last executing test programs: 17.622199524s ago: executing program 3 (id=199): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="5c0000001300ab018000009112d6aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {&(0x7f0000000100)="988f9dce593f392132c84f468d9a6a9970f20a19f67d3a76df726c40444aad74b8896b4fb4ccc3d3ef3e5e9965bee343c2c335b83a1a94cae6ff35b096fae240526bf6a89d0fef2c23b81c04c543452a9556e97f93b916dce6b06c"}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000200)={r0, r1}) 16.767044283s ago: executing program 3 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fspick(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\\\\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\x00\x00\x00\x00ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\x85n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r3, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0) 13.130926357s ago: executing program 4 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = getpgid(0x0) prlimit64(r0, 0x3, &(0x7f0000000080)={0x25, 0x9}, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x30, 0x1, 0x1, "1c13ebdaf2f20d57185fd75a206d58e85b2197edb1479b0400", 0x35315258}) 12.52143438s ago: executing program 4 (id=212): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) symlink(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0xffffffff, 0x5, 0xd, 0x1, 0x7, 0x4, 0xd}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0xe0}, 0x14) (async) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0xe0}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @remote}}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @remote}}}}}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 11.659337896s ago: executing program 3 (id=215): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "010096dc"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000e80)={0x24, &(0x7f0000000c00)={0x20, 0x22, 0xc2, {0xc2, 0x30, "9ab11c45331494e2fbe532b7550bac061073d956259b3e6cf009773548e659a9d22a93b1cc04c9876a7fa2b5f8ba5ef6f17eabcb4e13e43c33d08a5213aec49d7e8f84ac931cb579c0ab2f1c4c0ddbea69da50aee950fcd75962a9377809e95cc3336b1d8fdbb927447decb11d3bf425ea97164c57a7eac96e03782d6ec800859bb5e55fe258d2f8c54298a39f0ee8886d0a9b54831134ed4618c5059cbab6a13e942676bc049fb9843013f0473e79b199c0067b00064da530d127af1499ed39"}}, &(0x7f0000000d00)={0x0, 0x3, 0xbc, @string={0xbc, 0x3, "a101cfe2e2db74c981bb546068cc1b2e4cd92c4702541a2613062f6cf2b5ee0d0ba0bd726639710d24c04d83dfb7e165fa52601b57c33350bd7f35dab6e81443fe1e7d484419ca624b9b6b163d616dcc8e71f49ef7d18f2bce400d397400638e0e308b70d9cca48299144d6dbd4ce5f8e0bdbc24ddc4920078496f2c5666470a2d0e473864a1129c890fe17152359154f3dd9a445eb9007038ca2d42cf39e8b03c2883f66b884341041353af53f993017b06e8da642f537d9c50"}}, &(0x7f0000000e00)={0x0, 0x22, 0x24, {[@local=@item_4={0x3, 0x2, 0x0, "84d1a980"}, @global=@item_4={0x3, 0x1, 0x81c33030cfde0912, "3a6461dc"}, @global=@item_4={0x3, 0x1, 0x1, "8fbb5237"}, @global=@item_4={0x3, 0x1, 0x8, "b9a80333"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_4={0x3, 0x2, 0xa, "b54fe581"}, @global=@item_012={0x2, 0x1, 0x2, "cfb4"}, @local=@item_4={0x3, 0x2, 0x4, "5ee60495"}, @global=@item_012={0x1, 0x1, 0x1, "df"}]}}, &(0x7f0000000e40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0x439}}}}, &(0x7f0000001140)={0x2c, &(0x7f0000000ec0)={0x40, 0x8, 0x8c, "d633600cf0d49a76cb6c2d2abe8f41b73e5bfcba2205c12897fc45dcbc89ee5a304e0a5497dec9fc7ab84a917cbfe7fee035e1f78031c1bfc120769c7180a40a21d4dee4fb7e01320dd7cc72f9eb84fd6daa938e9868a5e8d5d98076150f0c1c3fdba11c265e84efa8198d6da1d0299aaee57e4204c698ca0371687c1a270ddc9241e7b9b7ebb79e74d670dd"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000001000)={0x20, 0x1, 0xf2, "d0c232ee4c64da9c719030a993fad9c6335b21691bb11ebb18cc97cdfd25efe43ceffd6cef83b5e93e94c9a8656702e1959cb5d4813744b75cf84566ac29f47353669890ab02bdda265293d44bad6cd8a87736b26f3baa55b8b5040ca6965cc0faadf44bf70e15fd6ad16e3ecee7361f292985db1ce6b44ef4769b45ad4f089f8811fc0c9fc4c9d651519a55defe9af6e39df58a9c40bf43a4ea69b9ec1f84038ae3a84b641598d8e52b1320dd7839cfc13d2440fc8bc6f93f7d1faf551be63c5b361f6983e7f5fc65f716dd74d0510641dd4c297850a280b46db47b19f35a1124693ee81ba3ca28fda65587274e2c0e1aa0"}, &(0x7f0000001100)={0x20, 0x3, 0x1, 0xa}}) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x8, 0x1, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x240, 0xfb, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x6, 0x3, 0x68, 0x8, 0x3}, 0x1d, &(0x7f0000000100)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x40, 0x3, 0xbe8, 0xf0f, 0xc, [0xc03f, 0xffc030, 0xff00f0]}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 10.248415348s ago: executing program 0 (id=219): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000001440)=0x63, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x428840, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="390326bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) io_setup(0x281, &(0x7f0000000100)=0x0) io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) dup3(r9, r8, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000540)={0x2, @pix_mp={0x2, 0x800, 0x32315659, 0x175d777d5203dc89, 0x1, [{0x5, 0x3}, {0x1, 0x1000}, {0x8, 0xcfe}, {0x6, 0x3}, {0x1, 0x5}, {0x4e84}, {0x7fffffff, 0x3}, {0xfffffffb, 0x6}], 0x8, 0x0, 0x6, 0x1, 0x3}}) 8.785991723s ago: executing program 0 (id=220): r0 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffe54, 0x24000884, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014", @ANYRES8=r3, @ANYRES16=r1], 0xfc}}, 0x11) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r6, 0x503a7000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x20) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x3c42) 8.785598924s ago: executing program 1 (id=221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500), 0x4006, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x81010, r4, 0x728ec000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0xc8c4049c, 0x1) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000200)={0x28, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 8.471957282s ago: executing program 3 (id=223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.264404994s ago: executing program 1 (id=224): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r8, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x1, {0x7, 0xebf}, 0x6, 0x8}}) io_submit(r7, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r6, 0x0}]) io_uring_register$IORING_REGISTER_PROBE(r6, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xe) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="1000000000000000280012800b0001"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.263651872s ago: executing program 2 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) connect$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 7.263135739s ago: executing program 3 (id=226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r4, 0x4068aea3, &(0x7f0000000440)={0xcc, 0x0, 0xfffffffffffffffe}) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00001abbbbbbbbbbbbaaaaaaaaaabb86dd6d002000008f11ff000000"], 0xc9) r10 = accept4(r6, 0x0, 0x0, 0x80000) connect$tipc(r10, 0x0, 0x0) connect$unix(r6, &(0x7f0000000300)=@abs={0x1}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)=0x0) timer_settime(r12, 0x1, &(0x7f0000000000), 0x0) r13 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r13, 0x400, 0x0) mq_open(&(0x7f00000005c0)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xbb\r\xf1\xc7\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85\xd1\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xc3V\x88\xd1\x1f\xc8\x94\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b87511d0000007ea60864160af3653c001ac004000202080003000300000007002100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r2}}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 7.224738759s ago: executing program 0 (id=227): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000000)={{@any, 0x100}, @any, 0x0, 0x5, 0xbc, 0x9, 0x3, 0x101, 0x8001}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=@delqdisc={0x284, 0x25, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {0x1, 0x7}, {0x3, 0xc}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x2, "5f344e16d63b7733b805a80d71fb2144"}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x101}, @qdisc_kind_options=@q_sfb={{0x8}, {0xfffffdeb, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x0, 0x2, 0x6, 0x82, 0x800, 0x4, 0x7, 0x100}}}}, @TCA_RATE={0x6, 0x5, {0x60, 0x7}}, @TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x81, 0x4, 0x1, 0x1, 0xfff, 0xd, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x1, 0x8, 0x9, 0x80000001, 0x2, 0x424, 0x7fff, 0x2}}, {0x8, 0x2, [0xeb4, 0x3]}}, {{0x1c, 0x1, {0xd, 0x6, 0x5, 0x4, 0x0, 0x4, 0x9, 0x2}}, {0x8, 0x2, [0x5, 0xff]}}, {{0x1c, 0x1, {0x8, 0x9, 0x0, 0x2, 0x1, 0x5, 0xe1, 0x3}}, {0xa, 0x2, [0x2, 0x6, 0x199]}}, {{0x1c, 0x1, {0x0, 0x0, 0x101, 0x5, 0x1, 0x0, 0x10, 0x4}}, {0xc, 0x2, [0xc, 0x7, 0x6, 0xd65]}}, {{0x1c, 0x1, {0x1, 0x6, 0x200, 0xfffffffd, 0x2, 0x6f7, 0xfff, 0x3}}, {0xa, 0x2, [0x6, 0xa, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x80000000}, @TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x0, 0xf6, 0x8, 0x2, 0xa0000000, 0xa29, 0x1}}, {0x6, 0x2, [0xfff]}}, {{0x1c, 0x1, {0xb, 0x0, 0x7f, 0x4, 0x0, 0x400, 0x9, 0xfffffffffffffe51}}, {0x10, 0x2, [0xb, 0x6, 0xf, 0x2, 0xb9, 0xfff7]}}, {{0x1c, 0x1, {0x7c, 0x8, 0x7, 0x1, 0x2, 0x48, 0x500, 0x3}}, {0xa, 0x2, [0x6, 0xffff, 0x200]}}, {{0x1c, 0x1, {0x4, 0x40, 0x1, 0xad, 0x2, 0x1000, 0x1a, 0xa}}, {0x18, 0x2, [0x9, 0x2, 0x101, 0xa, 0x1, 0x7, 0x7, 0x0, 0x8001, 0x6]}}, {{0x1c, 0x1, {0xf0, 0x1c, 0x10, 0x4, 0x1, 0x80000001, 0x3ff, 0x2}}, {0x8, 0x2, [0x2, 0x7f]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x284}}, 0x44080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x800, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, 0x0, 0x0) write(r8, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 6.255287072s ago: executing program 2 (id=228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) r2 = fanotify_init(0x4, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0xa, 0xfff7, 0xffff}, 0x8, 0xa, 0x200, 0x0, 0x0, 0x0, 0x0}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r6 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a300000000009000200"], 0xa0}}, 0x40880) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) fanotify_mark(r2, 0x71, 0x1038, r3, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) readv(r10, &(0x7f0000000100)=[{&(0x7f0000000080)=""/88, 0x58}], 0x1) 5.111626497s ago: executing program 1 (id=229): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000480)={0x7, 0xc, 0x7, 0x0, 0x3, 0x202, "3bf9575d0000000010344a00", 0x2, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x2004, 0xfffffffffffffd3b) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000019540)=ANY=[@ANYRESDEC=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000194c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000019440)=""/99, 0x63}, &(0x7f0000019500)=0x40) r5 = dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000019300)=ANY=[@ANYBLOB="18000000020000000000000002200000950000000000000085100000ffffdfff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000b0f57c4cfb6b09f43a020b7593ca0eea836bfd4fe62c8edf9d4d2773d5eb737d634fe47dfc3626d9670e43578288ebf5abf1c4f2ab50a311d6ebaa5bfb8322fdf86906430fbdccac490ab0b25ee7728360d616bc7f9d18f23c4068b111a4734fde9f2d6f7463353486bfa7d22016f173b2d426cc379ba829ac2639446838c4ce090a112653271fa64b65e457ef79aae9eb83262a9f6ad921002590d0e57b76346a1a0d1804f569693a9b3b017c501610346dbb06a114ded326ded862"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000005}, 0x94) accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 3.469172441s ago: executing program 1 (id=230): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x34, r1, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b42000008b8e1905dc37703d7fb61717454c9c131fbb837ae9a870b51867ea811336fb0900000000000000ca1ff9", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf250b00000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000000007200000004000b004800508004000600040005000e00040014c91d586294f6e0891500000800030001ac0f00050002000000000010000400c0115e70792a887d0621c1e204000400050009000200000005000800000000001100070050126b028566e0dd62fdef0100000000240050800500090001000000040004001100010044432f9b3d002cab87c2ef08f4000000"], 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e20, @loopback}, {0x2, 0x4e22, @remote}, 0x10c, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00', 0x0, 0xa00, 