last executing test programs: 26m0.307815086s ago: executing program 3 (id=147): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) 25m59.185348412s ago: executing program 3 (id=151): r0 = socket(0xa, 0x1, 0x0) fgetxattr(r0, &(0x7f00000000c0)=@known='security.apparmor\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, 0x0) capset(&(0x7f0000000200)={0x19980330, r1}, &(0x7f0000000300)={0x58be, 0x6, 0x9, 0x2, 0x6, 0x7}) r2 = socket$inet(0x2, 0x2000000080005, 0xffffffd2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(r2, &(0x7f0000004540), 0x0, 0x240080e4) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) capset(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000100), 0x4) socket$netlink(0x10, 0x3, 0x14) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 25m56.903713748s ago: executing program 3 (id=155): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000b00)=""/153, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4], 0x37) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x801) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) close(r4) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, r7, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10) syz_io_uring_setup(0x4173, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x18, 0x4007, @fd_index=0x2, 0x8, &(0x7f0000000a80)=[{&(0x7f0000000680)="be6bb4047afd5dbaf169f78e9e9f9bb83555b50e4417408bdd49f5824bc57d6ba07a28a5026a165d5647", 0x2a}, {0x0}, {&(0x7f0000000780)="68d1b9e44fea150d33c9f512110c19a46c745ff65315a12c201c22121782f4afc194a3ae8f84404496113165ba2c9547a5d5daca97ffc34964f2588bde8ad6269fa400de35657798411d76c69c4970e09f64934d098955f8bf3666f4e6e7f444e8a3264290cec3e6090e9b61e14633831d06285f", 0x74}, {&(0x7f0000000800)="27a0c7ce900fa0d1928c7ffdb0a0747ad05227032a5b110bed95d18fbe6f6639cb43ecc673bee8d2bc7fb29f00335627e9b937f9190db8f64a1bc22bf0bf79ebac3820b880e9b23ff2067a16c4458f78104bf8ad97285369fe04f7d2cf54e3d61acea70e301ec96f4b246cb2bed132d555d20fadd40c6c74caa67fb839efe5ca892549fc69b0f80e4b38bd8b14f6143fb097251c8b65add7b65b82da8da032b2aa15921ee0721b8d48f8b49e7ca4362167cd", 0xb2}, {&(0x7f00000016c0)="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", 0x9fe}, {&(0x7f0000000900)="ca012191b03946022dca7ff75546b4e8192aa1536535b52062624099603cf074b39a26ce758b5a755e0504ceaef7f6698ec921aee5787af4b9552014c53cbc44dfb4239084e820edbb6baa35db217b199fdabf729fd5f5694eb79211fbf624b858a95cee231f6e477c689be9c3bf074d879c00dc316e82e53c052c64f5ce25bd867bf86d279c1d3e08d240d6ab311f37ea05c9a6e59e8ea8bcad6b11", 0x9c}, {&(0x7f0000000a00)="778a9495744ccbde62a13d7c7c7aa1ec37f724120ff90fbac9612ad7101b03373361b80881bbdfe4ebb67528ea669ba2fe65b46e5a6f51491082611db2b45f6d07bc83c9709c8b9b9b2cdc7faa317dcdd1befc48cca3927fd059510bf7e86a42971a", 0x62}], 0x7, 0x11, 0x1, {0x2}}) sendmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)}], 0x1, 0x0, 0x0, 0xa4}, 0x0) 25m54.857214652s ago: executing program 3 (id=160): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000b00)=""/153, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4], 0x37) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x801) r6 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, r9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10) syz_io_uring_setup(0x4173, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x18, 0x4007, @fd_index=0x2, 0x8, &(0x7f0000000a80)=[{&(0x7f0000000680)="be6bb4047afd5dbaf169f78e9e9f9bb83555b50e4417408bdd49f5824bc57d6ba07a28a5026a165d5647", 0x2a}, {0x0}, {&(0x7f0000000780)="68d1b9e44fea150d33c9f512110c19a46c745ff65315a12c201c22121782f4afc194a3ae8f84404496113165ba2c9547a5d5daca97ffc34964f2588bde8ad6269fa400de35657798411d76c69c4970e09f64934d098955f8bf3666f4e6e7f444e8a3264290cec3e6090e9b61e14633831d06285f", 0x74}, {&(0x7f0000000800)="27a0c7ce900fa0d1928c7ffdb0a0747ad05227032a5b110bed95d18fbe6f6639cb43ecc673bee8d2bc7fb29f00335627e9b937f9190db8f64a1bc22bf0bf79ebac3820b880e9b23ff2067a16c4458f78104bf8ad97285369fe04f7d2cf54e3d61acea70e301ec96f4b246cb2bed132d555d20fadd40c6c74caa67fb839efe5ca892549fc69b0f80e4b38bd8b14f6143fb097251c8b65add7b65b82da8da032b2aa15921ee0721b8d48f8b49e7ca4362167cd", 0xb2}, {&(0x7f00000016c0)="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", 0x9fe}, {&(0x7f0000000900)="ca012191b03946022dca7ff75546b4e8192aa1536535b52062624099603cf074b39a26ce758b5a755e0504ceaef7f6698ec921aee5787af4b9552014c53cbc44dfb4239084e820edbb6baa35db217b199fdabf729fd5f5694eb79211fbf624b858a95cee231f6e477c689be9c3bf074d879c00dc316e82e53c052c64f5ce25bd867bf86d279c1d3e08d240d6ab311f37ea05c9a6e59e8ea8bcad6b11", 0x9c}, {&(0x7f0000000a00)="778a9495744ccbde62a13d7c7c7aa1ec37f724120ff90fbac9612ad7101b03373361b80881bbdfe4ebb67528ea669ba2fe65b46e5a6f51491082611db2b45f6d07bc83c9709c8b9b9b2cdc7faa317dcdd1befc48cca3927fd059510bf7e86a42971a", 0x62}], 0x7, 0x11, 0x1, {0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f00000002c0), &(0x7f0000000140)}, 0x20) sendmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)}], 0x1, 0x0, 0x0, 0xa4}, 0x0) 25m52.683460793s ago: executing program 3 (id=163): socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="02030009070000000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c17b674eb30b4a0d2a011a3990df497ca8bd23b3e17279688d8f992459603b2a84abbbb65153e8543c816a77919a1d42fb7c6c4d41e1209b4205f7f12c6297e89a583ead3fdd823d440432c27d079bc92931b3d5209432d575dc0428b834a273be9e30c9176ec078ae71b5f5cc5ff02053344a935313988148fb3286d7de3f6bbcbf2b1ce42d7cf49cebc74fc40d46a7e40a5ebfa06413877c7212937d592f82382e8f0a1db99f252cca9014934b87bf6a38dc63f6f4619ef8d03fcbd6066a9cd07dd834a9c043867f5fadbef0812bb2a80ede"], 0x38}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @random="6dac25077627", @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x1, 0x0, 0x1}}, {@can={0xc, {{0x0, 0x1}, 0x88, 0x0, 0x0, 0x0, "cba4c19143761426"}}}}, 0x0) readv(r3, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) 25m52.103217682s ago: executing program 3 (id=166): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, 0x0, 0x48000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') read$FUSE(r3, &(0x7f00000003c0)={0x2020}, 0x2020) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0xfffffffc, {"00000000000000000000000000000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x38) 25m36.964737902s ago: executing program 32 (id=166): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, 0x0, 0x48000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') read$FUSE(r3, &(0x7f00000003c0)={0x2020}, 0x2020) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0xfffffffc, {"00000000000000000000000000000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x38) 13m24.239569644s ago: executing program 0 (id=1803): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000003c0)={0x1, r3}) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000100)) syz_io_uring_setup(0x4b4f, &(0x7f0000000280)={0x0, 0x43a8, 0x2, 0x2, 0x20f}, &(0x7f0000000780), &(0x7f00000007c0)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="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", 0xb7f}], 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) io_uring_setup(0x1fe0, &(0x7f0000000000)={0x0, 0x896d, 0x40, 0x2}) r8 = syz_io_uring_setup(0x4a70, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x2, 0x354}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) keyctl$unlink(0x9, r0, r0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0xb, 0x0, r1, 0x0, &(0x7f0000000240)='./file0\x00', 0x20, 0x80, 0x23456}) io_uring_enter(r8, 0x6b4d, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x34, 0xf, 0x0) io_uring_enter(r8, 0x0, 0x2, 0x7, 0x0, 0x0) 13m20.258941347s ago: executing program 0 (id=1812): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 'batadv_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x44, @random="42bdde0c2b69", 'bond_slave_0\x00'}}) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000040)=""/176, 0xb0}, {0x0}], 0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000280)='keyring\x00', 0x0, &(0x7f00000001c0)='@\x9f+^\xbe-@(/[+\xca\x9f{\x00', 0xfffffffffffffffe) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60200, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 13m17.532657764s ago: executing program 0 (id=1817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r4 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) r5 = fanotify_init(0x8, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) fanotify_mark(r5, 0x61, 0x40001002, r6, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') read$msr(r8, &(0x7f0000000040)=""/59, 0xffb5) 13m15.289554641s ago: executing program 0 (id=1821): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0x7}) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000004180)={0x100, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x74, 0x5b, "36a27052fc709e51702d7673b0e41aa317a2c614bc36451727970e0670250baa155d5da83eed4f7b7b37a08dfe92e0f80b0c0a9fe745fc5a62828c0f78dcf77f094100bfaa20b69c85542b58d8360c5d57a62a58724dd98bb7af0bb252fe92bfcae7cbf10e6fc52df84767eb87acbea9"}, @NL80211_ATTR_FRAME_MATCH={0x30, 0x5b, "1cdb34be67e1545c71b65d8fc5e2f6d5352ab0728633c37dadb2a9a4e03be48aa70d90e24b071b3e0d21487c"}, @NL80211_ATTR_FRAME_MATCH={0x16, 0x5b, "d09a18565ccc86399efbf05bd171f2f87efb"}, @NL80211_ATTR_FRAME_MATCH={0x1a, 0x5b, "17ce0bcf500976f7f47e01fe97a6e6f543c9015b3191"}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x2}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, 0x0) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x80000]}}, 0x5c) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000140)=0xf, 0x4) readv(r4, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 13m14.299630375s ago: executing program 0 (id=1825): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000283afffe800000000000000000000000000000fe8000000000000000000000000000aa8900902c36a2680000000000000000000000000000000001ff02000000000000000000000000000165f7da1734fd893b47477ec704abc9232adb4afa9e8f2f246b3f491e9edbd1b1cf17c92d7da5a9471a119661f47154af331cbc7dc0bb4caec19720f594abda9d0eaaa12f6ffb74cc4f52689e2e8b199685d224c569fc9aef01db776cb5daadcac2f12f2382"], 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1000007) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r6}, 0x10) bpf$ITER_CREATE(0x22, &(0x7f0000000040)={r7}, 0x8) 13m11.891870195s ago: executing program 0 (id=1830): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0x7}) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000004180)={0x104, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x74, 0x5b, "36a27052fc709e51702d7673b0e41aa317a2c614bc36451727970e0670250baa155d5da83eed4f7b7b37a08dfe92e0f80b0c0a9fe745fc5a62828c0f78dcf77f094100bfaa20b69c85542b58d8360c5d57a62a58724dd98bb7af0bb252fe92bfcae7cbf10e6fc52df84767eb87acbea9"}, @NL80211_ATTR_FRAME_MATCH={0x30, 0x5b, "1cdb34be67e1545c71b65d8fc5e2f6d5352ab0728633c37dadb2a9a4e03be48aa70d90e24b071b3e0d21487c"}, @NL80211_ATTR_FRAME_MATCH={0x16, 0x5b, "d09a18565ccc86399efbf05bd171f2f87efb"}, @NL80211_ATTR_FRAME_MATCH={0x1a, 0x5b, "17ce0bcf500976f7f47e01fe97a6e6f543c9015b3191"}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}]}, 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x2}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, 0x0) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x80000]}}, 0x5c) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000140)=0xf, 0x4) readv(r4, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 12m56.455582362s ago: executing program 33 (id=1830): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0x7}) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000004180)={0x104, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x74, 0x5b, "36a27052fc709e51702d7673b0e41aa317a2c614bc36451727970e0670250baa155d5da83eed4f7b7b37a08dfe92e0f80b0c0a9fe745fc5a62828c0f78dcf77f094100bfaa20b69c85542b58d8360c5d57a62a58724dd98bb7af0bb252fe92bfcae7cbf10e6fc52df84767eb87acbea9"}, @NL80211_ATTR_FRAME_MATCH={0x30, 0x5b, "1cdb34be67e1545c71b65d8fc5e2f6d5352ab0728633c37dadb2a9a4e03be48aa70d90e24b071b3e0d21487c"}, @NL80211_ATTR_FRAME_MATCH={0x16, 0x5b, "d09a18565ccc86399efbf05bd171f2f87efb"}, @NL80211_ATTR_FRAME_MATCH={0x1a, 0x5b, "17ce0bcf500976f7f47e01fe97a6e6f543c9015b3191"}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}]}, 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x2}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, 0x0) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x80000]}}, 0x5c) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000140)=0xf, 0x4) readv(r4, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 12m5.187908078s ago: executing program 2 (id=1959): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) writev(r0, &(0x7f0000000080)=[{&(0x7f0000001740)='9', 0x1}], 0x20) iopl(0xd) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008000640050000000500010006000000050005000203000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000100)='./file0\x00', 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41100, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000000)={&(0x7f0000000180)={{@any, 0x5}, {@host, 0x5}, 0x400, "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"}, 0x418, 0x1}) r6 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) 12m2.235440939s ago: executing program 2 (id=1967): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capset(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00"], 0xd) listen(0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='bpf\x00', 0xc000, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000040)={0xd, 0x2}) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='\x00', 0x1, 0xfffffffffffffffe) 11m57.362964827s ago: executing program 2 (id=1972): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000b00)=""/153, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4], 0x37) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x801) r6 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) close(r4) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, r9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10) syz_io_uring_setup(0x4173, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x18, 0x4007, @fd_index=0x2, 0x8, 0x0, 0x0, 0x11, 0x1, {0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f00000002c0), &(0x7f0000000140)}, 0x20) sendmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)}], 0x1, 0x0, 0x0, 0xa4}, 0x0) 11m56.160119078s ago: executing program 2 (id=1976): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x4, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0xfffffffe, [0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x3, 0x0, 0xfffffffa, 0x711, 0x0, 0x80000001, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6e3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xee, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe1b, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000]}, 0x45c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x1000) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x5, 0xf, 0xe, 0x0}) 11m54.794289765s ago: executing program 2 (id=1979): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x4e797b41) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@sr0, 0x0, &(0x7f00000002c0)='efivarfs\x00', 0xa88881, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x6, r0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 11m50.519664995s ago: executing program 2 (id=1987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000283afffe800000000000000000000000000000fe8000000000000000000000000000aa8900902c36a2680000000000000000000000000000000001ff02000000000000000000000000000165f7da1734fd893b47477ec704abc9232adb4afa9e8f2f246b3f491e9edbd1b1cf17c92d7da5a9471a119661f47154af331cbc7dc0bb4caec19720f594abda9d0eaaa12f6ffb74cc4f52689e2e8b199685d224c569fc9aef01db776cb5daadcac2f12f23823f7023"], 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1000007) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r6}, 0x10) bpf$ITER_CREATE(0x22, &(0x7f0000000040)={r7}, 0x8) 11m34.954829674s ago: executing program 34 (id=1987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000283afffe800000000000000000000000000000fe8000000000000000000000000000aa8900902c36a2680000000000000000000000000000000001ff02000000000000000000000000000165f7da1734fd893b47477ec704abc9232adb4afa9e8f2f246b3f491e9edbd1b1cf17c92d7da5a9471a119661f47154af331cbc7dc0bb4caec19720f594abda9d0eaaa12f6ffb74cc4f52689e2e8b199685d224c569fc9aef01db776cb5daadcac2f12f23823f7023"], 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1000007) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r6}, 0x10) bpf$ITER_CREATE(0x22, &(0x7f0000000040)={r7}, 0x8) 6m22.233098366s ago: executing program 1 (id=2615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000001) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x174, 0x400) ioctl$BLKRRPART(r5, 0x125f, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x145080) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f0000000080)=0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xfffffc4d, 0x0, 0x8000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000dfff008f22120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6m19.990841843s ago: executing program 1 (id=2619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000001) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x174, 0x400) ioctl$BLKRRPART(r5, 0x125f, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x145080) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f0000000080)=0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xfffffc4d, 0x0, 0x8000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000dfff008f22120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6m18.653096679s ago: executing program 1 (id=2623): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000050000060900010073797a3100000000580004805400018009000100261a54f75d7753086d6574610000000044000280080001400000000c080003400000000d08000240000003ff080001400000000008000240000000010800034000000000080002400000001f"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r0, &(0x7f0000000300)=@abs, 0x0, 0x800) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464d0, &(0x7f0000000080)) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000000)=""/36) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="6d9310000000fcdbdf240100000008000300", @ANYRES32=r5, @ANYBLOB="e3b1cabde66fb7ecb96a7e0ae6c29f11513b465128d48514f0273e3f78fa2f9d15d47c76b9c7f9c3db31e3b67efcee05e619ecde6c998adddbf3a858c7080796dbeca1e954e4873c5729977ef67621442243674f4981740fa8d7037e45af946306efc50301ab9f1a027e74bddc653253538181edbfbaf6acc4689adcb923719db56a004fe3512699f4296c2f5ca73d898cd3e5b35e13c76352b91d79679336ebf23ac4ed389c739399900ad013b90c751841f82991cc6252e59a5d81052ede649cd53712a4a7e69c09158de535e1"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4880) r6 = socket(0x10, 0x803, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x44000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f0000000680)={0x6, 0x2, 0x7, {0x5, 0xff, 0x4, 0x7fff}}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {}, {0x7, 0xa}}}, 0x24}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x87, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902750002010020050904020001020d0000052406000105240000100d240f0100000200180000090006241a0381100424020c1524120600a317a88b045e4f0118a600dfcb7e392a0905810310000243fa090401000002"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000b, 0x200000005c831, r0, 0xffffd000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000140)=0x1ffffe, 0x4, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r11) 6m15.178284492s ago: executing program 1 (id=2631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000001) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000140000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x174, 0x400) ioctl$BLKRRPART(r5, 0x125f, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x145080) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xfffffc4d, 0x0, 0x8000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000dfff008f22120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) 6m13.567367483s ago: executing program 1 (id=2634): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e0200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x85, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000002840)=ANY=[@ANYBLOB="04958bab6f87ab"], 0x7) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x200000000000000}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x2, [0x0, 0x204, 0x0, 0x1, 0xffffffffbffffffe, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16]}, 0x7a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x24000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) socket$packet(0x11, 0x3, 0x300) llistxattr(&(0x7f0000000140)='./file2\x00', &(0x7f00000001c0)=""/82, 0x52) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') 6m13.359895308s ago: executing program 1 (id=2636): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f00000004c0)={0x0, 0x0, 0x7ffffffffffd, 0x3}) fcntl$lock(r5, 0x24, &(0x7f0000000100)={0x2, 0x0, 0x800001000000, 0xfffffffffffffff9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000d80)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x440, 0x238, 0xfeffffff, 0x238, 0x238, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0xffffff00, 0xff000000, '\x00', 'geneve0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x6, 0x4}}, @common=@ttl={{0x28}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x6000, {0x0, @remote, @loopback, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x238}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key, @gre_key}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team_slave_1\x00', 'bond_slave_0\x00'}, 0x0, 0x1a8, 0x208, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0xb, 0xea, 0x1}}, @common=@inet=@recent1={{0x108}, {0xd8, 0x8, 0x20, 0x2, 'syz1\x00', 0x4, [0xffffffff, 0xff, 0xff, 0xff]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB, @ANYRES32=r10, @ANYBLOB="050003"], 0x28}}, 0x0) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c"], 0x20}}, 0x800) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m58.213973105s ago: executing program 35 (id=2636): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f00000004c0)={0x0, 0x0, 0x7ffffffffffd, 0x3}) fcntl$lock(r5, 0x24, &(0x7f0000000100)={0x2, 0x0, 0x800001000000, 0xfffffffffffffff9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000d80)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x440, 0x238, 0xfeffffff, 0x238, 0x238, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0xffffff00, 0xff000000, '\x00', 'geneve0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x6, 0x4}}, @common=@ttl={{0x28}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x6000, {0x0, @remote, @loopback, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x238}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key, @gre_key}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team_slave_1\x00', 'bond_slave_0\x00'}, 0x0, 0x1a8, 0x208, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0xb, 0xea, 0x1}}, @common=@inet=@recent1={{0x108}, {0xd8, 0x8, 0x20, 0x2, 'syz1\x00', 0x4, [0xffffffff, 0xff, 0xff, 0xff]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB, @ANYRES32=r10, @ANYBLOB="050003"], 0x28}}, 0x0) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c"], 0x20}}, 0x800) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.888007265s ago: executing program 8 (id=4146): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x800) sendfile(r0, r0, 0x0, 0x7) 6.74112227s ago: executing program 8 (id=4150): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x1, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000780), 0xcff5, r0}, 0x38) 4.76756792s ago: executing program 4 (id=4164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x3f}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0) 4.599630942s ago: executing program 8 (id=4166): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x48, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x48}}, 0x0) 4.454398964s ago: executing program 4 (id=4169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x68, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}) 3.431107343s ago: executing program 6 (id=4170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 3.429820306s ago: executing program 8 (id=4172): close(0xffffffffffffffff) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @default, 0x8}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x66) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc9, &(0x7f00000006c0)=""/201, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}]}, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void}, 0x27) io_setup(0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x23}}) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0xb4ec1ee613aa935c, 0x7f) socket$nl_route(0x10, 0x3, 0x0) 3.398217009s ago: executing program 7 (id=4173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008aec1, &(0x7f0000000000)) 3.335582695s ago: executing program 5 (id=4174): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) 3.314579338s ago: executing program 4 (id=4175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) 3.305485589s ago: executing program 6 (id=4176): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000b00)=""/153, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4], 0x37) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x801) r6 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) close(r4) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, r9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10) syz_io_uring_setup(0x4173, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x18, 0x4007, @fd_index=0x2, 0x8, &(0x7f0000000a80)=[{&(0x7f0000000680)="be6bb4047afd5dbaf169f78e9e9f9bb83555b50e4417408bdd49f5824bc57d6ba07a28a5026a165d5647", 0x2a}, {0x0}, {&(0x7f0000000780)="68d1b9e44fea150d33c9f512110c19a46c745ff65315a12c201c22121782f4afc194a3ae8f84404496113165ba2c9547a5d5daca97ffc34964f2588bde8ad6269fa400de35657798411d76c69c4970e09f64934d098955f8bf3666f4e6e7f444e8a3264290cec3e6090e9b61e14633831d06285f", 0x74}, {&(0x7f0000000800)="27a0c7ce900fa0d1928c7ffdb0a0747ad05227032a5b110bed95d18fbe6f6639cb43ecc673bee8d2bc7fb29f00335627e9b937f9190db8f64a1bc22bf0bf79ebac3820b880e9b23ff2067a16c4458f78104bf8ad97285369fe04f7d2cf54e3d61acea70e301ec96f4b246cb2bed132d555d20fadd40c6c74caa67fb839efe5ca892549fc69b0f80e4b38bd8b14f6143fb097251c8b65add7b65b82da8da032b2aa15921ee0721b8d48f8b49e7c", 0xad}, {&(0x7f00000016c0)="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", 0x9fe}, {&(0x7f0000000900)="ca012191b03946022dca7ff75546b4e8192aa1536535b52062624099603cf074b39a26ce758b5a755e0504ceaef7f6698ec921aee5787af4b9552014c53cbc44dfb4239084e820edbb6baa35db217b199fdabf729fd5f5694eb79211fbf624b858a95cee231f6e477c689be9c3bf074d879c00dc316e82e53c052c64f5ce25bd867bf86d279c1d3e08d240d6ab311f37ea05c9a6e59e8ea8bcad6b11", 0x9c}, {&(0x7f0000000a00)="778a9495744ccbde62a13d7c7c7aa1ec37f724120ff90fbac9612ad7101b03373361b80881bbdfe4ebb67528ea669ba2fe65b46e5a6f51491082611db2b45f6d07bc83c9709c8b9b9b2cdc7faa317dcdd1befc48cca3927fd059510bf7e86a42971a", 0x62}], 0x7, 0x11, 0x1, {0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f00000002c0), &(0x7f0000000140)}, 0x20) sendmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)}], 0x1, 0x0, 0x0, 0xa4}, 0x0) 3.291815738s ago: executing program 5 (id=4177): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3.291240465s ago: executing program 7 (id=4178): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @local, 0x0, 0x1, 'none\x00', 0x20}, 0x2c) 3.191724024s ago: executing program 4 (id=4179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000140)) 3.17889359s ago: executing program 7 (id=4180): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.098426092s ago: executing program 5 (id=4181): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x4, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0xfffffffe, [0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x3, 0x0, 0xfffffffa, 0x711, 0x0, 0x80000001, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6e3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xee, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe1b, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000]}, 0x45c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x1000) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5ce", 0x17) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r6) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x5, 0xf, 0xe, 0x0}) 3.055378783s ago: executing program 7 (id=4182): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_init1(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) recvmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/39, 0x27}, {0x0}, {0x0}], 0x3}, 0x40000002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000380)}, 0x20) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x32, &(0x7f00000000c0), &(0x7f0000000300)=0x4) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000300000008000400ffffffff0800020000000000080001"], 0x3c}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000fffbdf2502000000000000001e00000005001600e80c0000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.670686324s ago: executing program 5 (id=4183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x4) 1.669900721s ago: executing program 6 (id=4184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 1.593210079s ago: executing program 4 (id=4185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getpeername$inet(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @remote={0x5}, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}}}, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="008c3bf4e86ec36470fb7635ab3d0ce41d2a0f71e3383626c732fd4a9fd3eff6040a06", 0x23, 0x20000045, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) 874.79974ms ago: executing program 6 (id=4186): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="f257a8ea7bc273dfaeab96850806", 0xe, 0x20004851, &(0x7f0000000200)={0x11, 0x17, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 872.883001ms ago: executing program 5 (id=4187): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x10000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r0, 0x80000000) 787.159938ms ago: executing program 7 (id=4188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x7) 346.189974ms ago: executing program 8 (id=4189): setuid(0xee00) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000100224e0000", 0x58}], 0x1) 289.981259ms ago: executing program 4 (id=4190): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/48, 0x30, 0x0, 0x7fffffff, 0x6, 0x7f9, 0xc}}, 0x120) write$UHID_CREATE2(r0, &(0x7f0000000300)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x9, 0x0, 0x0, 0x1}}, 0x118) 222.745297ms ago: executing program 6 (id=4191): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="ea0e04"], 0x78) 222.585352ms ago: executing program 5 (id=4192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 211.646598ms ago: executing program 8 (id=4193): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x4, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0xfffffffe, [0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x3, 0x0, 0xfffffffa, 0x711, 0x0, 0x80000001, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6e3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xee, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe1b, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000]}, 0x45c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x1000) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5ce", 0x17) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r6) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x5, 0xf, 0xe, 0x0}) 163.761342ms ago: executing program 7 (id=4194): syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x800, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000440)={@multicast1, @multicast1, @local}, 0xc) r5 = syz_io_uring_setup(0x832, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r8, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}) io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r9, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@remote, @in=@local}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) 0s ago: executing program 6 (id=4195): unshare(0x22020600) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): v/sg0" dev="devtmpfs" ino=717 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1463.028568][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1463.345492][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2919'. [ 1464.477376][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1464.865216][ T30] audit: type=1400 audit(1741476540.421:1579): avc: denied { listen } for pid=20654 comm="syz.6.2923" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1465.123223][ T30] audit: type=1400 audit(1741476540.431:1580): avc: denied { connect } for pid=20654 comm="syz.6.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1465.147300][ T30] audit: type=1400 audit(1741476540.431:1581): avc: denied { name_connect } for pid=20654 comm="syz.6.2923" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1465.178766][ T30] audit: type=1400 audit(1741476540.441:1582): avc: denied { accept } for pid=20654 comm="syz.6.2923" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1465.807928][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1465.821469][ T30] audit: type=1400 audit(1741476540.771:1583): avc: denied { read } for pid=20667 comm="syz.4.2926" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1466.204272][ T30] audit: type=1400 audit(1741476540.771:1584): avc: denied { open } for pid=20667 comm="syz.4.2926" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1466.346481][ T30] audit: type=1400 audit(1741476542.181:1585): avc: denied { getopt } for pid=20691 comm="syz.7.2931" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1467.160039][T18602] Bluetooth: hci5: command 0x0406 tx timeout [ 1467.244069][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1467.375000][T20669] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1467.738738][ T9369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1467.836989][ T30] audit: type=1400 audit(1741476543.561:1586): avc: denied { setopt } for pid=20667 comm="syz.4.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1467.867064][T20669] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1467.890794][T20669] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1467.917934][T20699] infiniband syz1: set active [ 1467.923898][T20699] infiniband syz1: added veth0_vlan [ 1467.932798][T20669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1467.947441][T20669] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1467.957762][T20693] overlayfs: failed to resolve './file0': -2 [ 1467.970754][T20669] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1468.046145][ T30] audit: type=1400 audit(1741476543.881:1587): avc: denied { read write } for pid=20706 comm="syz.8.2932" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1468.409852][ T30] audit: type=1400 audit(1741476543.881:1588): avc: denied { open } for pid=20706 comm="syz.8.2932" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1468.450717][T20699] RDS/IB: syz1: added [ 1468.454769][T20699] smc: adding ib device syz1 with port count 1 [ 1468.470625][T20699] smc: ib device syz1 port 1 has pnetid [ 1469.312508][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1469.566877][T18602] Bluetooth: hci1: command 0x0406 tx timeout [ 1469.983221][T20735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2936'. [ 1470.001291][T18602] Bluetooth: hci0: command 0x0406 tx timeout [ 1470.009585][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 1470.017778][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1471.769822][T18602] Bluetooth: hci1: command 0x0406 tx timeout [ 1471.907074][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1472.162304][T18602] Bluetooth: hci0: command 0x0406 tx timeout [ 1472.596968][T20770] ip6tnl0 speed is unknown, defaulting to 1000 [ 1472.997010][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1473.000098][T20770] »»»»»» speed is unknown, defaulting to 1000 [ 1473.014297][T20770] lo speed is unknown, defaulting to 1000 [ 1473.343443][T20775] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1473.554175][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1475.038988][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1475.554418][T20782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1475.562042][T20782] IPv6: NLM_F_CREATE should be set when creating new route [ 1475.569271][T20782] IPv6: NLM_F_CREATE should be set when creating new route [ 1475.576442][T20782] IPv6: NLM_F_CREATE should be set when creating new route [ 1475.953069][T20809] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 1476.480427][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1477.534459][T20823] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2951'. [ 1477.545251][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2951'. [ 1477.554240][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2951'. [ 1477.774500][ T8453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1478.527853][ T8453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1478.595619][T20827] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2949'. [ 1479.352437][T20846] xt_hashlimit: size too large, truncated to 1048576 [ 1479.417210][T20847] netlink: 'syz.4.2956': attribute type 10 has an invalid length. [ 1479.431253][T20847] batman_adv: batadv0: Adding interface: team0 [ 1479.437510][T20847] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1479.523812][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1479.885063][T20845] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2954'. [ 1479.918201][T20854] ipt_rpfilter: unknown options [ 1480.083717][T20851] syz_tun: entered promiscuous mode [ 1480.403914][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1480.403948][ T30] audit: type=1400 audit(1741476556.241:1590): avc: denied { connect } for pid=20852 comm="syz.4.