last executing test programs: 8m56.514749265s ago: executing program 3 (id=372): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x6) 8m46.430012081s ago: executing program 3 (id=377): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8m39.473813696s ago: executing program 3 (id=389): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in6=@remote, 0x0, 0x2f, 0x0, 0x4000, 0xa, 0x60, 0x10}, {0x0, 0x47f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, {}, 0x4, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000844) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) accept$ax25(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @loopback, 0x5}, 0x1c) r4 = dup2(r3, r3) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000140001000000000000dcdf25e000000100000000000000000000000000000000000000000000000000000001000000000007000000008000000000000cb4afbb618e382ff89db1e9bc6d984053ad6bd0c33774a1edee6e51cc90d29e86d2bef5664e2cb3bdaf07a8f879ba44fcc1cca2ac3cc7604a51389604ce5403df39d8b5aac8e54e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x4004044) 8m37.99921305s ago: executing program 1 (id=393): socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket(0x23, 0x5, 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 8m36.639401546s ago: executing program 4 (id=394): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m36.141218814s ago: executing program 1 (id=395): socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000063110c000000000500000095000000800000009500a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r4, 0x8, 0x12}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) munlockall() 8m36.066644454s ago: executing program 3 (id=396): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10002, 0x0) creat(0x0, 0x0) ioperm(0x0, 0xab49, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, &(0x7f00000000c0)=0xfffffffd) 8m34.171553278s ago: executing program 1 (id=397): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x7}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000083000040"]) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r8, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet6(r8, 0x0, 0x1000000, 0x0, 0x0, 0x0) 8m33.928835814s ago: executing program 4 (id=398): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x2, 0xffffffff}]}, {0x0, [0x0]}}, 0x0, 0x2b}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) r1 = socket$nl_route(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r6, 0x25, 0x0, @val=@netfilter}, 0x40) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r6, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r1, r7, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) 8m33.896798414s ago: executing program 2 (id=399): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$urandom(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = epoll_create(0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) pipe(0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 8m33.718255925s ago: executing program 0 (id=400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x62, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x10, 0x4, 0x2, 0x0, 0x932, {[@window={0x3, 0x3, 0x3}, @timestamp={0x8, 0xa, 0x200, 0xb}, @exp_smc={0xfe, 0x6}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x16, @broadcast, 0x1}, @sack={0x5, 0xe, [0x5, 0x9, 0x7f]}]}}}}}}}, 0x0) 8m33.567034097s ago: executing program 0 (id=401): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x6) 8m32.861956358s ago: executing program 3 (id=402): bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) 8m32.024380882s ago: executing program 3 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 8m32.018075525s ago: executing program 0 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(r3) 8m31.911029729s ago: executing program 2 (id=405): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) sendmsg$tipc(r1, &(0x7f00000016c0)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000140)="2bc5184c2012e91a604fd7047dc20318daa2ed8cd7ea1fe465d51d39b722583febebcc85c9797069ffb006dc1d685e26f8ac01c81526f016fbd45e06b574128c015bc8ed8089dce74fe728d461fe72b7c0152b077dc343f5310f0631d187871edc74bd70ea2073e98a6a052976a175c741489cc7cff89b795422dc8f462538830cf04a300a085facbebd0b95a5a928d5a39b69d9eab43610bf68a9f6b21ed746bcb2dd60a889f0b644be52570b04bf6873e2", 0xb2}, {&(0x7f0000000200)="b4f08817e575bfd049d6017493a0b5a7b6aad65d88f55858fa8a16860d49640f3ebc4d411ad3a51abe759dc44037458729550e940a80f68d4d1c634595aeb8b88bc60ca58706616ddce54d8810c7d76310bdc94415c9a191bd194ba1ce3861ad2bf8bd6bb6846f4ef0f2ca4bba325addb7a19171c44b7a7c0824fd2d6a630cf8cc60e568befdeca09e8217c7d44478b6e1cb17e0e7f1446d4c9f56cb5ec381a3fd8cdab4a104aff3ef8bb2808f96e9b7ffba59d7a124ccaa9f1f848a71a375b63ff04e8f2f18bf76a3426c889ab4e4b6d3f3a3a850252097b614326a2dc8900644dc2e5f496bee76aa1a3058ef22b67907aa33743ced3bdb8d8d48405e783aea9db8604c269e3ad3a88293a2b907c34d6148a588827b00099c914e6ba92b283b7b2745c336a67977d906b99f96f776c8f42a7cfb1c10827c0f7d5d178f8fac3dfe46cf23d08c4b18c3d34ff6ec5d500a8e358249d93a4a00ce38e809f9d3e0630ae8e8b0c4344bb3cfb8caaaa835de9b19aa3fc821a633412fd2e66bf5f46fcdaa41189058ce8161952741742774cf4c4bb6c7bb47ba4c8e1abfa671001abb66bfe3b9edb9a3212edefecb1ce3abe4948c17ec298ba58272f70765546d1b6ed4d6e41f2ff5dadbee02df0b7056f76cef27a9effe960b3527d5ca3a188a63ca0aa7e9ef780756db95aa42158d331b4919e22c2c15881dccede861db4683f6a07abdfcdc427b6dbec262ab6abdfecf635a5e8643cb514f14dc4970c3db3f80d6bce8db9cc86512c22642209e3eb5d936309a28e602cfcc4b22a0aea954096fe22bff04eae5a513c3a15356390ff4ef37362db58b8e75289850d82c4632c8b84c05fa174d68bf980a94d7cfad7baaaf7b960ee04571a51c8d453ee53ed7f40c441c5867eb5a9bc7c0f1b6cd9726a33b7b9823b8d522114f5bcf7df96dd623df2c5b13585c4fc1a82729736847b638d87dcb238928ceb75a35df4829a0995545580f8c4983a3aefbf47264c1531f87c8f926766856e47a6f57e413000d76d363ef39500d12aefc83acd4a9ec910f5d021aabd6bec9d76a4bc42834010d7450b5be47a6bde0cd1a3711bc799be26adc6dae9f3417d47d6747185ee2e736dc617386a24aac1672e311c6b81eb5f85e902337a9b08c83edee85aa783a748bcb0745e07b0dc8872f6ebe42f63dd1069877c0e9e9d5327926d2e0ef502f9b9698872edad5ee8e02b12cb0fb41d26bcfff398c05ae4da0a0d0e3c0a1a725253b56a7d2eaf7bd53a47c171e94664cf885d5cf6ad53847d462076b1e43d06f13e426b550787adff2dba6af5d671fa2cdf0593374eabb9095a135890ca9f6615b72408a183b87b40c39ed03030d059713d348ce33e071b9cc12a44ae13c23444b2d4914f796a3678ef9afb2fcd1ec0b557534eaa3b03bef17c959694811c6934f5d92291869da8f90ac827b8c7aa227001df11f34494b5e93e66c739caa08c4def050854b4284845447c95743361a3eed578dd3ce63ad4c3aabad7d19389b8259ce83c25a2edf93a0058b43c91a54bb5001bee6515fc3a739de0f4c3bac2b5818178a8e173aa6e6b175f59491a252fc9a599467ea89385c325a5401418c45b296470e801048ed89ea6805e2a5e6e4c7c364f02fde03841fa456744863413515f54c8f44b195d43d32ba081b2ec09626a823d916ed86a6306a8151ce47ad404be9ffb911807ae5d2defd61cd93a080c50ed71cef06ae4968f97dde0990494bead6ebc755134f39d9a427ae6b0bd3f3f1dc72d0858f8fba5c3cb10afe0ecc4fe6792c981417fec3934c678b019171842fda06966aa7e48c63b85e64ddb06cc3cbc79973367843d594e2369467670e0fca18fe78197f71b8edda39c138ae27491a4b642af0c307b4bb5ee9a73029ede28814682c85dd06059d5c7770d608f24f56c9c45273a59805808807f9475df725c63a82f4f83cb76fbebb2edc3dacf084393276ba08ed8dd4e472a43d65c7f9abfbaaf5d731b8baf87a0dd7578b8d1d2159528e6b361059104da6d3c4328a597e061c8dc44f2e9b6b07b7588de80a7ff032bd41ab08f1c27535321cad02ca8980ac1ae83945172ec88572afe1216f3ac5a601647eefdafd6c9d0d7695fd9ef7954370abbb322a4c970d3bac92ccafdc4207d5022720fe096ead38e26067652d6f1cd7d25f0dfed28f583581f097ab87d3e0a11b90afa62e99999ca56167ebb503d69f0f68a617e9fca2a6868176a38a535af761126fb022d847e689ebbe0a9b339f8f804ecda1fef7cb84b752f041f08132e6a69244eeb795954adff2fc51aa194f74bae487bdf0f79967f47a95f166bc04b78b083f3bc13bc30585861f73c72e7291c04a886b9bd90f902021579e637c04c92eb7325f974d987f981b21a6e2d9715a1175bc96d3014a2cb620ffdfb6b1961ea71cdb89d5821d7caded1e8b5c7b8a8b51a99691291ea78f871def8f0f3b16f32869498d05b8b3ee789286085402890af1945df25f1c10f381bef83ed30d8a90fff06cc8ff8ac9c844c7c08d4502eb2aae1915a7a43ad92e89b0a814a679581c90e4e088e3a56d56964f83372b4de1b7be0b965ef09792167aaff2b037a0dac267657cf650c3a1c955f28c49977b30ccc8e6a2fe6a7f14f8f088f98b5982accb289466cc649243330fb9e362c6205c387c1139297b1a4df4aebda3681476e0e9e7f15cca9384d9cffc5ce1a40130d4022fa487b0f3ae16fcc7bd3546bde17ad6bbb10d901f5738f837504b4580eb906df5b395386534aa10ef6e2413f538a236ad851a559b548a5125fe7df7047ceb1912a05892f9933d4c59ea9a0f1096ae0146599723660e914bcdece5e83a0ae60ccb5a2103867fc58b46031fa42aad55187628a5b603acc3e4b8b44951bcda2917554f1f0834074222552cd1407d77bf2cd5b70ad81cda6cf5dc8c7a329552934155d5fb0f5069171c38b8bfbefcd24e4636aee594ca8ea409ac784de9467a11867d9a8fc88d5efe4d5b22a1698b9e5132f4e8e4ac6d17b7f75958ee27fa755a7f2b3693385bbdc7c523a6646a35a6c277c92cb868c214b7f25616a8586ceb16f0528d0946c7352b605172ff6cf85b2736159e54aa883b94a0e885c8d17a5c71fa2589520b87ebdbef4a27913cc6b3d236ff3aa24dcdfa7f8a03ecbfce2c45ad5c1a34420a4c34bb7eccbbf0e4b40934772151db1acebc98c2d2785e613d83276e4ccfc533fd759eb16d248a48653fd414c4fdbab8501fff5ea667a9017d9c08668d33be78b84ed97a04b893ff0253f8d13430d9f48b5184ef0f74b72ebb080311d66b4934f7c369f312cb1b8a6dab45bcaa9f6301c7035890afbec113c085dc40db93a044b1db8225c7a4b621f6d00b1177ea638f52562742141cafe76c76c8004c0a9089e6474540a7026d94a05392ea640bbe77ddc9145e15a7dd90b7165e8182608aa9ff552b32a248c7dff947ad7d55ce845a0968fe8052debc96e82828ef1cb79dbf299d338528e211215326289a8f8b55b69eca1eeba92e89575d22ec4f4839641d681bee2d47a655d4450d2f944e76ffd68f2504b8daae60f114880b631ca901cfc9e5b95f8008bf1c43b75ae31f595fe58a356dd602b9690b34f5accac859361fedfb2feecdca7a9f3a1fd2b5eca8885acd429ffe7982af987cee6c0b718dc3d287c89ddddaaa83c8c56a0a4a6b6e8faf42890f36e0f7b4569454b81017cca2ea808d8e9e93ce63ebc1159d5268804aa4f074c03ad910f673fc20e8606096f3979695797d6fe65c2d5f2ca39eb756e2ac63523c21cd223402e63494e7c0601a0fe1f5e64c17d465da62065d952f68f45537a35ed7aaef320d5a0acd2b18e59711b808b65aa2f44748353a5b1dd801630bd6e0948ddd160a0b97aea653d022c4b173659042910d98befe1f9ab57b00a127321f0e4544f0fec1bf5bfd822257bcc60bba85562bda1a594d3bbe210271538a0a5d86a2e548d93979b4b27f6c7165e7d16525b8fd93f62fbf062cab056aa6041a6c8532db8d99a7e4e77cedea2fb2d48e88c06cba696664a1b0668d5c4da7928f208b7056390bc14becd8561a30a18d24e13a7c5a6b40199569687c0ed185f3097feb35063dcfe188c97c2b8526f902f2caefc4f26d0ff9c6f5f21c91398a7ee81b8488f227151835623d7a0a008ada70cc464fede8aca2ae2bf03f872461e2123a85950ad8e825603f463829d0aca630b9c9267c601129de661b44157b75ea68e04bcb7752dbb3bffe3aa727688a49521b213c8f4aabaa5e29990a5e8f99a27a87c4a5e96f9e50d55da01d1605a9a07d5d51b08d0bd0f8086dd95351a7b1c62f093bd834e7710381752bdbd89f307d273ee3af84f66a2d60a14e410bc22803b1f051cfe687eb5352ab5574e56a880e1f089accd93061deb4147cca64e90541fa93419b1a1a5b7aecad1382375e1c707748800c7916554e79a5cff8af7a152bc392b83c36c377750e413431d544f073ee396eb80080dc09015a7e68d30e80c64592c86847a2058ce8330064a9550b124786f85f3276efda823fada8e899afcd6380032647a13e41f6663c070c2a0ee270a1d919636ec4a93bfe92aeb873749d1af1f4a23673d40d49c6c77bdb08120c7fe15dbab1d37f3adf629cf1fe0a15ee9c8e3dee5ec44d91def3115a6a799e7b9760d4db7a4e4a015632f2cf850b5ae144dc35fca0bf182a02d698f139e8b86acee664decc7c30a63ddd9303dc3caa065ebccbc1c58e0201db06f41f63d0739c694232e3dd7f46ea72ed61d1758691bb2e2e4ddebdd7f1213ab2969f2221b010fc80e96c763573a8b6abce15f38ae927cefdeb6655524fce032b253c6a1561e791e84bb5d02cf3367c3bed399c7c490adf736c4a469928c1f17e48689786e30f4f06fe82d1ad06a63c4ec15db151e79a32d3f74f983e373bc65b96c7d98926d4af9efd5e9187bad4aa5fe24ad9911d18615cd6df5633504c72b72918d5b17666670ab5e710466c9b023ce358b56686fb27046a4fe2c7ecb59d1ddda6f288e486bbe2dd2ad70b66fbbccf33987ecc5cb0b51df5dfb46274ab409c6b1c9f31b18b9b0e02b25db1e8f6911e1bae6daed3204b19b1db30a82fefa47885ba6c6786fc227ff85b0c7039602a741153aefd72ed242de71b537bd01b47130a78d61f270f197fdedbe98dd0fa8e1306e746d4e7df1a38591e54e738f51de187a6b524081166b2ac705cbf80af70526c30fe921913d7e3b7323dbc7f46e1d2b0d2a3248b69137a40457aa778ddd56d49ac529dc7dea390a1189d2d28f35350d1f8bbcec15fe3b2df7065ed8db0e096534541efb5e96767da332108fcc916de90b88fc9040c51d015d760333c51a7f120fd265678bbf93072fd8915d355ce03a08cadc078cd8120639dc5d1a16ff54ac5c540a2564806be0924cc164c5c61f9d73fc28daecd528e36584d790cafa9d34b238f14cfcc7c8fb1392531bf32bd589af6b67fba5302a8d362afb0e20f52416a83c58155228b606e571f590218543cce7ccd4c790a4ef809616a9d7d264e3ae2908330016ceb4e7c7f9b02b7d3d026053fd0fe3eb5c57e17269a848e76d2b0e563e3602a66cd327372ff5fc15cb66571d000722e825509c694b283a6f23343a3255935e0b9976158fd1d6cc8b2906c0c6bcd02adc45e8dfc174d10d5de9e2166c583a4f6905dcf1935c3b4bc90dc06d2bd5ba2d647d2b31dab60153f790503182c35d9d4e480bd1a5b7088f42dd0f05ab8830966c7c2f7b244aa90bb0fa48f6052dd955baba078", 0x1000}, {&(0x7f0000001200)="fd0d67cb8b129e4f677706e6031c9bac87eaf7bb4444b0d0e0a51029296d8d8b9ec67f67d3eb20d5067b36d63276c17f92ccc26ea0b04f5c3d7ae2576cf8b5299c65802c2fe85c0caa071005688b45628554bee887d54d4829fd2e2743d7bec4de48bec3b95682c235bb9c7aed01d93083f948f1ebd572eea31f89ce765a47ceca7333ee586b52cb695c4de5c68d7fe338c0ecd1c7b81fcd736053b03c251910829fee053ebb79458044f939763d428aed6656c69653523fb5e1c8fdb8ac50ff8606f2c025c81ce98bb55c420a3f75f543642ce24836d15074b6ad", 0xdb}, {&(0x7f0000001300)="5a67df5b214bb5d6bc51c042e85fc1039502e965ca9b199dac554be80a5763104f71d2830f6075871c209ff43f5e80e8d4e968aeedfe1fd1538d0550df6dc1363ea4a95100d64bfdd47ad5ecf6e13f00cec0c8f06e7087d012774ec27466492f00d653e79ac50f2d5e10d50bfc02bb09bd87cb0b5bcaf2f428fe63f20ecf0f8d575bafe2b6b8bfc697daf6f74fbd5e9c2538d18ef2910edde6969101372b2b26260aefb6b7a08ce28bf2a9f62132a2d909f8b1dac57458db31d4218ce7ad541eadd8e65114289f43856c467dae4bba9e8fb78da8ee28e8ce3fa946ec2f48b5f5d84542c0377d", 0xe6}, {&(0x7f0000001400)="517e6aa74714de47d48efcd9a3a689ac7c14f1838eb67d3ed5b69f1b91541837437ff6", 