0x1000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.388583423s ago: executing program 2 (id=231): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) 3.255580342s ago: executing program 3 (id=232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="6ddf779c6f1b91dbd8a4562afe76a71b2280e65660f75629b23a1907fd05b127bc9787eb39dcfe324cb5ecaec7c031b2b1cb8680ab6ec7921a59b741707a3502227edf3a047ae9c67937bcaa102067a3b7a7c2f0d558e3", 0x57}, {&(0x7f0000000600)="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", 0x1000}], 0x2, 0x8000, 0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x22, &(0x7f0000000200)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0x9, 0x3, 0x1, 0xfffffffffffffff4}, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9060076c13f259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d07a79cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc601e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df820300000000000000b3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856797365332fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128467be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df43f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @pic={0xff, 0x82, 0x79, 0x45, 0x7d, 0x80, 0x1, 0x4, 0x81, 0xa, 0x3, 0x9, 0x7, 0x3, 0x9, 0x9}}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) 3.149974728s ago: executing program 2 (id=233): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) io_setup(0x800, &(0x7f0000000440)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r3, 0x0, 0x4f}]) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0xfffffffa, 0x8000000000000001, 0x48c, 0x3, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0xcd22, 0x5, 0x7}) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r4}, 0x18) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000d00018008000300010000008fe50200766c616e3100000000000000000000000800030003000000080001000000000000000000", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x800) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x200, 0x0, 0x0, 0x40e00, 0x52, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}, 0x40) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r7, 0x0, 0x14, 0x4c, &(0x7f0000000380)="720eaa58b90ce1b6c1e2abc4a79c2e810bdc8b76", &(0x7f00000003c0)=""/76, 0x2, 0x0, 0xf8, 0x5e, &(0x7f0000000480)="6b7b7ffdeff53ed058cfd42132714c740105a5aa7f4a4c427de8d030d7d13157a67f29126298177f06b7f7200ae3f0d260135b6e1fa469f8f58b0d25d5e08f6256530e08a0c42d932afcd88a87eb0c4ae469bbcabeb471709d35a0961a1ce9adbf74f06080dbd99b579946c56892b680d2e863a108b74837944e3540ef8c6108d2b9694f1e4f778656ff6ea35f513d238981b60041e10598b29737d7cd0007bb0cde42e2412818cdf66c1251ab6f74cf03579701330d88088b39527c77a8850adda2277a47c4258a449335e34b823016d20d6054259a50b92189e0703662402ddbbcdb6dc4edf118ef924ddebd2c063615681ea2cdb408e6", &(0x7f0000000580)="6f0e52ec19dcb42e6981ca2661b0cb7b072886f8be1a3b88a1901bf33913adb44ab9db84312cf6eefa78cf57381e1aca54bc89c44eb4f8683c8aae2e9f4df882e7506980083df5054744e02847818b4fd7c6ffa0a2d7ae3a2e3afc85cb4f", 0x2, 0x0, 0x751}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0505405, &(0x7f0000000000)={{0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2.755797952s ago: executing program 4 (id=234): openat$sndseq(0xffffffffffffff9c, &(0x7f0000002700), 0x2081) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.492652696s ago: executing program 1 (id=235): r0 = fanotify_init(0x8, 0x2) fstat(r0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000140)={0x0, 0x96, 0x5, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000540)={0x0, 0x100000000, 0x4}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000940)={0x0, 0x2, {0x80000001, @struct={0x8}, 0x0, 0x4, 0x6, 0x0, 0x3b5b, 0xfffffffffffffff8, 0x185, @struct={0xf, 0x9}, 0x3ff, 0x68b9, [0x3, 0x5c, 0x459e, 0x0, 0x7fff, 0x80000000]}, {0x9, @usage=0x1, r1, 0x0, 0x6, 0x7899, 0x0, 0x9, 0x40, @usage, 0x2, 0x0, [0x1, 0x6, 0x9, 0x5, 0x7, 0x1156b187c0000]}, {0xfffffffffffffff7, @struct={0x4, 0x9}, r2, 0x80000001, 0x6, 0x10001, 0x4, 0x624b, 0x206, @usage=0x6, 0x9, 0x4, [0x9, 0x3ff, 0x6, 0xffffffff80000001, 0x2, 0xb2a]}, {0x5, 0x5, 0x1}}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ftruncate(r3, 0x402) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@rand_addr=0x64010101}]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000100)) 2.344026257s ago: executing program 0 (id=236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.281955832s ago: executing program 1 (id=237): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x7, 0x3}, {0x9, 0x5, 0xb, 0x2, 0x40, 0xb, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r2, &(0x7f0000003080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x20008844) setsockopt$sock_attach_bpf(r2, 0x1, 0x24, &(0x7f0000000000), 0x4) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x915b, 0x1, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r7, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r7, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r5) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x104b) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="400b080000000f"], 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1.859056521s ago: executing program 0 (id=238): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000000)=0x1, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x7, 0x4, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x7, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0xffffffff, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x200, 0x129432e6, 0xc8, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x4, 0x7, 0x3, 0x2f, 0x6, 0x312, 0x76, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0xe3ae, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x2, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xa, 0x9, 0x48c93690, 0x2, 0xff], [0x1007, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x1, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x80, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0xb, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x2, 0x6, 0x8, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty}, 0xc) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x120) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x528}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) 1.855424462s ago: executing program 2 (id=239): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) pwrite64(r0, 0x0, 0x0, 0x3) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x81, "fafc00"}, 0xfffffffe, 0x1, {0x0}}) 1.677573645s ago: executing program 2 (id=240): r0 = socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r5 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x42, 0x6}]}}, 0x0, 0x2a, 0x0, 0x1, 0xf61}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r4, &(0x7f0000000240)=""/169, 0xa9, 0x40010002, 0x0, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x8}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x580, 0x0, 0x198, 0x288, 0x0, 0x340, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'unconfined\x00'}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d4, 0x4d2], 0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x3, 0x2, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5e0) 1.675279505s ago: executing program 0 (id=241): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x27125ae6fbb99f61, '\x00', 0x0, @fallback=0x3}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet6(r4, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0xb}, 0x24000001) getdents64(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 827.796125ms ago: executing program 4 (id=242): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000480)={0x7, 0xc, 0x7, 0x0, 0x3, 0x202, "3bf9575d0000000010344a00", 0x2, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x2004, 0xfffffffffffffd3b) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000019540)=ANY=[@ANYRESDEC=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000194c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000019440)=""/99, 0x63}, &(0x7f0000019500)=0x40) r5 = dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000019300)=ANY=[@ANYBLOB="18000000020000000000000002200000950000000000000085100000ffffdfff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000b0f57c4cfb6b09f43a020b7593ca0eea836bfd4fe62c8edf9d4d2773d5eb737d634fe47dfc3626d9670e43578288ebf5abf1c4f2ab50a311d6ebaa5bfb8322fdf86906430fbdccac490ab0b25ee7728360d616bc7f9d18f23c4068b111a4734fde9f2d6f7463353486bfa7d22016f173b2d426cc379ba829ac2639446838c4ce090a112653271fa64b65e457ef79aae9eb83262a9f6ad921002590d0e57b76346a1a0d1804f569693a9b3b017c501610346dbb06a114ded326ded862"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000005}, 0x94) accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 0s ago: executing program 4 (id=243): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x43889}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x38}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@delqdisc={0x178, 0x25, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {0x5, 0xd}, {0x8, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x5, 0x30, 0x5, 0x2, 0xc, 0x6, 0x2}}, {0x8, 0x2, [0x2, 0xe180]}}, {{0x1c, 0x1, {0x70, 0x1, 0x7, 0x3, 0x0, 0x101, 0x9, 0xa}}, {0x18, 0x2, [0x4, 0x5, 0xff00, 0xe20, 0xea0, 0x7, 0x8000, 0xff7f, 0x2, 0xb]}}, {{0x1c, 0x1, {0xed, 0x6, 0x2, 0x0, 0x2, 0x2, 0x8001, 0x2}}, {0x8, 0x2, [0x9, 0x3]}}, {{0x1c, 0x1, {0x5, 0x2, 0x80, 0x6, 0x0, 0x9a, 0x2, 0x7}}, {0x12, 0x2, [0x0, 0x18b, 0x6, 0x6423, 0x3, 0x8001, 0xe]}}, {{0x1c, 0x1, {0x1, 0x7, 0x7, 0x3, 0x1, 0x7, 0x10000, 0x8}}, {0x14, 0x2, [0x3, 0x4, 0x20, 0x2e9, 0xd, 0x7f, 0x2, 0x400]}}, {{0x1c, 0x1, {0x3, 0x1d, 0xf8, 0x93, 0x0, 0xfffff000, 0xfffffffc, 0x9}}, {0x16, 0x2, [0x3, 0x9, 0xf, 0x6, 0xfff7, 0x2, 0x4, 0x1, 0x7ff]}}, {{0x1c, 0x1, {0x5, 0x8, 0x2, 0xb8c6, 0x2, 0x9, 0x0, 0x4}}, {0xc, 0x2, [0x70, 0x2, 0x2, 0x101]}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xffffff77, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x11, 0x1, 0x40}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x7, 0xd, 0x10, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0x1ff, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @initdev}, &(0x7f0000000300)=0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000640)={&(0x7f0000000000), 0xc, &(0x7f0000000600)={&(0x7f0000000c00)={0x1b4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}]}}, {{0x8, 0x1, r10}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x5, 0x81, 0x80000000}, {0x40, 0x5, 0x9, 0xc7}, {0x4, 0x4, 0x40, 0x10000}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r13}}}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4890}, 0xd0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.4' (ED25519) to the list of known hosts. [ 54.171229][ T30] audit: type=1400 audit(1764404936.382:62): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.194595][ T30] audit: type=1400 audit(1764404936.402:63): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.197125][ T5798] cgroup: Unknown subsys name 'net' [ 54.224102][ T30] audit: type=1400 audit(1764404936.432:64): avc: denied { unmount } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.353414][ T5798] cgroup: Unknown subsys name 'cpuset' [ 54.361877][ T5798] cgroup: Unknown subsys name 'rlimit' [ 54.495960][ T30] audit: type=1400 audit(1764404936.702:65): avc: denied { setattr } for pid=5798 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.528426][ T30] audit: type=1400 audit(1764404936.702:66): avc: denied { create } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.553363][ T30] audit: type=1400 audit(1764404936.702:67): avc: denied { write } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.574052][ T30] audit: type=1400 audit(1764404936.702:68): avc: denied { read } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.594350][ T30] audit: type=1400 audit(1764404936.702:69): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 54.615772][ T5801] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 54.619147][ T30] audit: type=1400 audit(1764404936.702:70): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 54.650899][ T30] audit: type=1400 audit(1764404936.762:71): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 