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1480.617334][T20851] syz_tun: left promiscuous mode [ 1481.088262][ T8453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1481.992821][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1482.412908][T20876] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 1483.196121][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 1483.465967][T20875] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1483.920518][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2966'. [ 1484.032915][T20892] siw: device registration error -23 [ 1484.457864][ T30] audit: type=1400 audit(1741476559.531:1591): avc: denied { bind } for pid=20873 comm="syz.7.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1484.573707][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1484.577067][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1484.626894][ T30] audit: type=1400 audit(1741476559.531:1592): avc: denied { read } for pid=20873 comm="syz.7.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1484.783456][ T8453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1484.799830][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2968'. [ 1484.810421][T20895] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 40624 - 0 [ 1484.819284][T20895] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 40624 - 0 [ 1484.828095][T20895] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 40624 - 0 [ 1484.836872][T20895] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 40624 - 0 [ 1484.944122][T20901] xt_connbytes: Forcing CT accounting to be enabled [ 1484.955631][T20901] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1485.500523][T20903] 9pnet_fd: Insufficient options for proto=fd [ 1486.119850][T20897] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2970'. [ 1486.128838][T20897] bridge_slave_0: left allmulticast mode [ 1486.612251][T20897] bridge_slave_0: left promiscuous mode [ 1486.642893][T20897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.657139][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1486.833978][T20907] syz_tun: entered promiscuous mode [ 1486.932577][T20907] syz_tun: left promiscuous mode [ 1487.319647][T20920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2975'. [ 1487.337624][ T30] audit: type=1400 audit(1741476563.071:1593): avc: denied { append } for pid=20917 comm="syz.7.2975" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1487.487278][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1488.783055][ T30] audit: type=1400 audit(1741476564.621:1594): avc: denied { write } for pid=20928 comm="syz.4.2978" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1490.278057][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1490.289599][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1490.291180][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1490.305237][ T30] audit: type=1400 audit(1741476565.501:1595): avc: denied { map } for pid=20931 comm="syz.8.2979" path="socket:[53483]" dev="sockfs" ino=53483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1491.330185][ T30] audit: type=1400 audit(1741476567.173:1596): avc: denied { write } for pid=20949 comm="syz.8.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1491.330223][ T30] audit: type=1400 audit(1741476567.173:1597): avc: denied { read } for pid=20949 comm="syz.8.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1491.886286][ T30] audit: type=1400 audit(1741476567.698:1598): avc: denied { cmd } for pid=20953 comm="syz.7.2983" path="socket:[53599]" dev="sockfs" ino=53599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1493.051175][T20969] overlayfs: failed to resolve './file1': -2 [ 1493.073029][T20969] rdma_rxe: rxe_newlink: failed to add lo [ 1493.301084][ T8453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1493.312761][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1494.251834][ T30] audit: type=1400 audit(1741476570.143:1599): avc: denied { ioctl } for pid=20965 comm="syz.7.2986" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1494.634465][ T30] audit: type=1400 audit(1741476570.594:1600): avc: denied { create } for pid=20984 comm="syz.7.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1494.644917][T20971] syz_tun: entered promiscuous mode [ 1494.730437][T20971] syz_tun: left promiscuous mode [ 1495.657103][ T8453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1495.658244][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1495.680460][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1495.695099][ T30] audit: type=1400 audit(1741476571.679:1601): avc: denied { shutdown } for pid=20991 comm="syz.4.2991" faddr=::ffff:224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1495.716831][ C1] vkms_vblank_simulate: vblank timer overrun [ 1495.771008][ T30] audit: type=1400 audit(1741476571.679:1602): avc: denied { write } for pid=20991 comm="syz.4.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1495.792027][ T30] audit: type=1400 audit(1741476571.679:1603): avc: denied { nlmsg_read } for pid=20991 comm="syz.4.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1495.919889][ T30] audit: type=1400 audit(1741476571.905:1604): avc: denied { ioctl } for pid=20991 comm="syz.4.2991" path="socket:[54383]" dev="sockfs" ino=54383 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1495.948748][ C1] vkms_vblank_simulate: vblank timer overrun [ 1496.022626][T21003] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2992'. [ 1496.607182][T20994] syz_tun: entered promiscuous mode [ 1496.635090][T20994] syz_tun: left promiscuous mode [ 1497.890822][T21015] geneve3: entered promiscuous mode [ 1497.896058][T21015] geneve3: entered allmulticast mode [ 1498.880833][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1498.996758][ T30] audit: type=1400 audit(1741476574.946:1605): avc: denied { write } for pid=21019 comm="syz.7.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1499.016252][ C1] vkms_vblank_simulate: vblank timer overrun [ 1499.209759][T21027] ipt_rpfilter: unknown options [ 1499.354414][ T30] audit: type=1400 audit(1741476575.363:1606): avc: denied { watch watch_reads } for pid=21028 comm="syz.5.3000" path="/662" dev="tmpfs" ino=3546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1500.710971][ T30] audit: type=1400 audit(1741476576.788:1607): avc: denied { create } for pid=21038 comm="syz.6.3003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1501.236054][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1501.335592][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1501.355964][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1501.797782][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 1502.015466][ T30] audit: type=1400 audit(1741476578.118:1608): avc: denied { name_bind } for pid=21054 comm="syz.5.3007" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1502.578594][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1502.764759][T19913] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1503.441639][T19913] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.464967][T19913] usb 7-1: config 0 has no interfaces? [ 1503.470489][T19913] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1503.480341][T19913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.501764][T19913] usb 7-1: config 0 descriptor?? [ 1503.927450][T21084] Bluetooth: MGMT ver 1.23 [ 1504.224648][ T30] audit: type=1400 audit(1741476580.056:1609): avc: denied { bind } for pid=21074 comm="syz.7.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1504.472685][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1504.558153][ T30] audit: type=1400 audit(1741476580.066:1610): avc: denied { listen } for pid=21074 comm="syz.7.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1504.785490][T21080] tipc: Failed to obtain node identity [ 1504.801495][T18602] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1505.211098][T21080] tipc: Enabling of bearer rejected, failed to enable media [ 1505.319670][T21094] vivid-000: disconnect [ 1505.569508][T21089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1505.600016][T21099] bridge0: port 4(hsr_slave_1) entered blocking state [ 1505.606829][T21099] bridge0: port 4(hsr_slave_1) entered disabled state [ 1505.613810][T21099] hsr_slave_1: entered allmulticast mode [ 1505.621474][T21099] hsr_slave_1: left allmulticast mode [ 1505.638532][T21088] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3012'. [ 1505.666454][T21089] vivid-000: reconnect [ 1506.358638][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1506.988645][T16705] usb 7-1: USB disconnect, device number 8 [ 1507.000621][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1507.012637][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1507.153187][ T30] audit: type=1400 audit(1741476583.315:1611): avc: denied { write } for pid=21120 comm="syz.7.3019" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1507.805480][ T30] audit: type=1400 audit(1741476583.325:1612): avc: denied { read } for pid=21120 comm="syz.7.3019" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1507.912678][T19913] libceph: connect (1)[c::]:6789 error -1 [ 1507.932421][T21123] ceph: No mds server is up or the cluster is laggy [ 1508.069383][T18365] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1508.074540][T19913] libceph: mon0 (1)[c::]:6789 connect error [ 1508.220017][ T30] audit: type=1400 audit(1741476583.325:1613): avc: denied { open } for pid=21120 comm="syz.7.3019" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1508.245059][T18365] usb 7-1: device descriptor read/64, error -71 [ 1508.245302][ T30] audit: type=1400 audit(1741476583.325:1614): avc: denied { ioctl } for pid=21120 comm="syz.7.3019" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1508.280562][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1508.478057][ T972] libceph: connect (1)[c::]:6789 error -1 [ 1508.490708][ T972] libceph: mon0 (1)[c::]:6789 connect error [ 1508.574408][T18365] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1508.778845][T21135] vivid-000: disconnect [ 1508.801860][T18365] usb 7-1: device descriptor read/64, error -71 [ 1508.846577][ T30] audit: type=1400 audit(1741476584.993:1615): avc: denied { write } for pid=21140 comm="syz.4.3024" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1508.980321][T18365] usb usb7-port1: attempt power cycle [ 1509.580747][T21134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1509.596619][T21148] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3024'. [ 1509.815132][T21141] vivid-000: reconnect [ 1509.841651][T18365] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1509.883875][T18365] usb 7-1: device descriptor read/8, error -71 [ 1510.165227][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1511.642584][ T30] audit: type=1400 audit(1741476587.849:1616): avc: denied { connect } for pid=21160 comm="syz.8.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1511.975581][ T30] audit: type=1400 audit(1741476588.202:1617): avc: denied { ioctl } for pid=21169 comm="syz.5.3032" path="socket:[54070]" dev="sockfs" ino=54070 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1512.063448][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1512.143505][ T30] audit: type=1326 audit(1741476588.363:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21173 comm="syz.8.3043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7926f8d169 code=0x0 [ 1512.259184][ T30] audit: type=1400 audit(1741476588.474:1619): avc: denied { map } for pid=21173 comm="syz.8.3043" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1512.284354][ T30] audit: type=1400 audit(1741476588.474:1620): avc: denied { execute } for pid=21173 comm="syz.8.3043" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1512.913926][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1512.926235][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1513.506746][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1513.845085][T21191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3035'. [ 1514.733240][T21198] wlan0 speed is unknown, defaulting to 1000 [ 1514.741889][T21198] wlan0 speed is unknown, defaulting to 1000 [ 1514.763288][T21198] wlan0 speed is unknown, defaulting to 1000 [ 1514.832188][T21198] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1515.023923][T21198] wlan0 speed is unknown, defaulting to 1000 [ 1515.168470][T21198] wlan0 speed is unknown, defaulting to 1000 [ 1515.181374][T21198] wlan0 speed is unknown, defaulting to 1000 [ 1515.188102][T21198] wlan0 speed is unknown, defaulting to 1000 [ 1515.197577][T21198] wlan0 speed is unknown, defaulting to 1000 [ 1515.964533][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1516.069718][T21212] trusted_key: encrypted_key: key user:syz not found [ 1516.511867][T21210] batadv_slave_1: entered promiscuous mode [ 1516.666264][T21209] batadv_slave_1: left promiscuous mode [ 1517.376589][ T5832] Bluetooth: hci4: sending frame failed (-49) [ 1517.385633][T18602] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1517.953496][T21227] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3038'. [ 1518.008868][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1518.009483][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1518.559555][ T9369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1519.973989][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1520.986189][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 1521.299527][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 1521.586413][T21262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3050'. [ 1521.606255][ T30] audit: type=1400 audit(1741476597.831:1621): avc: denied { mount } for pid=21257 comm="syz.4.3051" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1521.756998][T21264] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1521.763610][T21264] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1521.771166][T21264] vhci_hcd vhci_hcd.0: Device attached [ 1521.824022][ T30] audit: type=1400 audit(1741476597.841:1622): avc: denied { mounton } for pid=21257 comm="syz.4.3051" path="/602/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1521.851345][ T30] audit: type=1400 audit(1741476597.841:1623): avc: denied { mount } for pid=21257 comm="syz.4.3051" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1521.940596][T21264] ip6tnl0 speed is unknown, defaulting to 1000 [ 1522.044108][T21264] »»»»»» speed is unknown, defaulting to 1000 [ 1522.051040][T21264] lo speed is unknown, defaulting to 1000 [ 1522.168461][T21271] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3059'. [ 1522.208747][T21264] wlan0 speed is unknown, defaulting to 1000 [ 1522.241282][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1522.330097][ T52] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1522.967301][T18602] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1523.882179][T21265] vhci_hcd: connection reset by peer [ 1523.891837][ T12] vhci_hcd: stop threads [ 1523.900274][ T12] vhci_hcd: release socket [ 1523.907853][ T12] vhci_hcd: disconnect device [ 1523.964263][T18602] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 1524.096833][ T30] audit: type=1400 audit(1741476600.382:1624): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1524.153826][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1524.166100][ T8453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1524.180149][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1524.203945][ T30] audit: type=1400 audit(1741476600.412:1625): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1524.318384][T21285] bridge0: port 3(hsr_slave_1) entered blocking state [ 1524.325271][T21285] bridge0: port 3(hsr_slave_1) entered disabled state [ 1524.332202][T21285] hsr_slave_1: entered allmulticast mode [ 1524.368741][ T30] audit: type=1400 audit(1741476600.603:1626): avc: denied { create } for pid=21284 comm="syz.8.