0x23}, {&(0x7f0000001440)="1f98de0ed28e64eeda2ff13179d94ab8be2001cb9cf636a7846bae030f4797537b5d6046b12231c73a0bc11730520e77b6ab89a5f98af3d0dd2cf6634d23928a6c9653e3225604ef7832ad4fba6db4fc9b7156b5f6c05fcb3f531bdd15846b198ed99092628b2a26610af36c81ac7571b7e5ba9433d6e6dc90", 0x79}], 0x6, &(0x7f00000015c0)="ea310ff85515d861d74a1c35617695a270e24a73e6aaa4d2a748dc0a2f1a7efcd8cc206720b0362bb34f87fa490e6822638c89fac42090cb0cff43a47be366397248fae324967773725c4dedabefeed2dbd22aa22da1ac1178ad78e5d476af056d0bdaabc9f2ef38192eb7919e5abc7f91d9fc77959e03e76ce87b69ffac14a2c301b24382aae8acdf2d5d45a04e688231f5b7301e49e055d69a472a4fe330477ee9f8d0ea6c6576e86079f9adf0b36dc17d958ea601af852f2198a1c2f9a07177", 0xc1, 0x1}, 0x54) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40000032, r0, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$kcm(0x29, 0x5, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x4a19, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000002340), &(0x7f00000001c0)) io_uring_enter(r6, 0xc70, 0xe44, 0x0, 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000000000)={'team_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}) 8m29.625693543s ago: executing program 0 (id=406): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in6=@remote, 0x0, 0x2f, 0x0, 0x4000, 0xa, 0x60, 0x10}, {0x0, 0x47f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, {}, 0x4, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000844) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) accept$ax25(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @loopback, 0x5}, 0x1c) r4 = dup2(r3, r3) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000140001000000000000dcdf25e000000100000000000000000000000000000000000000000000000000000001000000000007000000008000000000000cb4afbb618e382ff89db1e9bc6d984053ad6bd0c33774a1edee6e51cc90d29e86d2bef5664e2cb3bdaf07a8f879ba44fcc1cca2ac3cc7604a51389604ce5403df39d8b5aac8e54e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x4004044) 8m29.621906507s ago: executing program 4 (id=407): socket(0x200000100000011, 0xa, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000005010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) 8m29.138786317s ago: executing program 2 (id=408): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0xfffffeee, 0x2, {0x21}}]}}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8m28.97655781s ago: executing program 1 (id=409): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8m22.822700341s ago: executing program 0 (id=410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) 8m22.383893299s ago: executing program 2 (id=411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x62, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x10, 0x4, 0x2, 0x0, 0x932, {[@window={0x3, 0x3, 0x3}, @timestamp={0x8, 0xa, 0x200, 0xb}, @exp_smc={0xfe, 0x6}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x16, @broadcast, 0x1}, @sack={0x5, 0xe, [0x5, 0x9, 0x7f]}]}}}}}}}, 0x0) 8m22.055127462s ago: executing program 4 (id=412): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10002, 0x0) creat(0x0, 0x0) ioperm(0x0, 0xab49, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, &(0x7f00000000c0)=0xfffffffd) 8m22.04286687s ago: executing program 1 (id=413): bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) 8m21.620830367s ago: executing program 2 (id=414): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x9, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000e40)) r5 = epoll_create1(0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000080)={0x98f907, 0x1, @name="c442cbf0f17f6295d56538237405171725451f1eeafeb74016bf0075110d8cd2"}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000", 0x39}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b12020000000000280012800b00010067656e65766500"], 0x58}}, 0x0) io_setup(0x2, &(0x7f0000000100)=0x0) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r5, 0x0}]) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0x10000004}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) 8m19.98045728s ago: executing program 1 (id=415): syz_open_dev$tty1(0xc, 0x4, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 8m19.952239283s ago: executing program 4 (id=416): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10001400200bd2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000007f80)={0x0, 0x0, &(0x7f0000007f40)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2108}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 8m19.635305678s ago: executing program 2 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(r3) 8m18.740446432s ago: executing program 0 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x8}, 0x18) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) 7m57.267576423s ago: executing program 32 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 4m10.746658983s ago: executing program 4 (id=420): syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) close(r3) setuid(0xee01) syz_io_uring_setup(0x109, 0x0, 0x0, &(0x7f0000000080)) chdir(0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, 0x0, 0x0) listen(r5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 3m45.491453003s ago: executing program 33 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x8}, 0x18) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) 3m42.41541717s ago: executing program 34 (id=415): syz_open_dev$tty1(0xc, 0x4, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 3m42.300410463s ago: executing program 35 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(r3) 3m42.213305566s ago: executing program 36 (id=420): syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) close(r3) setuid(0xee01) syz_io_uring_setup(0x109, 0x0, 0x0, &(0x7f0000000080)) chdir(0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, 0x0, 0x0) listen(r5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 30.469027935s ago: executing program 5 (id=985): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x2, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x0, 0xf, 0x80000002, 0x2}, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0xfe8e) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 29.677031579s ago: executing program 9 (id=991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 28.2948274s ago: executing program 9 (id=993): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000225000/0x4000)=nil, 0x4000, 0x1, 0x110, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1813c1, 0xa5) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000040)={0xa, {"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", 0x1000}}, 0x1006) 28.291884902s ago: executing program 8 (id=994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb00000000085308"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) shutdown(r0, 0x1) 28.143396719s ago: executing program 7 (id=996): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 28.037787986s ago: executing program 9 (id=997): mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x58) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x8002, 0x0) read$msr(r1, &(0x7f0000019540)=""/102400, 0x19000) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c8000000", @ANYBLOB, @ANYRES32, @ANYBLOB="04001900080015"], 0xc8}}, 0x40000) mount(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x47ef70bc3f47aed4, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd) 27.091103704s ago: executing program 7 (id=999): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10001400200bd2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000007f80)={0x0, 0x0, &(0x7f0000007f40)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2108}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 26.993098574s ago: executing program 7 (id=1000): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in6=@remote, 0x0, 0x2f, 0x0, 0x4000, 0xa, 0x60, 0x10}, {0x0, 0x47f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, {}, 0x4, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000844) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) accept$ax25(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @loopback, 0x5}, 0x1c) r4 = dup2(r3, r3) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000140001000000000000dcdf25e000000100000000000000000000000000000000000000000000000000000001000000000007000000008000000000000cb4afbb618e382ff89db1e9bc6d984053ad6bd0c33774a1edee6e51cc90d29e86d2bef5664e2cb3bdaf07a8f879ba44fcc1cca2ac3cc7604a51389604ce5403df39d8b5aac8e54e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x4004044) 26.978538993s ago: executing program 9 (id=1001): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYBLOB="ad4300000000010000000f"], 0x14}, 0x1, 0x0, 0x0, 0x20040054}, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x578410eb) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf256c00000008000300", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) process_vm_readv(r3, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @random="390d42607512", @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "20919d", 0x8, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x10}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, {[], {0x4e22, 0x4e20, 0x8}}}}}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3e, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000100)) 26.950625889s ago: executing program 6 (id=1002): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c2100080003", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) 26.490095808s ago: executing program 7 (id=1003): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, 0x0, 0xc2d41, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x85, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004001}, 0x24044018) 26.433473797s ago: executing program 6 (id=1004): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 25.43851693s ago: executing program 6 (id=1005): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10002, 0x0) creat(0x0, 0x0) ioperm(0x0, 0xab49, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCGETS2(r4, 0x5405, 0x0) 25.38385237s ago: executing program 5 (id=1006): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYBLOB="ad4300000000010000000f"], 0x14}, 0x1, 0x0, 0x0, 0x20040054}, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf256c00000008000300", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) process_vm_readv(r1, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @random="390d42607512", @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "20919d", 0x8, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x10}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, {[], {0x4e22, 0x4e20, 0x8}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3e, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000100)) 25.382239881s ago: executing program 7 (id=1007): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007500)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x68034) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000880)={0x0, 0x3}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000900)={r4, 0x8000, 0x0, 0x8000000000000000, 0x1}, &(0x7f0000000940)=0x18) writev(r1, &(0x7f0000000800)=[{&(0x7f00000000c0)="f53a6558b6f060d9e13c953703129556b085d1ceca1cd4fe674cfa02411a7be54f2caa1b923c0cc8fdfef6f8780b5d98a03b317e7b2573f2", 0x38}, {&(0x7f00000002c0)="160eaaea1b773f0aa38f951be296d92f234e0a0c8ca310cd1ca1133df1a247608c97329404e60d62c32379ce932ab00109b496513643135a65297ad502e2cb1d349aeb223a04cf4a5a766207c9a578c95a2ef44ccdca86caebaf5cb067e57280a0fca78ad88fe778ce81ecb58d0e989da354d327214d68e11f1581a34265ba5fcda050ce31fa0c4969d8422d177ce1ea5605b68366da7883b0887f23e999101ceba6906161e8786cd23a6629ec3f9d63e3e8c949682c7efb2fd2", 0xba}, {&(0x7f0000000380)="d7601fcf5ae18a949b43f53353c97b20a2b390127d361332cd82457a99bf545b6a33777b4d6e52eb4aa888f648ca3597b04e394fb96ddb13f92ef87d5779e63a6fab36f7e0181dd67ec887da4d546f754583da4748ac24ef90e6c3a8b7edaba70faf742d4526f9a0fda9e58d78c164ebb9667e8a909cf0f8abb8d35bb0a9e9ee9690b1d4325a17ec5dd430890e3c8e", 0x8f}, {&(0x7f0000000440)="e5f24092f2a9c2adc859c570279a0199685295c3bf164f8ccda8684cd5363a32f8cbf6c7d334c38d8d7e6eac70dd902cacfdc0c77f085e4d020e47057e3abc350286018ea2f4175832e773f4e55c8129b079e7000ec51aa5a1dfb9aace1bb6357b31fe2e7ea5cba8c3bcabd350b0b5354c700db25080e742fa2e5ac412e60a96179a3452fa8856f9485aa298eab6f2026ca92df059247a6f1f03b858c879e26867067fb5a5b3894fba4c019201a821884557c17ac3ed46edee93e358ed488fca7f78", 0xc2}, {&(0x7f0000000540)="7b9f6cfe6022dc78030872cfa55755ad4c13f3473ec0874148d21f32ed31065f9b47ad2caf9bdd75922ae7fe91f464a4abd3748f5a42106908eb9eece874b2e1e6b90590186ea6ef30ab53c4eea6d7e329edd6072e8240452a7dccb79ded81e5f91b1fd7281ecb539fdbb2fb53faeb14a0fe4a58792ecb5cd8c302ac4dfa6751579846c5d08f34ba0b4855d3a5dad5b6c442803952fcf59828c23c887d1a37ce40bf26ef0ab7fcd8e598971fd136b4b1e57f442c73442bf73a4ac55138169d14b26960ae", 0xc4}, {&(0x7f0000000640)="edfe25a7fafa83fe9c63b4d5f4782c6972a88d53223c040e7aedc0be64525682d3e81c96f87984b6c9d7800b9535e6c1e65c1255ffc1a530cdae37ef75e5dbad8d85f8de04cf3253f8d874cd657bb89cc2b373b3a9c686707284cadb7a228c14f6b78d55f97936dd2b4f2b2d71d56689891ca2da5b2bd61a5d44a97c591dd3047554c2521d767911a3da9171d8ebc9178fdec73c05982101eed086c107913cbecec3a154f0", 0xa5}, {&(0x7f0000000140)="1fe02c9adb3a4885ed91f2f22cb55dce2e471338cd7e78710bdaffc2249099c22a8e1e40d94e1ecc8dce58568d3212189163169809e975730cc29a1fb4098766f6c312ff96a672ff6c6ef6d2e7faaa34282dfc8926f3b4bbe6bc686c12c5f4d23dcc09", 0x63}, {&(0x7f0000000700)="9593619e1dfd249d8a1d97c7f6a8035b958044c8400836719b925ec50c74f6b1b5f0321ecfa9ee94971b107939212ddb4fd1bd270813a352b4b5df5dd6b6df94edf3eadf337a548ed91ff45c792fdb91b59ee57972676831aba5e8321da69a08a43197103d75c04c041f41cb02933e8d42468fd2fbc7421b975096e25cedce4d02c3ce00c7187e07a0e3d341211a7208970247d6c7fdf7628a496dda4db98fc4eeecf2962e660e4fff514f0854df7cc2f44d15060098e25d61", 