55.590690][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.883670][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.891739][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.899451][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.907609][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.913388][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.915016][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.929460][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.936589][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.936891][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.944472][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.951795][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.958891][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.973589][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.980749][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.988510][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.994141][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.996025][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.003525][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.009506][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.017097][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.031763][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.031950][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.046323][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.046877][ T5137] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.055716][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.385802][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 58.592302][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 58.625838][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 58.642384][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.649595][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.657354][ T5810] bridge_slave_0: entered allmulticast mode [ 58.664023][ T5810] bridge_slave_0: entered promiscuous mode [ 58.687100][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 58.702993][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.710093][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.717476][ T5810] bridge_slave_1: entered allmulticast mode [ 58.725723][ T5810] bridge_slave_1: entered promiscuous mode [ 58.782108][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.804807][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 58.819279][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.883812][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.891092][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.898200][ T5812] bridge_slave_0: entered allmulticast mode [ 58.905046][ T5812] bridge_slave_0: entered promiscuous mode [ 58.931412][ T5810] team0: Port device team_slave_0 added [ 58.937317][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.944436][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.951649][ T5811] bridge_slave_0: entered allmulticast mode [ 58.958214][ T5811] bridge_slave_0: entered promiscuous mode [ 58.965053][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.972240][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.979339][ T5812] bridge_slave_1: entered allmulticast mode [ 58.986563][ T5812] bridge_slave_1: entered promiscuous mode [ 59.006385][ T5810] team0: Port device team_slave_1 added [ 59.012361][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.019431][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.026755][ T5811] bridge_slave_1: entered allmulticast mode [ 59.033580][ T5811] bridge_slave_1: entered promiscuous mode [ 59.085314][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.092707][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.099774][ T5809] bridge_slave_0: entered allmulticast mode [ 59.107652][ T5809] bridge_slave_0: entered promiscuous mode [ 59.114734][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.121846][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.128938][ T5809] bridge_slave_1: entered allmulticast mode [ 59.135743][ T5809] bridge_slave_1: entered promiscuous mode [ 59.156927][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.168008][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.191829][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.198851][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.225085][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.237846][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.248373][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.273583][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.280908][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.288032][ T5813] bridge_slave_0: entered allmulticast mode [ 59.295375][ T5813] bridge_slave_0: entered promiscuous mode [ 59.302786][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.309719][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.335819][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.363083][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.374467][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.383863][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.391034][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.398131][ T5813] bridge_slave_1: entered allmulticast mode [ 59.404906][ T5813] bridge_slave_1: entered promiscuous mode [ 59.425737][ T5812] team0: Port device team_slave_0 added [ 59.457757][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.468494][ T5811] team0: Port device team_slave_0 added [ 59.475871][ T5812] team0: Port device team_slave_1 added [ 59.489915][ T5809] team0: Port device team_slave_0 added [ 59.497877][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.508009][ T5811] team0: Port device team_slave_1 added [ 59.531130][ T5809] team0: Port device team_slave_1 added [ 59.585239][ T5810] hsr_slave_0: entered promiscuous mode [ 59.591631][ T5810] hsr_slave_1: entered promiscuous mode [ 59.606301][ T5813] team0: Port device team_slave_0 added [ 59.619465][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.626542][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.652625][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.664098][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.671193][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.697693][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.709732][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.716763][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.742667][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.754994][ T5813] team0: Port device team_slave_1 added [ 59.761449][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.768360][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.794284][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.805704][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.812764][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.838769][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.860323][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.867322][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.893276][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.932365][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.939327][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.965683][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.977648][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.984615][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.010502][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.071232][ T5823] Bluetooth: hci0: command tx timeout [ 60.071409][ T5817] Bluetooth: hci2: command tx timeout [ 60.082777][ T5137] Bluetooth: hci1: command tx timeout [ 60.099838][ T5812] hsr_slave_0: entered promiscuous mode [ 60.106012][ T5812] hsr_slave_1: entered promiscuous mode [ 60.112019][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 60.117785][ T5812] Cannot create hsr debugfs directory [ 60.126615][ T5809] hsr_slave_0: entered promiscuous mode [ 60.132797][ T5809] hsr_slave_1: entered promiscuous mode [ 60.138629][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 60.144714][ T5809] Cannot create hsr debugfs directory [ 60.150625][ T5137] Bluetooth: hci4: command tx timeout [ 60.150630][ T5817] Bluetooth: hci3: command tx timeout [ 60.166301][ T5811] hsr_slave_0: entered promiscuous mode [ 60.172432][ T5811] hsr_slave_1: entered promiscuous mode [ 60.178260][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 60.184028][ T5811] Cannot create hsr debugfs directory [ 60.244359][ T5813] hsr_slave_0: entered promiscuous mode [ 60.251590][ T5813] hsr_slave_1: entered promiscuous mode [ 60.257458][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 60.263769][ T5813] Cannot create hsr debugfs directory [ 60.551930][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.571071][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.580355][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.594817][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.626661][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.637733][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.648220][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.673521][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.715605][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.728123][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.738185][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.754193][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.818395][ T5812] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.830033][ T5812] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.841721][ T5812] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.852091][ T5812] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.921144][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.933513][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.946308][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.955989][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.965689][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.013164][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.028324][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.058144][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.065289][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.078022][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.085210][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.127007][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.138860][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.167394][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.174479][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.189316][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.205835][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.212934][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.232882][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.239931][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.257688][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.264758][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.289203][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.312554][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.326935][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.374672][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 61.374686][ T30] audit: type=1400 audit(1764404943.582:86): avc: denied { sys_module } for pid=5810 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.396280][ T5809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.418715][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.441533][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.463818][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.479862][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.486981][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.549129][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.556263][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.568118][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.575292][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.588522][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.595673][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.662759][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.774022][ T5810] veth0_vlan: entered promiscuous mode [ 61.794139][ T5810] veth1_vlan: entered promiscuous mode [ 61.854904][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.925342][ T5810] veth0_macvtap: entered promiscuous mode [ 61.956005][ T5810] veth1_macvtap: entered promiscuous mode [ 61.974319][ T5809] veth0_vlan: entered promiscuous mode [ 