6c1da21c5e1df41a52f49b41b105c8cf232c82056b606c7c3699b8", 0x36}, {&(0x7f0000003800)}, {&(0x7f00000038c0)="ff91e2b19df1ea1647ecb24858b7e38e48d1eadc7b3f7e6a60c0aa0f297d050c64548493e1e1", 0x26}], 0x3, &(0x7f00000039c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x50}}, {{&(0x7f0000003a40)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003bc0)=[{&(0x7f0000003a80)="428735378b5ac9192cf5de7cbac2292bf21bdebb4cc42d7d0d1fefd584e9890d59c6a6751a0df7699d92030acbad97552fa75f4bc82e2a9a768994ddd9bdd236f94f094187a2b824917e9a9a00e444dda1d2", 0x52}, {&(0x7f0000003b00)="a60008ca1f0b4c5c5db474cfea16a1a7a90df35f2985830dcc278091214e228303fabfd3a5a6ff6ba06284b3b2b5eebbee3607b075e15ea4176b402ae0879daa82e04a0d04f4c5d3d1662fa9cf3de193e121343c9df277f2b633df5a5436acaf9868912dcba33c7c89cc7bfb590c4cd1865cd9bb8262739ffab88fd361842aff5f1cf55d88ca1a52b7ee3a25e18f24af640701e5932c05771b50f1ab04f9003b234b6036920e498c7b427b", 0xab}], 0x2}}], 0x5, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, r5}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r6, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x18) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, 0x0) 4.016523754s ago: executing program 5 (id=1410): socket$kcm(0x10, 0x2, 0x4) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000700)=[@in={0x2, 0x4e20, @empty}]}, 0x0) syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x1d79) syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f9, 0x800, 0x3, 0x2e2}, &(0x7f0000000140), &(0x7f0000000100)) r2 = socket(0x29, 0xa, 0x105) openat$kvm(0xffffffffffffff9c, 0x0, 0x32842, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x6, 0x0, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$TCFLSH(r3, 0x400455c8, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x41) syz_usb_connect(0x5, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000002300)={0x0, 0x3e, &(0x7f00000022c0)={&(0x7f0000000180)={0x20, 0x1410, 0x1, 0x72bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x20000}]}, 0x20}, 0x1, 0x0, 0x0, 0x240048c5}, 0x0) getsockopt(r2, 0x114, 0x271d, 0x0, &(0x7f00000000c0)) 2.761283565s ago: executing program 1 (id=1411): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x3e, 0x2, 0x457f1c9146f8f874, "464905e100000000000000007f00", 0xb5315241}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x13c, 0x30, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{0x128, 0x1, [@m_gact={0x74, 0xb, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x475, 0x2}}]}, {0x39, 0x6, "7a26c822056c1c92d4a391d4edd403e7c642c1fad2a36600ccbe7be76abd06be0c4b006715609ea9569047075943f1943d7ddf491f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xb0, 0x10, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}]}, {0x79, 0x6, "5c284c3a3976241974df53e1d3b1cccfebd3f123dec3f372dd21566159734af29ce5d14ed6f7073420a1d585c18bbb14dabd87303b46d5802bd94ac81b53ad5bb23b64e5f966aeb3d264d2a1b41a1911920ce0a01624236b1a6243c02b4d0154443183978c1a333bb541216eef42a751f212ed3cf3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24040090}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x13}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) fanotify_mark(0xffffffffffffffff, 0x601, 0x30, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r4, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f00000000c0)={0x0, 0x1, 0x7, 0x8, 0x2, 0x100059a, 0xbfc4bb97dfede4bd}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$nl_route(0x10, 0x3, 0x0) 2.679768642s ago: executing program 0 (id=1412): socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) futex(0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff00403afe00000000000000000000ffff64010101ff02000000000000000000000000000102009078000000006000000000001100a8f40eb0b5000a000000000000000000000000000100000000000000000000ffffe000000117c10300c9110d0dc87556"], 0x0) read$msr(r3, &(0x7f000001dc00)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x208000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000841}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="0180729e0937c9a78b457be93af2fef95f8fc2000000bbbbbbbbbbbb86dd60b3388300103a0020010000000000001200000000000001fe800000000000"], 0x0) 2.190405199s ago: executing program 0 (id=1413): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x9, 0x1, 0xc45, 0x1012, 0xc7, 0x2, 0x7, 'syz0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 929.877181ms ago: executing program 5 (id=1414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x6c6c9c9e, 0x0) read$msr(r1, &(0x7f000001b5c0)=""/102368, 0x18fe0) r2 = getpid() move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x13d, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0xd8000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 921.598088ms ago: executing program 3 (id=1415): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @my=0x0, 0x0, 0xffffffffffff622a, 0x9c, 0x0, 0x9, 0x3}) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x48, 0x1, 0x0, 0x0, 0x100, 0x7fffffff}) close(r1) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) 497.056808ms ago: executing program 5 (id=1416): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xf, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa10, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000000000000000110000ac1414aa00000000442c00030a0101000000e7b2d60ba30000ac1c14bbfffffffe0000000000000000ac141400fffffffd0000000000000000"], 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r5, 0x0, &(0x7f0000931000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b0f, &(0x7f0000000140)={'wlan1\x00', @random="0300000000eb"}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x39, 0xfa00, {0x10000, 0x0, 0x106}}, 0x20) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 368.52196ms ago: executing program 0 (id=1417): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000640)={@remote, @dev={0xfe, 0x80, '\x00', 0x10}, @empty, 0x9, 0x40, 0x8000, 0x100, 0x0, 0x110227, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) keyctl$link(0x8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r6, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r6) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000006c0)='source?\xcd\xf0\x00\x06\xa0\xd4\x9a\x8d\x96\xa3Yk\xd3&\x98&T\x19 |\x8cj\xa9r\xa6a\xed\xbc\xbd_@\xf5\t\x8a\xba\x97\x96>|G8m\xfd\x00m0d\xa7\xb1]\x94XM\xc3\xa7\xfb\xd1A\x9b\xa9\xa3\xf4\xe6\x90\xd9\xb0\fL\x11\xc5\xe6\x9a\xdd\x06\xd2\xba\x9ci\x8d\xfe\x91\xeb\xe2\xd3\xeb\xebU\xe7\xc8\xe9\xbd:\xde\xae\xf1\x95\x95\xe2\x06$\x80\xf1', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x8b\x88\xeb\xa3\x01\x8c\xf8\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) connect$unix(r2, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) timer_settime(0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x44302, 0x0) ptrace$pokeuser(0x6, r4, 0x4, 0x9) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000001bb3701ce00000000000a0000000c0002006e6c383032310b402e3100"], 0x20}}, 0x0) recvmmsg(r8, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000000840)}}], 0x2, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x400c841}, 0x2000c054) socket$inet6(0xa, 0x800000000000002, 0x0) 243.326209ms ago: executing program 1 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x6c6c9c9e, 0x0) read$msr(r1, &(0x7f000001b5c0)=""/102368, 0x18fe0) r2 = getpid() move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x13d, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0xd8000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 195.953778ms ago: executing program 1 (id=1419): socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xe) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20082, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0xc000) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={0x0, @ethernet={0x306, @random="fc06839d09fe"}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x1, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='bridge_slave_1\x00', 0x6, 0x7, 0x9}) 0s ago: executing program 1 (id=1420): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) execveat$binfmt(0xffffffffffffffff, r1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r7, 0x0) kernel console output (not intermixed with test programs): ) entered blocking state [ 417.961077][ T9603] bridge0: port 4(team0) entered disabled state [ 418.063006][ T9603] team0: entered allmulticast mode [ 418.141004][ T9603] team_slave_0: entered allmulticast mode [ 418.158877][ T9603] team_slave_1: entered allmulticast mode [ 418.521523][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 419.171359][ T30] audit: type=1400 audit(1757735864.087:443): avc: denied { execute } for pid=9620 comm="syz.1.790" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 419.412762][ T9618] bridge0: port 3(dummy0) entered blocking state [ 419.419258][ T9618] bridge0: port 3(dummy0) entered forwarding state [ 419.487439][ T9618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.495461][ T9618] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.504431][ T9618] batman_adv: batadv0: Interface activated: team0 [ 419.516087][ T9618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.538339][ T9621] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 420.169882][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 420.355638][ T9635] binder: 9629:9635 ioctl c0306201 0 returned -14 [ 420.584647][ T9638] trusted_key: encrypted_key: key user:syz not found [ 420.603616][ T9640] netlink: 'syz.1.795': attribute type 1 has an invalid length. [ 420.722273][ T9640] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 420.742031][ T9640] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 420.763335][ T9644] gretap1: entered promiscuous mode [ 420.771756][ T9644] bond1: (slave gretap1): making interface the new active one [ 420.780262][ T9644] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 421.065629][ T9651] overlayfs: failed to clone upperpath [ 421.934731][ T9661] trusted_key: encrypted_key: key user:syz not found [ 421.962944][ T9658] overlayfs: failed to resolve './file1': -2 [ 422.478378][ T9667] overlayfs: overlapping lowerdir path [ 423.143785][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 423.675960][ T9679] netlink: 'syz.1.802': attribute type 10 has an invalid length. [ 423.814528][ T9681] netlink: 'syz.1.802': attribute type 10 has an invalid length. [ 423.834005][ T9681] netlink: 2 bytes leftover after parsing attributes in process `syz.1.802'. [ 424.835775][ T9675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.850954][ T9675] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.868426][ T9675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 424.920144][ T9679] batman_adv: batadv0: Adding interface: team0 [ 424.940931][ T9679] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.067533][ T9679] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 425.154175][ T9681] team0: entered promiscuous mode [ 425.195673][ T9681] team_slave_0: entered promiscuous mode [ 425.208324][ T9681] team_slave_1: entered promiscuous mode [ 425.437847][ T9681] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.457774][ T9688] binder: 9687:9688 ioctl c0306201 0 returned -14 [ 425.464659][ T9681] batman_adv: batadv0: Interface activated: team0 [ 425.473778][ T9681] batman_adv: batadv0: Interface deactivated: team0 [ 425.481624][ T9681] batman_adv: batadv0: Removing interface: team0 [ 425.515852][ T9681] bridge0: port 4(team0) entered blocking state [ 425.545560][ T9681] bridge0: port 4(team0) entered disabled state [ 425.570542][ T9681] team0: entered allmulticast mode [ 425.577487][ T9681] team_slave_0: entered allmulticast mode [ 425.586604][ T9681] team_slave_1: entered allmulticast mode [ 426.604651][ T9703] netlink: 356 bytes leftover after parsing attributes in process `syz.1.809'. [ 426.846342][ T9711] netlink: 356 bytes leftover after parsing attributes in process `syz.0.811'. [ 426.895448][ T9711] SELinux: failed to load policy [ 427.378800][ T9713] trusted_key: encrypted_key: key user:syz not found [ 427.818764][ T30] audit: type=1400 audit(1757735872.647:444): avc: denied { read } for pid=9721 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 428.665128][ T30] audit: type=1400 audit(1757735873.587:445): avc: denied { create } for pid=9740 comm="syz.3.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 428.684772][ T5916] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 428.767287][ T30] audit: type=1400 audit(1757735873.657:446): avc: denied { setopt } for pid=9740 comm="syz.3.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 428.868543][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 428.872967][ T5916] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 428.887806][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 428.897017][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 428.900258][ T5916] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 428.920617][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 428.930367][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 428.960743][ T30] audit: type=1400 audit(1757735873.867:447): avc: denied { mounton } for pid=9743 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 429.099478][ T9743] lo speed is unknown, defaulting to 1000 [ 429.117984][ T5916] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 429.127936][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.154023][ T9734] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 429.170188][ T5916] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 430.121090][ T9743] lo speed is unknown, defaulting to 1000 [ 430.158657][ T5981] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 430.320977][ T5981] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 430.338353][ T5981] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 430.351839][ T9743] chnl_net:caif_netlink_parms(): no params data found [ 430.368390][ T5981] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 430.389311][ T5981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.431756][ T9748] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 430.460943][ T5981] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 430.659103][ T5908] usb 1-1: USB disconnect, device number 27 [ 430.986103][ T9769] overlayfs: failed to resolve './file1': -2 [ 430.998698][ T5852] Bluetooth: hci3: command tx timeout [ 431.014814][ T9743] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.041341][ T9743] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.057676][ T9743] bridge_slave_0: entered allmulticast mode [ 431.077001][ T9743] bridge_slave_0: entered promiscuous mode [ 431.097851][ T9743] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.115818][ T9743] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.133948][ T9743] bridge_slave_1: entered allmulticast mode [ 431.151922][ T9743] bridge_slave_1: entered promiscuous mode [ 431.217282][ T9743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.247946][ T9743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.309731][ T9743] team0: Port device team_slave_0 added [ 431.329888][ T9743] team0: Port device team_slave_1 added [ 