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1524.405033][T21285] hsr_slave_1: left allmulticast mode [ 1524.626862][T21290] random: crng reseeded on system resumption [ 1524.644327][ T30] audit: type=1400 audit(1741476600.603:1627): avc: denied { ioctl } for pid=21284 comm="syz.8.3056" path="socket:[55356]" dev="sockfs" ino=55356 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1524.953959][ T30] audit: type=1400 audit(1741476600.914:1628): avc: denied { append } for pid=21287 comm="syz.6.3057" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1525.432853][ T9369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1526.805087][ T30] audit: type=1400 audit(1741476603.072:1629): avc: denied { link } for pid=21305 comm="syz.7.3064" name="#34" dev="tmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1526.847089][T21288] Restarting kernel threads ... done. [ 1526.883468][ T30] audit: type=1400 audit(1741476603.072:1630): avc: denied { rename } for pid=21305 comm="syz.7.3064" name="#35" dev="tmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1526.988833][ T30] audit: type=1400 audit(1741476603.143:1631): avc: denied { ioctl } for pid=21287 comm="syz.6.3057" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1527.050677][T18602] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 1527.220755][T18365] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1527.369324][T21320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3067'. [ 1527.739106][ T52] vhci_hcd: vhci_device speed not set [ 1527.768867][T18365] usb 5-1: Using ep0 maxpacket: 16 [ 1527.989486][ T9369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1528.066624][T18365] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1528.097829][T18365] usb 5-1: config 0 has no interface number 0 [ 1528.103960][T18365] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1528.157581][T18365] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1528.210846][T18365] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1528.231273][T18365] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1528.249549][T18365] usb 5-1: Product: syz [ 1528.267304][T18365] usb 5-1: SerialNumber: syz [ 1528.430614][T18365] usb 5-1: config 0 descriptor?? [ 1528.440764][T18365] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 1528.957801][T18365] usb 5-1: USB disconnect, device number 12 [ 1529.185203][T21344] ubi: mtd0 is already attached to ubi31 [ 1529.262376][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1529.529241][T21349] netlink: 'syz.8.3073': attribute type 1 has an invalid length. [ 1529.934028][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1529.949396][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1530.032337][T21345] syz_tun: entered promiscuous mode [ 1530.115638][T21345] syz_tun: left promiscuous mode [ 1531.220199][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1531.575361][T21375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1533.768991][ T9369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1534.267965][T21404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1534.354939][ T52] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1534.676318][ T52] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1534.709912][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3084'. [ 1534.725203][ T52] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1534.771837][ T52] usb 7-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1534.792524][ T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.830434][ T52] usb 7-1: Product: syz [ 1534.859649][ T52] usb 7-1: Manufacturer: syz [ 1534.872879][ T52] usb 7-1: SerialNumber: syz [ 1534.906310][ T52] usb 7-1: config 0 descriptor?? [ 1534.918012][ T52] kvaser_usb 7-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1535.000095][ T8453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1535.106717][T21413] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 1535.128603][ T52] usb 7-1: USB disconnect, device number 13 [ 1535.674405][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1536.278777][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1537.642209][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1537.794451][T21433] netlink: 'syz.6.3094': attribute type 10 has an invalid length. [ 1537.800850][T18602] Bluetooth: hci5: unexpected event for opcode 0x0c05 [ 1537.812834][T21433] veth1_vlan: entered allmulticast mode [ 1537.813902][T21436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3096'. [ 1537.871479][T21433] team0: Device veth1_vlan failed to register rx_handler [ 1538.001458][T21426] syz_tun: entered promiscuous mode [ 1538.019598][T21426] syz_tun: left promiscuous mode [ 1538.432927][T21444] SELinux: syz.4.3096 (21444) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1538.495523][T21444] bridge2: entered promiscuous mode [ 1538.563119][T21444] netlink: 'syz.4.3096': attribute type 39 has an invalid length. [ 1538.571010][T21444] netlink: 'syz.4.3096': attribute type 4 has an invalid length. [ 1538.578794][T21444] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3096'. [ 1538.587977][T21444] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1538.883074][T18365] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1539.548345][T18365] usb 7-1: device descriptor read/all, error -71 [ 1539.561098][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1541.040718][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1541.087831][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1541.107496][T18365] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1541.278899][T18365] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1541.288966][T18602] Bluetooth: hci5: unexpected event for opcode 0x2027 [ 1541.317214][T18365] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.334007][T18365] usb 7-1: config 0 descriptor?? [ 1541.433440][T21483] batadv_slave_1: entered promiscuous mode [ 1541.440356][T21483] batadv_slave_1: left promiscuous mode [ 1541.696547][ T5904] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1541.755951][T18365] [drm:udl_init] *ERROR* Selecting channel failed [ 1541.782696][T18365] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1541.789624][T18365] [drm] Initialized udl on minor 2 [ 1541.798024][T18365] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1541.811256][T18365] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1541.822727][T16705] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1541.833811][T18365] usb 7-1: USB disconnect, device number 15 [ 1541.853005][T16705] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1541.886346][ T5904] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1541.905670][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.939557][ T5904] usb 8-1: config 0 descriptor?? [ 1542.021149][T21497] netlink: 'syz.8.3115': attribute type 9 has an invalid length. [ 1542.029676][T21497] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3115'. [ 1542.029943][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1542.098607][ T30] audit: type=1400 audit(1741476618.439:1632): avc: denied { ioctl } for pid=21498 comm="syz.5.3116" path="socket:[55648]" dev="sockfs" ino=55648 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1543.115007][ T5904] ath6kl: Failed to submit usb control message: -110 [ 1543.337475][T21505] ceph: No mds server is up or the cluster is laggy [ 1543.344614][ T972] libceph: connect (1)[c::]:6789 error -101 [ 1543.350660][ T972] libceph: mon0 (1)[c::]:6789 connect error [ 1543.357862][T16705] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1543.365834][ T5904] ath6kl: unable to send the bmi data to the device: -110 [ 1543.374133][ T5904] ath6kl: Unable to send get target info: -110 [ 1543.380537][T21504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21504 comm=syz.8.3117 [ 1543.394520][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1543.448547][ T5904] ath6kl: Failed to init ath6kl core: -110 [ 1543.469655][ T5904] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1543.555040][ T5904] usb 8-1: USB disconnect, device number 3 [ 1543.588431][T21518] netlink: 'syz.6.3120': attribute type 5 has an invalid length. [ 1543.970110][T16705] usb 5-1: Using ep0 maxpacket: 8 [ 1543.976504][T16705] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.011323][T16705] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1544.021459][T16705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.024329][T21522] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3121'. [ 1544.030599][T16705] usb 5-1: Product: syz [ 1544.057631][T16705] usb 5-1: Manufacturer: syz [ 1544.062292][T16705] usb 5-1: SerialNumber: syz [ 1544.116217][T16705] usb 5-1: config 0 descriptor?? [ 1544.240466][T16705] msi2500 5-1:0.0: Registered as swradio24 [ 1544.246784][T16705] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1544.423000][T21532] SELinux: syz.8.3121 (21532) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1544.442654][T21532] bridge2: entered promiscuous mode [ 1544.453294][T21532] netlink: 'syz.8.3121': attribute type 39 has an invalid length. [ 1544.461150][T21532] netlink: 'syz.8.3121': attribute type 4 has an invalid length. [ 1544.468884][T21532] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3121'. [ 1544.480784][T21532] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1544.632170][ T972] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1545.031585][ T972] usb 8-1: Using ep0 maxpacket: 16 [ 1545.057996][ T972] usb 8-1: config 2 has an invalid interface number: 1 but max is 0 [ 1545.066893][T16705] usb 5-1: USB disconnect, device number 13 [ 1545.076365][ T972] usb 8-1: config 2 has no interface number 0 [ 1545.111958][ T972] usb 8-1: config 2 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1545.146896][ T972] usb 8-1: New USB device found, idVendor=0bb4, idProduct=0a79, bcdDevice=8a.fb [ 1545.156458][ T972] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.191391][ T972] usb 8-1: Product: syz [ 1545.195584][ T972] usb 8-1: Manufacturer: syz [ 1545.220788][ T972] usb 8-1: SerialNumber: syz [ 1545.231010][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1545.274706][T21530] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1545.860348][ T5904] usb 8-1: USB disconnect, device number 4 [ 1545.870333][ T52] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1546.156656][ T52] usb 7-1: config 0 has an invalid interface number: 9 but max is 0 [ 1546.672402][ T52] usb 7-1: config 0 has no interface number 0 [ 1546.687889][ T52] usb 7-1: config 0 interface 9 altsetting 132 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1546.726215][ T52] usb 7-1: config 0 interface 9 altsetting 132 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1546.737062][ T8453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1546.748051][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1546.772451][ T52] usb 7-1: config 0 interface 9 has no altsetting 0 [ 1546.791149][ T52] usb 7-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 1546.805697][ T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.817805][ T52] usb 7-1: Product: syz [ 1546.821170][T21558] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1546.828972][ T52] usb 7-1: Manufacturer: syz [ 1546.844377][ T52] usb 7-1: SerialNumber: syz [ 1546.857495][ T52] usb 7-1: config 0 descriptor?? [ 1547.256141][ T52] ftdi_sio 7-1:0.9: FTDI USB Serial Device converter detected [ 1547.280236][ T52] usb 7-1: Detected SIO [ 1547.850219][ T52] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 1547.883088][ T8453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1548.093210][ T52] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 3 [ 1548.113986][ T52] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1548.200375][ T52] usb 7-1: USB disconnect, device number 16 [ 1548.225753][ T52] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1548.256704][ T52] ftdi_sio 7-1:0.9: device disconnected [ 1548.267603][T19913] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1548.438558][T19913] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1548.451804][T19913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.468516][T19913] usb 8-1: config 0 descriptor?? [ 1548.497370][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1548.675308][ T30] audit: type=1400 audit(1741476625.018:1633): avc: denied { recv } for pid=21592 comm="syz.6.3146" saddr=10.128.0.169 src=42698 daddr=10.128.0.103 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1548.874996][T21575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1549.242212][T19913] ath6kl: Failed to submit usb control message: -71 [ 1549.256040][T19913] ath6kl: unable to send the bmi data to the device: -71 [ 1549.263111][T19913] ath6kl: Unable to send get target info: -71 [ 1550.085028][T19913] ath6kl: Failed to init ath6kl core: -71 [ 1550.091275][T19913] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1550.172899][T19913] usb 8-1: USB disconnect, device number 5 [ 1550.972606][T21627] syz.6.3156: attempt to access beyond end of device [ 1550.972606][T21627] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1551.064341][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1551.269107][T21629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3155'. [ 1551.741656][ T30] audit: type=1400 audit(1741476628.091:1634): avc: denied { ioctl } for pid=21633 comm="syz.5.3158" path="socket:[55893]" dev="sockfs" ino=55893 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1551.794020][ T30] audit: type=1400 audit(1741476628.131:1635): avc: denied { ioctl } for pid=21635 comm="syz.6.3159" path="socket:[56690]" dev="sockfs" ino=56690 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1551.863939][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1551.890235][ T30] audit: type=1400 audit(1741476628.241:1636): avc: denied { setopt } for pid=21637 comm="syz.7.3161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1551.971933][ T30] audit: type=1400 audit(1741476628.322:1637): avc: denied { read append } for pid=21640 comm="syz.4.3164" name="usbmon4" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1551.997997][ T30] audit: type=1400 audit(1741476628.322:1638): avc: denied { open } for pid=21640 comm="syz.4.3164" path="/dev/usbmon4" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1552.026625][ T30] audit: type=1400 audit(1741476628.322:1639): avc: denied { ioctl } for pid=21640 comm="syz.4.3164" path="/dev/usbmon4" dev="devtmpfs" ino=732 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1552.143254][ T5904] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1552.484517][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1553.091773][ T52] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1553.121703][ T5904] usb 9-1: Using ep0 maxpacket: 8 [ 1553.129793][ T5904] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 1553.138253][ T5904] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.158542][ T5904] usb 9-1: config 0 has no interface number 0 [ 1553.168668][ T5904] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1553.181167][ T5904] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1553.194789][ T5904] usb 9-1: config 0 interface 52 has no altsetting 0 [ 1553.202976][ T5904] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1553.213585][ T5904] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1553.221981][ T5904] usb 9-1: Manufacturer: syz [ 1553.235974][ T5904] usb 9-1: config 0 descriptor?? [ 1553.279396][ T52] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 1553.298180][ T52] usb 7-1: config 8 has no interface number 0 [ 1553.308309][ T52] usb 7-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 1553.328354][ T52] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x8B has invalid maxpacket 1023, setting to 64 [ 1553.340194][ T52] usb 7-1: config 8 interface 177 has no altsetting 0 [ 1553.348237][ T52] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1553.364685][ T52] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.382052][T21643] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1553.384603][T21668] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3171'. [ 1553.398989][T21668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3171'. [ 1553.408721][T19913] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1553.564382][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1553.820562][ T52] usb 7-1: string descriptor 0 read error: -71 [ 1553.849442][ T52] ir_toy 7-1:8.177: required endpoints not found [ 1553.861395][ T52] usb 7-1: USB disconnect, device number 17 [ 1553.962372][T19913] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.977183][T19913] usb 8-1: config 0 has no interfaces? [ 1553.989423][T19913] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1554.071883][ T972] usb 9-1: USB disconnect, device number 2 [ 1554.078446][ T30] audit: type=1400 audit(1741476630.344:1640): avc: denied { write } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1554.329088][T19913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.556492][T21679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1555.061214][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1555.097633][T19913] usb 8-1: config 0 descriptor?? [ 1555.108946][ T30] audit: type=1400 audit(1741476630.344:1641): avc: denied { remove_name } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1555.471528][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3174'. [ 1555.795398][ T30] audit: type=1400 audit(1741476630.344:1642): avc: denied { rename } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1555.824039][ T30] audit: type=1400 audit(1741476630.344:1643): avc: denied { add_name } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1555.848191][ T30] audit: type=1400 audit(1741476630.344:1644): avc: denied { unlink } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1555.870988][ T30] audit: type=1400 audit(1741476630.344:1645): avc: denied { create } for pid=5175 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1556.654227][T18602] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1556.803257][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1557.595073][ T30] audit: type=1400 audit(1741476633.947:1646): avc: denied { read } for pid=21710 comm="syz.6.3183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1557.817250][ T5904] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1557.992197][T21720] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 1558.499585][ T5904] usb 9-1: Using ep0 maxpacket: 8 [ 1558.515869][ T5904] usb 9-1: config 6 has an invalid interface number: 2 but max is 0 [ 1558.530962][ T5904] usb 9-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.563677][ T5904] usb 9-1: config 6 has no interface number 0 [ 1558.586470][ T5904] usb 9-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1558.612234][ T5904] usb 9-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1558.631660][ T52] usb 8-1: USB disconnect, device number 6 [ 1558.637596][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.645584][ T5904] usb 9-1: Product: syz [ 1558.716364][ T5904] usb 9-1: Manufacturer: syz [ 1558.738543][ T5904] usb 9-1: SerialNumber: syz [ 1558.758478][ T5904] hso 9-1:6.2: Failed to find INT IN ep [ 1558.876094][ T30] audit: type=1400 audit(1741476635.228:1647): avc: denied { read } for pid=21725 comm="syz.6.3190" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1558.903138][ T30] audit: type=1400 audit(1741476635.228:1648): avc: denied { open } for pid=21725 comm="syz.6.3190" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1559.075327][ T30] audit: type=1400 audit(1741476635.228:1649): avc: denied { ioctl } for pid=21725 comm="syz.6.3190" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1559.744145][T21726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3189'. [ 1559.761766][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1560.020087][ T5904] usb 9-1: USB disconnect, device number 3 [ 1560.300630][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1561.223177][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1561.223242][T21748] vivid-000: disconnect [ 1561.360789][T21760] RGB/YUV Input: ================= START STATUS ================= [ 1561.376940][T21760] RGB/YUV Input: Test Pattern: 75% Colorbar [ 1561.390446][T21760] RGB/YUV Input: Show Information: All [ 1561.400549][T21760] RGB/YUV Input: Vertical Flip: false [ 1561.410404][T21760] RGB/YUV Input: Horizontal Flip: false [ 