0xb9}], 0x8) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000980), 0x1, 0x0) writev(r5, &(0x7f00000009c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)}], 0x2) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r6, 0x8926, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r7, 0x0, 0x0, 0x60, 0x0, 0x0) r9 = socket(0xa, 0x2, 0x0) r10 = dup(r9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000280), &(0x7f0000000080)=r10}, 0x20) recvmmsg(r10, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x72c}], 0x1, 0x2000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) 24.95680533s ago: executing program 8 (id=1008): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0xfffffeee, 0x2, {0x21}}]}}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 24.903340852s ago: executing program 9 (id=1009): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584", @ANYBLOB="f327"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 24.813962578s ago: executing program 5 (id=1010): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10001400200bd2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000007f80)={0x0, 0x0, &(0x7f0000007f40)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2108}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 24.798254556s ago: executing program 8 (id=1011): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 24.740596212s ago: executing program 5 (id=1012): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 24.632969685s ago: executing program 5 (id=1013): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x108001, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000280)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000002b40), &(0x7f0000002b80)=0x30) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000180)='user\x00', &(0x7f00000002c0)='\x00\x00E\x01\x00\x00\f\x01\x00\x00\x00\x00\x00\xc1~\x99l\xb7\xd6\xfc\xebw1hn\x1a\xc5\xef\xec,\xa1\xa0\x12\x1c\x7fn\a\\\xec\xd8\x94oh\x1d\xec\xf5jb\xe5\xb2\xa2e\xfd\x9c\xc4\xd22\x9c\xe97#(/\xb1\xe6\x03\xe1\xaa\x96\x92\x8b4}\xc1L\x1b\x9b\xe6n\x97\xc7\x06\xb2Y\xadQ\xa4c\x1b&\x0e?\xc0\x90\xaf\xb29\xf6>\xe1\xe8}D\f\xc1u\xab]$\x1b\x1bt\xda\x9eA\xd3\x1b\x12A\x82\xd5\xa8@\x1eIw\xb2y2F\xe8\xc7\x03e&\x98\"9\t\xe0\x81Pj\xee&\xae{P\xe8\xceL\xe1\xd1V\xc7\xeaF\xd54\x80\xb6%\xaf\xbbK\x85\x95\xf2\x1bG\xf1\xdaq:\xae\xe22\\~j~\xfe\x83\xbb>\xb0\x9b.\xa4\x95\x0eY\xb8j\xe1M\xf5\xa5\x87`\x04\xab\xf1\xc7[\xda{\r\x95\xa4\xea^\xfc\xa7\x8b\x85\xd1ld\xacK\x8aqd\x1d\xaa\x99\xeb\t|@\xd5p\x1d>+\x0e\xec\xe2\xcd\xdc\x8f\x01\xf7\xabH=z\xa5x\x1b\x9f\x95\xd1\x88k\x85L#\x99^p\x18\x98\xec6\xf69y\x052', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[], 0xc8}}, 0x0) syslog(0x9, 0x0, 0x0) 24.274685571s ago: executing program 6 (id=1014): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 23.869684584s ago: executing program 8 (id=1015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x4, 0x2, 0x0, 0x932, {[@window={0x3, 0x3, 0x3}, @exp_smc={0xfe, 0x6}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x16, @broadcast, 0x1}, @sack={0x5, 0xe, [0x5, 0x9, 0x7f]}]}}}}}}}, 0x0) 23.719071119s ago: executing program 8 (id=1016): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 23.717542893s ago: executing program 5 (id=1017): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x2, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x0, 0xf, 0x80000002, 0x2}, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0xfe8e) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22.760633952s ago: executing program 6 (id=1018): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) 22.708694558s ago: executing program 8 (id=1019): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb00000000085308"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) shutdown(r0, 0x1) 22.009952808s ago: executing program 9 (id=1020): read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4c895) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000001c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r2 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_io_uring_setup(0x3136, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x21b}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r7, r3) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x19, 0x2, {0x82d, {0x4, 0x0, 0x8}, 0x25, r0, r8, 0xa, 0x6, 0x7fd, 0x9, 0x101, 0x4, 0xfffffffbfffffffd, 0xf, 0x400007ea9, 0x7fffffffffffffff, 0x1, 0x400, 0x8, 0x3, 0x3}}, 0xa0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, 0x0) 15.946450419s ago: executing program 7 (id=1021): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x578410eb) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf256c00000008000300", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) process_vm_readv(r3, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @random="390d42607512", @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "20919d", 0x8, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x10}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, {[], {0x4e22, 0x4e20, 0x8}}}}}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3e, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000100)) 0s ago: executing program 6 (id=1022): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x20040c1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): xt=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 143.240262][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.720834][ T30] audit: type=1400 audit(1751715002.031:280): avc: denied { unlink } for pid=6885 comm="syz.4.321" name="#1" dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.743478][ T30] audit: type=1400 audit(1751715002.531:281): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 143.978898][ T5940] lenovo 0003:17EF:6047.0007: Sensitivity setting failed: -71 [ 145.336152][ T5940] usb 3-1: USB disconnect, device number 8 [ 146.098058][ T6896] fido_id[6896]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:17EF:6047.0007/report_descriptor': No such file or directory [ 146.200897][ T30] audit: type=1400 audit(1751715005.101:282): avc: denied { getopt } for pid=6903 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.334482][ T30] audit: type=1400 audit(1751715005.251:283): avc: denied { getopt } for pid=6911 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.906225][ T6931] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 147.971494][ T30] audit: type=1400 audit(1751715006.891:284): avc: denied { bind } for pid=6929 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.071887][ T30] audit: type=1400 audit(1751715006.891:285): avc: denied { node_bind } for pid=6929 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 148.572011][ T30] audit: type=1400 audit(1751715007.491:286): avc: denied { setopt } for pid=6944 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 148.865716][ T5939] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 149.045356][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 149.119165][ T5939] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 149.265230][ T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 149.346907][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.357255][ T5939] usb 3-1: config 0 descriptor?? [ 150.257183][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 150.312943][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 150.357490][ T43] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 150.403039][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.427104][ T5939] usbhid 3-1:0.0: can't add hid device: -71 [ 150.435136][ T5939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 150.447711][ T5939] usb 3-1: USB disconnect, device number 9 [ 150.468014][ T43] usb 4-1: config 0 descriptor?? [ 151.119242][ T43] corsair-psu 0003:1B1C:1C09.0008: unknown main item tag 0x0 [ 151.127206][ T43] corsair-psu 0003:1B1C:1C09.0008: unknown main item tag 0x0 [ 151.132868][ T30] audit: type=1400 audit(1751715010.041:287): avc: denied { write } for pid=6987 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 151.134671][ T43] corsair-psu 0003:1B1C:1C09.0008: unknown main item tag 0x0 [ 151.162808][ T43] corsair-psu 0003:1B1C:1C09.0008: unknown main item tag 0x0 [ 151.170276][ T43] corsair-psu 0003:1B1C:1C09.0008: unknown main item tag 0x0 [ 151.776117][ T43] corsair-psu 0003:1B1C:1C09.0008: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 151.926717][ T43] corsair-psu 0003:1B1C:1C09.0008: unable to initialize device (-71) [ 151.978969][ T43] corsair-psu 0003:1B1C:1C09.0008: probe with driver corsair-psu failed with error -71 [ 152.040518][ T43] usb 4-1: USB disconnect, device number 15 [ 152.427970][ T7015] bridge0: entered promiscuous mode [ 152.433649][ T7015] vlan2: entered promiscuous mode [ 154.615142][ T5939] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 154.776618][ T5939] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 154.871029][ T5939] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 154.913842][ T5939] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 155.282360][ T5939] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 155.328845][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 155.576714][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.371'. [ 156.944602][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 157.075110][ T5939] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 161.024989][ C1] sched: DL replenish lagged too much [ 163.265124][ T5939] usb 1-1: string descriptor 0 read error: -71 [ 163.862828][ T5939] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 164.924983][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.096011][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 165.119278][ T5939] usb 1-1: config 0 descriptor?? [ 165.325122][ T5939] usb 1-1: can't set config #0, error -71 [ 165.369229][ T5939] usb 1-1: USB disconnect, device number 8 [ 169.613724][ T7110] macvlan2: entered promiscuous mode [ 169.683504][ T7110] macvlan2: entered allmulticast mode [ 169.794845][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 172.980770][ T7138] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 174.823858][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 176.507281][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 176.551439][ T7163] 8021q: VLANs not supported on vcan0 [ 179.159001][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 179.279533][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 179.405062][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.398'. [ 179.645208][ T7189] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 179.981938][ T7178] hsr_slave_1 (unregistering): left promiscuous mode [ 183.278527][ T30] audit: type=1400 audit(1751715042.201:288): avc: denied { watch watch_reads } for pid=7200 comm="syz.2.405" path="pipe:[3867]" dev="pipefs" ino=3867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 183.380718][ T7204] random: crng reseeded on system resumption [ 183.470320][ T30] audit: type=1400 audit(1751715042.201:289): avc: denied { read write } for pid=7200 comm="syz.2.405" name="mouse0" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 183.499532][ T30] audit: type=1400 audit(1751715042.201:290): avc: denied { open } for pid=7200 comm="syz.2.405" path="/dev/input/mouse0" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 183.523862][ T30] audit: type=1400 audit(1751715042.301:291): avc: denied { create } for pid=7200 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 183.543432][ T30] audit: type=1400 audit(1751715042.301:292): avc: denied { create } for pid=7200 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 184.009468][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'. [ 184.795466][ T30] audit: type=1400 audit(1751715042.301:293): avc: denied { append } for pid=7200 comm="syz.2.405" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 184.914607][ T7212] macvlan3: entered promiscuous mode [ 184.937724][ T30] audit: type=1400 audit(1751715042.301:294): avc: denied { open } for pid=7200 comm="syz.2.405" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 185.112728][ T7212] macvlan3: entered allmulticast mode [ 186.101613][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 187.958084][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 187.987202][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 187.993269][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 189.925109][ T30] audit: type=1400 audit(1751715042.321:295): avc: denied { relabelfrom } for pid=7200 comm="syz.2.405" name="" dev="pipefs" ino=11329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 192.681420][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.414'. [ 192.690650][ T7236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.414'. [ 193.880616][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.905111][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.382987][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 255.508965][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.527357][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.285680][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.297760][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.597017][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.609593][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.718586][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.736857][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.655064][ T7264] syz_tun (unregistering): left promiscuous mode [ 471.679980][ T30] audit: type=1400 audit(1751715330.601:296): avc: denied { ioctl } for pid=7281 comm="syz-executor" path="socket:[10063]" dev="sockfs" ino=10063 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 471.681399][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 471.747511][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 471.778175][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 471.778224][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 471.794170][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 471.802415][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 471.812812][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 471.821392][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 471.887881][ T7083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.901171][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 471.919015][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 471.927951][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 471.943557][ T30] audit: type=1400 audit(1751715330.861:297): avc: denied { mounton } for pid=7283 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 471.966757][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 471.985119][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 471.995104][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 472.002828][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 472.082258][ T7083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.093801][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.104093][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 472.116254][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 472.116276][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.124744][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 472.138094][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 472.148359][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 472.151717][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 472.163354][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 472.179294][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 472.212904][ T7083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.318098][ T7083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.634910][ T30] audit: type=1400 audit(1751715331.551:298): avc: denied { search } for pid=5497 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.660781][ T30] audit: type=1400 audit(1751715331.551:299): avc: denied { search } for pid=5497 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.695369][ T30] audit: type=1400 audit(1751715331.551:300): avc: denied { search } for pid=5497 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.727038][ T30] audit: type=1400 audit(1751715331.561:301): avc: denied { read } for pid=5497 comm="dhcpcd" name="n100" dev="tmpfs" ino=3511 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 472.776674][ T30] audit: type=1400 audit(1751715331.561:302): avc: denied { open } for pid=5497 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3511 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 472.812384][ T30] audit: type=1400 audit(1751715331.561:303): avc: denied { getattr } for pid=5497 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3511 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 472.870640][ T7083] bridge_slave_1: left allmulticast mode [ 472.881446][ T7083] bridge_slave_1: left promiscuous mode [ 472.890406][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.906815][ T7083] bridge_slave_0: left allmulticast mode [ 472.912492][ T7083] bridge_slave_0: left promiscuous mode [ 472.918642][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.138511][ T7083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.149164][ T7083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.158812][ T7083] bond0 (unregistering): Released all slaves [ 473.175388][ T7289] chnl_net:caif_netlink_parms(): no params data found [ 473.200878][ T7283] chnl_net:caif_netlink_parms(): no params data found [ 473.284064][ T30] audit: type=1400 audit(1751715332.201:304): avc: denied { read open } for pid=7307 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.324431][ T30] audit: type=1400 audit(1751715332.201:305): avc: denied { getattr } for pid=7307 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.371477][ T7281] chnl_net:caif_netlink_parms(): no params data found [ 473.443476][ T7287] chnl_net:caif_netlink_parms(): no params data found [ 473.778711][ T7083] hsr_slave_0: left promiscuous mode [ 473.792156][ T7083] hsr_slave_1: left promiscuous mode [ 473.800686][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.813633][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.822286][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.834532][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.849175][ T7083] veth1_macvtap: left promiscuous mode [ 473.855899][ T7083] veth0_macvtap: left promiscuous mode [ 473.861537][ T7083] veth1_vlan: left promiscuous mode [ 473.867145][ T7083] veth0_vlan: left promiscuous mode [ 474.017438][ T5837] Bluetooth: hci1: command tx timeout [ 474.097465][ T5837] Bluetooth: hci2: command tx timeout [ 474.106859][ T5837] Bluetooth: hci0: command tx timeout [ 474.147702][ T7083] team0 (unregistering): Port device team_slave_1 removed [ 474.183003][ T7083] team0 (unregistering): Port device team_slave_0 removed [ 474.259418][ T5828] Bluetooth: hci3: command tx timeout [ 474.262963][ T5837] Bluetooth: hci4: command tx timeout [ 474.521816][ T7285] chnl_net:caif_netlink_parms(): no params data found [ 474.560560][ T7289] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.571095][ T7289] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.578702][ T7289] bridge_slave_0: entered allmulticast mode [ 474.586012][ T7289] bridge_slave_0: entered promiscuous mode [ 474.592733][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.601123][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.608436][ T7283] bridge_slave_0: entered allmulticast mode [ 474.615352][ T7283] bridge_slave_0: entered promiscuous mode [ 474.655358][ T7287] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.662497][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.669745][ T7287] bridge_slave_0: entered allmulticast mode [ 474.676984][ T7287] bridge_slave_0: entered promiscuous mode [ 474.695826][ T7289] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.703601][ T7289] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.713787][ T7289] bridge_slave_1: entered allmulticast mode [ 474.720701][ T7289] bridge_slave_1: entered promiscuous mode [ 474.728223][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.737031][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.744150][ T7283] bridge_slave_1: entered allmulticast mode [ 474.751940][ T7283] bridge_slave_1: entered promiscuous mode [ 474.780861][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.788021][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.795274][ T7287] bridge_slave_1: entered allmulticast mode [ 474.802401][ T7287] bridge_slave_1: entered promiscuous mode [ 474.812645][ T7281] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.824704][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.832418][ T7281] bridge_slave_0: entered allmulticast mode [ 474.839872][ T7281] bridge_slave_0: entered promiscuous mode [ 474.870850][ T7283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.883324][ T7283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.909464][ T7281] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.916841][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.923975][ T7281] bridge_slave_1: entered allmulticast mode [ 474.931103][ T7281] bridge_slave_1: entered promiscuous mode [ 474.941940][ T7289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.957381][ T7289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.000497][ T7287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.031251][ T7281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.072290][ T7283] team0: Port device team_slave_0 added [ 475.089559][ T7287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.111453][ T7281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.135288][ T7289] team0: Port device team_slave_0 added [ 475.147182][ T7283] team0: Port device team_slave_1 added [ 475.184499][ T7289] team0: Port device team_slave_1 added [ 475.225687][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.232688][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.259817][ T7283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.273024][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.281026][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.288327][ T7285] bridge_slave_0: entered allmulticast mode [ 475.299746][ T7285] bridge_slave_0: entered promiscuous mode [ 475.309391][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.323077][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.332417][ T7285] bridge_slave_1: entered allmulticast mode [ 475.341528][ T7285] bridge_slave_1: entered promiscuous mode [ 475.352924][ T7287] team0: Port device team_slave_0 added [ 475.364398][ T7287] team0: Port device team_slave_1 added [ 475.383600][ T7281] team0: Port device team_slave_0 added [ 475.399103][ T7281] team0: Port device team_slave_1 added [ 475.422844][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.430258][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.456394][ T7283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.575560][ T7285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.631872][ T7281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.640941][ T7281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.669901][ T7281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.701550][ T7289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.711298][ T7289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.738523][ T7289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.751176][ T7285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.771741][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.781236][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.808917][ T7287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.821275][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.829326][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.855620][ T7287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.868076][ T7281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.875162][ T7281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.901408][ T7281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.941650][ T7289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.949421][ T7289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.975865][ T7289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.007116][ T7285] team0: Port device team_slave_0 added [ 476.023396][ T7283] hsr_slave_0: entered promiscuous mode [ 476.029949][ T7283] hsr_slave_1: entered promiscuous mode [ 476.037358][ T7283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.045191][ T7283] Cannot create hsr debugfs directory [ 476.065534][ T7285] team0: Port device team_slave_1 added [ 476.095512][ T5837] Bluetooth: hci1: command tx timeout [ 476.175051][ T5837] Bluetooth: hci0: command tx timeout [ 476.175312][ T5828] Bluetooth: hci2: command tx timeout [ 476.195776][ T7083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.225539][ T7289] hsr_slave_0: entered promiscuous mode [ 476.231749][ T7289] hsr_slave_1: entered promiscuous mode [ 476.238975][ T7289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.246620][ T7289] Cannot create hsr debugfs directory [ 476.260629][ T7287] hsr_slave_0: entered promiscuous mode [ 476.266907][ T7287] hsr_slave_1: entered promiscuous mode [ 476.272762][ T7287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.281058][ T7287] Cannot create hsr debugfs directory [ 476.287454][ T7285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.294418][ T7285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.321151][ T7285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.333756][ T7285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.334957][ T5828] Bluetooth: hci3: command tx timeout [ 476.341506][ T5837] Bluetooth: hci4: command tx timeout [ 476.352115][ T7285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.378415][ T7285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.428402][ T7083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.452572][ T7281] hsr_slave_0: entered promiscuous mode [ 476.461008][ T7281] hsr_slave_1: entered promiscuous mode [ 476.467004][ T7281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.474545][ T7281] Cannot create hsr debugfs directory [ 476.508074][ T7083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.630454][ T7083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.798511][ T7285] hsr_slave_0: entered promiscuous mode [ 476.807901][ T7285] hsr_slave_1: entered promiscuous mode [ 476.814185][ T7285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.829240][ T7285] Cannot create hsr debugfs directory [ 477.278912][ T7083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.337085][ T7283] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 477.382385][ T7283] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 477.407303][ T7083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.433926][ T7283] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 477.456175][ T7283] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 477.531414][ T7083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.598411][ T7083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.632868][ T7289] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 477.653054][ T7289] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 477.672136][ T7289] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 477.708941][ T7289] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 477.879024][ T7281] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 477.910946][ T7083] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.930844][ T7281] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 477.941693][ T7281] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 477.954678][ T7281] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 478.003007][ T7083] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.031733][ T7283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.083301][ T7083] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.103543][ T7287] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 478.133970][ T7283] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.143050][ T7287] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 478.168911][ T7083] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.179830][ T5837] Bluetooth: hci1: command tx timeout [ 478.190298][ T7287] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 478.204133][ T7287] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 478.235925][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.243018][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.255666][ T5828] Bluetooth: hci0: command tx timeout [ 478.255663][ T5837] Bluetooth: hci2: command tx timeout [ 478.330360][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.337492][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.403114][ T7285] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 478.419045][ T5828] Bluetooth: hci3: command tx timeout [ 478.419072][ T5837] Bluetooth: hci4: command tx timeout [ 478.474463][ T7285] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 478.503690][ T7285] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 478.522452][ T7285] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 478.621972][ T7287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.648687][ T7289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.680527][ T7083] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.749727][ T7083] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.777712][ T7281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.791613][ T7287] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.803960][ T7289] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.841294][ T7083] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.883303][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.890475][ T6034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.908196][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.915368][ T6034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.932194][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.939354][ T6034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.979064][ T7083] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.016896][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.024033][ T6034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.044108][ T7281] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.081872][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.089062][ T6034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.182125][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.189271][ T6034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.212905][ T7285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.265812][ T7285] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.323299][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.330565][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.344339][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.351506][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.371481][ T7083] bridge_slave_1: left allmulticast mode [ 479.386724][ T7083] bridge_slave_1: left promiscuous mode [ 479.392463][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.401940][ T7083] bridge_slave_0: left allmulticast mode [ 479.409040][ T7083] bridge_slave_0: left promiscuous mode [ 479.415665][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.424591][ T7083] bridge_slave_1: left allmulticast mode [ 479.431886][ T7083] bridge_slave_1: left promiscuous mode [ 479.438213][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.447320][ T7083] bridge_slave_0: left allmulticast mode [ 479.452949][ T7083] bridge_slave_0: left promiscuous mode [ 479.459900][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.473175][ T7083] bridge_slave_1: left allmulticast mode [ 479.479003][ T7083] bridge_slave_1: left promiscuous mode [ 479.484632][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.492953][ T7083] bridge_slave_0: left allmulticast mode [ 479.498712][ T7083] bridge_slave_0: left promiscuous mode [ 479.504339][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.516884][ T7083] bridge_slave_1: left allmulticast mode [ 479.522529][ T7083] bridge_slave_1: left promiscuous mode [ 479.528370][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.537368][ T7083] bridge_slave_0: left allmulticast mode [ 479.543011][ T7083] bridge_slave_0: left promiscuous mode [ 479.549302][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.854140][ T7083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.865308][ T7083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.874790][ T7083] bond0 (unregistering): Released all slaves [ 480.069051][ T7083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.080005][ T7083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.089768][ T7083] bond0 (unregistering): Released all slaves [ 480.113137][ T7083] ip6gretap0 (unregistering): left promiscuous mode [ 480.255541][ T5837] Bluetooth: hci1: command tx timeout [ 480.317967][ T7083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.327898][ T7083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.336623][ T5837] Bluetooth: hci0: command tx timeout [ 480.344033][ T7083] bond0 (unregistering): Released all slaves [ 480.345346][ T5837] Bluetooth: hci2: command tx timeout [ 480.497594][ T5837] Bluetooth: hci3: command tx timeout [ 480.497601][ T5828] Bluetooth: hci4: command tx timeout [ 480.543583][ T7083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.552937][ T7083] bond_slave_0: left promiscuous mode [ 480.559648][ T7083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.572039][ T7083] bond_slave_1: left promiscuous mode [ 480.579336][ T7083] bond0 (unregistering): Released all slaves [ 480.609831][ T7283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.865731][ T7289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.898358][ T7083] IPVS: stopping master sync thread 6205 ... [ 481.298807][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.513030][ T7281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.721847][ T7285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.852163][ T7283] veth0_vlan: entered promiscuous mode [ 481.900963][ T7289] veth0_vlan: entered promiscuous mode [ 481.971013][ T7289] veth1_vlan: entered promiscuous mode [ 481.981061][ T7283] veth1_vlan: entered promiscuous mode [ 482.179228][ T7289] veth0_macvtap: entered promiscuous mode [ 482.210985][ T7283] veth0_macvtap: entered promiscuous mode [ 482.221685][ T7289] veth1_macvtap: entered promiscuous mode [ 482.250656][ T7287] veth0_vlan: entered promiscuous mode [ 482.261693][ T7283] veth1_macvtap: entered promiscuous mode [ 482.302271][ T7287] veth1_vlan: entered promiscuous mode [ 482.330295][ T7289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.344250][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.372404][ T7281] veth0_vlan: entered promiscuous mode [ 482.384825][ T7289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.451494][ T7281] veth1_vlan: entered promiscuous mode [ 482.473771][ T7289] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.488142][ T7289] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.503095][ T7289] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.518198][ T7289] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.543470][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.557243][ T7283] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.572618][ T7283] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.592839][ T7283] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.602600][ T7283] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.704416][ T7287] veth0_macvtap: entered promiscuous mode [ 482.769373][ T7083] hsr_slave_0: left promiscuous mode [ 482.780000][ T7083] hsr_slave_1: left promiscuous mode [ 482.786540][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.794194][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.807017][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.814476][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.839542][ T7083] hsr_slave_0: left promiscuous mode [ 482.846795][ T7083] hsr_slave_1: left promiscuous mode [ 482.852469][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.860052][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.868760][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.880608][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.890455][ T7083] hsr_slave_0: left promiscuous mode [ 482.897146][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.904565][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.912595][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.920324][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.931126][ T7083] hsr_slave_0: left promiscuous mode [ 482.939938][ T7083] hsr_slave_1: left promiscuous mode [ 482.945746][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.953144][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.962696][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.970419][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.004519][ T7083] veth1_macvtap: left promiscuous mode [ 483.010488][ T7083] veth0_macvtap: left promiscuous mode [ 483.016093][ T7083] veth1_vlan: left promiscuous mode [ 483.021342][ T7083] veth0_vlan: left promiscuous mode [ 483.028074][ T7083] veth1_macvtap: left promiscuous mode [ 483.033556][ T7083] veth0_macvtap: left promiscuous mode [ 483.039498][ T7083] veth1_vlan: left promiscuous mode [ 483.044749][ T7083] veth0_vlan: left promiscuous mode [ 483.051172][ T7083] veth1_macvtap: left promiscuous mode [ 483.056802][ T7083] veth0_macvtap: left promiscuous mode [ 483.062324][ T7083] veth1_vlan: left promiscuous mode [ 483.068129][ T7083] veth0_vlan: left promiscuous mode [ 483.074085][ T7083] veth1_macvtap: left promiscuous mode [ 483.079649][ T7083] veth0_macvtap: left promiscuous mode [ 483.085263][ T7083] veth1_vlan: left promiscuous mode [ 483.090485][ T7083] veth0_vlan: left promiscuous mode [ 483.522088][ T7083] team0 (unregistering): Port device team_slave_1 removed [ 483.551596][ T7083] team0 (unregistering): Port device C removed [ 484.021904][ T7083] team0 (unregistering): Port device team_slave_1 removed [ 484.050861][ T7083] team0 (unregistering): Port device team_slave_0 removed [ 484.470667][ T7083] team0 (unregistering): Port device team_slave_1 removed [ 484.502662][ T7083] team0 (unregistering): Port device team_slave_0 removed [ 484.957547][ T7083] team0 (unregistering): Port device team_slave_1 removed [ 484.989565][ T7083] team0 (unregistering): Port device team_slave_0 removed [ 485.232741][ T7287] veth1_macvtap: entered promiscuous mode [ 485.248633][ T7285] veth0_vlan: entered promiscuous mode [ 485.277523][ T7281] veth0_macvtap: entered promiscuous mode [ 485.331477][ T7285] veth1_vlan: entered promiscuous mode [ 485.362076][ T7281] veth1_macvtap: entered promiscuous mode [ 485.430584][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.442928][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.478980][ T7281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.489550][ T7285] veth0_macvtap: entered promiscuous mode [ 485.509038][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.520101][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.529562][ T7287] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.538526][ T7287] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.547948][ T7287] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.556859][ T7287] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.573846][ T7281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.605609][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.613465][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.634567][ T7285] veth1_macvtap: entered promiscuous mode [ 485.645430][ T7281] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.654163][ T7281] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.663916][ T7281] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.672668][ T7281] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.688605][ T7085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.697980][ T7085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.757252][ T7085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.771009][ T7085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.773004][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 485.773026][ T30] audit: type=1400 audit(1751715344.681:312): avc: denied { mounton } for pid=7289 comm="syz-executor" path="/root/syzkaller.oKiKwT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 485.844514][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.882452][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.982302][ T7285] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.010291][ T7285] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.019618][ T7285] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.028614][ T7285] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.145103][ T6034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.152949][ T6034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.308959][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.327770][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.383161][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.404897][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.654530][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.703456][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.170830][ T7529] netlink: 16 bytes leftover after parsing attributes in process `syz.9.427'. [ 487.179882][ T7529] netlink: 24 bytes leftover after parsing attributes in process `syz.9.427'. [ 487.289377][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.337986][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.617499][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.634967][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.862634][ T7536] macvlan2: entered promiscuous mode [ 487.900396][ T7540] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 487.919306][ T7536] macvlan2: entered allmulticast mode [ 488.046716][ T7540] netlink: 24 bytes leftover after parsing attributes in process `syz.9.428'. [ 490.287028][ T30] audit: type=1400 audit(1751715349.151:313): avc: denied { listen } for pid=7554 comm="syz.5.