431.396913][ T9743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.417016][ T9743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.481018][ T9743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.508187][ T9743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.526454][ T9743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.587264][ T9743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.673232][ T9743] hsr_slave_0: entered promiscuous mode [ 431.687785][ T9743] hsr_slave_1: entered promiscuous mode [ 431.927463][ T9743] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 431.940642][ T9743] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 431.953317][ T9743] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 431.964966][ T9743] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 432.304577][ T9743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.550802][ T9743] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.606018][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.613197][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.660945][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.668134][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.687882][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 432.792091][ T9794] binder: 9791:9794 ioctl c0306201 0 returned -14 [ 432.974372][ T9793] gretap1: left promiscuous mode [ 433.052125][ T9743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.082625][ T5852] Bluetooth: hci3: command tx timeout [ 433.930370][ T9743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.002019][ T5936] usb 4-1: USB disconnect, device number 28 [ 434.472003][ T9743] veth0_vlan: entered promiscuous mode [ 434.543987][ T9743] veth1_vlan: entered promiscuous mode [ 434.593175][ T9824] 9pnet_fd: Insufficient options for proto=fd [ 434.622730][ T9824] netlink: 'syz.1.835': attribute type 10 has an invalid length. [ 434.633548][ T9824] netlink: 40 bytes leftover after parsing attributes in process `syz.1.835'. [ 434.649500][ T9743] veth0_macvtap: entered promiscuous mode [ 434.709224][ T9824] geneve0: entered promiscuous mode [ 434.729515][ T9824] geneve0: entered allmulticast mode [ 434.735380][ T9824] team0: Port device geneve0 added [ 434.771596][ T1339] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.806865][ T1339] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.850217][ T9743] veth1_macvtap: entered promiscuous mode [ 434.912791][ T1339] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.999838][ T1339] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.146322][ T9743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.148932][ T5852] Bluetooth: hci3: command tx timeout [ 435.162005][ T9743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.691337][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.702982][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.721654][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.923272][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.269969][ T5977] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.448520][ T5977] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.477939][ T5977] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.844260][ T30] audit: type=1400 audit(1757735881.737:448): avc: denied { read } for pid=9844 comm="syz.3.839" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 437.045523][ T5977] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.079195][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.125947][ T30] audit: type=1400 audit(1757735881.737:449): avc: denied { open } for pid=9844 comm="syz.3.839" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 437.148781][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.217310][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.230333][ T5852] Bluetooth: hci3: command tx timeout [ 437.333708][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.529473][ T9861] binder: 9858:9861 ioctl c0306201 0 returned -14 [ 438.201141][ T30] audit: type=1400 audit(1757735883.117:450): avc: denied { getopt } for pid=9860 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 438.287449][ T9873] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 438.829274][ T5936] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 439.059680][ T30] audit: type=1400 audit(1757735883.977:451): avc: denied { write } for pid=9876 comm="syz.5.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 439.105138][ T5936] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 439.147638][ T5936] usb 1-1: config 0 has no interface number 0 [ 439.211002][ T5936] usb 1-1: config 0 interface 29 has no altsetting 0 [ 439.283668][ T5936] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 439.293359][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.307431][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 439.322041][ T5936] usb 1-1: Product: syz [ 439.326236][ T5936] usb 1-1: Manufacturer: syz [ 439.424362][ T5936] usb 1-1: SerialNumber: syz [ 439.493693][ T5936] usb 1-1: config 0 descriptor?? [ 439.700799][ T9885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.805878][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.092722][ T30] audit: type=1326 audit(1757735885.007:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01f78eba9 code=0x7ffc0000 [ 440.264337][ T5936] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 440.329015][ T30] audit: type=1326 audit(1757735885.007:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01f78eba9 code=0x7ffc0000 [ 440.386146][ T30] audit: type=1326 audit(1757735885.007:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc01f78eba9 code=0x7ffc0000 [ 440.580370][ T30] audit: type=1326 audit(1757735885.007:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01f78eba9 code=0x7ffc0000 [ 440.727820][ T9900] overlayfs: failed to clone upperpath [ 440.784902][ T30] audit: type=1326 audit(1757735885.007:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01f78eba9 code=0x7ffc0000 [ 440.860669][ T30] audit: type=1326 audit(1757735885.007:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc01f78eba9 code=0x7ffc0000 [ 441.777145][ T9893] syz.4.846 (9893): drop_caches: 2 [ 441.901652][ T9893] syz.4.846 (9893): drop_caches: 2 [ 441.933059][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 441.933072][ T30] audit: type=1400 audit(1757735886.857:464): avc: denied { read } for pid=9912 comm="syz.3.852" path="socket:[22302]" dev="sockfs" ino=22302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 441.992336][ T2152] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 442.116336][ T30] audit: type=1400 audit(1757735887.037:465): avc: denied { append } for pid=9912 comm="syz.3.852" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.172788][ T2152] usb 6-1: Using ep0 maxpacket: 32 [ 442.195262][ T2152] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 442.236752][ T2152] usb 6-1: config 0 has no interface number 0 [ 442.272107][ T2152] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 442.288260][ T2152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.439720][ T2152] usb 6-1: Product: syz [ 442.443941][ T2152] usb 6-1: Manufacturer: syz [ 442.448521][ T2152] usb 6-1: SerialNumber: syz [ 442.481089][ T2152] usb 6-1: config 0 descriptor?? [ 442.491159][ T2152] smsc95xx v2.0.0 [ 442.537616][ T5936] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 442.650799][ T5936] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 442.795180][ T30] audit: type=1326 audit(1757735887.717:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.3.854" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c61f8eba9 code=0x0 [ 442.989428][ T5936] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 443.002925][ T5936] usb 1-1: USB disconnect, device number 28 [ 443.318712][ T5936] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 443.337040][ T30] audit: type=1400 audit(1757735888.107:467): avc: denied { map } for pid=9907 comm="syz.5.850" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 443.478700][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 443.485718][ T5936] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 444.301856][ T5936] usb 1-1: config 0 has no interface number 0 [ 444.313668][ T5936] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 444.332980][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.363404][ T5936] usb 1-1: Product: syz [ 444.367672][ T5936] usb 1-1: Manufacturer: syz [ 444.400054][ T5936] usb 1-1: SerialNumber: syz [ 444.407496][ T5936] usb 1-1: config 0 descriptor?? [ 444.513160][ T5936] hub 1-1:0.132: bad descriptor, ignoring hub [ 444.520085][ T5936] hub 1-1:0.132: probe with driver hub failed with error -5 [ 444.574319][ T5936] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input16 [ 444.586315][ T2152] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 444.908049][ T9930] lo: entered promiscuous mode [ 444.913332][ T9930] lo: entered allmulticast mode [ 444.919997][ T9930] tunl0: entered promiscuous mode [ 444.925067][ T9930] tunl0: entered allmulticast mode [ 444.932502][ T9930] gre0: entered promiscuous mode [ 444.937478][ T9930] gre0: entered allmulticast mode [ 444.945939][ T9930] gretap0: entered promiscuous mode [ 444.951355][ T9930] gretap0: entered allmulticast mode [ 444.959010][ T9930] erspan0: entered promiscuous mode [ 444.964314][ T9930] erspan0: entered allmulticast mode [ 444.973124][ T9930] ip_vti0: entered promiscuous mode [ 444.978407][ T9930] ip_vti0: entered allmulticast mode [ 444.986282][ T9930] ip6_vti0: entered promiscuous mode [ 444.992278][ T9930] ip6_vti0: entered allmulticast mode [ 445.000283][ T9930] sit0: entered promiscuous mode [ 445.005310][ T9930] sit0: entered allmulticast mode [ 445.013160][ T9930] ip6tnl0: entered promiscuous mode [ 445.018398][ T9930] ip6tnl0: entered allmulticast mode [ 445.025412][ T9930] ip6gre0: entered promiscuous mode [ 445.052219][ T9930] ip6gre0: entered allmulticast mode [ 445.059890][ T9930] syz_tun: entered promiscuous mode [ 445.066704][ T9930] ip6gretap0: entered promiscuous mode [ 445.072233][ T9930] ip6gretap0: entered allmulticast mode [ 445.078294][ T9930] bridge0: entered allmulticast mode [ 445.084306][ T9930] vcan0: entered promiscuous mode [ 445.089535][ T9930] vcan0: entered allmulticast mode [ 445.095864][ T9930] bond0: entered promiscuous mode [ 445.101054][ T9930] bond_slave_0: entered promiscuous mode [ 445.106924][ T9930] bond_slave_1: entered promiscuous mode [ 445.112787][ T9930] bond0: entered allmulticast mode [ 445.117979][ T9930] bond_slave_0: entered allmulticast mode [ 445.123753][ T9930] bond_slave_1: entered allmulticast mode [ 445.130009][ T9930] team0: entered promiscuous mode [ 445.135023][ T9930] team_slave_0: entered promiscuous mode [ 445.140766][ T9930] team_slave_1: entered promiscuous mode [ 445.146454][ T9930] team0: entered allmulticast mode [ 445.151615][ T9930] team_slave_0: entered allmulticast mode [ 445.157335][ T9930] team_slave_1: entered allmulticast mode [ 445.163926][ T9930] nlmon0: entered promiscuous mode [ 445.169067][ T9930] nlmon0: entered allmulticast mode [ 445.174721][ T30] audit: type=1400 audit(1757735889.807:468): avc: denied { bind } for pid=9927 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 445.203418][ T2152] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 445.220244][ T30] audit: type=1400 audit(1757735889.817:469): avc: denied { write } for pid=9927 comm="syz.3.855" path="socket:[23109]" dev="sockfs" ino=23109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 445.251334][ T9930] caif0: entered promiscuous mode [ 445.256372][ T9930] caif0: entered allmulticast mode [ 445.261541][ T9930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.301049][ T2152] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 445.319675][ T2152] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 445.351458][ T2152] usb 6-1: USB disconnect, device number 2 [ 445.682731][ T30] audit: type=1400 audit(1757735890.607:470): avc: denied { write } for pid=9934 comm="syz.5.857" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 446.721158][ T9942] fuse: Bad value for 'fd' [ 447.238695][ T5857] Bluetooth: hci3: command 0x0405 tx timeout [ 447.696861][ T9952] fuse: Bad value for 'fd' [ 447.730608][ T9952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.712497][ T30] audit: type=1400 audit(1757735893.297:471): avc: denied { firmware_load } for pid=9950 comm="syz.4.861" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 448.877160][ T9957] syz.4.861 (9957) used greatest stack depth: 18040 bytes left [ 449.458707][ T9965] vlan2: entered promiscuous mode [ 449.463785][ T9965] macvtap0: entered promiscuous mode [ 449.555319][ T9973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9973 comm=syz.5.862 [ 449.603274][ T9973] netlink: 'syz.5.862': attribute type 1 has an invalid length. [ 449.639333][ T5204] usb 1-1: reset high-speed USB device number 29 using dummy_hcd [ 449.697546][ T9968] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input17 [ 449.763816][ T5204] usb 1-1: device reset changed ep0 maxpacket size! [ 449.946814][ T5936] usb 1-1: USB disconnect, device number 29 [ 450.220817][ T9973] lo speed is unknown, defaulting to 1000 [ 450.279858][ T5936] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 450.554756][ T5936] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 450.642953][ T5936] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 450.657451][ T9973] lo speed is unknown, defaulting to 1000 [ 450.722368][ T5936] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 450.781735][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.162448][ T9962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.605673][ T5936] usb 1-1: can't set config #27, error -71 [ 451.614716][ T5936] usb 1-1: USB disconnect, device number 30 [ 451.993396][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 452.004990][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 452.310642][ T5936] libceph: connect (1)[c::]:6789 error -101 [ 452.317835][ T5936] libceph: mon0 (1)[c::]:6789 connect error [ 452.399572][ T9993] ceph: No mds server is up or the cluster is laggy [ 452.786627][T10007] overlayfs: failed to resolve './file1': -2 [ 453.183590][T10013] netlink: 20 bytes leftover after parsing attributes in process `syz.5.870'. [ 454.132700][T10021] syz.0.871 (10021): drop_caches: 2 [ 454.196774][T10024] netlink: 'syz.5.872': attribute type 2 has an invalid length. [ 454.597645][T10021] syz.0.871 (10021): drop_caches: 2 [ 455.475509][T10040] pim6reg: entered allmulticast mode [ 456.499347][T10058] overlayfs: failed to resolve './file1': -2 [ 459.203176][T10084] can0: slcan on ttyS3. [ 459.730745][ T30] audit: type=1400 audit(1757735904.437:472): avc: denied { write } for pid=10079 comm="syz.5.885" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 459.829065][T10077] can0 (unregistered): slcan off ttyS3. [ 460.127893][T10095] netlink: 'syz.1.886': attribute type 2 has an invalid length. [ 460.801682][T10106] binder: 10102:10106 ioctl c0306201 0 returned -14 [ 461.378723][ T5981] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 