1561.422160][T21760] RGB/YUV Input: Brightness: 128 [ 1561.433362][T21760] RGB/YUV Input: Contrast: 128 [ 1561.443487][T21760] RGB/YUV Input: Hue: 0 [ 1561.448210][T21760] RGB/YUV Input: Saturation: 128 [ 1561.456776][T21760] RGB/YUV Input: ================== END STATUS ================== [ 1561.462992][T21747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1561.510141][T21747] vivid-000: reconnect [ 1561.690729][T21770] vivid-000: disconnect [ 1562.140166][T21790] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3210'. [ 1562.415444][T21795] syz_tun: entered promiscuous mode [ 1562.422865][T21795] syz_tun: left promiscuous mode [ 1562.446377][T21769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1562.457976][T21769] vivid-000: reconnect [ 1562.510786][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1562.874162][T21802] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 1563.778630][T21825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3222'. [ 1564.416688][T21832] xfrm0: entered promiscuous mode [ 1564.471824][T21832] xfrm0: entered allmulticast mode [ 1564.800963][T21845] loop9: detected capacity change from 0 to 7 [ 1564.897195][T21846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3227'. [ 1564.911236][T21846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.339386][T21845] Dev loop9: unable to read RDB block 7 [ 1565.345064][T21845] loop9: unable to read partition table [ 1565.350813][T21845] loop9: partition table beyond EOD, truncated [ 1565.357047][T21845] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 1565.372508][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1565.484960][T21846] bridge_slave_1 (unregistering): left allmulticast mode [ 1565.492092][T21846] bridge_slave_1 (unregistering): left promiscuous mode [ 1565.499265][T21846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.004715][ T30] audit: type=1400 audit(1741476642.364:1650): avc: denied { setopt } for pid=21836 comm="syz.7.3228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1566.404079][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1567.640104][T21866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1567.716379][T21869] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 1567.754295][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1567.770966][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1567.893218][T21853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1568.749336][T21904] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3245'. [ 1568.802287][T16705] libceph: connect (1)[c::]:6789 error -101 [ 1568.810524][T16705] libceph: mon0 (1)[c::]:6789 connect error [ 1569.034764][T21901] ceph: No mds server is up or the cluster is laggy [ 1569.230474][T21917] netlink: 'syz.6.3251': attribute type 3 has an invalid length. [ 1569.258750][T21917] netlink: 666 bytes leftover after parsing attributes in process `syz.6.3251'. [ 1569.411548][ T30] audit: type=1400 audit(1741476645.776:1651): avc: denied { append } for pid=21929 comm="syz.4.3258" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1569.484726][T21935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3259'. [ 1569.591002][T21941] openvswitch: netlink: IP tunnel dst address not specified [ 1569.693601][ T30] audit: type=1400 audit(1741476646.057:1652): avc: denied { getopt } for pid=21946 comm="syz.5.3265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1570.107230][T21944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1570.170041][T21944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1570.250761][T21944] vivid-000: disconnect [ 1570.798410][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1570.811112][T21963] geneve3: entered promiscuous mode [ 1570.826241][T21963] geneve3: entered allmulticast mode [ 1570.933165][T21943] vivid-000: reconnect [ 1571.126814][T21970] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 1571.780250][T21978] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3272'. [ 1572.107678][ T9369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1572.121896][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1572.346224][ T30] audit: type=1400 audit(1741476648.698:1653): avc: denied { write } for pid=21989 comm="syz.4.3277" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1572.524977][T21995] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1572.564656][T21982] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3270'. [ 1573.123435][ T9369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1573.139748][T22011] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1573.728337][T22018] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 1573.852903][ T9369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1574.715008][T22017] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3282'. [ 1575.975294][T22039] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1576.182232][T22035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1576.225963][T22041] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3292'. [ 1576.235153][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3292'. [ 1576.386175][ T5904] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1576.486086][T22050] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3296'. [ 1576.556452][ T5904] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1576.561599][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1576.573431][ T5904] usb 9-1: not running at top speed; connect to a high speed hub [ 1576.597499][ T5904] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.618642][ T5904] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1576.642482][T22060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3300'. [ 1576.657297][T22060] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3300'. [ 1576.658466][T22062] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3302'. [ 1576.668371][ T5904] usb 9-1: New USB device found, idVendor=1d7a, idProduct=0101, bcdDevice= 0.40 [ 1576.682979][T22057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1576.688593][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.702892][ T5904] usb 9-1: Product: syz [ 1576.711381][ T5904] usb 9-1: Manufacturer: syz [ 1576.717405][ T5904] usb 9-1: SerialNumber: syz [ 1576.756065][T22057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1576.774998][T22057] vivid-000: disconnect [ 1576.949449][ T5904] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1576.966451][ T5904] usb 9-1: MIDIStreaming interface descriptor not found [ 1577.046145][ T5904] usb 9-1: USB disconnect, device number 4 [ 1577.495250][ T52] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1577.537660][T22056] vivid-000: reconnect [ 1577.880760][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1577.894219][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1577.917298][T22088] udevd[22088]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1577.992755][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 1578.025308][ T52] usb 5-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 1578.044736][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.070307][ T52] usb 5-1: Product: syz [ 1578.075044][ T52] usb 5-1: Manufacturer: syz [ 1578.079644][ T52] usb 5-1: SerialNumber: syz [ 1578.092941][ T52] usb 5-1: config 0 descriptor?? [ 1578.100552][ T52] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 1578.100573][T18602] Bluetooth: hci5: unexpected subevent 0x12 length: 0 < 5 [ 1578.127000][T22098] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3314'. [ 1578.474251][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1578.642268][ T52] gspca_sn9c20x: Write register 1001 failed -71 [ 1578.653767][ T52] gspca_sn9c20x: Device initialization failed [ 1578.659934][ T52] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 1578.684885][ T52] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1578.735543][ T52] usb 5-1: USB disconnect, device number 14 [ 1579.757631][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1580.969551][T22182] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.3344'. [ 1581.200041][T22195] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3349'. [ 1581.284257][T22199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1581.291554][T22199] IPv6: NLM_F_CREATE should be set when creating new route [ 1581.300015][ T30] audit: type=1400 audit(1741476657.664:1654): avc: denied { read write } for pid=22200 comm="syz.8.3353" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1581.517709][ T30] audit: type=1400 audit(1741476657.664:1655): avc: denied { open } for pid=22200 comm="syz.8.3353" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1582.491672][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1582.611647][T22210] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 1583.538728][ T30] audit: type=1400 audit(1741476659.905:1656): avc: denied { getopt } for pid=22214 comm="syz.4.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1583.890383][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1583.903927][ T9369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1583.999508][T22222] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3358'. [ 1584.130676][T22230] program syz.8.3362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1584.166455][ T30] audit: type=1400 audit(1741476660.535:1657): avc: denied { bind } for pid=22235 comm="syz.4.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1584.234070][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1585.013309][ T30] audit: type=1400 audit(1741476661.386:1658): avc: denied { create } for pid=22276 comm="syz.7.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1585.218382][ T30] audit: type=1400 audit(1741476661.386:1659): avc: denied { write } for pid=22276 comm="syz.7.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1585.618777][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1585.763642][T22269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1585.938890][T22300] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3391'. [ 1586.410023][T22316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1586.997621][T22321] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3398'. [ 1587.387330][T19913] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1587.780871][T22322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1587.878213][T19913] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 1587.893838][T19913] usb 5-1: config 0 has no interface number 0 [ 1587.906320][T19913] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=91.6f [ 1587.926527][ T30] audit: type=1400 audit(1741476664.298:1660): avc: denied { bind } for pid=22348 comm="syz.8.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1587.928108][T19913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.960997][ T30] audit: type=1400 audit(1741476664.298:1661): avc: denied { name_bind } for pid=22348 comm="syz.8.3409" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1587.986381][ T30] audit: type=1400 audit(1741476664.298:1662): avc: denied { node_bind } for pid=22348 comm="syz.8.3409" saddr=224.0.0.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1588.027792][T19913] usb 5-1: config 0 descriptor?? [ 1588.092557][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1588.122489][ T30] audit: type=1400 audit(1741476664.498:1663): avc: denied { ioctl } for pid=22350 comm="syz.7.3411" path="socket:[58175]" dev="sockfs" ino=58175 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1588.210129][ T30] audit: type=1400 audit(1741476664.588:1664): avc: denied { write } for pid=22354 comm="syz.7.3412" path="socket:[58996]" dev="sockfs" ino=58996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1588.277154][T19913] RobotFuzz Open Source InterFace, OSIF 5-1:0.200: version 91.6f found at bus 005 address 015 [ 1588.374313][T22362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3415'. [ 1588.467989][T19913] usb 5-1: USB disconnect, device number 15 [ 1588.510756][T22373] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3419'. [ 1588.564606][ T30] audit: type=1400 audit(1741476664.938:1665): avc: denied { read write } for pid=22376 comm="syz.7.3422" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1588.616206][ T30] audit: type=1400 audit(1741476664.938:1666): avc: denied { open } for pid=22376 comm="syz.7.3422" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1588.657328][T16705] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1588.729839][ T30] audit: type=1400 audit(1741476665.098:1667): avc: denied { setopt } for pid=22380 comm="syz.7.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1588.787397][ T30] audit: type=1400 audit(1741476665.128:1668): avc: denied { write } for pid=22382 comm="syz.8.3424" name="usbmon7" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1589.011726][T16705] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 1589.095529][T16705] usb 7-1: config 0 has no interface number 0 [ 1589.259485][T16705] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1589.281093][T16705] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1589.296961][T16705] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1589.312438][T16705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.328692][T16705] usb 7-1: Product: syz [ 1589.333061][T16705] usb 7-1: Manufacturer: syz [ 1589.342053][T16705] usb 7-1: SerialNumber: syz [ 1589.347413][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1589.375982][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1589.419212][T16705] usb 7-1: config 0 descriptor?? [ 1589.442467][T22363] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1589.475419][T16705] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1589.485309][ T30] audit: type=1400 audit(1741476665.838:1669): avc: denied { getopt } for pid=22391 comm="syz.4.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1589.988807][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1590.014488][T16705] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1590.034430][T16705] usb 7-1: USB disconnect, device number 18 [ 1590.068603][T16705] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1590.097470][T16705] cyberjack 7-1:0.69: device disconnected [ 1590.254500][T22409] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3433'. [ 1590.414350][T22414] bridge3: entered promiscuous mode [ 1590.435995][T22414] bridge3: entered allmulticast mode [ 1590.820363][T19913] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1590.919059][T22423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3438'. [ 1591.930091][T19913] usb 9-1: Using ep0 maxpacket: 16 [ 1591.967595][T19913] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 1591.968066][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1592.260719][T22440] netlink: 'syz.4.3442': attribute type 13 has an invalid length. [ 1592.293684][T22440] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3442'. [ 1592.305986][T19913] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1592.325314][T19913] usb 9-1: Manufacturer: syz [ 1592.354283][T19913] usb 9-1: config 0 descriptor?? [ 1592.360551][T22440] syz_tun: refused to change device tx_queue_len [ 1592.367420][T22440] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1592.399883][T22444] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3444'. [ 1592.424390][T22444] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1592.593980][T19913] usb 9-1: Cannot retrieve CPort count: 0 [ 1592.599939][T19913] usb 9-1: Cannot retrieve CPort count: -5 [ 1592.610008][T19913] es2_ap_driver 9-1:0.0: probe with driver es2_ap_driver failed with error -5 [ 1592.628481][T22455] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3448'. [ 1592.784442][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1592.884266][T19913] usb 9-1: USB disconnect, device number 5 [ 1592.962843][ T9] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 1592.984444][ T9] usb 7-1: config 0 has no interface number 0 [ 1593.001760][ T9] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1593.019393][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1593.019407][ T30] audit: type=1400 audit(1741476669.400:1673): avc: denied { bind } for pid=22477 comm="syz.4.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1593.026209][ T9] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1593.058803][ T9] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1593.070643][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.083425][ T9] usb 7-1: Product: syz [ 1593.088889][ T9] usb 7-1: Manufacturer: syz [ 1593.093552][ T9] usb 7-1: SerialNumber: syz [ 1593.127407][ T9] usb 7-1: config 0 descriptor?? [ 1593.143188][T22451] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1593.154816][ T9] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1593.181860][ T9] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1593.728209][T22484] bridge0: port 4(hsr_slave_1) entered blocking state [ 1593.735212][T22484] bridge0: port 4(hsr_slave_1) entered disabled state [ 1593.742555][T22484] hsr_slave_1: entered allmulticast mode [ 1593.752142][T22484] hsr_slave_1: left allmulticast mode [ 1593.836201][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1594.105327][ T30] audit: type=1400 audit(1741476670.481:1674): avc: denied { setcheckreqprot } for pid=22491 comm="syz.4.3466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1594.115922][T22494] SELinux: syz.4.3466 (22494) set checkreqprot to 1. This is no longer supported. [ 1594.344522][T19913] usb 7-1: USB disconnect, device number 19 [ 1594.378109][T22503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3469'. [ 1594.708721][T22503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3469'. [ 1594.711611][T19913] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1594.745873][T22503] erspan1: entered promiscuous mode [ 1594.751313][T22503] erspan1: entered allmulticast mode [ 1594.760045][T19913] cyberjack 7-1:0.69: device disconnected [ 1594.839226][T22508] syz_tun: entered promiscuous mode [ 1594.846657][T22508] syz_tun: left promiscuous mode [ 1595.103697][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1595.114671][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1595.288903][T22527] overlayfs: empty lowerdir [ 1595.357086][ T30] audit: type=1400 audit(1741476671.742:1675): avc: denied { ioctl } for pid=22529 comm="syz.7.3481" path="socket:[59329]" dev="sockfs" ino=59329 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1595.463872][T22536] syz.6.3482: attempt to access beyond end of device [ 1595.463872][T22536] nbd6: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1595.499279][T22536] EXT4-fs (nbd6): unable to read superblock [ 1595.745922][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1595.951440][T22556] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3494'. [ 1596.398539][ T30] audit: type=1400 audit(1741476672.772:1676): avc: denied { getopt } for pid=22568 comm="syz.6.3498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1596.909450][ T30] audit: type=1400 audit(1741476673.282:1677): avc: denied { setopt } for pid=22576 comm="syz.8.