61.992128][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.015295][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.035652][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.054846][ T5809] veth1_vlan: entered promiscuous mode [ 62.064447][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.075173][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.085943][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.098358][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.122195][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.132543][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.151913][ T5137] Bluetooth: hci1: command tx timeout [ 62.153297][ T5823] Bluetooth: hci0: command tx timeout [ 62.161244][ T5817] Bluetooth: hci2: command tx timeout [ 62.222439][ T5809] veth0_macvtap: entered promiscuous mode [ 62.232481][ T5817] Bluetooth: hci4: command tx timeout [ 62.237072][ T5823] Bluetooth: hci3: command tx timeout [ 62.247476][ T5811] veth0_vlan: entered promiscuous mode [ 62.283883][ T5813] veth0_vlan: entered promiscuous mode [ 62.292908][ T5809] veth1_macvtap: entered promiscuous mode [ 62.305428][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.324235][ T5813] veth1_vlan: entered promiscuous mode [ 62.333854][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.342341][ T5811] veth1_vlan: entered promiscuous mode [ 62.388931][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.404993][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.416253][ T5813] veth0_macvtap: entered promiscuous mode [ 62.424379][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.429718][ T5813] veth1_macvtap: entered promiscuous mode [ 62.443078][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.459435][ T30] audit: type=1400 audit(1764404944.662:87): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.4QYxrz/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 62.486280][ T30] audit: type=1400 audit(1764404944.662:88): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.510405][ T30] audit: type=1400 audit(1764404944.662:89): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.4QYxrz/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.543032][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.547864][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.559724][ T30] audit: type=1400 audit(1764404944.662:90): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.571291][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.601724][ T5812] veth0_vlan: entered promiscuous mode [ 62.607590][ T30] audit: type=1400 audit(1764404944.662:91): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.4QYxrz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.620023][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.646019][ T30] audit: type=1400 audit(1764404944.662:92): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.4QYxrz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.652695][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.682468][ T30] audit: type=1400 audit(1764404944.662:93): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.702166][ T30] audit: type=1400 audit(1764404944.692:94): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 62.719401][ T5812] veth1_vlan: entered promiscuous mode [ 62.725816][ T30] audit: type=1400 audit(1764404944.692:95): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="gadgetfs" ino=8295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 62.734676][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.778319][ T1090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.788320][ T1090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.841500][ T5811] veth0_macvtap: entered promiscuous mode [ 62.853649][ T1090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.997462][ T1090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.113598][ T1090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.135480][ T5811] veth1_macvtap: entered promiscuous mode [ 63.171884][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.225502][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.259432][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.280771][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.317177][ T5812] veth0_macvtap: entered promiscuous mode [ 63.323966][ T3521] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.334033][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.346291][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.363666][ T3521] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.372713][ T3521] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.384028][ T5812] veth1_macvtap: entered promiscuous mode [ 63.401934][ T3521] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.428081][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.436490][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.463090][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.472085][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.481867][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.515455][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.573493][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.591063][ T5929] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.608531][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.621787][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.631664][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.640354][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.680853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.704176][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.760682][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 63.793901][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.805866][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.822604][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.830345][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.839243][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.865271][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.886629][ T5929] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 63.917151][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.940125][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.948341][ T5929] usb 3-1: config 0 descriptor?? [ 63.964306][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.990850][ T2147] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.230599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 64.247097][ T5823] Bluetooth: hci0: command tx timeout [ 64.247122][ T5817] Bluetooth: hci2: command tx timeout [ 64.252592][ T5823] Bluetooth: hci1: command tx timeout [ 64.321179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 64.344219][ T5817] Bluetooth: hci4: command tx timeout [ 64.344332][ T5823] Bluetooth: hci3: command tx timeout [ 64.380287][ T5944] tmpfs: Cannot enable quota on remount [ 64.400833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 64.409340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 64.417956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 64.490482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 64.634761][ T2147] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 64.670974][ T2147] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.693121][ T5929] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 64.726408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.769147][ T2147] usb 1-1: config 0 has no interfaces? [ 64.776240][ T2147] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 64.788748][ T2147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.812294][ T2147] usb 1-1: config 0 descriptor?? [ 65.231940][ T5933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.281314][ T5933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.310955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.311431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.406320][ T5952] mmap: syz.2.7 (5952) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.436072][ T5869] usb 1-1: USB disconnect, device number 2 [ 65.809817][ T48] usb 3-1: USB disconnect, device number 2 [ 65.839264][ T5968] xt_connbytes: Forcing CT accounting to be enabled [ 65.929656][ T5968] Cannot find del_set index 1 as target [ 66.218651][ T5977] binder: 5972:5977 ioctl c0306201 0 returned -14 [ 66.226583][ T5977] binder: 5972:5977 ioctl c0306201 0 returned -14 [ 66.290957][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.303605][ T5978] process 'syz.4.12' launched '/dev/fd/6' with NULL argv: empty string added [ 66.312787][ T5823] Bluetooth: hci2: command tx timeout [ 66.312822][ T5823] Bluetooth: hci0: command tx timeout [ 66.323754][ T5817] Bluetooth: hci1: command tx timeout [ 66.391024][ T5817] Bluetooth: hci4: command tx timeout [ 66.400576][ T5817] Bluetooth: hci3: command tx timeout [ 66.446016][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 66.446030][ T30] audit: type=1400 audit(1764404948.652:147): avc: denied { connect } for pid=5971 comm="syz.4.12" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.512733][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.523064][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 66.544270][ T30] audit: type=1400 audit(1764404948.652:148): avc: denied { write } for pid=5971 comm="syz.4.12" path="socket:[8709]" dev="sockfs" ino=8709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.568375][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.580585][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.593170][ T10] usb 4-1: config 0 descriptor?? [ 66.618802][ T30] audit: type=1400 audit(1764404948.682:149): avc: denied { bind } for pid=5971 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.683209][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 66.692950][ T30] audit: type=1400 audit(1764404948.892:150): avc: denied { create } for pid=5980 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.787750][ T30] audit: type=1400 audit(1764404948.892:151): avc: denied { write } for pid=5980 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.912166][ T30] audit: type=1400 audit(1764404948.892:152): avc: denied { nlmsg_read } for pid=5980 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.090441][ T5987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21092 sclass=netlink_audit_socket pid=5987 comm=syz.2.15 [ 68.004633][ T5986] overlayfs: missing 'lowerdir' [ 68.216617][ T5994] netlink: 'syz.2.16': attribute type 13 has an invalid length. [ 68.256607][ T5994] gretap0: refused to change device tx_queue_len [ 68.285288][ T5994] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 68.645449][ T30] audit: type=1400 audit(1764404950.852:153): avc: denied { create } for pid=5995 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.750863][ T30] audit: type=1400 audit(1764404950.952:154): avc: denied { read } for pid=6001 comm="syz.4.18" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.929877][ T30] audit: type=1400 audit(1764404950.952:155): avc: denied { open } for pid=6001 comm="syz.4.18" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.956300][ T30] audit: type=1400 audit(1764404950.982:156): avc: denied { ioctl } for pid=6001 comm="syz.4.18" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 69.090063][ T6006] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 69.098271][ T6006] SELinux: failed to load policy [ 69.535172][ T48] usb 4-1: USB disconnect, device number 2 [ 70.017841][ T6013] Mount JFS Failure: -22 [ 70.023135][ T6013] jfs_mount failed w/return code = -22 [ 70.376480][ T6017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21'. [ 70.386197][ T6017] Zero length message leads to an empty skb [ 70.875241][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.883741][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.566863][ T6032] netlink: 36 bytes leftover after parsing attributes in process `syz.2.28'. [ 71.791591][ T6037] netlink: 76 bytes leftover after parsing attributes in process `syz.3.27'. [ 72.150181][ T5934] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.630549][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 72.630581][ T30] audit: type=1400 audit(1764404954.732:163): avc: denied { create } for pid=6039 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.964816][ T5934] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 72.990011][ T5934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.004350][ T30] audit: type=1400 audit(1764404954.922:164): avc: denied { write } for pid=6042 comm="syz.2.30" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.028096][ T5934] usb 2-1: config 0 has no interfaces? [ 