461.546914][ T5981] usb 1-1: config 0 has no interfaces? [ 461.569615][T10100] syz.5.887 (10100): drop_caches: 2 [ 461.575299][T10100] syz.5.887 (10100): drop_caches: 2 [ 461.634293][ T5981] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 461.712570][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.727106][ T5981] usb 1-1: Product: syz [ 461.739234][ T5981] usb 1-1: Manufacturer: syz [ 461.742472][ T5981] usb 1-1: SerialNumber: syz [ 461.751747][ T5981] usb 1-1: config 0 descriptor?? [ 463.340985][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.895'. [ 463.423941][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.896'. [ 463.450106][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 464.153242][T10138] binder: 10137:10138 ioctl c0306201 0 returned -14 [ 464.399374][T10128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.775300][ T5964] usb 1-1: USB disconnect, device number 31 [ 465.098701][ T5916] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 465.569905][T10157] netlink: 356 bytes leftover after parsing attributes in process `syz.0.902'. [ 465.738377][T10157] SELinux: failed to load policy [ 465.765905][ T5916] usb 4-1: config 0 has no interfaces? [ 465.776787][ T5916] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 466.289783][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.413024][ T5916] usb 4-1: Product: syz [ 466.430767][ T5916] usb 4-1: Manufacturer: syz [ 466.435467][ T5916] usb 4-1: SerialNumber: syz [ 467.263077][ T5916] usb 4-1: config 0 descriptor?? [ 467.959899][T10183] binder: 10179:10183 ioctl c0306201 0 returned -14 [ 468.335445][T10182] netlink: 112 bytes leftover after parsing attributes in process `syz.5.907'. [ 468.378150][T10180] ref_ctr increment failed for inode: 0x4dd offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807a7ac080 [ 468.401983][ T30] audit: type=1400 audit(1757735913.327:473): avc: denied { open } for pid=10173 comm="syz.5.907" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 468.453631][T10184] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 468.708665][ T5964] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 468.870588][ T5964] usb 6-1: Using ep0 maxpacket: 8 [ 468.877535][ T5964] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 468.918135][ T5964] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 468.959733][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.977674][ T5964] usb 6-1: Product: syz [ 469.012488][ T5964] usb 6-1: Manufacturer: syz [ 469.025998][ T5964] usb 6-1: SerialNumber: syz [ 469.074470][ T5964] usb 6-1: config 0 descriptor?? [ 469.099434][ T5964] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 469.136497][ T5964] usb 6-1: setting power ON [ 469.156225][ T5964] dvb-usb: bulk message failed: -22 (2/0) [ 469.222215][ T5964] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 469.262282][ T5964] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 469.288489][ T5964] usb 6-1: media controller created [ 469.327724][T10182] dvb-usb: bulk message failed: -22 (3/0) [ 469.511058][ T5964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 469.549418][ T5964] usb 6-1: selecting invalid altsetting 6 [ 469.564421][ T5964] usb 6-1: digital interface selection failed (-22) [ 469.578982][ T5964] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 469.610550][ T5964] usb 6-1: setting power OFF [ 469.709829][ T5964] dvb-usb: bulk message failed: -22 (2/0) [ 469.724887][ T5964] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 469.764867][ T5964] (NULL device *): no alternate interface [ 470.369707][ T5916] IPVS: starting estimator thread 0... [ 470.418482][ T30] audit: type=1400 audit(1757735915.327:474): avc: denied { read } for pid=10206 comm="syz.1.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 470.538668][T10208] IPVS: using max 53 ests per chain, 127200 per kthread [ 470.875591][ T5964] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 470.952838][ T5964] usb 6-1: USB disconnect, device number 3 [ 470.969884][T10213] netlink: 356 bytes leftover after parsing attributes in process `syz.5.916'. [ 470.981730][T10213] SELinux: failed to load policy [ 471.217885][T10218] binder: 10214:10218 ioctl c0306201 0 returned -14 [ 471.323428][T10217] overlayfs: failed to resolve './file1': -2 [ 471.844387][ T5908] usb 4-1: USB disconnect, device number 29 [ 472.964368][T10235] netlink: 'syz.0.921': attribute type 10 has an invalid length. [ 473.064816][T10235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.921'. [ 473.109511][T10235] team0: entered promiscuous mode [ 473.114876][T10235] team_slave_0: entered promiscuous mode [ 473.122957][T10235] team_slave_1: entered promiscuous mode [ 473.131829][T10235] team0: entered allmulticast mode [ 473.137162][T10235] team_slave_0: entered allmulticast mode [ 473.143152][T10235] team_slave_1: entered allmulticast mode [ 473.230315][T10235] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.242914][T10235] bridge0: port 2(team0) entered blocking state [ 473.253924][T10235] bridge0: port 2(team0) entered disabled state [ 473.847792][T10250] overlayfs: failed to resolve './file1': -2 [ 474.039085][ T5857] Bluetooth: hci3: command 0x0405 tx timeout [ 475.187614][ T30] audit: type=1400 audit(1757735920.107:475): avc: denied { getopt } for pid=10267 comm="syz.1.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 478.254528][T10302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10302 comm=syz.1.937 [ 478.474841][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 478.841868][T10308] binder: 10307:10308 ioctl c0306201 0 returned -14 [ 479.033705][T10314] syz.4.933 (10314): drop_caches: 2 [ 479.336607][T10314] syz.4.933 (10314): drop_caches: 2 [ 479.798891][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 479.852407][T10333] netlink: 356 bytes leftover after parsing attributes in process `syz.1.942'. [ 480.510165][ T5852] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 481.700808][T10334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.739612][T10334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.312803][ T30] audit: type=1326 audit(1757735927.237:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.5.946" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc01f78eba9 code=0x0 [ 483.308687][ T5916] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 483.506123][ T5916] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 483.624207][ T5916] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 483.689147][ T5916] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 483.756003][T10354] nbd_handle_cmd: 2 callbacks suppressed [ 483.756025][T10354] block nbd3: Attempted send on invalid socket [ 483.768536][T10354] blk_print_req_error: 2 callbacks suppressed [ 483.780372][T10354] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.792800][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.810020][T10354] block nbd3: Attempted send on invalid socket [ 483.820047][T10384] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 483.827352][T10354] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.843275][T10354] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 483.853680][T10354] block nbd3: Attempted send on invalid socket [ 483.865485][T10354] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.875364][T10354] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 483.899228][T10354] block nbd3: Attempted send on invalid socket [ 483.917963][T10354] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.953442][ T5916] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 484.051287][T10354] block nbd3: Attempted send on invalid socket [ 484.086927][T10354] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 484.107924][T10354] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 484.136162][T10354] block nbd3: Attempted send on invalid socket [ 484.148470][T10354] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 484.168107][T10354] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 484.308939][T10354] block nbd3: Attempted send on invalid socket [ 484.315152][T10354] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 484.325086][T10354] block nbd3: Attempted send on invalid socket [ 484.493675][T10408] fuse: Bad value for 'fd' [ 484.838684][ T30] audit: type=1400 audit(1757735929.427:477): avc: denied { module_request } for pid=10394 comm="syz.4.950" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 484.871605][T10354] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 484.881820][T10354] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 485.023206][ T55] block nbd3: Attempted send on invalid socket [ 485.030096][ T55] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.053875][T10354] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 485.079159][T10354] block nbd3: Attempted send on invalid socket [ 485.085341][T10354] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.095122][T10354] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 485.106287][T10354] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 485.139491][T10354] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 485.651249][T10416] binder: 10415:10416 ioctl c0306201 0 returned -14 [ 485.956331][ T30] audit: type=1400 audit(1757735930.877:478): avc: denied { read } for pid=10425 comm="syz.3.955" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 486.078123][T10433] netlink: 'syz.5.956': attribute type 1 has an invalid length. [ 486.085911][T10433] netlink: 224 bytes leftover after parsing attributes in process `syz.5.956'. [ 486.457352][T10431] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 486.469197][T10431] block device autoloading is deprecated and will be removed. [ 486.772028][ T30] audit: type=1400 audit(1757735930.877:479): avc: denied { open } for pid=10425 comm="syz.3.955" path="/188/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 486.794879][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.798180][ T5971] usb 1-1: USB disconnect, device number 32 [ 486.856580][T10436] netlink: 356 bytes leftover after parsing attributes in process `syz.1.957'. [ 486.977961][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.959'. [ 486.986992][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.959'. [ 487.291503][T10443] IPVS: Error connecting to the multicast addr [ 487.298766][ T30] audit: type=1400 audit(1757735932.177:480): avc: denied { kexec_image_load } for pid=10442 comm="syz.1.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 487.985378][T10469] syz.3.960 (10469): drop_caches: 2 [ 488.158023][T10469] syz.3.960 (10469): drop_caches: 2 [ 489.055594][T10484] binder: 10481:10484 ioctl c0306201 0 returned -14 [ 489.510837][T10496] trusted_key: encrypted_key: key user:syz not found [ 489.649836][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'. [ 491.566299][T10536] netlink: 356 bytes leftover after parsing attributes in process `syz.0.969'. [ 491.581358][T10536] SELinux: failed to load policy [ 491.738329][T10539] trusted_key: encrypted_key: key user:syz not found [ 491.968947][ T5971] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 492.206577][T10545] binder: 10543:10545 ioctl c0306201 0 returned -14 [ 492.384473][ T5971] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 492.392962][ T5971] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 492.469063][ T5971] usb 4-1: config 0 has no interface number 0 [ 492.478905][ T5971] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 492.496127][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.530815][ T5971] usb 4-1: config 0 descriptor?? [ 492.538077][ T5971] ftdi_sio 4-1:0.97: FTDI USB Serial Device converter detected [ 492.551099][ T5971] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 493.008359][T10554] block device autoloading is deprecated and will be removed. [ 493.448711][ T5964] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 493.660208][ T5964] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 493.670485][ T5964] usb 1-1: config 0 has no interface number 0 [ 493.688700][ T5964] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.714863][ T5964] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.788416][T10561] sz1: rxe_newlink: already configured on lo [ 494.194805][ T5964] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 494.216372][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 494.225791][ T5964] usb 1-1: Product: syz [ 494.257773][ T5964] usb 1-1: config 0 descriptor?? [ 494.791123][ T5981] usb 4-1: USB disconnect, device number 30 [ 494.850958][T10573] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[10573] [ 494.886827][T10573] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 494.917184][ T5981] ftdi_sio 4-1:0.97: device disconnected [ 494.940998][T10573] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 494.955175][T10573] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 495.036234][T10573] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 495.044823][T10573] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 495.053434][T10573] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 495.104278][T10573] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 495.113327][T10573] kvm: requested 114819 ns i8254 timer period limited to 200000 ns [ 495.123613][T10573] kvm: requested 118171 ns i8254 timer period limited to 200000 ns [ 495.133719][T10573] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 495.628749][ T5936] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 495.637209][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 495.768678][ T5936] usb 5-1: device descriptor read/64, error -32 [ 496.008677][ T5936] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 496.642597][ T5964] usbhid 1-1:0.16: can't add hid device: -71 [ 496.672547][ T5964] usbhid 1-1:0.16: probe with driver usbhid failed with error -71 [ 496.690067][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.979'. [ 496.702097][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 496.738993][ T5964] usb 1-1: USB disconnect, device number 33 [ 496.758355][T10597] netlink: 84 bytes leftover after parsing attributes in process `syz.1.982'. [ 496.767356][T10597] team0: No ports can be present during mode change [ 496.847027][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.5.979'. [ 497.546916][T10596] syz.3.981 (10596): drop_caches: 2 [ 497.751751][T10596] syz.3.981 (10596): drop_caches: 2 [ 498.196051][ T5936] usb 5-1: device descriptor read/all, error -71 [ 498.214051][ T5936] usb usb5-port1: attempt power cycle [ 498.599214][ T30] audit: type=1400 audit(1757735943.507:481): avc: denied { nosuid_transition } for pid=10612 comm="syz.0.986" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 498.768724][ T30] audit: type=1400 audit(1757735943.517:482): avc: denied { transition } for pid=10612 comm="syz.0.986" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 498.902264][ T30] audit: type=1400 audit(1757735943.517:483): avc: denied { entrypoint } for pid=10612 comm="syz.0.986" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=120 