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1596.944854][ T30] audit: type=1400 audit(1741476673.292:1678): avc: denied { ioctl } for pid=22577 comm="syz.6.3501" path="pid:[4026533032]" dev="nsfs" ino=4026533032 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1597.575769][T22593] netlink: 'syz.4.3508': attribute type 2 has an invalid length. [ 1597.646456][ T30] audit: type=1400 audit(1741476674.023:1679): avc: denied { ioctl } for pid=22597 comm="syz.6.3510" path="socket:[60467]" dev="sockfs" ino=60467 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1597.688665][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1597.808033][T22608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3515'. [ 1597.824077][T22605] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3514'. [ 1597.881530][T22605] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3514'. [ 1598.027478][T22618] syz_tun: entered promiscuous mode [ 1598.070891][T22618] syz_tun: left promiscuous mode [ 1598.081247][T22620] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3520'. [ 1598.097327][T22620] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3520'. [ 1598.966057][T22630] netlink: 'syz.8.3524': attribute type 1 has an invalid length. [ 1598.977354][T22630] netlink: 'syz.8.3524': attribute type 2 has an invalid length. [ 1599.328673][T22638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3525'. [ 1599.704723][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1599.835781][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3532'. [ 1599.845311][ T30] audit: type=1400 audit(1741476676.224:1680): avc: denied { setopt } for pid=22647 comm="syz.6.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1600.018452][T22663] openvswitch: netlink: Actions may not be safe on all matching packets [ 1600.221407][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1600.758723][T22677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3545'. [ 1600.913331][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1601.323261][T22698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3549'. [ 1601.503041][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1601.889749][T22700] syz_tun: entered promiscuous mode [ 1601.909374][T22700] syz_tun: left promiscuous mode [ 1602.031203][T22708] vivid-000: disconnect [ 1602.130682][ T30] audit: type=1400 audit(1741476678.515:1681): avc: denied { connect } for pid=22717 comm="syz.4.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1602.212166][T22724] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ¯HcUØîÑË•‚Ž¹+ÕuµŽê!Þ÷œ8¦ [ 1602.429201][ T972] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1602.474320][T22731] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3566'. [ 1602.648195][ T972] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1602.657823][ T972] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.683063][ T972] usb 8-1: Product: syz [ 1602.687260][ T972] usb 8-1: Manufacturer: syz [ 1602.696055][ T972] usb 8-1: SerialNumber: syz [ 1602.708245][ T972] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1602.717095][T22704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1602.722954][ T9] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1602.740536][T22704] vivid-000: reconnect [ 1603.011175][ T972] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1603.063998][T22763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1603.071244][T22763] IPv6: NLM_F_CREATE should be set when creating new route [ 1603.156942][ T30] audit: type=1400 audit(1741476679.536:1682): avc: denied { accept } for pid=22765 comm="syz.5.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1603.172644][T19913] usb 8-1: USB disconnect, device number 7 [ 1603.200657][ T972] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.215808][ T972] usb 5-1: config 0 has no interfaces? [ 1603.229394][ T972] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1603.238864][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.256155][ T972] usb 5-1: config 0 descriptor?? [ 1603.354010][T22770] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3582'. [ 1603.365243][ T30] audit: type=1400 audit(1741476679.736:1683): avc: denied { nlmsg_read } for pid=22769 comm="syz.6.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1603.419850][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1604.191418][ T9] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1604.211021][ T9] ath9k_htc: Failed to initialize the device [ 1604.227984][T19913] usb 8-1: ath9k_htc: USB layer deinitialized [ 1605.038691][T22781] bridge0: port 2(hsr_slave_1) entered blocking state [ 1605.045524][T22781] bridge0: port 2(hsr_slave_1) entered disabled state [ 1605.052465][T22781] hsr_slave_1: entered allmulticast mode [ 1605.059129][T22781] hsr_slave_1: left allmulticast mode [ 1605.280230][T22792] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1605.478162][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1605.639040][T22796] netlink: 200 bytes leftover after parsing attributes in process `syz.8.3589'. [ 1605.800917][T22808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3595'. [ 1606.045958][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1606.260473][T22823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1606.517105][ T30] audit: type=1400 audit(1741476682.878:1684): avc: denied { getopt } for pid=22819 comm="syz.6.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1606.635874][T16705] usb 5-1: USB disconnect, device number 16 [ 1606.646616][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1607.268333][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1607.781294][T22844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1608.202842][T22849] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3608'. [ 1608.297110][T22849] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3608'. [ 1608.332036][T22854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3609'. [ 1608.344401][T22832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1608.356752][T22849] netlink: 'syz.6.3608': attribute type 6 has an invalid length. [ 1608.399763][T22858] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3612'. [ 1608.443596][T22858] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3612'. [ 1608.469491][T22858] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3612'. [ 1608.495494][T22861] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3614'. [ 1608.507633][T22861] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3614'. [ 1608.753927][T22875] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1609.183346][T22885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1609.626881][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1610.101488][T22905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3631'. [ 1610.235827][ T30] audit: type=1400 audit(1741476686.629:1685): avc: denied { shutdown } for pid=22912 comm="syz.5.3636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1610.715017][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1610.821395][T22926] netlink: 'syz.6.3639': attribute type 1 has an invalid length. [ 1611.110476][T22933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1611.738881][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1612.942242][ T9369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1613.062754][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1613.911749][ T30] audit: type=1400 audit(1741476690.291:1686): avc: denied { append } for pid=22927 comm="syz.4.3640" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1614.005446][ T30] audit: type=1400 audit(1741476690.291:1687): avc: denied { map } for pid=22927 comm="syz.4.3640" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1614.059627][ T30] audit: type=1400 audit(1741476690.291:1688): avc: denied { write execute } for pid=22927 comm="syz.4.3640" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1614.141203][T22937] ip6tnl0 speed is unknown, defaulting to 1000 [ 1614.158731][ T30] audit: type=1400 audit(1741476690.551:1689): avc: denied { read } for pid=22927 comm="syz.4.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1614.422739][T22974] syz_tun: entered promiscuous mode [ 1614.437517][T22974] syz_tun: left promiscuous mode [ 1614.797215][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1614.885494][T22984] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3655'. [ 1614.887677][T22937] »»»»»» speed is unknown, defaulting to 1000 [ 1614.928670][T22937] lo speed is unknown, defaulting to 1000 [ 1614.962765][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1614.976203][T22986] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3656'. [ 1615.004454][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1615.031980][ T9] usb 5-1: config 0 has no interface number 0 [ 1615.048709][ T9] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1615.077447][ T9] usb 5-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid maxpacket 65344, setting to 1024 [ 1615.103788][ T9] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1615.206840][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1615.442393][T22937] wlan0 speed is unknown, defaulting to 1000 [ 1615.550788][ T9] usb 5-1: string descriptor 0 read error: -71 [ 1615.560181][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1615.569468][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.585551][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1615.613406][ T9] usb 5-1: config 0 descriptor?? [ 1615.630104][ T9] usb 5-1: can't set config #0, error -71 [ 1615.666239][ T9] usb 5-1: USB disconnect, device number 17 [ 1615.674796][T23003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3663'. [ 1615.733032][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1616.126347][T23026] openvswitch: netlink: Tunnel attr 274 out of range max 16 [ 1616.294712][T23028] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 1616.954811][T23038] bridge1: entered promiscuous mode [ 1616.960076][T23038] bridge1: entered allmulticast mode [ 1617.301762][T23049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1617.961250][ T52] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1618.322215][ T30] audit: type=1400 audit(1741476694.634:1690): avc: denied { getopt } for pid=23063 comm="syz.7.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1618.421615][ T52] usb 7-1: Using ep0 maxpacket: 16 [ 1618.551647][T23073] netlink: 7084 bytes leftover after parsing attributes in process `syz.7.3687'. [ 1618.588946][ T52] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 1618.599316][ T52] usb 7-1: config 0 has no interface number 0 [ 1618.609710][ T52] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1618.619732][ T52] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1618.635041][ T52] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1618.644326][ T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.652452][ T52] usb 7-1: Product: syz [ 1618.656692][ T52] usb 7-1: Manufacturer: syz [ 1618.661384][ T52] usb 7-1: SerialNumber: syz [ 1618.783679][T23078] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 1619.151648][ T52] usb 7-1: config 0 descriptor?? [ 1619.167161][ T9369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1619.178607][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1619.184735][T23056] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1619.203456][T23056] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1619.440065][T23056] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1619.467683][T23056] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1619.857673][T23105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1619.959591][ T52] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1620.167538][ T52] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1620.214343][ T52] asix 7-1:0.251: probe with driver asix failed with error -5 [ 1620.380585][ T52] usb 7-1: USB disconnect, device number 20 [ 1620.850388][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1620.946737][ T30] audit: type=1400 audit(1741476697.335:1691): avc: denied { read } for pid=23124 comm="syz.6.3703" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1621.535348][T23111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1621.540037][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1621.561418][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1621.874116][T23121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1623.665146][T23161] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3714'. [ 1623.871956][T23167] tipc: Started in network mode [ 1623.876836][T23167] tipc: Node identity 1, cluster identity 4711 [ 1623.883028][T23167] tipc: Node number set to 1 [ 1624.372131][ T9369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1624.583093][ T9369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1625.575358][T23182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1625.593636][T23171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1625.641672][T23189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3721'. [ 1625.785116][T19913] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1625.997056][T19913] usb 5-1: Using ep0 maxpacket: 32 [ 1626.015880][T19913] usb 5-1: config 0 has an invalid interface number: 234 but max is 0 [ 1626.034951][T19913] usb 5-1: config 0 has no interface number 0 [ 1626.056987][T19913] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=41.87 [ 1626.081726][T19913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.098001][T19913] usb 5-1: config 0 descriptor?? [ 1626.200104][T23217] nftables ruleset with unbound chain [ 1626.218912][T23218] bridge0: port 3(netdevsim0) entered blocking state [ 1626.225676][T23218] bridge0: port 3(netdevsim0) entered forwarding state [ 1626.232819][T23218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.239934][T23218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1626.247313][T23218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.247515][T19913] yurex 5-1:0.234: Could not find endpoints [ 1626.254389][T23218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1626.278420][T23218] bond0: left promiscuous mode [ 1626.284551][T23218] bond_slave_0: left promiscuous mode [ 1626.290542][T23218] bond_slave_1: left promiscuous mode [ 1626.297234][T23218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1626.314558][T23218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1626.687477][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1626.847055][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1627.091008][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1627.767393][T23232] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3736'. [ 1627.783600][T23234] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3737'. [ 1627.943347][ T52] usb 5-1: USB disconnect, device number 18 [ 1628.374220][T23245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1628.482010][T23261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3747'. [ 1628.790042][T23274] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3756'. [ 1629.392743][T23297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1629.807027][ T30] audit: type=1400 audit(1741476706.209:1692): avc: denied { connect } for pid=23315 comm="syz.7.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1630.308757][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1630.383650][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1632.224300][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1632.234147][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1633.436371][T23370] netlink: 'syz.5.3784': attribute type 7 has an invalid length. [ 1633.462856][T23354] syz_tun: entered promiscuous mode [ 1633.469417][T23354] syz_tun: left promiscuous mode [ 1633.485209][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1633.762841][T23382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1635.912314][T23425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3802'. [ 1635.921599][T23425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3802'. [ 1636.012100][ T5904] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1636.042526][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1636.042618][ T9369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1636.124573][T23433] netlink: 'syz.7.3806': attribute type 1 has an invalid length. [ 1636.173265][ T5904] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1636.186897][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.207351][ T5904] usb 5-1: config 0 descriptor?? [ 1636.219400][ T5904] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1636.469147][T23443] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3807'. [ 1636.866323][ T5904] usb 5-1: Detected FT232B [ 1636.871272][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1636.878515][ T5904] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1636.887946][ T5904] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1636.895777][ T5904] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1636.905383][ T5904] usb 5-1: USB disconnect, device number 19 [ 1636.913577][ T5904] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1636.929260][ T5904] ftdi_sio 5-1:0.0: device disconnected [ 1637.317277][T23455] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 1637.343940][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1637.962190][ T3016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1638.693254][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1640.921739][T23497] xfrm0: entered promiscuous mode [ 1640.930656][T23497] xfrm0: entered allmulticast mode [ 1641.189493][T23512] smb3: Unknown parameter 'rdm!' [ 1641.229203][ T30] audit: type=1400 audit(1741476717.615:1693): avc: denied { ioctl } for pid=23514 comm="syz.7.3835" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1641.478380][T18365] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1641.498885][ T30] audit: type=1400 audit(1741476717.895:1694): avc: denied { write } for pid=23528 comm="syz.5.3844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1642.107061][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1642.118426][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1642.236956][T18365] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 