73.078678][ T5934] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 73.112917][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.393961][ T30] audit: type=1400 audit(1764404954.962:165): avc: denied { create } for pid=6042 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.460742][ T5934] usb 2-1: config 0 descriptor?? [ 73.572828][ T30] audit: type=1400 audit(1764404954.992:166): avc: denied { write } for pid=6042 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.592518][ T30] audit: type=1400 audit(1764404955.292:167): avc: denied { setopt } for pid=6047 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.706361][ T6055] SELinux: policydb version -2147418091 does not match my version range 15-35 [ 73.715738][ T6055] SELinux: failed to load policy [ 74.656072][ T5929] usb 2-1: USB disconnect, device number 2 [ 75.221557][ T30] audit: type=1400 audit(1764404957.432:168): avc: denied { read write } for pid=6064 comm="syz.2.35" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 75.249462][ T30] audit: type=1400 audit(1764404957.432:169): avc: denied { open } for pid=6064 comm="syz.2.35" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 75.337559][ T30] audit: type=1400 audit(1764404957.542:170): avc: denied { create } for pid=6069 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 75.435441][ T30] audit: type=1400 audit(1764404957.622:171): avc: denied { read write } for pid=6064 comm="syz.2.35" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 76.446481][ T9] cfg80211: failed to load regulatory.db [ 76.782640][ T30] audit: type=1400 audit(1764404957.622:172): avc: denied { open } for pid=6064 comm="syz.2.35" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 76.874971][ T6079] netlink: 'syz.3.39': attribute type 13 has an invalid length. [ 76.896651][ T6078] overlayfs: missing 'workdir' [ 77.000972][ T6079] gretap0: refused to change device tx_queue_len [ 77.309379][ T6079] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.687383][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 77.687398][ T30] audit: type=1400 audit(1764404959.892:182): avc: denied { write } for pid=6069 comm="syz.1.37" path="socket:[8983]" dev="sockfs" ino=8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 77.888151][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'. [ 78.121498][ T30] audit: type=1400 audit(1764404960.332:183): avc: denied { map } for pid=6088 comm="syz.0.41" path="socket:[8162]" dev="sockfs" ino=8162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.526891][ T30] audit: type=1400 audit(1764404960.332:184): avc: denied { read } for pid=6088 comm="syz.0.41" path="socket:[8162]" dev="sockfs" ino=8162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.613217][ T30] audit: type=1400 audit(1764404960.332:185): avc: denied { name_bind } for pid=6088 comm="syz.0.41" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 78.656722][ T6099] netlink: 152 bytes leftover after parsing attributes in process `syz.3.45'. [ 78.788743][ T30] audit: type=1400 audit(1764404960.332:186): avc: denied { node_bind } for pid=6088 comm="syz.0.41" saddr=::ffff:172.20.20.187 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 78.832734][ T6095] loop6: detected capacity change from 0 to 524287487 [ 78.842624][ T6095] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.851994][ T6095] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.860389][ T6095] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.868323][ T6095] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.876213][ T6095] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.884097][ T6095] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.891960][ T6095] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.899823][ T6095] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.907646][ T6095] ldm_validate_partition_table(): Disk read failed. [ 78.914273][ T6095] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.922128][ T6095] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.930034][ T6095] Dev loop6: unable to read RDB block 0 [ 78.935763][ T6095] loop6: unable to read partition table [ 78.941488][ T6095] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 79.052269][ T30] audit: type=1400 audit(1764404960.722:187): avc: denied { read } for pid=6092 comm="syz.4.44" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.074859][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.102015][ T6107] tmpfs: Bad value for 'mpol' [ 79.169403][ T30] audit: type=1400 audit(1764404960.762:188): avc: denied { open } for pid=6092 comm="syz.4.44" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 80.297892][ T30] audit: type=1400 audit(1764404960.762:189): avc: denied { ioctl } for pid=6092 comm="syz.4.44" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 80.679002][ T6126] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 80.688643][ T6126] SELinux: failed to load policy [ 81.196053][ T30] audit: type=1400 audit(1764404960.792:190): avc: denied { append } for pid=6092 comm="syz.4.44" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.756210][ T30] audit: type=1400 audit(1764404960.862:191): avc: denied { write } for pid=6098 comm="syz.3.45" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.789221][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 82.789236][ T30] audit: type=1400 audit(1764404964.992:205): avc: denied { setopt } for pid=6147 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.340339][ T30] audit: type=1400 audit(1764404965.542:206): avc: denied { mount } for pid=6152 comm="syz.1.58" name="/" dev="pstore" ino=4348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 83.373406][ T5934] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.612064][ T30] audit: type=1400 audit(1764404965.552:207): avc: denied { mount } for pid=6152 comm="syz.1.58" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.637151][ T30] audit: type=1400 audit(1764404965.552:208): avc: denied { setattr } for pid=6152 comm="syz.1.58" name="[userfaultfd]" dev="anon_inodefs" ino=10341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.660694][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.678364][ T30] audit: type=1400 audit(1764404965.882:209): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.774334][ T5934] usb 3-1: Using ep0 maxpacket: 32 [ 83.820245][ T5934] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 83.831172][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.878034][ T30] audit: type=1400 audit(1764404966.083:210): avc: denied { read } for pid=6159 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.923773][ T5934] usb 3-1: config 0 has no interface number 0 [ 83.936983][ T5934] usb 3-1: config 0 interface 89 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 83.975161][ T5934] usb 3-1: config 0 interface 89 has no altsetting 0 [ 83.999040][ T5934] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 84.008421][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.016537][ T5934] usb 3-1: Product: syz [ 84.032745][ T5934] usb 3-1: Manufacturer: syz [ 84.050078][ T5934] usb 3-1: SerialNumber: syz [ 84.149824][ T30] audit: type=1400 audit(1764404966.353:211): avc: denied { create } for pid=6163 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.190535][ T5934] usb 3-1: config 0 descriptor?? [ 84.212432][ T5934] hub 3-1:0.89: bad descriptor, ignoring hub [ 84.613239][ T30] audit: type=1400 audit(1764404966.623:212): avc: denied { setattr } for pid=6153 comm="syz.2.59" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.614927][ T5934] hub 3-1:0.89: probe with driver hub failed with error -5 [ 84.650541][ T5934] option 3-1:0.89: GSM modem (1-port) converter detected [ 84.720095][ T5869] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.989684][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 84.996862][ T5869] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 85.008200][ T30] audit: type=1400 audit(1764404967.203:213): avc: denied { call } for pid=6171 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 85.029547][ T5869] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 85.042855][ T5869] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.055017][ T5869] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 85.445127][ T5869] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 85.454601][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.464581][ T5869] usb 1-1: Product: syz [ 85.469053][ T5869] usb 1-1: Manufacturer: syz [ 85.475446][ T5869] usb 1-1: SerialNumber: syz [ 86.014828][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 86.156266][ T5869] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input5 [ 86.318954][ T5869] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 86.328959][ T5883] usb 3-1: USB disconnect, device number 3 [ 86.347279][ T30] audit: type=1400 audit(1764404968.554:214): avc: denied { read } for pid=5171 comm="acpid" name="mouse1" dev="devtmpfs" ino=2802 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.373468][ T5883] option 3-1:0.89: device disconnected [ 86.413013][ T5869] (id 0x00) [ 87.214258][ T6192] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 87.224601][ T6192] SELinux: failed to load policy [ 87.596670][ T5869] rc_core: IR keymap rc-imon-pad not found [ 87.603084][ T5869] Registered IR keymap rc-empty [ 87.608685][ T5869] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 87.619356][ T5869] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 87.630470][ T5869] imon:send_packet: packet tx failed (-71) [ 87.648193][ T5869] imon 1-1:155.0: remote input dev register failed [ 87.654818][ T5869] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 87.795615][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 87.795631][ T30] audit: type=1400 audit(1764404970.005:222): avc: denied { ioctl } for pid=6163 comm="syz.0.62" path="/dev/sg0" dev="devtmpfs" ino=768 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.874741][ T6195] binder: 6177:6195 ioctl c0306201 0 returned -14 [ 87.882366][ T6195] binder: 6177:6195 ioctl c0306201 0 returned -14 [ 87.930611][ T30] audit: type=1400 audit(1764404970.075:223): avc: denied { create } for pid=6163 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.031337][ T30] audit: type=1400 audit(1764404970.115:224): avc: denied { bind } for pid=6163 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.051336][ T30] audit: type=1400 audit(1764404970.115:225): avc: denied { write } for pid=6163 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.084072][ T5869] imon 1-1:155.0: unable to initialize intf0, err 0 [ 88.780075][ T6206] SELinux: policydb version -2147418091 does not match my version range 15-35 [ 88.791210][ T6206] SELinux: failed to load policy [ 88.811015][ T30] audit: type=1400 audit(1764404971.015:226): avc: denied { read write } for pid=6201 comm="syz.3.72" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 88.811057][ T30] audit: type=1400 audit(1764404971.015:227): avc: denied { open } for pid=6201 comm="syz.3.72" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 88.811093][ T30] audit: type=1400 audit(1764404971.025:228): avc: denied { ioctl } for pid=6201 comm="syz.3.72" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 88.813783][ T5869] imon:imon_probe: failed to initialize context! [ 88.813796][ T5869] imon 1-1:155.0: unable to register, err -19 [ 88.817148][ T5869] usb 1-1: USB disconnect, device number 3 [ 89.047400][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.320058][ T6216] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 89.337896][ T6216] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 90.246112][ T30] audit: type=1400 audit(1764404972.136:229): avc: denied { create } for pid=6218 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 90.296831][ T48] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.452161][ T5934] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.605972][ T30] audit: type=1400 audit(1764404972.796:230): avc: denied { bind } for pid=6233 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.625973][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.666048][ T48] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 90.701797][ T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.743629][ T48] usb 4-1: config 0 has no interfaces? [ 90.750387][ T48] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 90.764091][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 90.785524][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.807493][ T5934] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 