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 498.931738][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.108672][ T30] audit: type=1400 audit(1757735943.547:484): avc: denied { noatsecure } for pid=10612 comm="syz.0.986" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 499.860337][T10637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.991'. [ 500.919206][T10647] binder: 10644:10647 ioctl c0306201 0 returned -14 [ 501.232431][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.142241][T10653] syz.5.995 (10653): drop_caches: 2 [ 502.425529][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'. [ 502.468603][ T30] audit: type=1400 audit(1757735947.387:485): avc: denied { map } for pid=10662 comm="syz.1.997" path="socket:[26709]" dev="sockfs" ino=26709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 503.038620][ T5981] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 504.046999][ T5981] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 504.077992][ T5981] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 504.094979][T10684] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1002'. [ 504.113731][ T5981] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 504.133199][ T5981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.170673][T10670] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 504.242241][ T5981] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.283502][T10689] SELinux: failed to load policy [ 505.368276][T10697] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input18 [ 506.271778][ T30] audit: type=1400 audit(1757735951.197:486): avc: denied { audit_write } for pid=10703 comm="syz.1.1006" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 508.307521][T10733] syz.4.1010 (10733): drop_caches: 2 [ 508.327284][T10733] syz.4.1010 (10733): drop_caches: 2 [ 508.608631][ T5971] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 508.775744][ T5971] usb 1-1: Using ep0 maxpacket: 16 [ 508.791399][ T5971] usb 1-1: config 2 has an invalid interface number: 196 but max is 1 [ 508.808866][ T5971] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 508.862863][ T5971] usb 1-1: config 2 has no interface number 0 [ 508.869233][ T5971] usb 1-1: config 2 interface 196 has no altsetting 0 [ 508.882837][ T5971] usb 1-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=88.56 [ 508.892689][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.902836][ T5971] usb 1-1: Product: syz [ 508.907029][ T5971] usb 1-1: Manufacturer: syz [ 508.911950][ T5971] usb 1-1: SerialNumber: syz [ 509.101706][ T5908] usb 4-1: USB disconnect, device number 31 [ 509.577442][ T5971] ums-cypress 1-1:2.196: USB Mass Storage device detected [ 509.770121][ T5971] usb 1-1: USB disconnect, device number 34 [ 511.048636][ T30] audit: type=1326 audit(1757735955.117:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10756 comm="syz.4.1018" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01b4d8eba9 code=0x0 [ 511.133619][T10768] tmpfs: Unknown parameter '0x0000000000000007' [ 512.782953][ T30] audit: type=1400 audit(1757735957.657:488): avc: denied { ioctl } for pid=10777 comm="syz.4.1021" path="socket:[27052]" dev="sockfs" ino=27052 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 513.406955][T10807] binder: 10803:10807 ioctl c0306201 0 returned -14 [ 514.841412][T10826] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 514.893310][ T30] audit: type=1400 audit(1757735959.367:489): avc: denied { bind } for pid=10812 comm="syz.0.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 514.912907][ T30] audit: type=1400 audit(1757735959.377:490): avc: denied { write } for pid=10812 comm="syz.0.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 514.932730][T10826] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 515.244650][T10835] netlink: 'syz.1.1027': attribute type 2 has an invalid length. [ 515.666472][ T30] audit: type=1400 audit(1757735960.587:491): avc: denied { getopt } for pid=10815 comm="syz.4.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 515.885463][ T30] audit: type=1400 audit(1757735960.807:492): avc: denied { read } for pid=10815 comm="syz.4.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 516.908696][ T5936] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 517.076048][ T5936] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 517.101700][ T5936] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 517.121411][ T5936] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 517.130916][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.155278][T10860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 517.169153][ T5936] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 517.614694][ T5936] usb 4-1: USB disconnect, device number 32 [ 517.654351][T10871] overlayfs: failed to resolve './file1': -2 [ 518.387795][T10881] lo speed is unknown, defaulting to 1000 [ 518.785800][T10881] lo speed is unknown, defaulting to 1000 [ 519.668685][ T5916] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 519.820277][ T5916] usb 1-1: config 0 has no interfaces? [ 519.829386][ T5916] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 519.838762][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.846897][ T5916] usb 1-1: Product: syz [ 519.851778][ T5916] usb 1-1: Manufacturer: syz [ 519.857425][ T5916] usb 1-1: SerialNumber: syz [ 519.876216][ T5916] usb 1-1: config 0 descriptor?? [ 520.361054][ T30] audit: type=1400 audit(1757735965.287:493): avc: denied { setopt } for pid=10894 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 520.845964][ T5971] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 521.062806][ T5971] usb 6-1: config 0 has no interfaces? [ 521.084719][ T5971] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 521.095578][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.106584][ T5971] usb 6-1: Product: syz [ 521.111920][ T5971] usb 6-1: Manufacturer: syz [ 521.116650][ T5971] usb 6-1: SerialNumber: syz [ 521.132820][ T5971] usb 6-1: config 0 descriptor?? [ 521.430796][ T5916] usb 1-1: USB disconnect, device number 35 [ 521.885357][ T30] audit: type=1400 audit(1757735966.807:494): avc: denied { create } for pid=10894 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 521.911824][ T30] audit: type=1400 audit(1757735966.837:495): avc: denied { write } for pid=10894 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 522.934952][T10918] binder: 10915:10918 ioctl c0306201 0 returned -14 [ 524.248183][ T30] audit: type=1400 audit(1757735969.167:496): avc: denied { create } for pid=10928 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 524.421398][ T30] audit: type=1400 audit(1757735969.307:497): avc: denied { read write } for pid=10928 comm="syz.3.1046" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 524.578598][ T30] audit: type=1400 audit(1757735969.317:498): avc: denied { open } for pid=10928 comm="syz.3.1046" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 524.686353][ T5936] usb 6-1: USB disconnect, device number 4 [ 524.794730][ T30] audit: type=1400 audit(1757735969.717:499): avc: denied { getopt } for pid=10931 comm="syz.4.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 525.172382][T10943] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1048'. [ 525.682941][ T30] audit: type=1400 audit(1757735970.197:500): avc: denied { bind } for pid=10939 comm="syz.3.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 525.855429][T10947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 525.926422][ T30] audit: type=1400 audit(1757735970.197:501): avc: denied { write } for pid=10939 comm="syz.3.1049" path="socket:[27366]" dev="sockfs" ino=27366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 526.073555][T10954] nbd_handle_cmd: 2 callbacks suppressed [ 526.073577][T10954] block nbd5: Attempted send on invalid socket [ 526.117319][T10954] blk_print_req_error: 2 callbacks suppressed [ 526.125146][T10954] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 526.141088][ T30] audit: type=1400 audit(1757735970.897:502): avc: denied { name_bind } for pid=10941 comm="syz.1.1050" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 526.200458][T10954] hfsplus: unable to find HFS+ superblock [ 526.346275][T10956] syz.3.1052 (10956): drop_caches: 2 [ 526.468365][T10956] syz.3.1052 (10956): drop_caches: 2 [ 527.558721][ T5936] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 527.644193][T10974] syz.3.1055 (10974): drop_caches: 2 [ 527.651886][T10974] syz.3.1055 (10974): drop_caches: 2 [ 527.932862][ T5852] Bluetooth: hci3: command 0x0405 tx timeout [ 528.115069][ T5936] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 528.126376][ T5936] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 528.169625][ T5936] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 528.189088][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.262375][T10950] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 528.684606][ T5936] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 529.418913][ T5936] usb 1-1: USB disconnect, device number 36 [ 529.868810][ T5936] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 529.947634][T10996] overlayfs: failed to resolve './file1': -2 [ 530.132280][ T5936] usb 1-1: config 0 has no interfaces? [ 530.328469][ T5936] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 530.343704][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.352967][ T5936] usb 1-1: Product: syz [ 530.357164][ T5936] usb 1-1: Manufacturer: syz [ 530.363650][ T5936] usb 1-1: SerialNumber: syz [ 530.370357][ T5936] usb 1-1: config 0 descriptor?? [ 530.833726][T11003] binder: 11002:11003 ioctl c0306201 0 returned -14 [ 532.305697][T10752] usb 1-1: USB disconnect, device number 37 [ 532.491127][ T30] audit: type=1400 audit(1757735977.417:503): avc: denied { accept } for pid=11014 comm="syz.0.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 532.535678][T11013] syz.3.1065 (11013): drop_caches: 2 [ 532.549407][T11013] syz.3.1065 (11013): drop_caches: 2 [ 533.009504][ T30] audit: type=1400 audit(1757735977.537:504): avc: denied { setopt } for pid=11014 comm="syz.0.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 533.051364][ T30] audit: type=1400 audit(1757735977.547:505): avc: denied { bind } for pid=11014 comm="syz.0.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 533.115678][ T30] audit: type=1400 audit(1757735977.547:506): avc: denied { name_bind } for pid=11014 comm="syz.0.1067" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 533.148892][ T30] audit: type=1400 audit(1757735977.547:507): avc: denied { node_bind } for pid=11014 comm="syz.0.1067" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 533.609126][ T5936] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 533.732905][ T5964] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 533.748772][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 533.875050][T11031] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 533.885022][T11031] exFAT-fs (loop3): unable to read boot sector [ 533.891496][T11031] exFAT-fs (loop3): failed to read boot sector [ 533.897688][T11031] exFAT-fs (loop3): failed to recognize exfat type [ 534.168370][ T5936] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 534.185121][ T5936] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 534.196753][ T5936] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 534.221927][ T5964] usb 5-1: device descriptor read/64, error -32 [ 534.228416][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.253717][T11027] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 534.292582][ T5936] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 534.298395][T11035] netlink: 356 bytes leftover after parsing attributes in process `syz.5.1071'. [ 534.318174][T11035] SELinux: failed to load policy [ 534.458615][ T5964] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 534.668605][ T5964] usb 5-1: Using ep0 maxpacket: 16 [ 534.750920][ T5964] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.776185][ T30] audit: type=1326 audit(1757735979.697:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11037 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01f78eba9 code=0x7ffc0000 [ 534.812750][ T5964] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 534.851677][ T30] audit: type=1326 audit(1757735979.697:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11037 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01f78eba9 code=0x7ffc0000 [ 534.888777][ T30] audit: type=1326 audit(1757735979.727:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11037 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc01f78eba9 code=0x7ffc0000 [ 534.922763][ T30] audit: type=1326 audit(1757735979.727:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11037 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01f78eba9 code=0x7ffc0000 [ 534.952836][ T30] audit: type=1326 audit(1757735979.727:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11037 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc01f78eba9 code=0x7ffc0000 [ 535.212967][ T5964] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 535.242487][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.262055][ T5964] usb 5-1: Product: syz [ 535.296957][ T5964] usb 5-1: Manufacturer: syz [ 535.307200][ T5964] usb 5-1: SerialNumber: syz [ 535.329768][ T5964] usb 5-1: config 0 descriptor?? [ 535.337433][ T5964] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 535.357092][ T5964] gspca_stv06xx: st6422 sensor detected [ 535.718653][ T5971] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 536.414965][ T5971] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 536.428019][ T5971] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 536.448828][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 57250, setting to 1024 [ 536.460368][ T5971] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 536.476089][ T5971] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 536.486999][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.498119][ T5971] usb 4-1: Product: syz [ 536.503827][ T5971] usb 4-1: Manufacturer: syz [ 536.511608][ T5971] usb 4-1: SerialNumber: syz [ 536.520610][ T5971] usb 4-1: config 0 descriptor?? [ 536.532919][T11044] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 536.543713][T11044] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 536.556966][ T5971] usb 4-1: ucan: probing device on interface #0 [ 536.805379][ T5964] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 536.817987][ T5964] usb 5-1: USB disconnect, device number 33 [ 537.580478][ T2152] usb 1-1: USB disconnect, device number 38 [ 537.690566][ T5971] usb 4-1: ucan: could not read protocol version, ret=-110 [ 537.808670][ T5971] usb 4-1: ucan: probe failed; try to update the device firmware [ 537.823294][T11063] block nbd5: Attempted send on invalid socket [ 537.839137][T11063] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 537.922354][T11066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.020679][T11063] block nbd5: Attempted send on invalid socket [ 538.027540][T11063] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 538.040292][T11063] Mount JFS Failure: -5 [ 538.803585][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 538.804220][ T30] audit: type=1400 audit(1757735983.727:519): avc: denied { connect } for pid=11071 comm="syz.4.