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 490.287189][ T30] audit: type=1400 audit(1751715349.151:314): avc: denied { ioctl } for pid=7554 comm="syz.5.432" path="socket:[14314]" dev="sockfs" ino=14314 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 490.664988][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.416244][ T7582] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 492.015312][ T7590] netlink: 16 bytes leftover after parsing attributes in process `syz.7.436'. [ 492.024203][ T7590] netlink: 24 bytes leftover after parsing attributes in process `syz.7.436'. [ 492.607490][ T30] audit: type=1400 audit(1751715351.071:315): avc: denied { create } for pid=7577 comm="syz.6.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 492.626930][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.693525][ T7586] netlink: 80 bytes leftover after parsing attributes in process `syz.6.438'. [ 493.165393][ T30] audit: type=1400 audit(1751715351.151:316): avc: denied { setopt } for pid=7579 comm="syz.5.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 493.184853][ T30] audit: type=1400 audit(1751715351.571:317): avc: denied { connect } for pid=7577 comm="syz.6.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 493.205292][ T30] audit: type=1400 audit(1751715351.681:318): avc: denied { create } for pid=7577 comm="syz.6.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 493.225941][ T5869] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 493.233834][ T30] audit: type=1400 audit(1751715351.681:319): avc: denied { bind } for pid=7577 comm="syz.6.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 493.253657][ T30] audit: type=1400 audit(1751715351.681:320): avc: denied { name_bind } for pid=7577 comm="syz.6.438" src=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 493.277910][ T30] audit: type=1400 audit(1751715351.681:321): avc: denied { node_bind } for pid=7577 comm="syz.6.438" saddr=2f23:2f6d:7372:: src=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 493.454474][ T5869] usb 7-1: config 0 has an invalid interface number: 3 but max is 0 [ 493.467787][ T5869] usb 7-1: config 0 has no interface number 0 [ 494.322849][ T5869] usb 7-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 494.334998][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.630464][ T5869] usb 7-1: config 0 descriptor?? [ 495.108171][ T7607] macvlan2: entered promiscuous mode [ 495.126132][ T7607] macvlan2: entered allmulticast mode [ 495.872598][ T5869] usb 7-1: can't set config #0, error -71 [ 495.885412][ T5869] usb 7-1: USB disconnect, device number 2 [ 497.305121][ T2146] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 497.456909][ T7649] ptrace attach of "./syz-executor exec"[7283] was attempted by "./syz-executor exec"[7649] [ 497.514998][ T2146] usb 7-1: Using ep0 maxpacket: 8 [ 497.746103][ T30] audit: type=1400 audit(1751715356.651:322): avc: denied { read } for pid=7654 comm="syz.8.451" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 497.774481][ T2146] usb 7-1: device descriptor read/all, error -71 [ 497.831526][ T30] audit: type=1400 audit(1751715356.651:323): avc: denied { open } for pid=7654 comm="syz.8.451" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 498.021720][ T30] audit: type=1400 audit(1751715356.651:324): avc: denied { ioctl } for pid=7654 comm="syz.8.451" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 498.098427][ T7660] netlink: 16 bytes leftover after parsing attributes in process `syz.7.452'. [ 498.107391][ T7660] netlink: 24 bytes leftover after parsing attributes in process `syz.7.452'. [ 498.432776][ T7671] netlink: 68 bytes leftover after parsing attributes in process `syz.5.455'. [ 498.857498][ T7670] netlink: 'syz.8.454': attribute type 12 has an invalid length. [ 498.865390][ T7670] netlink: 9472 bytes leftover after parsing attributes in process `syz.8.454'. [ 500.422341][ T7680] macvlan3: entered promiscuous mode [ 500.430182][ T7680] macvlan3: entered allmulticast mode [ 500.544971][ T30] audit: type=1400 audit(1751715359.161:325): avc: denied { ioctl } for pid=7667 comm="syz.9.456" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 500.890765][ T7689] netlink: 24 bytes leftover after parsing attributes in process `syz.5.459'. [ 501.112269][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.119550][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.332815][ T7705] 8021q: VLANs not supported on vcan0 [ 502.773770][ T7713] netlink: 52 bytes leftover after parsing attributes in process `syz.8.467'. [ 503.343562][ T7727] netlink: 68 bytes leftover after parsing attributes in process `syz.6.470'. [ 503.838913][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.8.473'. [ 503.874338][ T7729] macvlan2: entered promiscuous mode [ 503.910734][ T7729] macvlan2: entered allmulticast mode [ 504.220198][ T30] audit: type=1400 audit(1751715363.141:326): avc: denied { append } for pid=7735 comm="syz.7.475" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 505.142702][ T7750] 8021q: VLANs not supported on vcan0 [ 505.755744][ T30] audit: type=1400 audit(1751715364.681:327): avc: denied { write } for pid=7761 comm="syz.9.483" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 508.781314][ T7798] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 509.572011][ T7251] kernel read not supported for file /vga_arbiter (pid: 7251 comm: kworker/0:8) [ 510.052508][ T7821] netlink: 68 bytes leftover after parsing attributes in process `syz.7.499'. [ 510.748203][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 512.349349][ T30] audit: type=1400 audit(1751715371.011:328): avc: denied { create } for pid=7838 comm="syz.5.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 512.439417][ T30] audit: type=1400 audit(1751715371.011:329): avc: denied { ioctl } for pid=7838 comm="syz.5.504" path="socket:[16176]" dev="sockfs" ino=16176 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 513.407234][ T7859] netlink: 80 bytes leftover after parsing attributes in process `syz.8.508'. [ 513.521951][ T7863] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 513.827399][ T7252] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 514.027801][ T7252] usb 9-1: config 0 has an invalid interface number: 3 but max is 0 [ 514.062954][ T7252] usb 9-1: config 0 has no interface number 0 [ 514.066571][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.513'. [ 514.082805][ T7252] usb 9-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 514.112464][ T7252] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.149336][ T7252] usb 9-1: config 0 descriptor?? [ 514.169256][ T7252] hub 9-1:0.3: bad descriptor, ignoring hub [ 514.188451][ T7252] hub 9-1:0.3: probe with driver hub failed with error -5 [ 514.205977][ T7252] sierra 9-1:0.3: Sierra USB modem converter detected [ 514.214118][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.513'. [ 514.223668][ T7873] hsr_slave_1 (unregistering): left promiscuous mode [ 514.225514][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.5.513'. [ 514.398789][ T7252] usb 9-1: Sierra USB modem converter now attached to ttyUSB0 [ 514.429801][ T7252] usb 9-1: USB disconnect, device number 2 [ 514.571564][ T7252] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 514.605114][ T7252] sierra 9-1:0.3: device disconnected [ 514.895879][ T7900] netlink: 20 bytes leftover after parsing attributes in process `syz.9.520'. [ 519.915293][ T30] audit: type=1400 audit(1751715378.751:330): avc: denied { write } for pid=7956 comm="syz.8.536" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 526.923190][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.9.560'. [ 528.818993][ T30] audit: type=1400 audit(1751715387.741:331): avc: denied { connect } for pid=8049 comm="syz.9.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 528.846146][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.9.566'. [ 528.926555][ T30] audit: type=1400 audit(1751715387.771:332): avc: denied { read } for pid=8049 comm="syz.9.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 529.081378][ T8060] macvlan3: entered promiscuous mode [ 529.132719][ T8060] macvlan3: entered allmulticast mode [ 530.330805][ T8080] netlink: 80 bytes leftover after parsing attributes in process `syz.9.576'. [ 530.584937][ T2146] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 530.746604][ T2146] usb 10-1: config 0 has an invalid interface number: 3 but max is 0 [ 530.754797][ T2146] usb 10-1: config 0 has no interface number 0 [ 530.789417][ T2146] usb 10-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 530.804714][ T2146] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.836504][ T2146] usb 10-1: config 0 descriptor?? [ 530.851835][ T2146] hub 10-1:0.3: bad descriptor, ignoring hub [ 530.863751][ T2146] hub 10-1:0.3: probe with driver hub failed with error -5 [ 530.881917][ T2146] sierra 10-1:0.3: Sierra USB modem converter detected [ 531.055534][ T2146] usb 10-1: Sierra USB modem converter now attached to ttyUSB0 [ 531.074676][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.7.581'. [ 531.106407][ T2146] usb 10-1: USB disconnect, device number 2 [ 531.136929][ T2146] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 531.174338][ T2146] sierra 10-1:0.3: device disconnected [ 531.271662][ T8099] macvlan3: entered promiscuous mode [ 531.277015][ T8099] macvlan3: entered allmulticast mode [ 531.325923][ T8100] netlink: 80 bytes leftover after parsing attributes in process `syz.8.582'. [ 532.035119][ T7260] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 532.307431][ T7260] usb 9-1: config 0 has an invalid interface number: 3 but max is 0 [ 532.323173][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.588'. [ 532.332295][ T7260] usb 9-1: config 0 has no interface number 0 [ 532.347094][ T7260] usb 9-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 532.409560][ T8115] netlink: 16 bytes leftover after parsing attributes in process `syz.9.589'. [ 532.418640][ T8115] netlink: 24 bytes leftover after parsing attributes in process `syz.9.589'. [ 532.820157][ T7260] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.831946][ T7260] usb 9-1: config 0 descriptor?? [ 532.867421][ T7260] hub 9-1:0.3: bad descriptor, ignoring hub [ 532.882748][ T7260] hub 9-1:0.3: probe with driver hub failed with error -5 [ 532.926486][ T7260] sierra 9-1:0.3: Sierra USB modem converter detected [ 533.110696][ T7260] usb 9-1: Sierra USB modem converter now attached to ttyUSB0 [ 533.146556][ T7260] usb 9-1: USB disconnect, device number 3 [ 533.645736][ T7260] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 533.675140][ T7260] sierra 9-1:0.3: device disconnected [ 534.723625][ T8127] macvlan2: entered promiscuous mode [ 534.729283][ T8127] macvlan2: entered allmulticast mode [ 534.865091][ T7260] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 535.251622][ T7260] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 535.261579][ T7260] usb 6-1: config 0 has no interface number 0 [ 535.312231][ T7260] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 535.360598][ T7260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.553233][ T7260] usb 6-1: config 0 descriptor?? [ 535.602261][ T7260] cp210x 6-1:0.1: cp210x converter detected [ 535.669317][ T5892] kernel read not supported for file /vga_arbiter (pid: 5892 comm: kworker/0:5) [ 535.813851][ T7260] usb 6-1: cp210x converter now attached to ttyUSB0 [ 536.621268][ T8160] netlink: 16 bytes leftover after parsing attributes in process `syz.7.601'. [ 536.630268][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz.7.601'. [ 537.712393][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.6.604'. [ 537.723006][ T8168] x_tables: ip_tables: udp match: only valid for protocol 17 [ 537.817907][ T8169] Cannot find add_set index 0 as target [ 537.844945][ T7251] usb 6-1: USB disconnect, device number 2 [ 537.863963][ T8169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.176024][ T7251] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 538.280946][ T7251] cp210x 6-1:0.1: device disconnected [ 539.456084][ T7251] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 541.157176][ T7251] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 541.194952][ T7251] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.235686][ T7251] usb 7-1: config 0 has no interface number 0 [ 541.291505][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.7.614'. [ 541.303987][ T8195] x_tables: ip_tables: udp match: only valid for protocol 17 [ 541.564956][ T7251] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 541.590072][ T7251] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.630131][ T7251] usb 7-1: config 0 descriptor?? [ 541.666300][ T7251] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 541.814885][ T5869] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 541.945440][ T2146] usb 7-1: USB disconnect, device number 5 [ 542.042937][ T5869] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 542.090658][ T5869] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 542.106620][ T5869] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 542.122364][ T5869] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 542.135057][ T5869] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 542.195148][ T5869] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 542.205268][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 542.215075][ T5869] usb 9-1: Product: syz [ 542.221211][ T5869] usb 9-1: Manufacturer: syz [ 542.345042][ T7526] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 542.345406][ T5869] cdc_wdm 9-1:1.0: skipping garbage [ 542.372989][ T5869] cdc_wdm 9-1:1.0: skipping garbage [ 542.384154][ T5869] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 542.403283][ T5869] cdc_wdm 9-1:1.0: Unknown control protocol [ 542.597262][ T7526] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 544.361974][ T7526] usb 8-1: config 0 has no interface number 0 [ 544.370200][ T7526] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 544.379299][ T7526] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.389354][ T7526] usb 8-1: config 0 descriptor?? [ 544.397937][ T7526] cp210x 8-1:0.1: cp210x converter detected [ 544.400367][ T5869] usb 9-1: USB disconnect, device number 4 [ 544.607217][ T8220] netlink: 'syz.5.621': attribute type 12 has an invalid length. [ 544.615286][ T8220] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.621'. [ 544.689274][ T7526] usb 8-1: cp210x converter now attached to ttyUSB0 [ 546.100183][ T7251] usb 8-1: USB disconnect, device number 2 [ 546.366616][ T7251] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 546.433219][ T7251] cp210x 8-1:0.1: device disconnected [ 546.461785][ T5837] Bluetooth: hci4: link tx timeout [ 546.511527][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 546.951722][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.9.629'. [ 548.684140][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 549.005091][ T5885] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 549.488795][ T8272] Cannot find add_set index 0 as target [ 549.507024][ T8272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.826221][ T5885] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.015206][ T5885] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 550.140703][ T5885] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 550.154953][ T5885] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 550.182163][ T5885] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 550.300195][ T5885] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 550.445618][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 550.453757][ T5885] usb 7-1: Product: syz [ 550.459964][ T5885] usb 7-1: Manufacturer: syz [ 550.470838][ T5885] cdc_wdm 7-1:1.0: skipping garbage [ 551.636030][ T5885] cdc_wdm 7-1:1.0: skipping garbage [ 551.686191][ T5885] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 552.587276][ T5885] cdc_wdm 7-1:1.0: Unknown control protocol [ 552.651195][ T5885] usb 7-1: USB disconnect, device number 6 [ 552.718590][ T8301] macvlan4: entered promiscuous mode [ 552.723914][ T8301] macvlan4: entered allmulticast mode [ 552.855047][ T5912] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 553.876481][ T5912] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 553.902313][ T5912] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.947547][ T5912] usb 10-1: config 0 has no interface number 0 [ 553.964258][ T30] audit: type=1400 audit(1751715412.881:333): avc: denied { create } for pid=8309 comm="syz.5.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 553.984231][ T5912] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 553.984259][ T5912] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.996235][ T5912] usb 10-1: config 0 descriptor?? [ 554.009323][ T5912] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 554.037055][ T8311] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 554.144462][ T30] audit: type=1400 audit(1751715413.061:334): avc: denied { shutdown } for pid=8309 comm="syz.5.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 554.708070][ T30] audit: type=1400 audit(1751715413.621:335): avc: denied { read } for pid=8309 comm="syz.5.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 554.731523][ T5940] usb 10-1: USB disconnect, device number 3 [ 554.753925][ T30] audit: type=1400 audit(1751715413.671:336): avc: denied { write } for pid=8309 comm="syz.5.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 555.848024][ T8336] netlink: 40 bytes leftover after parsing attributes in process `syz.7.655'. [ 556.856991][ T8353] macvlan4: entered promiscuous mode [ 556.862382][ T8353] macvlan4: entered allmulticast mode [ 557.502137][ T5885] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 557.563252][ T5869] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 557.696152][ T5885] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 557.715527][ T5885] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 557.727018][ T5885] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 557.736346][ T5885] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 557.873672][ T5885] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 557.895889][ T5869] usb 9-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 557.905206][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.922176][ T5885] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 557.931411][ T5869] usb 9-1: Product: syz [ 558.391424][ T5869] usb 9-1: Manufacturer: syz [ 558.396132][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 558.404155][ T5885] usb 8-1: Product: syz [ 558.408565][ T5869] usb 9-1: SerialNumber: syz [ 558.414482][ T5885] usb 8-1: Manufacturer: syz [ 558.419527][ T5869] usb 9-1: config 0 descriptor?? [ 558.429886][ T5869] comedi comedi5: Wrong number of endpoints [ 558.435219][ T8372] random: crng reseeded on system resumption [ 558.455427][ T5885] cdc_wdm 8-1:1.0: skipping garbage [ 558.460739][ T5869] dt9812 9-1:0.0: driver 'dt9812' failed to auto-configure device. [ 558.476209][ T5885] cdc_wdm 8-1:1.0: skipping garbage [ 558.493526][ T5885] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 558.510862][ T5885] cdc_wdm 8-1:1.0: Unknown control protocol [ 559.535452][ T5885] usb 9-1: USB disconnect, device number 5 [ 560.748874][ T8387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.835350][ T2146] usb 8-1: USB disconnect, device number 3 [ 561.150239][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.9.675'. [ 561.895707][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.6.674'. [ 561.911346][ T8406] x_tables: ip_tables: udp match: only valid for protocol 17 [ 562.490139][ T8410] random: crng reseeded on system resumption [ 562.503196][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.509547][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.591538][ T8413] netlink: 'syz.8.678': attribute type 12 has an invalid length. [ 562.599443][ T8413] netlink: 9472 bytes leftover after parsing attributes in process `syz.8.678'. [ 563.240617][ T8426] warning: `syz.5.677' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 563.473352][ T8427] netlink: 80 bytes leftover after parsing attributes in process `syz.9.682'. [ 563.744898][ T7251] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 563.907654][ T7251] usb 10-1: config 0 has an invalid interface number: 3 but max is 0 [ 563.926420][ T7251] usb 10-1: config 0 has no interface number 0 [ 563.932651][ T7251] usb 10-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 563.964087][ T7251] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.997367][ T7251] usb 10-1: config 0 descriptor?? [ 564.086180][ T7251] hub 10-1:0.3: bad descriptor, ignoring hub [ 564.102474][ T7251] hub 10-1:0.3: probe with driver hub failed with error -5 [ 564.110604][ T7251] sierra 10-1:0.3: Sierra USB modem converter detected [ 565.057821][ T5828] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 565.808836][ T7251] usb 10-1: Sierra USB modem converter now attached to ttyUSB0 [ 565.856185][ T7251] usb 10-1: USB disconnect, device number 4 [ 565.872745][ T7251] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 565.891879][ T7251] sierra 10-1:0.3: device disconnected [ 565.956691][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.7.691'. [ 565.965943][ T8454] x_tables: ip_tables: udp match: only valid for protocol 17 [ 566.444396][ T8456] random: crng reseeded on system resumption [ 568.558386][ T8482] Cannot find add_set index 0 as target [ 568.574720][ T8482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.374142][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.703'. [ 570.645868][ T8503] fuse: Unknown parameter 'group_i00000000000000000000' [ 571.061125][ T8507] random: crng reseeded on system resumption [ 571.132901][ T8509] Cannot find add_set index 0 as target [ 571.140424][ T8509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.744452][ T8523] Cannot find add_set index 0 as target [ 572.765238][ T8523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 574.459626][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.718'. [ 575.928938][ T8556] fuse: Unknown parameter 'group_i00000000000000000000' [ 577.285864][ T8579] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 577.921395][ T8582] netlink: 80 bytes leftover after parsing attributes in process `syz.6.727'. [ 578.565164][ T5869] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 578.985923][ T2146] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 579.154911][ T2146] usb 8-1: device descriptor read/64, error -71 [ 579.590791][ T5869] usb 7-1: config 0 has an invalid interface number: 3 but max is 0 [ 579.599171][ T5869] usb 7-1: config 0 has no interface number 0 [ 579.610063][ T5869] usb 7-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 579.624887][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.627916][ T8598] random: crng reseeded on system resumption [ 579.669547][ T5869] usb 7-1: config 0 descriptor?? [ 579.691349][ T5869] hub 7-1:0.3: bad descriptor, ignoring hub [ 579.717750][ T5869] hub 7-1:0.3: probe with driver hub failed with error -5 [ 579.735626][ T5869] sierra 7-1:0.3: Sierra USB modem converter detected [ 579.924937][ T2146] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 579.947294][ T5869] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 580.095110][ T2146] usb 8-1: device descriptor read/64, error -71 [ 580.241928][ T5869] usb 7-1: USB disconnect, device number 7 [ 580.250208][ T5869] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 580.266260][ T2146] usb usb8-port1: attempt power cycle [ 580.272037][ T5869] sierra 7-1:0.3: device disconnected [ 580.690031][ T2146] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 580.748817][ T2146] usb 8-1: device descriptor read/8, error -71 [ 581.251295][ T2146] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 581.505787][ T5869] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 581.515658][ T2146] usb 8-1: device descriptor read/8, error -71 [ 581.753124][ T2146] usb usb8-port1: unable to enumerate USB device [ 581.764934][ T5869] usb 9-1: Using ep0 maxpacket: 16 [ 581.772653][ T5869] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 581.802778][ T5869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.031469][ T5869] usb 9-1: config 0 descriptor?? [ 582.349615][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.7.742'. [ 582.408302][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.746'. [ 582.614909][ T2146] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 582.791413][ T5869] lenovo 0003:17EF:6047.0009: hidraw0: USB HID v1.01 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0 [ 582.854979][ T2146] usb 10-1: Using ep0 maxpacket: 8 [ 582.864884][ T30] audit: type=1400 audit(1751715441.781:337): avc: denied { read } for pid=8643 comm="syz.6.