1642.248463][T18365] usb 9-1: config 0 has no interface number 0 [ 1642.272590][T18365] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1642.296589][T18365] usb 9-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1642.322963][T18365] usb 9-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 1642.339908][T18365] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.348858][T18365] usb 9-1: Product: syz [ 1642.353037][T18365] usb 9-1: Manufacturer: syz [ 1642.357627][T18365] usb 9-1: SerialNumber: syz [ 1642.375537][T18365] usb 9-1: config 0 descriptor?? [ 1642.393156][T18365] vmk80xx 9-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 1642.410507][T18365] vmk80xx 9-1:0.255: probe with driver vmk80xx failed with error -22 [ 1642.499272][T23545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1642.642079][T18602] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 1642.652230][ T972] usb 9-1: USB disconnect, device number 6 [ 1642.668852][T23547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3851'. [ 1642.677744][T23547] openvswitch: netlink: EtherType 0 is less than min 600 [ 1642.830658][T23556] CIFS mount error: No usable UNC path provided in device string! [ 1642.830658][T23556] [ 1642.847302][T23557] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3854'. [ 1642.914484][T23556] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1643.123634][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1643.719816][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1643.908748][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1644.113854][T23578] deleting an unspecified loop device is not supported. [ 1644.225068][T23583] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3863'. [ 1644.281879][T23583] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1644.331816][T23588] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3866'. [ 1644.380540][T23588] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3866'. [ 1645.855623][T23611] syz_tun: entered promiscuous mode [ 1645.930257][T23611] syz_tun: left promiscuous mode [ 1646.176619][T23627] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3881'. [ 1646.183200][ T30] audit: type=1400 audit(1741476722.578:1695): avc: denied { write } for pid=23626 comm="syz.5.3881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1646.676867][T18602] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1646.687223][T18602] Bluetooth: hci0: Injecting HCI hardware error event [ 1646.695598][T23634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1646.697281][T18602] Bluetooth: hci0: hardware error 0x00 [ 1647.023737][T23640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1647.081129][T23657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1647.266754][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1647.570905][ T9369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1647.852452][T23666] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1647.956725][ T30] audit: type=1400 audit(1741476724.358:1696): avc: denied { setopt } for pid=23667 comm="syz.6.3891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1647.976711][ C1] vkms_vblank_simulate: vblank timer overrun [ 1649.161117][T18602] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1649.289950][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1649.523933][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1649.738255][T23695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1650.104057][T23699] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3900'. [ 1651.230561][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1651.467382][T23728] netlink: 'syz.8.3906': attribute type 8 has an invalid length. [ 1651.504240][T23728] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3906'. [ 1651.604547][T23732] pim6reg: entered allmulticast mode [ 1651.624236][T23732] pim6reg: left allmulticast mode [ 1651.670632][ T30] audit: type=1400 audit(1741476728.080:1697): avc: denied { connect } for pid=23733 comm="syz.8.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1652.674175][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1652.854009][T23756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1653.373755][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1653.697386][ T30] audit: type=1400 audit(1741476730.111:1698): avc: denied { setopt } for pid=23770 comm="syz.5.3925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1653.752187][ T30] audit: type=1400 audit(1741476730.111:1699): avc: denied { connect } for pid=23770 comm="syz.5.3925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1653.944504][T23775] syz_tun: entered promiscuous mode [ 1653.960445][T23775] syz_tun: left promiscuous mode [ 1654.001544][T23777] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3927'. [ 1654.182611][T23785] IPVS: Unknown mcast interface: vcan0 [ 1654.838334][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1655.127084][T23806] syz_tun: entered promiscuous mode [ 1655.202451][T23806] syz_tun: left promiscuous mode [ 1655.234307][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1655.762287][T23837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1656.109947][T23842] netlink: 'syz.7.3952': attribute type 1 has an invalid length. [ 1656.118425][T23842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1656.272253][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1656.755795][T23855] syz_tun: entered promiscuous mode [ 1657.070757][T23855] syz_tun: left promiscuous mode [ 1657.124585][T23873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3964'. [ 1657.211421][T18365] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1657.313533][T23878] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3966'. [ 1657.407569][T18365] usb 8-1: Using ep0 maxpacket: 8 [ 1657.424336][T18365] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1657.446668][T18365] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1657.471310][T18365] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1657.481251][T18365] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1657.495023][T18365] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1657.525407][T18365] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1657.551403][T18365] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.572849][T23887] netlink: 192 bytes leftover after parsing attributes in process `syz.6.3970'. [ 1657.586421][T23887] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3970'. [ 1657.589579][T18365] usb 8-1: config 0 descriptor?? [ 1657.607192][T23862] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1657.791891][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1657.844330][T23862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.911395][T23862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.941574][T23636] Bluetooth: hci4: unexpected event 0x12 length: 1 < 8 [ 1657.954255][T23636] Bluetooth: hci4: Malformed Event: 0x02 [ 1657.961818][T23636] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 1657.961884][T23636] Bluetooth: hci4: connection err: -111 [ 1658.344181][T18602] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1658.605028][T18365] usb 8-1: USB disconnect, device number 8 [ 1658.974571][T23923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1659.204727][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1659.611030][T19913] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1659.740301][T23945] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3992'. [ 1659.771404][T19913] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1659.787695][T19913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.802432][T19913] usb 8-1: config 0 descriptor?? [ 1659.819871][T19913] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1660.339899][ T972] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1660.351987][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1660.444094][T19913] gspca_cpia1: usb_control_msg 01, error -71 [ 1660.455484][T19913] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 1660.470796][T19913] usb 8-1: USB disconnect, device number 9 [ 1660.532601][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.578678][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.583013][T23979] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4005'. [ 1660.615079][ T972] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1660.634175][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.016382][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1661.026338][ T972] usb 5-1: config 0 descriptor?? [ 1661.450897][ T972] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 1661.475148][ T972] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 1661.489184][ T972] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 1661.506760][ T972] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 1661.524828][ T972] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 1661.589174][ T972] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 1661.609260][ T972] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 1661.633618][ T972] kone 0003:1E7D:2CED.0005: hidraw0: USB HID vff.ff Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 1661.660263][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1661.690516][ T972] usb 5-1: USB disconnect, device number 20 [ 1661.817501][ T30] audit: type=1400 audit(1741476738.225:1700): avc: denied { write } for pid=24005 comm="syz.7.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1662.208909][ T972] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1662.277748][T24015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1662.518900][ T972] usb 8-1: Using ep0 maxpacket: 16 [ 1662.534103][ T972] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1662.649406][ T972] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1662.661894][ T972] usb 8-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1662.674635][ T972] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.692205][ T972] usb 8-1: config 0 descriptor?? [ 1663.166448][ T972] zeroplus 0003:0C12:0030.0006: report_id 0 is invalid [ 1663.174210][ T972] zeroplus 0003:0C12:0030.0006: item 0 0 1 8 parsing failed [ 1663.182004][ T972] zeroplus 0003:0C12:0030.0006: parse failed [ 1663.183226][T24033] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4024'. [ 1663.188010][ T972] zeroplus 0003:0C12:0030.0006: probe with driver zeroplus failed with error -22 [ 1663.594841][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1663.621146][T18365] usb 8-1: USB disconnect, device number 10 [ 1663.814820][T24040] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4026'. [ 1664.086662][T24057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1664.103186][ T30] audit: type=1400 audit(1741476740.457:1701): avc: denied { bind } for pid=24052 comm="syz.4.4032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1664.662914][T24074] syz_tun: entered promiscuous mode [ 1664.688207][T24074] syz_tun: left promiscuous mode [ 1664.828557][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1664.858887][T24076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1665.001271][T24088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4043'. [ 1665.648337][ T30] audit: type=1400 audit(1741476742.067:1702): avc: denied { getopt } for pid=24104 comm="syz.6.4050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1665.667895][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.111233][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1666.224213][ T30] audit: type=1400 audit(1741476742.638:1703): avc: denied { write } for pid=24125 comm="syz.8.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1666.253131][T24121] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4056'. [ 1666.489161][T24132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4051'. [ 1666.855156][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1667.125464][T24143] vivid-000: disconnect [ 1667.146527][ T52] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1667.312280][ T52] usb 9-1: Using ep0 maxpacket: 16 [ 1667.319192][ T52] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.335024][ T52] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1667.351073][ T52] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1667.372816][ T52] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1667.391914][ T52] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.412413][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1667.431234][ T52] usb 9-1: config 0 descriptor?? [ 1667.543082][T24156] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4068'. [ 1667.659183][T24158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1667.847562][T24142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1667.884562][ T52] pyra 0003:1E7D:2C24.0007: hidraw0: USB HID vff.ff Device [HID 1e7d:2c24] on usb-dummy_hcd.8-1/input0 [ 1667.900998][T24142] vivid-000: reconnect [ 1668.156184][T19913] usb 9-1: USB disconnect, device number 7 [ 1669.027348][T24182] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4075'. [ 1669.145700][T24186] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4075'. [ 1669.666741][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1670.413402][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1670.655744][T24207] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1671.575572][T24229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1671.790691][T24218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1671.846325][T18365] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1671.869330][ T9365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1672.035285][T18365] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.046246][T18365] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1672.055824][T18365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.075978][T18365] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1672.097875][T18365] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1672.108367][T24246] vivid-000: disconnect [ 1672.141533][T24237] udevd[24237]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1672.157723][T16705] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1672.291315][ T972] usb 5-1: USB disconnect, device number 21 [ 1672.679881][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1672.698802][T16705] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1672.719399][T16705] usb 9-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1672.732896][T16705] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.742974][T16705] usb 9-1: config 0 descriptor?? [ 1672.754475][T24244] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1672.815953][T24245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1672.837094][T24245] vivid-000: reconnect [ 1673.144741][T15349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1673.175625][T16705] bigben 0003:146B:0902.0008: unexpected rdesc, please submit for review [ 1673.200541][T16705] bigben 0003:146B:0902.0008: unknown main item tag 0x1 [ 1673.228649][T16705] bigben 0003:146B:0902.0008: item fetching failed at offset 2/5 [ 1673.241678][T16705] bigben 0003:146B:0902.0008: parse failed [ 1673.248841][T16705] bigben 0003:146B:0902.0008: probe with driver bigben failed with error -22 [ 1673.415022][T16705] usb 9-1: USB disconnect, device number 8 [ 1673.464805][ T30] audit: type=1400 audit(1741476749.881:1704): avc: denied { read } for pid=24280 comm="syz.4.4106" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1673.602195][ T30] audit: type=1400 audit(1741476750.021:1705): avc: denied { execute } for pid=24289 comm="syz.6.4112" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1673.624928][T24292] openvswitch: netlink: Actions may not be safe on all matching packets [ 1673.688222][T24294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4113'. [ 1673.763696][T19913] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1673.913450][T19913] usb 8-1: Using ep0 maxpacket: 16 [ 1673.922129][T19913] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1673.935513][T19913] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.946232][T19913] usb 8-1: Product: syz [ 1673.953098][T19913] usb 8-1: Manufacturer: syz [ 1673.957820][T19913] usb 8-1: SerialNumber: syz [ 1673.985133][T19913] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1674.001358][T19913] r8152-cfgselector 8-1: config 0 descriptor?? [ 1674.029526][T24305] vivid-000: disconnect [ 1674.203013][ T972] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1674.217824][T19913] r8152-cfgselector 8-1: Needed 1 retries to read version [ 1674.230162][T19913] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1674.246653][T19913] r8152-cfgselector 8-1: bad CDC descriptors [ 1674.274844][T24321] netlink: 1268 bytes leftover after parsing attributes in process `syz.5.4125'. [ 1674.294683][T24321] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1674.374123][ T972] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1674.392528][ T972] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 32896, setting to 64 [ 1674.409214][ T972] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1674.481750][T16705] r8152-cfgselector 8-1: USB disconnect, device number 11 [ 1674.561618][ T972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1674.570240][ T972] usb 7-1: SerialNumber: syz [ 1674.580942][T24308] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1674.957640][T24304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1674.970744][T24308] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1674.980983][T24304] vivid-000: reconnect [ 1675.063992][ T6038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1675.200810][ T972] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1675.229304][ T972] usb-storage 7-1:1.0: USB Mass Storage device detected [ 1675.303526][ T972] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1675.338329][ T972] scsi host1: usb-storage 7-1:1.0 [ 1675.392504][ T972] usb 7-1: USB disconnect, device number 21 [ 1675.639879][T23636] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1675.704967][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1676.110505][T24366] overlay: Bad value for 'upperdir' [ 1676.131986][ T5868] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 1676.184547][T24368] pimreg: entered allmulticast mode [ 1676.205105][T24368] pimreg: left allmulticast mode [ 1676.265889][T24370] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1676.303060][ T5868] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1676.318360][ T5868] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1676.344168][ T5868] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1676.371803][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.416559][ T5868] usb 5-1: config 0 descriptor?? [ 1676.691588][T19913] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1676.832794][ T5868] uclogic 0003:145F:0212.0009: interface is invalid, ignoring [ 1676.966612][T19913] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 1677.492580][ T5868] usb 5-1: USB disconnect, device number 22 [ 1677.541378][T19913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1677.853662][T19913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1677.865044][T19913] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1677.878002][T19913] usb 8-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1677.887137][T19913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.899666][T19913] usb 8-1: config 0 descriptor?? [ 1678.262131][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1678.337003][T19913] kye 0003:0458:0153.000A: item fetching failed at offset 1/5 [ 1678.371063][T19913] kye 0003:0458:0153.000A: parse failed [ 1678.376700][T19913] kye 0003:0458:0153.000A: probe with driver kye failed with error -22 [ 1678.642690][T16705] usb 8-1: USB disconnect, device number 12 [ 1679.145349][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1679.271532][T24432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4168'. [ 1680.106465][T24444] vivid-000: disconnect [ 1680.180360][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1681.359869][T24439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1681.372949][T24439] vivid-000: reconnect [ 1681.572820][ T325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1681.579327][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1681.788784][T24474] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4182'. [ 1682.905450][ T30] audit: type=1400 audit(1741476759.326:1706): avc: denied { map } for pid=24482 comm="syz.5.4187" path="socket:[66006]" dev="sockfs" ino=66006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1682.977277][ T30] audit: type=1400 audit(1741476759.326:1707): avc: denied { read } for pid=24482 comm="syz.5.4187" path="socket:[66006]" dev="sockfs" ino=66006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1683.096344][T19913] hid-generic 0000:7FFFFFFF:0006.000B: unknown main item tag 0x0 [ 1683.292417][T19913] hid-generic 0000:7FFFFFFF:0006.000B: unknown main item tag 0x0 [ 1683.544795][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1683.588894][T19913] hid-generic 0000:7FFFFFFF:0006.000B: unknown main item tag 0x0 [ 1683.596645][T19913] hid-generic 0000:7FFFFFFF:0006.000B: unknown main item tag 0x0 [ 1683.604711][T19913] hid-generic 0000:7FFFFFFF:0006.000B: unknown main item tag 0x0 [ 1683.612693][T19913] hid-generic 0000:7FFFFFFF:0006.000B: unknown main item tag 0x0 [ 1683.620672][T19913] hid-generic 0000:7FFFFFFF:0006.000B: unknown main item tag 0x0 [ 1683.628637][T19913] hid-generic 0000:7FFFFFFF:0006.000B: unknown main item tag 0x0 [ 1683.636357][T19913] hid-generic 0000:7FFFFFFF:0006.000B: unknown main item tag 0x0 [ 1788.555532][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1788.562508][ C0] rcu: 1-...!: (1 GPs behind) idle=7c54/1/0x4000000000000000 softirq=94939/94940 fqs=3 [ 1788.573816][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14462/1:b..l [ 1788.581823][ C0] rcu: (detected by 0, t=10502 jiffies, g=75525, q=263 ncpus=2) [ 1788.589539][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1788.589563][ C1] NMI backtrace for cpu 1 [ 1788.589572][ C1] CPU: 1 UID: 0 PID: 24496 Comm: syz.5.4192 Not tainted 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 1788.589588][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1788.589596][ C1] RIP: 0010:preempt_count_add+0x4e/0x150 [ 1788.589618][ C1] Code: c0 03 65 01 3d 0b 8d 7b 7e 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 dd 00 00 00 8b 15 4d bc 03 19 85 d2 75 0b 65 8b 05 ea 8c 7b 7e <3c> f4 77 6b 65 8b 05 df 8c 7b 7e 25 ff ff ff 7f 39 c3 74 07 5b 5d [ 1788.589631][ C1] RSP: 0018:ffffc90000a28e08 EFLAGS: 00000046 [ 1788.589642][ C1] RAX: 0000000000010001 RBX: 0000000000000001 RCX: 1ffffffff3518114 [ 1788.589651][ C1] RDX: 0000000000000000 RSI: ffffffff81a70f96 RDI: 0000000000000001 [ 1788.589659][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1788.589667][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888059d1d340 [ 1788.589676][ C1] R13: ffff8880b872c880 R14: ffff8880b872c680 R15: ffffffff896aae50 [ 1788.589685][ C1] FS: 0000555561009500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1788.589700][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1788.589709][ C1] CR2: 000000110c3ad128 CR3: 000000003cb92000 CR4: 00000000003526f0 [ 1788.589718][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1788.589727][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1788.589735][ C1] Call Trace: [ 1788.589743][ C1] [ 1788.589749][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1788.589765][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1788.589783][ C1] ? nmi_handle+0x1ac/0x5d0 [ 1788.589802][ C1] ? preempt_count_add+0x4e/0x150 [ 1788.589818][ C1] ? default_do_nmi+0x6a/0x160 [ 1788.589831][ C1] ? exc_nmi+0x170/0x1e0 [ 1788.589843][ C1] ? end_repeat_nmi+0xf/0x53 [ 1788.589861][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1788.589878][ C1] ? __hrtimer_run_queues+0x2b6/0xae0 [ 1788.589892][ C1] ? preempt_count_add+0x4e/0x150 [ 1788.589908][ C1] ? preempt_count_add+0x4e/0x150 [ 1788.589924][ C1] ? preempt_count_add+0x4e/0x150 [ 1788.589940][ C1] [ 1788.589945][ C1] [ 1788.589950][ C1] _raw_spin_lock_irq+0x1a/0x50 [ 1788.589964][ C1] __hrtimer_run_queues+0x2be/0xae0 [ 1788.589979][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1788.589992][ C1] ? read_tsc+0x9/0x20 [ 1788.590008][ C1] hrtimer_interrupt+0x392/0x8e0 [ 1788.590025][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1788.590045][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1788.590062][ C1] [ 1788.590066][ C1] [ 1788.590071][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1788.590094][ C1] RIP: 0010:lock_release+0x3e5/0x6f0 [ 1788.590112][ C1] Code: 7e 83 f8 01 0f 85 fe 01 00 00 9c 58 f6 c4 02 0f 85 e9 01 00 00 48 f7 04 24 00 02 00 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 48 8b 84 24 88 [ 1788.590123][ C1] RSP: 0018:ffffc900047178c8 EFLAGS: 00000206 [ 1788.590134][ C1] RAX: dffffc0000000000 RBX: 1ffff920008e2f1b RCX: ffffc90004717918 [ 1788.590143][ C1] RDX: 1ffff11003e615e4 RSI: ffffffff8b6cfe00 RDI: ffffffff8bd36860 [ 1788.590152][ C1] RBP: ffffffffffffffff R08: 0000000000000000 R09: fffffbfff20c4c42 [ 1788.590160][ C1] R10: ffffffff90626217 R11: 0000000000000000 R12: 0000000000000000 [ 1788.590168][ C1] R13: 0000000000000001 R14: ffff88801f30af28 R15: ffff88801f30a440 [ 1788.590183][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 1788.590202][ C1] ? __pfx_lock_release+0x10/0x10 [ 1788.590218][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1788.590234][ C1] ? lock_acquire+0x2f/0xb0 [ 1788.590251][ C1] ? is_bpf_text_address+0x30/0x1a0 [ 1788.590268][ C1] ? bpf_ksym_find+0x127/0x1c0 [ 1788.590282][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1788.590298][ C1] is_bpf_text_address+0x8f/0x1a0 [ 1788.590316][ C1] kernel_text_address+0x8d/0x100 [ 1788.590335][ C1] __kernel_text_address+0xd/0x40 [ 1788.590351][ C1] unwind_get_return_address+0x59/0xa0 [ 1788.590371][ C1] arch_stack_walk+0xa7/0x100 [ 1788.590387][ C1] stack_trace_save+0x95/0xd0 [ 1788.590401][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1788.590417][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 1788.590435][ C1] kasan_save_stack+0x33/0x60 [ 1788.590449][ C1] ? kasan_save_stack+0x33/0x60 [ 1788.590461][ C1] ? kasan_save_track+0x14/0x30 [ 1788.590473][ C1] ? kasan_save_free_info+0x3b/0x60 [ 1788.590490][ C1] ? __kasan_slab_free+0x51/0x70 [ 1788.590503][ C1] ? kmem_cache_free+0x2e2/0x4d0 [ 1788.590516][ C1] ? security_file_free+0xb9/0x180 [ 1788.590535][ C1] ? __fput+0x556/0xb70 [ 1788.590550][ C1] ? task_work_run+0x14e/0x250 [ 1788.590566][ C1] ? syscall_exit_to_user_mode+0x27b/0x2a0 [ 1788.590582][ C1] ? do_syscall_64+0xda/0x250 [ 1788.590598][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.590626][ C1] kasan_save_track+0x14/0x30 [ 1788.590638][ C1] kasan_save_free_info+0x3b/0x60 [ 1788.590655][ C1] __kasan_slab_free+0x51/0x70 [ 1788.590668][ C1] kmem_cache_free+0x2e2/0x4d0 [ 1788.590681][ C1] ? __dentry_kill+0x471/0x600 [ 1788.590696][ C1] ? security_file_free+0xb9/0x180 [ 1788.590716][ C1] security_file_free+0xb9/0x180 [ 1788.590734][ C1] __fput+0x556/0xb70 [ 1788.590749][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1788.590763][ C1] task_work_run+0x14e/0x250 [ 1788.590780][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1788.590796][ C1] ? __might_fault+0xe3/0x190 [ 1788.590814][ C1] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1788.590830][ C1] do_syscall_64+0xda/0x250 [ 1788.590847][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.590864][ C1] RIP: 0033:0x7f83ca18d169 [ 1788.590876][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1788.590887][ C1] RSP: 002b:00007ffc873b8478 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1788.590899][ C1] RAX: 0000000000000000 RBX: 000000000019b2bb RCX: 00007f83ca18d169 [ 1788.590907][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1788.590914][ C1] RBP: 00007f83ca3a7ba0 R08: 0000000000000001 R09: 00000003873b876f [ 1788.590922][ C1] R10: 00007f83ca000000 R11: 0000000000000246 R12: 00007f83ca3a5fac [ 1788.590930][ C1] R13: 00007f83ca3a5fa0 R14: ffffffffffffffff R15: 00007ffc873b8590 [ 1788.590943][ C1] [ 1788.591559][ C0] task:syz-executor state:R running task stack:23888 pid:14462 tgid:14462 ppid:14431 task_flags:0x400140 flags:0x00004000 [ 1789.219041][ C0] Call Trace: [ 1789.222312][ C0] [ 1789.225238][ C0] __schedule+0xf43/0x5890 [ 1789.229654][ C0] ? page_ext_get+0x260/0x310 [ 1789.234326][ C0] ? page_ext_get+0x34/0x310 [ 1789.238913][ C0] ? __pfx___schedule+0x10/0x10 [ 1789.243762][ C0] ? page_table_check_set.part.0+0x3b8/0x550 [ 1789.249742][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1789.255112][ C0] preempt_schedule_common+0x44/0xc0 [ 1789.260392][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1789.265594][ C0] _raw_spin_unlock+0x3e/0x50 [ 1789.270278][ C0] copy_page_range+0x1e7f/0x5690 [ 1789.275245][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1789.280527][ C0] ? find_held_lock+0x2d/0x110 [ 1789.285290][ C0] ? __pfx_lock_release+0x10/0x10 [ 1789.290315][ C0] ? lock_acquire+0x2f/0xb0 [ 1789.294814][ C0] ? copy_process+0x7c12/0x8c50 [ 1789.299668][ C0] ? down_write+0x14e/0x200 [ 1789.304175][ C0] ? up_write+0x1b2/0x520 [ 1789.308510][ C0] copy_process+0x7ccb/0x8c50 [ 1789.313199][ C0] ? __pfx_copy_process+0x10/0x10 [ 1789.318214][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1789.323015][ C0] kernel_clone+0xfd/0x960 [ 1789.327444][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1789.332661][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1789.337690][ C0] ? reacquire_held_locks+0x20b/0x4c0 [ 1789.343064][ C0] ? do_user_addr_fault+0xdc7/0x13f0 [ 1789.348353][ C0] __do_sys_clone+0xcf/0x120 [ 1789.352939][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 1789.358149][ C0] ? do_user_addr_fault+0x83d/0x13f0 [ 1789.363438][ C0] do_syscall_64+0xcd/0x250 [ 1789.367944][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.373843][ C0] RIP: 0033:0x7fb25dd839d3 [ 1789.378250][ C0] RSP: 002b:00007ffdd7c50c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1789.386661][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb25dd839d3 [ 1789.394643][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1789.402616][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1789.410584][ C0] R10: 00005555906a97d0 R11: 0000000000000246 R12: 0000000000000000 [ 1789.418552][ C0] R13: 00000000000927c0 R14: 000000000019b296 R15: 00007ffdd7c50dc0 [ 1789.426534][ C0] [ 1789.429549][ C0] rcu: rcu_preempt kthread starved for 10495 jiffies! g75525 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1789.440753][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1789.450722][ C0] rcu: RCU grace-period kthread stack dump: [ 1789.456600][ C0] task:rcu_preempt state:R running task stack:27456 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1789.470088][ C0] Call Trace: [ 1789.473358][ C0] [ 1789.476289][ C0] __schedule+0xf43/0x5890 [ 1789.480708][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1789.485917][ C0] ? __pfx___schedule+0x10/0x10 [ 1789.490764][ C0] ? schedule+0x298/0x350 [ 1789.495089][ C0] ? __pfx_lock_release+0x10/0x10 [ 1789.500117][ C0] ? lock_acquire+0x2f/0xb0 [ 1789.504617][ C0] ? schedule+0x1fd/0x350 [ 1789.508945][ C0] schedule+0xe7/0x350 [ 1789.513008][ C0] schedule_timeout+0x124/0x280 [ 1789.517873][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1789.523253][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1789.528547][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1789.534355][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 1789.539827][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1789.544599][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1789.549884][ C0] ? rcu_gp_init+0xc82/0x1630 [ 1789.554565][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1789.559764][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1789.565568][ C0] rcu_gp_kthread+0x271/0x380 [ 1789.570250][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1789.575455][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1789.580654][ C0] ? __kthread_parkme+0x148/0x220 [ 1789.585674][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1789.590873][ C0] kthread+0x3af/0x750 [ 1789.594943][ C0] ? __pfx_kthread+0x10/0x10 [ 1789.599539][ C0] ? __pfx_kthread+0x10/0x10 [ 1789.604128][ C0] ret_from_fork+0x45/0x80 [ 1789.608548][ C0] ? __pfx_kthread+0x10/0x10 [ 1789.613137][ C0] ret_from_fork_asm+0x1a/0x30 [ 1789.617910][ C0] [ 1789.620922][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1789.627236][ C0] CPU: 0 UID: 0 PID: 24504 Comm: modprobe Not tainted 6.14.0-rc5-syzkaller-00218-g2a520073e74f #0 [ 1789.637811][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1789.647858][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70 [ 1789.654015][ C0] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 94 f8 49 7e 65 8b 05 95 f8 49 7e a9 00 01 ff 00 <48> 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 [ 1789.673618][ C0] RSP: 0018:ffffc90003e4fa38 EFLAGS: 00000246 [ 1789.679680][ C0] RAX: 0000000000000002 RBX: ffff8880b8744a80 RCX: ffffffff81add21a [ 1789.687644][ C0] RDX: ffff888028c64880 RSI: 0000000000000000 RDI: 0000000000000005 [ 1789.695608][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1789.703570][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed10170e8951 [ 1789.711534][ C0] R13: 0000000000000001 R14: ffff8880b863fe80 R15: ffff8880b8744a88 [ 1789.719501][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1789.728425][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1789.735003][ C0] CR2: 00007f05fb172440 CR3: 000000000df80000 CR4: 00000000003526f0 [ 1789.742989][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1789.750976][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1789.758951][ C0] Call Trace: [ 1789.762226][ C0] [ 1789.765068][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1789.771397][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1789.776592][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 1789.782056][ C0] ? timekeeping_advance+0x72e/0xa90 [ 1789.787341][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1789.792969][ C0] ? __asan_memcpy+0x3c/0x60 [ 1789.797570][ C0] ? rcu_is_watching+0x12/0xc0 [ 1789.802332][ C0] ? update_process_times+0x178/0x2d0 [ 1789.807704][ C0] ? __pfx_update_process_times+0x10/0x10 [ 1789.813422][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1789.818876][ C0] ? update_wall_time+0x1c/0x40 [ 1789.823726][ C0] ? tick_nohz_handler+0x376/0x530 [ 1789.828834][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1789.834287][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 1789.839660][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1789.845371][ C0] ? read_tsc+0x9/0x20 [ 1789.849443][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 1789.854558][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1789.860714][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1789.866517][ C0] [ 1789.869440][ C0] [ 1789.872364][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1789.878523][ C0] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 1789.884587][ C0] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 1789.890141][ C0] smp_call_function_many_cond+0x4c4/0x12c0 [ 1789.896042][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1789.901236][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1789.906343][ C0] flush_tlb_mm_range+0x271/0x4a0 [ 1789.911367][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1789.916924][ C0] tlb_finish_mmu+0x3c9/0x7b0 [ 1789.921600][ C0] exit_mmap+0x40e/0xba0 [ 1789.925848][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1789.930610][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1789.935390][ C0] __mmput+0x12a/0x410 [ 1789.939461][ C0] mmput+0x62/0x70 [ 1789.943183][ C0] do_exit+0x9ba/0x2d70 [ 1789.947334][ C0] ? do_group_exit+0x1c3/0x2a0 [ 1789.952095][ C0] ? __pfx_lock_release+0x10/0x10 [ 1789.957125][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 1789.962144][ C0] ? __pfx_do_exit+0x10/0x10 [ 1789.966732][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1789.972105][ C0] do_group_exit+0xd3/0x2a0 [ 1789.976607][ C0] __x64_sys_exit_group+0x3e/0x50 [ 1789.981625][ C0] x64_sys_call+0x151f/0x1720 [ 1789.986299][ C0] do_syscall_64+0xcd/0x250 [ 1789.990801][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.996693][ C0] RIP: 0033:0x7f05fb230a90 [ 1790.001102][ C0] Code: Unable to access opcode bytes at 0x7f05fb230a66. [ 1790.008107][ C0] RSP: 002b:00007fff0e733e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1790.016522][ C0] RAX: ffffffffffffffda RBX: 00007f05fb321860 RCX: 00007f05fb230a90 [ 1790.024485][ C0] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000001 [ 1790.032447][ C0] RBP: 00007f05fb321860 R08: 0000000000000001 R09: 0d024e4c24cf512e [ 1790.040410][ C0] R10: 00007fff0e733d40 R11: 0000000000000246 R12: 0000000000000000 [ 1790.048376][ C0] R13: 0000000000000001 R14: 00007f05fb325658 R15: 0000000000000001 [ 1790.056351][ C0]