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 539.151926][ T2152] usb 4-1: USB disconnect, device number 33 [ 539.239927][ T30] audit: type=1400 audit(1757735984.167:520): avc: denied { create } for pid=11071 comm="syz.4.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 539.708783][ T2152] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 539.847096][T11088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1082'. [ 539.864952][ T2152] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 539.877676][ T2152] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 539.896142][ T2152] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 539.915488][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.934504][T11086] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 539.948337][ T2152] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 540.609426][T11097] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1085'. [ 540.861413][ T30] audit: type=1400 audit(1757735985.787:521): avc: denied { ioctl } for pid=11101 comm="syz.5.1087" path="socket:[27899]" dev="sockfs" ino=27899 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 541.794421][ T30] audit: type=1400 audit(1757735986.687:522): avc: denied { mount } for pid=11104 comm="syz.1.1088" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 542.804762][T11103] bpq0: entered allmulticast mode [ 542.889128][ T30] audit: type=1400 audit(1757735987.747:523): avc: denied { create } for pid=11101 comm="syz.5.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 542.917162][ T30] audit: type=1400 audit(1757735987.747:524): avc: denied { ioctl } for pid=11101 comm="syz.5.1087" path="socket:[26589]" dev="sockfs" ino=26589 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 543.038722][ T5964] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 543.134322][ T30] audit: type=1400 audit(1757735988.057:525): avc: denied { write } for pid=11118 comm="syz.3.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 543.157853][T11124] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1090'. [ 543.185556][ T5971] usb 1-1: USB disconnect, device number 39 [ 543.251727][ T30] audit: type=1400 audit(1757735988.077:526): avc: denied { nlmsg_write } for pid=11118 comm="syz.3.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 543.326499][ T5964] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 543.337845][ T5964] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 543.424438][ T30] audit: type=1400 audit(1757735988.347:527): avc: denied { read } for pid=11118 comm="syz.3.1090" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 543.447314][ T5964] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 543.461509][ T30] audit: type=1400 audit(1757735988.377:528): avc: denied { open } for pid=11118 comm="syz.3.1090" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 543.511172][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.559151][T11122] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 543.644646][T11124] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 543.700595][ T5964] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.878701][ T2152] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 544.064507][ T2152] usb 4-1: Using ep0 maxpacket: 8 [ 544.083571][ T2152] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 544.146578][ T2152] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 544.169774][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.204511][ T2152] usb 4-1: Product: syz [ 544.219262][ T2152] usb 4-1: Manufacturer: syz [ 544.242561][ T2152] usb 4-1: SerialNumber: syz [ 544.271102][ T2152] usb 4-1: config 0 descriptor?? [ 544.291721][ T2152] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 544.301168][ T2152] usb 4-1: setting power ON [ 544.317942][ T2152] dvb-usb: bulk message failed: -22 (2/0) [ 544.347112][ T2152] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 544.365453][ T2152] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 544.377302][ T2152] usb 4-1: media controller created [ 544.394445][ T2152] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 544.413210][ T2152] usb 4-1: selecting invalid altsetting 6 [ 544.438652][ T2152] usb 4-1: digital interface selection failed (-22) [ 544.448613][ T2152] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 544.477726][ T2152] usb 4-1: setting power OFF [ 544.484210][ T2152] dvb-usb: bulk message failed: -22 (2/0) [ 544.498637][ T2152] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 544.518103][ T2152] (NULL device *): no alternate interface [ 544.533634][ T2152] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 545.524123][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 545.524140][ T30] audit: type=1400 audit(1757735990.297:530): avc: denied { ioctl } for pid=11118 comm="syz.3.1090" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 545.932702][ T2152] usb 5-1: USB disconnect, device number 34 [ 546.045902][T11157] bridge2: entered promiscuous mode [ 547.347139][T11159] rdma_rxe: rxe_newlink: failed to add wg0 [ 547.877094][T11188] tmpfs: Unknown parameter '0x0000000000000007' [ 548.737956][ T5936] usb 4-1: USB disconnect, device number 34 [ 549.573068][ T5857] Bluetooth: hci3: command 0x0405 tx timeout [ 550.425974][ T30] audit: type=1326 audit(1757735994.987:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.1.1111" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe252b8eba9 code=0x0 [ 551.203629][T11231] bridge0: entered promiscuous mode [ 551.209619][T11231] macvlan2: entered promiscuous mode [ 551.290544][T11231] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 551.965943][T11242] md: md2 stopped. [ 551.974071][ T30] audit: type=1400 audit(1757735996.887:532): avc: denied { ioctl } for pid=11238 comm="syz.0.1115" path="/223/file0/file0" dev="fuse" ino=2 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 552.012127][T11234] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.019699][T11234] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.647047][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.661530][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.112184][T11270] tipc: Started in network mode [ 555.117056][T11270] tipc: Node identity 4, cluster identity 4711 [ 555.124919][T11270] tipc: Node number set to 4 [ 555.188762][ T5977] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.236687][ T1159] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.276740][ T1159] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.325010][ T1159] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.397175][ T30] audit: type=1400 audit(1757736000.317:533): avc: denied { map } for pid=11281 comm="syz.5.1120" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 557.218409][T11314] overlayfs: failed to resolve './file1': -2 [ 557.738592][ T2152] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 557.942149][ T2152] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 557.953458][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.980189][ T2152] usb 4-1: Product: syz [ 557.988632][ T2152] usb 4-1: Manufacturer: syz [ 558.018671][ T2152] usb 4-1: SerialNumber: syz [ 558.042089][ T2152] usb 4-1: config 0 descriptor?? [ 558.911882][ T2152] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 559.529369][ T5908] IPVS: starting estimator thread 0... [ 559.618668][T11335] IPVS: using max 42 ests per chain, 100800 per kthread [ 560.451564][ T2152] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 560.463725][ T2152] usb 4-1: USB disconnect, device number 35 [ 560.706448][T11343] lo speed is unknown, defaulting to 1000 [ 561.018824][T11343] lo speed is unknown, defaulting to 1000 [ 561.157527][T11342] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 562.020626][ T30] audit: type=1326 audit(1757736006.937:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf498eba9 code=0x7ffc0000 [ 562.135311][T11357] fuse: Unknown parameter 'fd0x0000000000000008' [ 562.169502][ T30] audit: type=1326 audit(1757736006.937:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf498eba9 code=0x7ffc0000 [ 562.198602][ T30] audit: type=1326 audit(1757736006.937:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f0bf498eba9 code=0x7ffc0000 [ 562.276259][ T30] audit: type=1326 audit(1757736006.937:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf498eba9 code=0x7ffc0000 [ 562.350574][ T30] audit: type=1326 audit(1757736006.937:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf498eba9 code=0x7ffc0000 [ 562.435837][ T30] audit: type=1326 audit(1757736006.937:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0bf498eba9 code=0x7ffc0000 [ 563.129494][ T30] audit: type=1326 audit(1757736006.937:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf498eba9 code=0x7ffc0000 [ 563.157625][T11366] overlayfs: failed to resolve './file1': -2 [ 563.170936][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.194799][ T30] audit: type=1326 audit(1757736006.937:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0bf498eba9 code=0x7ffc0000 [ 563.222509][ T30] audit: type=1326 audit(1757736006.937:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf498eba9 code=0x7ffc0000 [ 563.252073][ T30] audit: type=1326 audit(1757736006.937:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0bf498eba9 code=0x7ffc0000 [ 563.498968][T11374] overlayfs: failed to resolve './file1': -2 [ 563.880881][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1140'. [ 564.724803][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 565.338254][T11405] program syz.0.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.668699][ T2152] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 566.983405][ T2152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 567.002567][ T2152] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 567.018757][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.026781][ T2152] usb 1-1: Product: syz [ 567.031801][ T2152] usb 1-1: Manufacturer: syz [ 567.036400][ T2152] usb 1-1: SerialNumber: syz [ 567.052935][ T2152] usb 1-1: config 0 descriptor?? [ 567.838578][ T5908] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 568.082743][ T5908] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 568.093846][ T5908] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 568.107656][ T5908] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 568.128793][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.589605][T11419] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 568.653621][ T5908] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 570.182011][ T5936] usb 1-1: USB disconnect, device number 40 [ 570.503340][T11446] rdma_rxe: rxe_newlink: failed to add lo [ 570.865423][ T5936] usb 5-1: USB disconnect, device number 35 [ 571.725007][T11457] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input19 [ 572.650120][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 572.650152][ T30] audit: type=1400 audit(1757736017.557:571): avc: denied { accept } for pid=11465 comm="syz.4.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 573.246886][T10752] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 573.887106][ T5219] Dev loop7: unable to read RDB block 3 [ 573.892823][ T5219] loop7: unable to read partition table [ 573.904829][ T5219] loop7: partition table beyond EOD, truncated [ 573.927235][T10752] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 574.410860][T11479] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1163'. [ 574.423237][T11479] sctp: [Deprecated]: syz.5.1163 (pid 11479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 574.423237][T11479] Use struct sctp_sack_info instead [ 574.449211][ T30] audit: type=1400 audit(1757736019.347:572): avc: denied { write } for pid=11477 comm="syz.5.1163" lport=52437 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 574.522955][T11478] fido_id[11478]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 574.539949][ T30] audit: type=1400 audit(1757736019.347:573): avc: denied { getopt } for pid=11477 comm="syz.5.1163" lport=52437 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 574.813610][T11498] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 574.898136][ T30] audit: type=1400 audit(1757736019.787:574): avc: denied { mount } for pid=11490 comm="syz.5.1165" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 575.168182][ T30] audit: type=1400 audit(1757736019.797:575): avc: denied { mounton } for pid=11490 comm="syz.5.1165" path="/74/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 575.283501][ T30] audit: type=1400 audit(1757736020.207:576): avc: denied { bind } for pid=11485 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 575.369169][T10752] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 575.448239][ T30] audit: type=1400 audit(1757736020.367:577): avc: denied { read } for pid=11485 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 575.508601][ T30] audit: type=1400 audit(1757736020.407:578): avc: denied { create } for pid=11487 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 575.700683][T10752] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 575.726108][T10752] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 575.749510][T10752] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 575.793277][T10752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.891432][T11500] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 575.902454][T10752] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 577.568410][T11519] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1170'. [ 578.469735][ T30] audit: type=1400 audit(1757736023.397:579): avc: denied { unmount } for pid=9743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 578.955664][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1171'. [ 578.965221][T11524] bridge_slave_1: left allmulticast mode [ 578.971070][T11524] bridge_slave_1: left promiscuous mode [ 578.978402][T11524] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.173830][T11528] overlayfs: failed to resolve './file1': -2 [ 579.260358][T11523] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1171'. [ 579.269400][T11523] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1171'. [ 579.467380][T10752] usb 4-1: USB disconnect, device number 36 [ 580.301756][ T30] audit: type=1400 audit(1757736025.227:580): avc: denied { bind } for pid=11543 comm="syz.0.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 580.321982][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.330927][ T30] audit: type=1400 audit(1757736025.257:581): avc: denied { setopt } for pid=11543 comm="syz.0.