90.819409][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.827566][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.847988][ T5934] usb 2-1: Product: syz [ 90.852134][ T5934] usb 2-1: Manufacturer: syz [ 90.861887][ T48] usb 4-1: config 0 descriptor?? [ 90.867339][ T5934] usb 2-1: SerialNumber: syz [ 90.879838][ T5934] usb 2-1: config 0 descriptor?? [ 90.947469][ T30] audit: type=1400 audit(1764404973.156:231): avc: denied { bind } for pid=6237 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.990330][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.007967][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 91.018389][ T5929] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.073159][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.085566][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 91.096702][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 91.139953][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 91.157029][ T48] usb 4-1: USB disconnect, device number 3 [ 91.167813][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.226543][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 91.232923][ T5929] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 91.281437][ T9] usb 1-1: Product: syz [ 91.297636][ T9] usb 1-1: Manufacturer: syz [ 91.306162][ T5929] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 91.366329][ T5929] usb 5-1: can't read configurations, error -61 [ 91.382634][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 91.393584][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 91.473594][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 91.497615][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 91.546357][ T5929] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.601715][ T9] usb 1-1: USB disconnect, device number 4 [ 91.706136][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 91.717905][ T5929] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 91.730876][ T5929] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 91.745520][ T5929] usb 5-1: can't read configurations, error -61 [ 91.757158][ T5929] usb usb5-port1: attempt power cycle [ 91.779289][ T6244] netlink: 'syz.3.85': attribute type 13 has an invalid length. [ 91.789116][ T6244] gretap0: refused to change device tx_queue_len [ 91.795778][ T6244] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 91.904546][ T6247] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 91.915431][ T6247] overlayfs: missing 'lowerdir' [ 92.096639][ T5929] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.126347][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 92.135841][ T5929] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 92.154912][ T5929] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 92.178093][ T5929] usb 5-1: can't read configurations, error -61 [ 92.574106][ T5929] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.703623][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 92.714929][ T5929] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 92.768228][ T5929] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 92.776489][ T5929] usb 5-1: can't read configurations, error -61 [ 92.789711][ T5929] usb usb5-port1: unable to enumerate USB device [ 93.063390][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 93.063405][ T30] audit: type=1400 audit(1764404975.227:235): avc: denied { append } for pid=6258 comm="syz.2.89" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.092628][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.111795][ T6263] xt_connbytes: Forcing CT accounting to be enabled [ 93.123921][ T6263] Cannot find del_set index 1 as target [ 93.130676][ T5929] usb 2-1: USB disconnect, device number 3 [ 93.229368][ T30] audit: type=1400 audit(1764404975.367:236): avc: denied { write } for pid=6258 comm="syz.2.89" path="socket:[10773]" dev="sockfs" ino=10773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.358063][ T6269] Cannot find add_set index 0 as target [ 93.407609][ T30] audit: type=1400 audit(1764404975.567:237): avc: denied { create } for pid=6268 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.543913][ T30] audit: type=1400 audit(1764404975.567:238): avc: denied { getopt } for pid=6268 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.652037][ T6274] netlink: 76 bytes leftover after parsing attributes in process `syz.0.92'. [ 95.723938][ T6296] SELinux: policydb version -2147418091 does not match my version range 15-35 [ 95.733372][ T6296] SELinux: failed to load policy [ 96.269851][ T6295] netlink: 68 bytes leftover after parsing attributes in process `syz.2.100'. [ 96.329157][ T30] audit: type=1400 audit(1764404978.479:239): avc: denied { nlmsg_write } for pid=6292 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.882440][ T30] audit: type=1400 audit(1764404978.739:240): avc: denied { write } for pid=6271 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 96.901853][ T30] audit: type=1400 audit(1764404978.809:241): avc: denied { sqpoll } for pid=6271 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 97.170799][ T6307] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 97.405080][ T30] audit: type=1400 audit(1764404979.609:242): avc: denied { ioctl } for pid=6310 comm="syz.1.105" path="socket:[9839]" dev="sockfs" ino=9839 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.789013][ T30] audit: type=1400 audit(1764404980.000:243): avc: denied { sys_module } for pid=6310 comm="syz.1.105" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 98.074371][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.927129][ T30] audit: type=1400 audit(1764404981.140:244): avc: denied { create } for pid=6310 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.973168][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 98.984158][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.017450][ T30] audit: type=1400 audit(1764404981.160:245): avc: denied { getopt } for pid=6310 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.042623][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 99.066297][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.082410][ T30] audit: type=1400 audit(1764404981.180:246): avc: denied { ioctl } for pid=6310 comm="syz.1.105" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9861 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.137193][ T9] usb 5-1: config 0 descriptor?? [ 99.412807][ T5869] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.717667][ T9] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 99.731556][ T5869] usb 2-1: device descriptor read/64, error -71 [ 99.753113][ T30] audit: type=1400 audit(1764404981.971:247): avc: denied { write } for pid=6348 comm="syz.0.115" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 99.777392][ T6352] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 100.084050][ T889] usb 5-1: USB disconnect, device number 6 [ 100.162645][ T5869] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.302316][ T5869] usb 2-1: device descriptor read/64, error -71 [ 100.433677][ T5869] usb usb2-port1: attempt power cycle [ 100.764559][ T30] audit: type=1400 audit(1764404982.971:248): avc: denied { write } for pid=6362 comm="syz.4.119" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.803489][ T30] audit: type=1400 audit(1764404982.971:249): avc: denied { open } for pid=6362 comm="syz.4.119" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.882614][ T30] audit: type=1400 audit(1764404982.981:250): avc: denied { ioctl } for pid=6362 comm="syz.4.119" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 102.120359][ T30] audit: type=1400 audit(1764404984.332:251): avc: denied { create } for pid=6386 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.167275][ T30] audit: type=1400 audit(1764404984.382:252): avc: denied { setopt } for pid=6386 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.197461][ T30] audit: type=1400 audit(1764404984.382:253): avc: denied { read } for pid=6386 comm="syz.0.126" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 102.332412][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.386148][ T6394] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.482569][ T9] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 102.492401][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.509191][ T9] usb 2-1: config 0 has no interfaces? [ 102.532341][ T9] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 102.718472][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 102.845604][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.874070][ T9] usb 2-1: config 0 descriptor?? [ 102.893083][ T6403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.111272][ T889] usb 2-1: USB disconnect, device number 7 [ 103.241332][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.499912][ T6421] xt_SECMARK: invalid security context 'unconfined' [ 103.570184][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 103.592935][ T9] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 103.607075][ T9] usb 4-1: config 0 has no interface number 0 [ 103.613581][ T9] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.710518][ T9] usb 4-1: config 0 interface 85 has no altsetting 0 [ 103.731847][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 103.748581][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.760806][ T6426] netlink: 68 bytes leftover after parsing attributes in process `syz.0.136'. [ 103.820556][ T9] usb 4-1: Product: syz [ 103.824922][ T9] usb 4-1: Manufacturer: syz [ 103.830176][ T9] usb 4-1: SerialNumber: syz [ 103.851370][ T9] usb 4-1: config 0 descriptor?? [ 104.340366][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.481976][ T6409] syz.3.133 uses obsolete (PF_INET,SOCK_PACKET) [ 104.500242][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 104.509552][ T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 104.524937][ T24] usb 5-1: config 179 has no interface number 0 [ 104.533250][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 104.567209][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 104.653090][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 104.660748][ T9] appletouch 4-1:0.85: Geyser mode initialized. [ 104.706004][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 104.733949][ T9] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input7 [ 104.774030][ T24] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 104.814489][ T24] usb 5-1: config 179 interface 65 has no altsetting 0 [ 104.836307][ T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 104.865801][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.930402][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input8 [ 105.009645][ T5171] input input8: unable to receive magic message: -110 [ 105.036324][ T5171] input input8: unable to receive magic message: -32 [ 105.073064][ T5171] input input8: unable to receive magic message: -32 [ 105.121447][ T5171] input input8: unable to receive magic message: -32 [ 105.282150][ T5171] input input8: unable to receive magic message: -32 [ 105.308732][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 105.308748][ T30] audit: type=1400 audit(1764404987.523:260): avc: denied { read } for pid=6430 comm="syz.4.138" name="event4" dev="devtmpfs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.416629][ T30] audit: type=1400 audit(1764404987.633:261): avc: denied { connect } for pid=6430 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 105.453817][ T24] usb 4-1: USB disconnect, device number 4 [ 105.453834][ C0] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 105.589736][ T6450] netlink: 'syz.2.141': attribute type 13 has an invalid length. [ 105.613125][ T30] audit: type=1400 audit(1764404987.633:262): avc: denied { ioctl } for pid=6430 comm="syz.4.138" path="socket:[10077]" dev="sockfs" ino=10077 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 105.711941][ T6450] gretap0: refused to change device tx_queue_len [ 105.713507][ T9] usb 5-1: USB disconnect, device number 7 [ 105.718394][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 105.760118][ T6450] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 105.783534][ T24] appletouch 4-1:0.85: input: appletouch disconnected [ 106.059608][ T889] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 106.329280][ T889] usb 2-1: Using ep0 maxpacket: 32 [ 106.337393][ T889] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 106.356398][ T889] usb 2-1: config 0 has no interface number 0 [ 106.364585][ T889] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 106.834157][ T889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.843567][ T889] usb 2-1: Product: syz [ 106.848166][ T889] usb 2-1: Manufacturer: syz [ 106.853785][ T889] usb 2-1: SerialNumber: syz [ 106.889941][ T889] usb 2-1: config 0 descriptor?? [ 106.906563][ T889] smsc95xx v2.0.0 [ 107.613707][ T6474] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 107.673078][ T889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 107.697581][ T889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 107.764395][ T6478] Mount JFS Failure: -22 [ 107.768871][ T6478] jfs_mount failed w/return code = -22 [ 107.878766][ T30] audit: type=1400 audit(1764404990.095:263): avc: denied { map } for pid=6483 comm="syz.2.150" path="/dev/dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.968573][ T30] audit: type=1400 audit(1764404990.105:264): avc: denied { write } for pid=6483 comm="syz.2.150" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 108.074256][ T889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 108.087060][ T889] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 108.220744][ T889] usb 2-1: USB disconnect, device number 8 [ 108.283872][ T6491] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 108.987408][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.505658][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.521464][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 109.584676][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.608828][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.795720][ T9] usb 4-1: config 0 descriptor?? [ 111.514480][ T30] audit: type=1400 audit(1764404993.736:265): avc: denied { create } for pid=6534 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.039339][ T9] usb 4-1: USB disconnect, device number 5 [ 112.428276][ T30] audit: type=1400 audit(1764404994.657:266): avc: denied { create } for pid=6547 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 113.601018][ T6561] can: request_module (can-proto-0) failed. [ 115.195903][ T30] audit: type=1400 audit(1764404997.418:267): avc: denied { kexec_image_load } for pid=6580 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 115.714619][ T30] audit: type=1400 audit(1764404997.938:268): avc: denied { create } for pid=6586 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 115.866586][ T6596] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 3, id = 0 [ 115.898436][ T30] audit: type=1400 audit(1764404997.938:269): avc: denied { ioctl } for pid=6586 comm="syz.4.177" path="socket:[11657]" dev="sockfs" ino=11657 ioctlcmd=0x61d8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 116.354723][ T6615] xt_SECMARK: invalid security context 'unconfined' [ 116.399888][ T6586] mpoa:mpoad_close: () going down [ 116.406385][ T30] audit: type=1400 audit(1764404998.619:270): avc: denied { execute } for pid=6609 comm="syz.1.183" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.461885][ T30] audit: type=1400 audit(1764404998.649:271): avc: denied { execute_no_trans } for pid=6609 comm="syz.1.183" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.503726][ T2147] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.713530][ T2147] usb 1-1: Using ep0 maxpacket: 8 [ 116.722309][ T2147] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 116.734007][ T2147] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 116.742169][ T2147] usb 1-1: Product: syz [ 116.747688][ T2147] usb 1-1: Manufacturer: syz [ 116.752388][ T2147] usb 1-1: SerialNumber: syz [ 116.777806][ T2147] usb 1-1: config 0 descriptor?? [ 117.108297][ T6618] CIFS: iocharset name too long [ 117.252191][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 117.533849][ T6608] virtio-fs: tag not found [ 118.084640][ T30] audit: type=1400 audit(1764405000.280:272): avc: denied { execute } for pid=6623 comm="syz.1.186" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 118.153792][ T5929] usb 1-1: USB disconnect, device number 5 [ 118.394881][ T30] audit: type=1400 audit(1764405000.610:273): avc: denied { search } for pid=6628 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.517018][ T30] audit: type=1400 audit(1764405000.610:274): avc: denied { search } for pid=6628 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.550050][ T6624] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.793096][ T6624] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 118.925640][ T6624] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.936290][ T30] audit: type=1400 audit(1764405000.610:275): avc: denied { search } for pid=6628 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.973891][ T6624] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 119.072551][ T30] audit: type=1400 audit(1764405000.610:276): avc: denied { search } for pid=6628 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.113345][ T30] audit: type=1400 audit(1764405000.680:277): avc: denied { read open } for pid=6638 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.236040][ T30] audit: type=1400 audit(1764405000.680:278): avc: denied { getattr } for pid=6638 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.261512][ T30] audit: type=1400 audit(1764405000.680:279): avc: denied { getattr } for pid=6638 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 119.346501][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.194'. [ 119.426013][ T6661] SELinux: policydb version -2147418091 does not match my version range 15-35 [ 119.435298][ T6661] SELinux: failed to load policy [ 119.805463][ T6624] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.811383][ T6624] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 119.813829][ T30] audit: type=1400 audit(1764405001.220:280): avc: denied { read } for pid=6645 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 119.863023][ T6624] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.871965][ T6624] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 119.879848][ T30] audit: type=1400 audit(1764405001.220:281): avc: denied { open } for pid=6645 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 119.938856][ T6624] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 120.118048][ T6668] ip6t_rpfilter: unknown options [ 120.830661][ T6624] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 120.909868][ T6672] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 121.162114][ T6678] netlink: 9 bytes leftover after parsing attributes in process `syz.2.198'. [ 121.200625][ T6679] netlink: 5 bytes leftover after parsing attributes in process `syz.2.198'. [ 121.506526][ T6684] netlink: 'syz.3.199': attribute type 10 has an invalid length. [ 121.516472][ T6684] netlink: 40 bytes leftover after parsing attributes in process `syz.3.199'. [ 121.527851][ T6678] gretap0: entered promiscuous mode [ 121.596759][ T6679] 0ªî{X¹¦: renamed from gretap0 [ 121.599693][ T6688] Cannot find del_set index 1 as target [ 121.610312][ T6678] netlink: 9 bytes leftover after parsing attributes in process `syz.2.198'. [ 121.626902][ T6679] 0ªî{X¹¦: left promiscuous mode [ 121.632351][ T6679] 0ªî{X¹¦: entered allmulticast mode [ 121.648745][ T6679] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 121.669862][ T6679] netlink: 5 bytes leftover after parsing attributes in process `syz.2.198'. [ 121.695732][ T6684] team0: entered promiscuous mode [ 121.721648][ T6684] team_slave_0: entered promiscuous mode [ 121.727820][ T6684] team_slave_1: entered promiscuous mode [ 121.738707][ T6684] team0: entered allmulticast mode [ 121.745268][ T6684] team_slave_0: entered allmulticast mode [ 121.752046][ T6684] team_slave_1: entered allmulticast mode [ 121.762345][ T6684] bridge0: port 3(team0) entered blocking state [ 121.769386][ T6684] bridge0: port 3(team0) entered disabled state [ 121.791968][ T6684] bridge0: port 3(team0) entered blocking state [ 121.798480][ T6684] bridge0: port 3(team0) entered forwarding state [ 121.824066][ T6678] 0ªî{X¹¦: entered promiscuous mode [ 121.829446][ T6678] 0ªî{X¹¦: left allmulticast mode [ 121.836589][ T6678] netlink: 9 bytes leftover after parsing attributes in process `syz.2.198'. [ 121.846711][ T6679] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 121.859738][ T6679] 1ªî{X¹¦: left promiscuous mode [ 121.865632][ T6679] 1ªî{X¹¦: entered allmulticast mode [ 121.880090][ T6679] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 121.919705][ T6679] netlink: 5 bytes leftover after parsing attributes in process `syz.2.198'. [ 122.007983][ T6678] 1ªî{X¹¦: entered promiscuous mode [ 122.016191][ T6678] 1ªî{X¹¦: left allmulticast mode [ 122.025055][ T6692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.202'. [ 122.037183][ T6679] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 122.093041][ T6679] 0ªî{X¹¦: left promiscuous mode [ 122.098230][ T6679] 0ªî{X¹¦: entered allmulticast mode [ 122.109854][ T6679] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 125.866865][ T6736] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 126.406697][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 127.110512][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 127.110527][ T30] audit: type=1400 audit(1764405009.344:297): avc: denied { write } for pid=6758 comm="syz.3.215" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.348325][ T5869] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.582245][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.621795][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.653551][ T5869] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 127.678754][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.721069][ T5869] usb 4-1: config 0 descriptor?? [ 128.040624][ T6770] /dev/nullb0: Can't open blockdev [ 128.279456][ T5869] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 128.329765][ T5869] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input9 [ 128.591370][ T5869] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 129.006382][ T6786] binder: 6778:6786 ioctl c0306201 0 returned -14 [ 129.041677][ T6786] binder: 6778:6786 ioctl c0306201 0 returned -14 [ 130.361932][ T889] usb 4-1: USB disconnect, device number 6 [ 130.839110][ T6817] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 131.132770][ T6819] warning: `syz.1.221' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.427089][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.433399][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.679807][ T6840] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 133.657304][ T30] audit: type=1400 audit(1764405015.817:298): avc: denied { accept } for pid=6828 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 134.326166][ T6849] SELinux: policydb version -2147418091 does not match my version range 15-35 [ 134.335735][ T6849] SELinux: failed to load policy [ 135.072467][ T6854] Mount JFS Failure: -22 [ 135.076956][ T6854] jfs_mount failed w/return code = -22 [ 135.476810][ T30] audit: type=1400 audit(1764405017.718:299): avc: denied { name_bind } for pid=6868 comm="syz.3.232" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 136.245044][ T889] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 136.406065][ T889] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 136.416702][ T889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.468537][ T5940] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 136.506683][ T889] usb 5-1: config 0 has no interfaces? [ 136.526900][ T889] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 136.549742][ T889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.572392][ T889] usb 5-1: config 0 descriptor?? [ 136.666156][ T5940] usb 4-1: Using ep0 maxpacket: 16 [ 136.686326][ T5940] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 136.697947][ T5940] usb 4-1: config 0 has no interface number 0 [ 136.718193][ T5940] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.737626][ T5940] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 136.747398][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 136.756049][ T5940] usb 4-1: Product: syz [ 136.760321][ T5940] usb 4-1: SerialNumber: syz [ 136.770872][ T5940] usb 4-1: config 0 descriptor?? [ 136.773509][ T5822] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 136.779685][ T5940] cm109 4-1:0.8: invalid payload size 208, expected 4 [ 136.792997][ T5940] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input10 [ 136.909184][ T5940] usb 5-1: USB disconnect, device number 8 [ 136.930449][ T5822] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 136.955357][ T5822] usb 2-1: config 1 has no interface number 0 [ 136.962017][ T5822] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 137.007414][ T5822] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 137.027627][ T5822] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 137.057995][ T5822] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.111639][ T5822] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 137.131078][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.149338][ T5822] usb 2-1: Product: syz [ 137.156655][ T5822] usb 2-1: Manufacturer: syz [ 137.161501][ T5822] usb 2-1: SerialNumber: syz [ 137.172724][ T6893] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 137.182339][ T6893] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 137.623653][ T30] audit: type=1400 audit(1764405019.839:300): avc: denied { write } for pid=6891 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.813713][ T6921] xt_SECMARK: invalid security context 'unconfined' [ 138.154450][ T6920] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 138.154667][ T6920] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 138.437298][ T6927] /dev/nullb0: Can't open blockdev [ 138.693918][ T5822] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 138.904087][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 138.904116][ C1] ------------[ cut here ]------------ [ 138.904165][ C1] URB ffff88814d5dbb00 submitted while active [ 138.904726][ C1] WARNING: CPU: 1 PID: 6868 at drivers/usb/core/urb.c:380 usb_submit_urb+0x16f5/0x1990 [ 138.904767][ C1] Modules linked in: [ 138.904809][ C1] CPU: 1 UID: 0 PID: 6868 Comm: syz.3.232 Not tainted syzkaller #0 PREEMPT(full) [ 138.904834][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.904847][ C1] RIP: 0010:usb_submit_urb+0x16f5/0x1990 [ 138.904873][ C1] Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 c3 00 b5 fa c6 05 5e c2 62 09 01 90 48 c7 c7 a0 15 50 8c 48 89 de e8 0c 34 73 fa 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24 [ 138.904892][ C1] RSP: 0018:ffffc90000a08a90 EFLAGS: 00010082 [ 138.904910][ C1] RAX: 0000000000000000 RBX: ffff88814d5dbb00 RCX: ffffc900023f1000 [ 138.904925][ C1] RDX: 0000000000040000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 138.904940][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 138.904952][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 138.904964][ C1] R13: ffff8880282ca057 R14: ffff88807519cb60 R15: 000000000000000f [ 138.904978][ C1] FS: 0000555585081500(0000) GS:ffff888124b05000(0000) knlGS:0000000000000000 [ 138.904999][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.905014][ C1] CR2: 0000000000000000 CR3: 0000000032fa3000 CR4: 00000000003526f0 [ 138.905027][ C1] Call Trace: [ 138.905034][ C1] [ 138.905043][ C1] ? find_held_lock+0x2b/0x80 [ 138.905072][ C1] ? __pfx____ratelimit+0x10/0x10 [ 138.905108][ C1] cm109_urb_irq_callback+0x2ed/0xb80 [ 138.905146][ C1] __usb_hcd_giveback_urb+0x38b/0x610 [ 138.905181][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 138.905217][ C1] dummy_timer+0x1809/0x3a00 [ 138.905244][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 138.905271][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 138.905306][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 138.905335][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 138.905367][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 138.905398][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 138.905420][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 138.905443][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 138.905463][ C1] ? mark_held_locks+0x49/0x80 [ 138.905483][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 138.905517][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 138.905538][ C1] __hrtimer_run_queues+0x202/0xad0 [ 138.905574][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 138.905600][ C1] ? read_tsc+0x9/0x20 [ 138.905635][ C1] hrtimer_run_softirq+0x17d/0x350 [ 138.905663][ C1] handle_softirqs+0x219/0x8e0 [ 138.905695][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 138.905735][ C1] __irq_exit_rcu+0x109/0x170 [ 138.905761][ C1] irq_exit_rcu+0x9/0x30 [ 138.905787][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 138.905821][ C1] [ 138.905829][ C1] [ 138.905838][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 138.905864][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 138.905899][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 28 35 f6 48 89 df e8 0e 7c 35 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 35 84 25 f6 65 8b 05 7e 15 3e 08 85 c0 74 16 5b [ 138.905918][ C1] RSP: 0018:ffffc9000ff9fbe0 EFLAGS: 00000246 [ 138.905936][ C1] RAX: 0000000000000002 RBX: ffff8881447f0000 RCX: 0000000000000006 [ 138.905951][ C1] RDX: 0000000000000000 RSI: ffffffff8da2c9e6 RDI: ffffffff8bf073c0 [ 138.905965][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 138.905977][ C1] R10: ffffffff90821bd7 R11: 0000000000000001 R12: ffff8881447f0000 [ 138.905992][ C1] R13: ffff888029225408 R14: 0000000000000000 R15: 00000000a6c58000 [ 138.906022][ C1] dummy_pullup+0x200/0x270 [ 138.906046][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 138.906067][ C1] usb_gadget_disconnect_locked+0x142/0x4e0 [ 138.906095][ C1] gadget_unbind_driver+0xdd/0x4f0 [ 138.906120][ C1] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 138.906143][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 138.906169][ C1] device_remove+0xcb/0x170 [ 138.906191][ C1] device_release_driver_internal+0x44b/0x620 [ 138.906221][ C1] driver_detach+0xd8/0x1b0 [ 138.906245][ C1] ? __pfx_raw_release+0x10/0x10 [ 138.906268][ C1] bus_remove_driver+0x13b/0x2c0 [ 138.906303][ C1] driver_unregister+0x76/0xb0 [ 138.906327][ C1] usb_gadget_unregister_driver+0x49/0x70 [ 138.906348][ C1] raw_release+0x1ae/0x2b0 [ 138.906373][ C1] __fput+0x402/0xb70 [ 138.906407][ C1] task_work_run+0x150/0x240 [ 138.906433][ C1] ? __pfx_task_work_run+0x10/0x10 [ 138.906457][ C1] ? __pfx___do_sys_close_range+0x10/0x10 [ 138.906486][ C1] exit_to_user_mode_loop+0xec/0x130 [ 138.906512][ C1] do_syscall_64+0x426/0xfa0 [ 138.906535][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.906557][ C1] RIP: 0033:0x7f7fd498f749 [ 138.906581][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.906601][ C1] RSP: 002b:00007ffcebb4f798 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 138.906620][ C1] RAX: 0000000000000000 RBX: 0000000000021131 RCX: 00007f7fd498f749 [ 138.906634][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 138.906647][ C1] RBP: 00007f7fd4be7da0 R08: 0000000000000001 R09: 0000001cebb4fa8f [ 138.906662][ C1] R10: 0000001b2ef20000 R11: 0000000000000246 R12: 00007f7fd4be5fac [ 138.906675][ C1] R13: 00007f7fd4be5fa0 R14: ffffffffffffffff R15: 00007ffcebb4f8b0 [ 138.906706][ C1] [ 138.906717][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.906743][ C1] CPU: 1 UID: 0 PID: 6868 Comm: syz.3.232 Not tainted syzkaller #0 PREEMPT(full) [ 138.906769][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.906782][ C1] Call Trace: [ 138.906790][ C1] [ 138.906798][ C1] dump_stack_lvl+0x3d/0x1f0 [ 138.906821][ C1] vpanic+0x640/0x6f0 [ 138.906854][ C1] ? usb_submit_urb+0x16f5/0x1990 [ 138.906877][ C1] panic+0xca/0xd0 [ 138.906906][ C1] ? __pfx_panic+0x10/0x10 [ 138.906950][ C1] check_panic_on_warn+0xab/0xb0 [ 138.906972][ C1] __warn+0xf6/0x3c0 [ 138.906989][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 138.907015][ C1] ? usb_submit_urb+0x16f5/0x1990 [ 138.907040][ C1] report_bug+0x3c3/0x580 [ 138.907072][ C1] ? usb_submit_urb+0x16f5/0x1990 [ 138.907096][ C1] handle_bug+0x184/0x210 [ 138.907120][ C1] exc_invalid_op+0x17/0x50 [ 138.907145][ C1] asm_exc_invalid_op+0x1a/0x20 [ 138.907164][ C1] RIP: 0010:usb_submit_urb+0x16f5/0x1990 [ 138.907188][ C1] Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 c3 00 b5 fa c6 05 5e c2 62 09 01 90 48 c7 c7 a0 15 50 8c 48 89 de e8 0c 34 73 fa 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24 [ 138.907208][ C1] RSP: 0018:ffffc90000a08a90 EFLAGS: 00010082 [ 138.907226][ C1] RAX: 0000000000000000 RBX: ffff88814d5dbb00 RCX: ffffc900023f1000 [ 138.907240][ C1] RDX: 0000000000040000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 138.907254][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 138.907269][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 138.907282][ C1] R13: ffff8880282ca057 R14: ffff88807519cb60 R15: 000000000000000f [ 138.907303][ C1] ? __warn_printk+0x1a5/0x350 [ 138.907339][ C1] ? find_held_lock+0x2b/0x80 [ 138.907365][ C1] ? __pfx____ratelimit+0x10/0x10 [ 138.907400][ C1] cm109_urb_irq_callback+0x2ed/0xb80 [ 138.907435][ C1] __usb_hcd_giveback_urb+0x38b/0x610 [ 138.907471][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 138.907507][ C1] dummy_timer+0x1809/0x3a00 [ 138.907537][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 138.907564][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 138.907598][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 138.907626][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 138.907657][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 138.907685][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 138.907703][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 138.907725][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 138.907745][ C1] ? mark_held_locks+0x49/0x80 [ 138.907762][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 138.907793][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 138.907808][ C1] __hrtimer_run_queues+0x202/0xad0 [ 138.907825][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 138.907838][ C1] ? read_tsc+0x9/0x20 [ 138.907856][ C1] hrtimer_run_softirq+0x17d/0x350 [ 138.907880][ C1] handle_softirqs+0x219/0x8e0 [ 138.907909][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 138.907937][ C1] __irq_exit_rcu+0x109/0x170 [ 138.907953][ C1] irq_exit_rcu+0x9/0x30 [ 138.907967][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 138.907986][ C1] [ 138.907990][ C1] [ 138.907994][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 138.908006][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 138.908036][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 28 35 f6 48 89 df e8 0e 7c 35 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 35 84 25 f6 65 8b 05 7e 15 3e 08 85 c0 74 16 5b [ 138.908053][ C1] RSP: 0018:ffffc9000ff9fbe0 EFLAGS: 00000246 [ 138.908068][ C1] RAX: 0000000000000002 RBX: ffff8881447f0000 RCX: 0000000000000006 [ 138.908080][ C1] RDX: 0000000000000000 RSI: ffffffff8da2c9e6 RDI: ffffffff8bf073c0 [ 138.908091][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 138.908098][ C1] R10: ffffffff90821bd7 R11: 0000000000000001 R12: ffff8881447f0000 [ 138.908105][ C1] R13: ffff888029225408 R14: 0000000000000000 R15: 00000000a6c58000 [ 138.908119][ C1] dummy_pullup+0x200/0x270 [ 138.908132][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 138.908144][ C1] usb_gadget_disconnect_locked+0x142/0x4e0 [ 138.908164][ C1] gadget_unbind_driver+0xdd/0x4f0 [ 138.908187][ C1] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 138.908207][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 138.908230][ C1] device_remove+0xcb/0x170 [ 138.908242][ C1] device_release_driver_internal+0x44b/0x620 [ 138.908257][ C1] driver_detach+0xd8/0x1b0 [ 138.908270][ C1] ? __pfx_raw_release+0x10/0x10 [ 138.908282][ C1] bus_remove_driver+0x13b/0x2c0 [ 138.908314][ C1] driver_unregister+0x76/0xb0 [ 138.908335][ C1] usb_gadget_unregister_driver+0x49/0x70 [ 138.908357][ C1] raw_release+0x1ae/0x2b0 [ 138.908377][ C1] __fput+0x402/0xb70 [ 138.908407][ C1] task_work_run+0x150/0x240 [ 138.908421][ C1] ? __pfx_task_work_run+0x10/0x10 [ 138.908434][ C1] ? __pfx___do_sys_close_range+0x10/0x10 [ 138.908460][ C1] exit_to_user_mode_loop+0xec/0x130 [ 138.908483][ C1] do_syscall_64+0x426/0xfa0 [ 138.908503][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.908521][ C1] RIP: 0033:0x7f7fd498f749 [ 138.908531][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.908541][ C1] RSP: 002b:00007ffcebb4f798 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 138.908552][ C1] RAX: 0000000000000000 RBX: 0000000000021131 RCX: 00007f7fd498f749 [ 138.908559][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 138.908566][ C1] RBP: 00007f7fd4be7da0 R08: 0000000000000001 R09: 0000001cebb4fa8f [ 138.908573][ C1] R10: 0000001b2ef20000 R11: 0000000000000246 R12: 00007f7fd4be5fac [ 138.908580][ C1] R13: 00007f7fd4be5fa0 R14: ffffffffffffffff R15: 00007ffcebb4f8b0 [ 138.908605][ C1] [ 138.908885][ C1] Kernel Offset: disabled