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 580.512199][T11548] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1175'. [ 580.997305][T11559] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 581.003850][T11559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 581.044940][T11565] Device name cannot be null; rc = [-22] [ 581.059550][T11559] vhci_hcd vhci_hcd.0: Device attached [ 581.080467][T11565] lo speed is unknown, defaulting to 1000 [ 581.105856][T11565] lo speed is unknown, defaulting to 1000 [ 581.146404][T11565] lo speed is unknown, defaulting to 1000 [ 581.183394][T11565] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 581.269465][T11565] lo speed is unknown, defaulting to 1000 [ 581.291615][T11565] lo speed is unknown, defaulting to 1000 [ 581.299615][T10752] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 581.319917][T11565] lo speed is unknown, defaulting to 1000 [ 581.336728][T11565] lo speed is unknown, defaulting to 1000 [ 581.355803][T11565] lo speed is unknown, defaulting to 1000 [ 581.441091][T11565] lo speed is unknown, defaulting to 1000 [ 581.556671][T11560] vhci_hcd: connection reset by peer [ 581.587636][ T49] vhci_hcd: stop threads [ 581.592026][ T49] vhci_hcd: release socket [ 581.601553][ T49] vhci_hcd: disconnect device [ 582.479338][T11573] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 582.489257][T11573] block device autoloading is deprecated and will be removed. [ 583.078939][T11583] fuse: Bad value for 'fd' [ 583.124456][T11580] binder: 11578:11580 ioctl c0306201 0 returned -14 [ 583.697884][T11587] syz.3.1183 (11587): drop_caches: 2 [ 583.711967][T11587] syz.3.1183 (11587): drop_caches: 2 [ 583.964494][T11594] netlink: 'syz.5.1185': attribute type 4 has an invalid length. [ 583.982317][T11594] netlink: 'syz.5.1185': attribute type 4 has an invalid length. [ 584.498279][ T5936] lo speed is unknown, defaulting to 1000 [ 584.505433][ T5936] syz2: Port: 1 Link ACTIVE [ 586.518620][T10752] vhci_hcd: vhci_device speed not set [ 587.425051][T11632] netlink: 'syz.1.1195': attribute type 10 has an invalid length. [ 587.432988][T11632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1195'. [ 587.493703][T11637] md: md2 stopped. [ 587.501653][T11632] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.635610][T11638] md2: using deprecated bitmap file support [ 588.754765][T11638] md2: error: failed to get bitmap file [ 589.630785][T11650] usb usb8: usbfs: process 11650 (syz.5.1198) did not claim interface 0 before use [ 589.652623][T11650] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 589.802779][ T30] audit: type=1326 audit(1757736034.717:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11648 comm="syz.1.1199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe252b8eba9 code=0x0 [ 589.869336][ T30] audit: type=1800 audit(1757736034.777:583): pid=11656 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1199" name="nullb0" dev="tmpfs" ino=896 res=0 errno=0 [ 591.287952][T11671] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1204'. [ 591.378108][T11673] SELinux: failed to load policy [ 591.476888][T11677] syz.4.1203 (11677): drop_caches: 2 [ 591.485432][T11677] syz.4.1203 (11677): drop_caches: 2 [ 591.569589][T11679] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 591.608663][ T30] audit: type=1400 audit(1757736036.507:584): avc: denied { bind } for pid=11675 comm="syz.5.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 592.426389][T11688] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1206'. [ 592.894204][T11682] SELinux: failed to load policy [ 593.248541][ T30] audit: type=1400 audit(1757736038.047:585): avc: denied { append } for pid=11691 comm="syz.3.1208" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 593.333607][T11694] ubi31: attaching mtd0 [ 593.350295][T11694] ubi31: scanning is finished [ 593.355025][T11694] ubi31: empty MTD device detected [ 593.683224][ T30] audit: type=1400 audit(1757736038.337:586): avc: denied { create } for pid=11691 comm="syz.3.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 593.706834][ T30] audit: type=1400 audit(1757736038.387:587): avc: denied { sys_admin } for pid=11691 comm="syz.3.1208" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 594.385853][T11694] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 594.393585][T11694] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 594.401035][T11694] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 594.408049][T11694] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 594.415530][T11694] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 594.422389][T11694] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 594.430465][T11694] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 223316636 [ 594.440443][T11694] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 594.504228][T11705] ubi31: background thread "ubi_bgt31d" started, PID 11705 [ 594.735187][T11706] binder: 11701:11706 ioctl c0306201 0 returned -14 [ 595.051728][T11710] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 595.061401][T11710] exFAT-fs (loop4): unable to read boot sector [ 595.067596][T11710] exFAT-fs (loop4): failed to read boot sector [ 595.073888][T11710] exFAT-fs (loop4): failed to recognize exfat type [ 595.918627][ T5936] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 596.070895][ T5936] usb 6-1: config 0 has an invalid interface number: 189 but max is 0 [ 596.070922][ T5936] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.070941][ T5936] usb 6-1: config 0 has no interface number 0 [ 596.070973][ T5936] usb 6-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 596.070994][ T5936] usb 6-1: config 0 interface 189 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 596.074176][ T5936] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 596.074203][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.074220][ T5936] usb 6-1: Product: syz [ 596.074234][ T5936] usb 6-1: Manufacturer: syz [ 596.074245][ T5936] usb 6-1: SerialNumber: syz [ 596.078417][ T5936] usb 6-1: config 0 descriptor?? [ 596.086691][ T5936] ums-alauda 6-1:0.189: USB Mass Storage device detected [ 596.298659][T11725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.317542][T11725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.377103][T11714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.377476][T11714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.384890][ T30] audit: type=1400 audit(1757736041.307:588): avc: denied { listen } for pid=11713 comm="syz.5.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 596.533150][ T2152] usb 6-1: USB disconnect, device number 5 [ 596.581741][T11735] binder: 11726:11735 ioctl c0306201 0 returned -14 [ 597.774759][T11744] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 598.245229][ T30] audit: type=1400 audit(1757736043.167:589): avc: denied { bind } for pid=11748 comm="syz.5.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 600.607677][ T30] audit: type=1400 audit(1757736044.707:590): avc: denied { create } for pid=11759 comm="syz.5.1222" name="#25" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 600.677828][ T30] audit: type=1400 audit(1757736044.707:591): avc: denied { link } for pid=11759 comm="syz.5.1222" name="#25" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 600.709420][T11751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.736558][ T30] audit: type=1400 audit(1757736044.707:592): avc: denied { rename } for pid=11759 comm="syz.5.1222" name="#26" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 600.968873][T10752] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 601.190928][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 601.390041][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 601.530117][T10752] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 601.543363][T10752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.554686][T10752] usb 1-1: config 0 descriptor?? [ 601.561857][T10752] cp210x 1-1:0.0: cp210x converter detected [ 601.708190][T11777] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 601.722764][T11777] block device autoloading is deprecated and will be removed. [ 601.908908][T11780] overlayfs: failed to resolve './file1': -2 [ 601.961794][ T30] audit: type=1326 audit(1757736046.877:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11766 comm="syz.5.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01f78eba9 code=0x7ffc0000 [ 602.088062][T10752] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 602.096313][ T30] audit: type=1326 audit(1757736046.917:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11766 comm="syz.5.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01f78eba9 code=0x7ffc0000 [ 602.167693][T10752] cp210x 1-1:0.0: querying part number failed [ 602.210447][T10752] usb 1-1: cp210x converter now attached to ttyUSB0 [ 602.466618][T10752] usb 1-1: USB disconnect, device number 41 [ 602.519383][T10752] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 602.529209][T11786] binder: 11785:11786 ioctl c0306201 0 returned -14 [ 602.551590][T10752] cp210x 1-1:0.0: device disconnected [ 604.358010][T11810] block nbd0: Attempted send on invalid socket [ 604.364311][T11810] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 604.373842][T11810] efs: cannot read volume header [ 604.382983][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1233'. [ 604.449211][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'. [ 604.458144][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'. [ 604.471746][ T30] audit: type=1400 audit(1757736049.307:595): avc: denied { nlmsg_read } for pid=11806 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 604.860448][ T30] audit: type=1400 audit(1757736049.317:596): avc: denied { read } for pid=11806 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 605.216224][T11821] overlayfs: failed to resolve './file1': -2 [ 605.421073][ T30] audit: type=1400 audit(1757736050.317:597): avc: denied { ioctl } for pid=11804 comm="syz.5.1232" path="mnt:[4026532791]" dev="nsfs" ino=4026532791 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 605.479715][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1229'. [ 605.488877][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 605.558116][ T30] audit: type=1400 audit(1757736050.317:598): avc: denied { map } for pid=11804 comm="syz.5.1232" path="socket:[30637]" dev="sockfs" ino=30637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 606.556386][T10752] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 606.785679][T10752] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 606.797028][T11847] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21 [ 606.824099][T10752] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 606.841358][T10752] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 606.853951][T10752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.929110][T11840] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 606.942056][T10752] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 608.493715][T11866] loop6: detected capacity change from 0 to 524287487 [ 608.517591][ T5865] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.530674][ T5865] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.551630][ T5865] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.572140][ T5865] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.598710][ T5865] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.622949][ T5865] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.693025][ T5865] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.717453][ T5865] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.746841][ T5865] ldm_validate_partition_table(): Disk read failed. [ 608.764524][ T5865] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.789456][ T5865] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.789759][T11880] overlayfs: failed to resolve './file1': -2 [ 608.820862][ T5865] Dev loop6: unable to read RDB block 0 [ 608.839053][ T5865] loop6: unable to read partition table [ 608.874052][T11866] ldm_validate_partition_table(): Disk read failed. [ 608.903439][T11866] Dev loop6: unable to read RDB block 0 [ 608.919134][T11866] loop6: unable to read partition table [ 608.935402][T11866] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 609.332375][ T5219] ldm_validate_partition_table(): Disk read failed. [ 609.357545][ T5219] Dev loop6: unable to read RDB block 0 [ 609.370502][ T5219] loop6: unable to read partition table [ 609.595873][ T2152] usb 1-1: USB disconnect, device number 42 [ 609.754067][T11900] binder: 11897:11900 ioctl c0306201 0 returned -14 [ 610.287117][ T30] audit: type=1400 audit(1757736055.207:599): avc: denied { getopt } for pid=11913 comm="syz.4.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 610.427165][ T30] audit: type=1400 audit(1757736055.337:600): avc: denied { firmware_load } for pid=49 comm="kworker/u8:3" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 611.540010][ T30] audit: type=1400 audit(1757736056.117:601): avc: denied { name_bind } for pid=11909 comm="syz.0.1248" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 611.910402][T11903] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 611.927184][T11903] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 611.962849][T11903] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 612.025311][T11903] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 612.034998][T11903] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 612.110495][T11903] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 612.236402][T11903] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 613.154809][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 613.214907][ T30] audit: type=1326 audit(1757736058.137:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b4d8eba9 code=0x7ffc0000 [ 613.276135][ T30] audit: type=1326 audit(1757736058.137:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b4d8eba9 code=0x7ffc0000 [ 613.306207][ T30] audit: type=1326 audit(1757736058.187:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01b4d8eba9 code=0x7ffc0000 [ 613.394227][T11947] pim6reg: entered allmulticast mode [ 613.452008][ T30] audit: type=1326 audit(1757736058.227:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b4d8eba9 code=0x7ffc0000 [ 613.481193][T11927] overlay: ./file1 is not a directory [ 613.491153][ T30] audit: type=1326 audit(1757736058.287:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01b4d90ac7 code=0x7ffc0000 [ 613.516178][ T30] audit: type=1326 audit(1757736058.287:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f01b4d90a3c code=0x7ffc0000 [ 613.543061][ T30] audit: type=1326 audit(1757736058.407:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f01b4d90974 code=0x7ffc0000 [ 613.570644][T11947] Driver unsupported XDP return value 0 on prog (id 208) dev N/A, expect packet loss! [ 614.292560][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 614.298669][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 614.304699][ T5852] Bluetooth: hci3: command 0x0405 tx timeout [ 614.494752][T11930] pim6reg: left allmulticast mode [ 614.542874][T11963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11963 comm=syz.5.1254 [ 614.721254][T11967] binder: 11964:11967 ioctl c0306201 0 returned -14 [ 614.906068][T11973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1256'. [ 615.229014][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 615.538665][T10752] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 615.567581][ T5857] Bluetooth: hci4: Malformed LE Event: 0x1b [ 615.790381][T11980] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 615.817773][T11980] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 616.828578][ T5857] Bluetooth: hci3: command 0x0405 tx timeout [ 617.113284][T10752] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 617.144579][T10752] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 617.165121][T10752] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 617.248934][T10752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.349806][T11971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 617.374668][T10752] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.064338][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 618.064369][ T30] audit: type=1400 audit(1757736062.887:615): avc: denied { write } for pid=11998 comm="syz.3.1261" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 618.574801][T10752] usb 1-1: USB disconnect, device number 43 [ 618.961264][ T5857] Bluetooth: hci3: command 0x0405 tx timeout [ 619.256256][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1263'. [ 620.130168][T12039] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1264'. [ 620.175437][T10752] IPVS: starting estimator thread 0... [ 620.260317][T12053] overlayfs: failed to resolve './file1': -2 [ 620.290381][T12057] IPVS: using max 77 ests per chain, 184800 per kthread [ 620.512663][ T30] audit: type=1400 audit(1757736065.297:616): avc: denied { read } for pid=12033 comm="syz.4.1264" dev="sockfs" ino=32045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 620.631958][ T30] audit: type=1400 audit(1757736065.557:617): avc: denied { getopt } for pid=12068 comm="syz.1.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 620.815668][T10752] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 620.983461][T10752] usb 5-1: unable to get BOS descriptor set [ 620.995989][T10752] usb 5-1: not running at top speed; connect to a high speed hub [ 621.015474][T10752] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.041807][T10752] usb 5-1: config 1 interface 0 has no altsetting 0 [ 621.092759][T10752] usb 5-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 621.135064][T10752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.155130][T10752] usb 5-1: Product: syz [ 621.163920][T10752] usb 5-1: SerialNumber: syz [ 621.307202][T12040] block nbd0: Attempted send on invalid socket [ 621.331452][T12040] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 622.192604][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 624.057176][T12110] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 624.068678][T12110] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 624.129092][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.059428][ T30] audit: type=1400 audit(1757736069.957:618): avc: denied { getopt } for pid=12112 comm="syz.0.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 625.222738][T12119] block nbd0: Attempted send on invalid socket [ 625.229424][T12119] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 625.241442][T12119] XFS (nbd0): SB validate failed with error -5. [ 625.846869][T12148] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 625.896211][T12148] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 625.905339][T12148] overlayfs: missing 'lowerdir' [ 626.284989][T10752] usbhid 5-1:1.0: can't add hid device: -32 [ 626.327215][T10752] usbhid 5-1:1.0: probe with driver usbhid failed with error -32 [ 626.658579][ T5936] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 627.427551][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1290'. [ 627.617662][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1290'. [ 627.896498][ T5936] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 627.904753][ T5936] usb 1-1: config 0 has no interface number 0 [ 628.036451][ T5936] usb 1-1: New USB device found, idVendor=3154, idProduct=721e, bcdDevice= 9.c6 [ 629.375714][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.863113][ T5936] usb 1-1: config 0 descriptor?? [ 629.905292][ T5936] usb 1-1: can't set config #0, error -71 [ 629.937403][ T5936] usb 1-1: USB disconnect, device number 44 [ 631.448424][T12219] Bluetooth: hci5: Frame reassembly failed (-84) [ 631.465615][ T9852] Bluetooth: hci5: Frame reassembly failed (-84) [ 631.496132][ T5936] usb 5-1: USB disconnect, device number 36 [ 633.497241][ T5852] Bluetooth: hci5: command 0x1003 tx timeout [ 633.504707][ T5857] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 633.798908][T10752] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 633.972467][T10752] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 634.006658][T10752] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 634.368609][T10752] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 634.402967][T10752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.679729][T12250] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 634.709244][T10752] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 635.235444][ T30] audit: type=1400 audit(1757736080.157:619): avc: denied { ioctl } for pid=12276 comm="syz.3.1311" path="socket:[32311]" dev="sockfs" ino=32311 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 635.813768][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1312'. [ 635.831534][T12291] team0: left allmulticast mode [ 635.840935][T12291] team_slave_0: left allmulticast mode [ 635.850676][T12291] team_slave_1: left allmulticast mode [ 635.856973][T12291] team0: left promiscuous mode [ 635.864220][T12291] team_slave_0: left promiscuous mode [ 635.873703][T12291] team_slave_1: left promiscuous mode [ 635.891822][T12291] bridge0: port 2(team0) entered disabled state [ 635.961859][T12291] bridge_slave_0: left allmulticast mode [ 635.972067][T12291] bridge_slave_0: left promiscuous mode [ 636.000679][T12291] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.338790][ T5936] usb 6-1: USB disconnect, device number 6 [ 636.848604][T10752] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 637.805522][ T30] audit: type=1400 audit(1757736081.637:620): avc: denied { ioctl } for pid=12306 comm="syz.5.1318" path="socket:[32357]" dev="sockfs" ino=32357 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 639.336673][T10752] usb 5-1: unable to read config index 0 descriptor/all [ 639.343765][T10752] usb 5-1: can't read configurations, error -71 [ 639.796459][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 639.986571][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 640.410142][ T5936] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 640.691819][ T5936] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 640.728376][ T5936] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 640.778663][ T5936] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 640.816534][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.880630][T12335] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 640.972256][ T5936] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 642.521421][T12342] lo speed is unknown, defaulting to 1000 [ 642.770424][T12359] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1324'. [ 642.786061][T12342] lo speed is unknown, defaulting to 1000 [ 642.865862][T12342] lo speed is unknown, defaulting to 1000 [ 642.956114][ T5908] usb 1-1: USB disconnect, device number 45 [ 642.998861][ T30] audit: type=1400 audit(1757736087.887:621): avc: denied { lock } for pid=12346 comm="syz.4.1324" path="/dev/video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 643.094167][T12364] program syz.3.1328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.214654][ T5908] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 645.050446][T12378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1333'. [ 645.079984][T12378] lo speed is unknown, defaulting to 1000 [ 645.157069][T12378] lo speed is unknown, defaulting to 1000 [ 645.163653][T12378] lo speed is unknown, defaulting to 1000 [ 645.410861][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 646.751159][ T30] audit: type=1326 audit(1757736091.677:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12395 comm="syz.5.1339" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc01f78eba9 code=0x0 [ 646.998041][T12403] netlink: 64985 bytes leftover after parsing attributes in process `syz.5.1339'. [ 647.199090][ T30] audit: type=1400 audit(1757736092.117:623): avc: denied { ioctl } for pid=12399 comm="syz.1.1340" path="socket:[33310]" dev="sockfs" ino=33310 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 649.086797][ T5908] usb 4-1: string descriptor 0 read error: -71 [ 649.103368][ T5908] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 649.123642][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.155589][ T5908] usb 4-1: config 0 descriptor?? [ 649.190831][ T5908] usb 4-1: can't set config #0, error -71 [ 649.212182][ T5908] usb 4-1: USB disconnect, device number 37 [ 649.374390][T12422] binder: 12419:12422 ioctl c0306201 0 returned -14 [ 650.664871][T12434] Malformed UNC in devname [ 650.664871][T12434] [ 650.671830][T12434] CIFS: VFS: Malformed UNC in devname [ 650.706573][ T30] audit: type=1400 audit(1757736095.607:624): avc: denied { write } for pid=12425 comm="syz.0.1346" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 650.744148][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1345'. [ 650.869267][ T30] audit: type=1400 audit(1757736095.607:625): avc: denied { open } for pid=12425 comm="syz.0.1346" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 650.998665][ T30] audit: type=1400 audit(1757736095.667:626): avc: denied { getopt } for pid=12423 comm="syz.5.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 651.685639][ T30] audit: type=1400 audit(1757736096.507:627): avc: denied { connect } for pid=12468 comm="syz.3.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 652.084667][T12474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.041507][T12501] binder: 12500:12501 ioctl c0306201 0 returned -14 [ 654.168571][ T5936] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 654.304605][T12507] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 654.350584][ T5936] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 655.027620][ T5936] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 655.047984][ T5936] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 655.057915][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.100699][T12499] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 655.130237][ T30] audit: type=1400 audit(1757736099.257:628): avc: denied { create } for pid=12505 comm="syz.5.1358" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 655.154430][ T5936] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 655.188720][ T30] audit: type=1400 audit(1757736099.267:629): avc: denied { link } for pid=12505 comm="syz.5.1358" name="file1" dev="ramfs" ino=33440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 655.266457][ T30] audit: type=1400 audit(1757736099.287:630): avc: denied { rename } for pid=12505 comm="syz.5.1358" name="file1" dev="overlay" ino=33440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 655.302732][ T30] audit: type=1400 audit(1757736099.287:631): avc: denied { unlink } for pid=12505 comm="syz.5.1358" name="file0" dev="overlay" ino=33440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 655.388249][ T30] audit: type=1400 audit(1757736099.297:632): avc: denied { setattr } for pid=12505 comm="syz.5.1358" name="#2f" dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 655.813064][T12517] netlink: 'syz.1.1359': attribute type 10 has an invalid length. [ 656.071623][T12517] veth0_vlan: left promiscuous mode [ 656.085211][T12517] veth0_vlan: entered promiscuous mode [ 656.119046][T12517] team0: Device veth0_vlan failed to register rx_handler [ 656.200454][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1361'. [ 657.478601][ T5908] usb 1-1: USB disconnect, device number 46 [ 658.219749][ T30] audit: type=1400 audit(1757736103.137:633): avc: denied { setattr } for pid=12545 comm="syz.5.1366" name="file0" dev="tmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 658.808710][T12546] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1366'. [ 659.008820][T12551] binder: 12550:12551 ioctl c0306201 0 returned -14 [ 659.064622][T12556] binder: 12555:12556 ioctl c0306201 0 returned -14 [ 659.175612][ T30] audit: type=1400 audit(1757736104.097:634): avc: denied { setopt } for pid=12553 comm="syz.1.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 659.196531][T12554] netlink: 'syz.1.1369': attribute type 10 has an invalid length. [ 659.205336][T12554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.213106][T12554] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 659.755697][T12567] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 660.416652][T12567] bridge1: entered allmulticast mode [ 661.293699][ T5936] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 661.346478][ T30] audit: type=1400 audit(1757736106.197:635): avc: denied { setopt } for pid=12580 comm="syz.5.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 661.570582][ T5936] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 661.607830][ T5936] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 661.644926][ T5936] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 661.721757][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.747064][T12582] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 661.867991][ T5936] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 661.978401][T12598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1378'. [ 661.987622][T12598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1378'. [ 662.010773][ T30] audit: type=1800 audit(1757736106.897:636): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1378" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 662.907300][T12602] md: md2 stopped. [ 663.009100][T12614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.608193][ T30] audit: type=1800 audit(1757736109.527:637): pid=12617 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1381" name="bus" dev="ramfs" ino=33677 res=0 errno=0 [ 664.685598][T12617] Lens A: ================= START STATUS ================= [ 664.693262][T12617] Lens A: Focus, Absolute: 0 [ 664.701416][T12617] Lens A: ================== END STATUS ================== [ 664.787536][ T30] audit: type=1400 audit(1757736109.697:638): avc: denied { write } for pid=12624 comm="syz.0.1385" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 665.397205][ T5908] usb 4-1: USB disconnect, device number 38 [ 666.960712][T12647] mkiss: ax0: crc mode is auto. [ 668.258658][ T30] audit: type=1400 audit(1757736112.257:639): avc: denied { accept } for pid=12652 comm="syz.3.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 668.344725][ T30] audit: type=1326 audit(1757736112.367:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12630 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe252b8eba9 code=0x7ffc0000 [ 668.369026][ T30] audit: type=1326 audit(1757736112.367:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12630 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe252b8eba9 code=0x7ffc0000 [ 668.439627][ T30] audit: type=1326 audit(1757736113.367:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12630 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe252b8eba9 code=0x7ffc0000 [ 668.501777][ T30] audit: type=1326 audit(1757736113.367:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12630 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe252b8eba9 code=0x7ffc0000 [ 668.526111][ T30] audit: type=1326 audit(1757736113.367:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12630 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe252b8eba9 code=0x7ffc0000 [ 668.562609][ T30] audit: type=1326 audit(1757736113.457:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12630 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe252b8eba9 code=0x7ffc0000 [ 668.656237][T12633] pim6reg: entered allmulticast mode [ 668.667491][ T30] audit: type=1326 audit(1757736113.587:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12630 comm="syz.1.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe252b8eba9 code=0x7ffc0000 [ 669.080822][ T5852] Bluetooth: hci3: command 0x0405 tx timeout [ 669.795464][T12673] overlayfs: failed to resolve './file1': -2 [ 669.975427][T12679] Mount JFS Failure: -22 [ 669.983544][T12679] jfs_mount failed w/return code = -22 [ 669.996826][T12679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1396'. [ 671.305258][T12693] UBIFS error (pid: 12693): cannot open "c:::", error -22 [ 671.988599][ T5908] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 672.143046][ T5936] libceph: connect (1)[c::]:6789 error -101 [ 672.149134][ T5936] libceph: mon0 (1)[c::]:6789 connect error [ 672.169858][ T5908] usb 6-1: config 0 has an invalid interface number: 123 but max is 0 [ 672.187085][T12700] ceph: No mds server is up or the cluster is laggy [ 672.211610][ T5908] usb 6-1: config 0 has no interface number 0 [ 672.249582][ T5908] usb 6-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice= d.13 [ 672.267645][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.276548][ T5908] usb 6-1: Product: syz [ 672.286016][ T5908] usb 6-1: Manufacturer: syz [ 672.292996][ T5908] usb 6-1: SerialNumber: syz [ 672.313162][ T5908] usb 6-1: config 0 descriptor?? [ 672.340972][T12709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1402'. [ 672.414801][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 672.414815][ T30] audit: type=1400 audit(1757736117.333:648): avc: denied { setopt } for pid=12710 comm="syz.1.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 672.964600][T12696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.974827][T12696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.038256][ T5908] usb 6-1: bad CDC descriptors [ 673.088936][ T5908] usb 6-1: USB disconnect, device number 7 [ 673.528413][T12723] netlink: 'syz.1.1408': attribute type 10 has an invalid length. [ 673.577751][T12723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1408'. [ 673.627825][T12729] sp0: Synchronizing with TNC [ 673.651049][T12728] [U] è [ 673.853158][T12732] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1407'. [ 673.924805][T12732] hsr_slave_0: left promiscuous mode [ 673.939679][ T5936] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 673.954151][T12732] hsr_slave_1: left promiscuous mode [ 675.099853][ T5936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.123361][ T5936] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 675.132377][ T5936] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 675.143016][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.153554][ T5936] usb 5-1: config 0 descriptor?? [ 675.164533][ T5936] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 675.173328][ T5936] dvb-usb: bulk message failed: -22 (3/0) [ 675.264596][ T5936] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 675.315835][ T5936] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 675.349681][ T5936] usb 5-1: media controller created [ 675.371153][T12726] dibusb: i2c wr: len=61 is too big! [ 675.371153][T12726] [ 675.381340][T12726] netlink: 'syz.4.1405': attribute type 7 has an invalid length. [ 675.391003][T12726] netlink: 'syz.4.1405': attribute type 8 has an invalid length. [ 675.682738][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 675.733413][ T5936] dvb-usb: bulk message failed: -22 (6/0) [ 675.776851][ T5936] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 675.826722][ T5936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 675.856816][ T5936] dvb-usb: schedule remote query interval to 150 msecs. [ 675.869302][ T5936] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 676.110834][ T5852] Bluetooth: hci5: command 0x1003 tx timeout [ 676.118880][ T5857] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 676.260208][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 676.266217][ T5936] dvb-usb: error while querying for an remote control event. [ 676.472171][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 676.478961][ T5936] dvb-usb: error while querying for an remote control event. [ 676.638666][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 676.645946][ T5936] dvb-usb: error while querying for an remote control event. [ 676.874609][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 676.886219][ T5936] dvb-usb: error while querying for an remote control event. [ 677.049089][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 677.056544][ T5936] dvb-usb: error while querying for an remote control event. [ 677.259859][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 677.266511][ T5936] dvb-usb: error while querying for an remote control event. [ 677.309580][T12758] binder: 12753:12758 ioctl c0306201 0 returned -14 [ 677.574443][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 677.635803][ T5936] dvb-usb: error while querying for an remote control event. [ 677.808877][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 677.871642][ T5936] dvb-usb: error while querying for an remote control event. [ 677.894711][T12763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.180718][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 678.186850][ T5936] dvb-usb: error while querying for an remote control event. [ 678.301901][T12776] siw: device registration error -23 [ 678.314538][T12776] smc: removing ib device sz1 [ 678.349237][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 678.868551][ T5936] dvb-usb: error while querying for an remote control event. [ 679.168545][T12776] ------------[ cut here ]------------ [ 679.174016][T12776] WARNING: CPU: 0 PID: 12776 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 679.184819][T12776] Modules linked in: [ 679.189169][T12776] CPU: 0 UID: 0 PID: 12776 Comm: syz.1.1420 Not tainted syzkaller #0 PREEMPT(full) [ 679.198541][T12776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 679.208583][T12776] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 679.214020][T12776] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 45 dc fc f8 e8 40 dc fc f8 90 <0f> 0b 90 5b e9 36 dc fc f8 e8 a1 3b 63 f9 eb da 66 66 2e 0f 1f 84 [ 679.233739][T12776] RSP: 0018:ffffc90004daf1c8 EFLAGS: 00010246 [ 679.239808][T12776] RAX: 0000000000080000 RBX: ffff88807b799358 RCX: ffffc9000fa8e000 [ 679.247752][T12776] RDX: 0000000000080000 RSI: ffffffff88bec290 RDI: ffff88807b7993d8 [ 679.255718][T12776] RBP: ffffffff88bd2730 R08: 0000000000000005 R09: 0000000000000001 [ 679.263671][T12776] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807b798698 [ 679.271630][T12776] R13: ffff88807b797fe0 R14: ffff88807b797fe0 R15: ffff88807b7990b8 [ 679.279692][T12776] FS: 00007fe253a836c0(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 679.288658][T12776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 679.295218][T12776] CR2: 000000110c35809b CR3: 000000004dded000 CR4: 00000000003526f0 [ 679.303180][T12776] Call Trace: [ 679.306433][T12776] [ 679.309359][T12776] rxe_dealloc+0x25/0xc0 [ 679.313579][T12776] ib_dealloc_device+0x49/0x230 [ 679.318404][T12776] __ib_unregister_device+0x396/0x480 [ 679.323767][T12776] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 679.329656][T12776] ib_unregister_device_and_put+0x5a/0x80 [ 679.335349][T12776] nldev_dellink+0x21f/0x320 [ 679.339926][T12776] ? __pfx_nldev_dellink+0x10/0x10 [ 679.345058][T12776] ? cap_capable+0xb3/0x250 [ 679.349562][T12776] ? bpf_lsm_capable+0x9/0x10 [ 679.354215][T12776] ? security_capable+0x7e/0x260 [ 679.359141][T12776] ? ns_capable+0xd7/0x110 [ 679.363532][T12776] ? __pfx_nldev_dellink+0x10/0x10 [ 679.368634][T12776] rdma_nl_rcv_msg+0x387/0x6e0 [ 679.373371][T12776] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 679.378640][T12776] ? __lock_acquire+0x62e/0x1ce0 [ 679.383559][T12776] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 679.389963][T12776] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 679.396877][T12776] ? netlink_deliver_tap+0x1ae/0xd30 [ 679.402149][T12776] ? netlink_unicast+0x405/0x870 [ 679.407062][T12776] netlink_unicast+0x5a7/0x870 [ 679.411819][T12776] ? __pfx_netlink_unicast+0x10/0x10 [ 679.417080][T12776] ? security_netlink_send+0x13/0x210 [ 679.422463][T12776] netlink_sendmsg+0x8d1/0xdd0 [ 679.427203][T12776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.432508][T12776] ____sys_sendmsg+0xa95/0xc70 [ 679.437249][T12776] ? copy_msghdr_from_user+0x10a/0x160 [ 679.442690][T12776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.447957][T12776] ___sys_sendmsg+0x134/0x1d0 [ 679.452626][T12776] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.457812][T12776] __sys_sendmsg+0x16d/0x220 [ 679.462392][T12776] ? __pfx___sys_sendmsg+0x10/0x10 [ 679.467475][T12776] ? __x64_sys_futex+0x1e0/0x4c0 [ 679.472407][T12776] do_syscall_64+0xcd/0x4e0 [ 679.476889][T12776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.482772][T12776] RIP: 0033:0x7fe252b8eba9 [ 679.487158][T12776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.506769][T12776] RSP: 002b:00007fe253a83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.515168][T12776] RAX: ffffffffffffffda RBX: 00007fe252dd6180 RCX: 00007fe252b8eba9 [ 679.523134][T12776] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 679.531094][T12776] RBP: 00007fe252c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 679.539054][T12776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.546996][T12776] R13: 00007fe252dd6218 R14: 00007fe252dd6180 R15: 00007ffed2ee3708 [ 679.554954][T12776] [ 679.557950][T12776] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 679.565198][T12776] CPU: 0 UID: 0 PID: 12776 Comm: syz.1.1420 Not tainted syzkaller #0 PREEMPT(full) [ 679.574534][T12776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 679.584558][T12776] Call Trace: [ 679.587809][T12776] [ 679.590713][T12776] dump_stack_lvl+0x3d/0x1f0 [ 679.595278][T12776] vpanic+0x6e8/0x7a0 [ 679.599236][T12776] ? __pfx_vpanic+0x10/0x10 [ 679.603716][T12776] ? rxe_pool_cleanup+0x41/0x60 [ 679.608551][T12776] panic+0xca/0xd0 [ 679.612250][T12776] ? __pfx_panic+0x10/0x10 [ 679.616641][T12776] check_panic_on_warn+0xab/0xb0 [ 679.621549][T12776] __warn+0xf6/0x3c0 [ 679.625412][T12776] ? rxe_pool_cleanup+0x41/0x60 [ 679.630236][T12776] report_bug+0x3c3/0x580 [ 679.634536][T12776] ? rxe_pool_cleanup+0x41/0x60 [ 679.639357][T12776] handle_bug+0x184/0x210 [ 679.643659][T12776] exc_invalid_op+0x17/0x50 [ 679.648145][T12776] asm_exc_invalid_op+0x1a/0x20 [ 679.652966][T12776] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 679.658396][T12776] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 45 dc fc f8 e8 40 dc fc f8 90 <0f> 0b 90 5b e9 36 dc fc f8 e8 a1 3b 63 f9 eb da 66 66 2e 0f 1f 84 [ 679.677971][T12776] RSP: 0018:ffffc90004daf1c8 EFLAGS: 00010246 [ 679.684008][T12776] RAX: 0000000000080000 RBX: ffff88807b799358 RCX: ffffc9000fa8e000 [ 679.691949][T12776] RDX: 0000000000080000 RSI: ffffffff88bec290 RDI: ffff88807b7993d8 [ 679.699891][T12776] RBP: ffffffff88bd2730 R08: 0000000000000005 R09: 0000000000000001 [ 679.707833][T12776] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807b798698 [ 679.715773][T12776] R13: ffff88807b797fe0 R14: ffff88807b797fe0 R15: ffff88807b7990b8 [ 679.723718][T12776] ? __pfx_rxe_dealloc+0x10/0x10 [ 679.728629][T12776] ? rxe_pool_cleanup+0x40/0x60 [ 679.733454][T12776] ? rxe_pool_cleanup+0x40/0x60 [ 679.738276][T12776] rxe_dealloc+0x25/0xc0 [ 679.742488][T12776] ib_dealloc_device+0x49/0x230 [ 679.747312][T12776] __ib_unregister_device+0x396/0x480 [ 679.752658][T12776] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 679.758528][T12776] ib_unregister_device_and_put+0x5a/0x80 [ 679.764221][T12776] nldev_dellink+0x21f/0x320 [ 679.768784][T12776] ? __pfx_nldev_dellink+0x10/0x10 [ 679.773900][T12776] ? cap_capable+0xb3/0x250 [ 679.778378][T12776] ? bpf_lsm_capable+0x9/0x10 [ 679.783030][T12776] ? security_capable+0x7e/0x260 [ 679.787942][T12776] ? ns_capable+0xd7/0x110 [ 679.792329][T12776] ? __pfx_nldev_dellink+0x10/0x10 [ 679.797412][T12776] rdma_nl_rcv_msg+0x387/0x6e0 [ 679.802147][T12776] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 679.807405][T12776] ? __lock_acquire+0x62e/0x1ce0 [ 679.812320][T12776] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 679.818711][T12776] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 679.825635][T12776] ? netlink_deliver_tap+0x1ae/0xd30 [ 679.830910][T12776] ? netlink_unicast+0x405/0x870 [ 679.835833][T12776] netlink_unicast+0x5a7/0x870 [ 679.840582][T12776] ? __pfx_netlink_unicast+0x10/0x10 [ 679.845853][T12776] ? security_netlink_send+0x13/0x210 [ 679.851201][T12776] netlink_sendmsg+0x8d1/0xdd0 [ 679.855940][T12776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.861201][T12776] ____sys_sendmsg+0xa95/0xc70 [ 679.865941][T12776] ? copy_msghdr_from_user+0x10a/0x160 [ 679.871372][T12776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.876636][T12776] ___sys_sendmsg+0x134/0x1d0 [ 679.881286][T12776] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.886473][T12776] __sys_sendmsg+0x16d/0x220 [ 679.891038][T12776] ? __pfx___sys_sendmsg+0x10/0x10 [ 679.896126][T12776] ? __x64_sys_futex+0x1e0/0x4c0 [ 679.901043][T12776] do_syscall_64+0xcd/0x4e0 [ 679.905533][T12776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.911400][T12776] RIP: 0033:0x7fe252b8eba9 [ 679.915783][T12776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.935360][T12776] RSP: 002b:00007fe253a83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.943743][T12776] RAX: ffffffffffffffda RBX: 00007fe252dd6180 RCX: 00007fe252b8eba9 [ 679.951684][T12776] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 679.959634][T12776] RBP: 00007fe252c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 679.967584][T12776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.975538][T12776] R13: 00007fe252dd6218 R14: 00007fe252dd6180 R15: 00007ffed2ee3708 [ 679.983495][T12776] [ 679.986683][T12776] Kernel Offset: disabled [ 679.990990][T12776] Rebooting in 86400 seconds..