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 582.896001][ T2146] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.912072][ T2146] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 582.927486][ T2146] usb 10-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 582.937525][ T2146] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.955662][ T2146] usb 10-1: config 0 descriptor?? [ 583.058413][ T5885] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 583.344882][ T5885] usb 8-1: Using ep0 maxpacket: 8 [ 583.357852][ T5885] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.368259][ T5885] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 583.382033][ T5885] usb 8-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 583.391831][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.404322][ T5885] usb 8-1: config 0 descriptor?? [ 583.622591][ T5869] lenovo 0003:17EF:6047.0009: Sensitivity setting failed: -71 [ 583.649362][ T5869] usb 9-1: USB disconnect, device number 6 [ 584.086791][ T2146] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 584.275768][ T2146] usb 7-1: device descriptor read/64, error -71 [ 585.255266][ T2146] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 585.385455][ T2146] usb 7-1: device descriptor read/64, error -71 [ 585.401548][ T5885] usb 10-1: USB disconnect, device number 5 [ 585.484914][ T5869] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 585.502629][ T2146] usb usb7-port1: attempt power cycle [ 585.603468][ T8676] Cannot find add_set index 0 as target [ 585.620789][ T8676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.635109][ T5869] usb 9-1: device descriptor read/64, error -71 [ 585.916183][ T2146] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 586.060145][ T2146] usb 7-1: device descriptor read/8, error -71 [ 586.453664][ T2146] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 586.465876][ T7526] usb 8-1: USB disconnect, device number 8 [ 586.505961][ T2146] usb 7-1: device descriptor read/8, error -71 [ 586.615496][ T2146] usb usb7-port1: unable to enumerate USB device [ 586.674867][ T5869] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 587.169852][ T8684] macvlan3: entered promiscuous mode [ 587.175260][ T8684] macvlan3: entered allmulticast mode [ 587.384748][ T5869] usb 9-1: device descriptor read/64, error -71 [ 588.704887][ T5869] usb usb9-port1: attempt power cycle [ 589.936441][ T8693] Cannot find add_set index 0 as target [ 589.957215][ T8693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.250480][ T8708] Cannot find add_set index 0 as target [ 591.264263][ T8708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.382205][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.768'. [ 591.575242][ T8706] vlan2: entered promiscuous mode [ 591.655870][ T8706] bond0: entered promiscuous mode [ 591.722965][ T8706] bond_slave_0: entered promiscuous mode [ 591.803812][ T8706] bond_slave_1: entered promiscuous mode [ 592.504557][ T8719] macvlan4: entered promiscuous mode [ 592.512350][ T8719] macvlan4: entered allmulticast mode [ 592.572037][ T8726] netlink: 20 bytes leftover after parsing attributes in process `syz.8.772'. [ 592.586153][ T8726] x_tables: ip_tables: udp match: only valid for protocol 17 [ 592.714914][ T5869] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 592.744938][ T5912] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 592.815123][ T5885] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 592.855014][ T5869] usb 8-1: device descriptor read/64, error -71 [ 592.896413][ T5912] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 592.904593][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.915360][ T5912] usb 6-1: config 0 has no interface number 0 [ 592.928447][ T5912] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 592.943415][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.032444][ T5885] usb 10-1: device descriptor read/64, error -71 [ 593.065678][ T5912] usb 6-1: config 0 descriptor?? [ 593.089640][ T5912] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 593.171007][ T8729] Cannot find add_set index 0 as target [ 593.185041][ T5869] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 593.200652][ T8729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.662795][ T5912] usb 6-1: USB disconnect, device number 3 [ 593.843103][ T5885] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 594.132072][ T8735] netlink: 36 bytes leftover after parsing attributes in process `syz.6.778'. [ 594.185030][ T5869] usb 8-1: device descriptor read/64, error -71 [ 594.192668][ T5885] usb 10-1: device descriptor read/64, error -71 [ 594.301854][ T5869] usb usb8-port1: attempt power cycle [ 594.319216][ T5885] usb usb10-port1: attempt power cycle [ 595.349753][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 595.355798][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 595.361786][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 595.367785][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 595.554877][ T5869] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 595.562852][ T5885] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 595.602118][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.8.783'. [ 595.943655][ T5869] usb 8-1: device descriptor read/8, error -71 [ 595.986689][ T5885] usb 10-1: device descriptor read/8, error -71 [ 597.768252][ T8776] Cannot find add_set index 0 as target [ 597.775539][ T8776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.275016][ T5912] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 598.885975][ T5912] usb 6-1: Using ep0 maxpacket: 8 [ 599.096005][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.713718][ T5912] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 599.722824][ T5912] usb 6-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 599.733237][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.736559][ T5885] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 599.743218][ T5912] usb 6-1: config 0 descriptor?? [ 599.905105][ T5885] usb 9-1: device descriptor read/64, error -71 [ 600.285801][ T5885] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 600.315092][ T5912] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 600.465158][ T5912] usb 10-1: device descriptor read/64, error -71 [ 600.498346][ T7252] usb 6-1: USB disconnect, device number 4 [ 600.562407][ T8800] netlink: 20 bytes leftover after parsing attributes in process `syz.7.799'. [ 600.587109][ T8800] vlan2: entered promiscuous mode [ 600.592177][ T8800] bond0: entered promiscuous mode [ 600.598868][ T8800] bond_slave_0: entered promiscuous mode [ 600.604696][ T8800] bond_slave_1: entered promiscuous mode [ 600.620537][ T5885] usb 9-1: device descriptor read/64, error -71 [ 600.696883][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.7.801'. [ 600.735539][ T5885] usb usb9-port1: attempt power cycle [ 600.807233][ T5912] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 600.849074][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.7.802'. [ 600.887088][ T8808] hsr_slave_1 (unregistering): left promiscuous mode [ 600.901085][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.7.802'. [ 600.910577][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.7.802'. [ 600.945130][ T5912] usb 10-1: device descriptor read/64, error -71 [ 601.055850][ T5912] usb usb10-port1: attempt power cycle [ 601.085367][ T5885] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 601.115439][ T5885] usb 9-1: device descriptor read/8, error -71 [ 601.899553][ T5885] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 601.924976][ T5912] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 601.937436][ T5885] usb 9-1: device descriptor read/8, error -71 [ 602.065460][ T5885] usb usb9-port1: unable to enumerate USB device [ 602.080205][ T5912] usb 10-1: device descriptor read/8, error -71 [ 602.212379][ T5834] Bluetooth: hci4: link tx timeout [ 602.217776][ T5834] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 602.464888][ T5912] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 602.695231][ T5912] usb 10-1: device not accepting address 13, error -71 [ 602.703836][ T5912] usb usb10-port1: unable to enumerate USB device [ 603.261362][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.5.813'. [ 604.314679][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 604.448498][ T8855] random: crng reseeded on system resumption [ 605.400582][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.815'. [ 605.674883][ T5885] usb 10-1: new low-speed USB device number 14 using dummy_hcd [ 605.755094][ T5912] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 606.285656][ T5885] usb 10-1: device descriptor read/64, error -71 [ 606.305395][ T5912] usb 7-1: device descriptor read/64, error -71 [ 606.966829][ T5885] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 606.993641][ T8873] Cannot find add_set index 0 as target [ 607.000390][ T8873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.211996][ T5885] usb 10-1: device descriptor read/64, error -71 [ 607.254968][ T5912] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 607.768865][ T8884] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 607.933832][ T5885] usb usb10-port1: attempt power cycle [ 607.960961][ T5912] usb 7-1: device descriptor read/64, error -71 [ 608.126602][ T5912] usb usb7-port1: attempt power cycle [ 608.645093][ T5912] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 608.914995][ T5912] usb 7-1: device descriptor read/8, error -71 [ 610.215801][ T8898] Cannot find add_set index 0 as target [ 610.252064][ T8898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.713758][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.6.831'. [ 610.901028][ T8901] random: crng reseeded on system resumption [ 610.928175][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.831'. [ 610.945889][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz.6.831'. [ 611.489055][ T8905] hsr_slave_1 (unregistering): left promiscuous mode [ 612.015064][ T7260] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 612.257212][ T7260] usb 8-1: device descriptor read/64, error -71 [ 612.354582][ T8933] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 613.404870][ T7260] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 613.546731][ T8940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.843'. [ 613.559149][ T8940] x_tables: ip_tables: udp match: only valid for protocol 17 [ 613.567987][ T7260] usb 8-1: device descriptor read/64, error -71 [ 613.706460][ T7260] usb usb8-port1: attempt power cycle [ 615.030303][ T7260] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 615.284971][ T7260] usb 8-1: device not accepting address 15, error -71 [ 615.830487][ T8963] Cannot find add_set index 0 as target [ 615.851850][ T8963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 616.223550][ T8967] netlink: 20 bytes leftover after parsing attributes in process `syz.9.853'. [ 616.239975][ T8967] vlan2: entered promiscuous mode [ 616.245429][ T8967] bond0: entered promiscuous mode [ 616.250702][ T8967] bond_slave_0: entered promiscuous mode [ 616.271140][ T8967] bond_slave_1: entered promiscuous mode [ 616.445815][ T8975] Cannot find add_set index 0 as target [ 616.458310][ T8975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.066426][ T7252] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 618.489618][ T7252] usb 8-1: config index 0 descriptor too short (expected 10227, got 27) [ 618.522648][ T7252] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.947844][ T8997] netlink: 24 bytes leftover after parsing attributes in process `syz.8.858'. [ 619.030087][ T7252] usb 8-1: config 0 has no interfaces? [ 619.041799][ T7252] usb 8-1: string descriptor 0 read error: -22 [ 619.048276][ T7252] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 619.059990][ T7252] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.081877][ T7252] usb 8-1: config 0 descriptor?? [ 619.325977][ T5885] usb 8-1: USB disconnect, device number 17 [ 621.259889][ T9022] Cannot find add_set index 0 as target [ 621.267186][ T9022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 621.558894][ T9030] netlink: 80 bytes leftover after parsing attributes in process `syz.9.868'. [ 622.036186][ T7260] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 622.242748][ T7260] usb 10-1: config 0 has an invalid interface number: 3 but max is 0 [ 622.251072][ T7260] usb 10-1: config 0 has no interface number 0 [ 622.266021][ T7260] usb 10-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 622.332498][ T9039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.356474][ T7260] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.145288][ T9040] netlink: 20 bytes leftover after parsing attributes in process `syz.8.871'. [ 623.170605][ T9040] x_tables: ip_tables: udp match: only valid for protocol 17 [ 623.419600][ T7260] usb 10-1: config 0 descriptor?? [ 624.222588][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.231210][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.246422][ T7260] hub 10-1:0.3: bad descriptor, ignoring hub [ 624.252527][ T7260] hub 10-1:0.3: probe with driver hub failed with error -5 [ 624.265053][ T7260] sierra 10-1:0.3: Sierra USB modem converter detected [ 624.311818][ T7260] usb 10-1: Sierra USB modem converter now attached to ttyUSB0 [ 624.405497][ T7260] usb 10-1: USB disconnect, device number 17 [ 624.464255][ T7260] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 624.506025][ T7260] sierra 10-1:0.3: device disconnected [ 624.624251][ T9053] Cannot find add_set index 0 as target [ 625.390964][ T7260] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 625.656915][ T7260] usb 10-1: config index 0 descriptor too short (expected 10227, got 27) [ 625.679434][ T7260] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.706144][ T7260] usb 10-1: config 0 has no interfaces? [ 625.732387][ T7260] usb 10-1: string descriptor 0 read error: -22 [ 625.766217][ T7260] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 625.787496][ T7260] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.801622][ T7260] usb 10-1: config 0 descriptor?? [ 625.890362][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.877'. [ 626.923068][ T7260] usb 10-1: USB disconnect, device number 18 [ 628.593375][ T9090] netlink: 1004 bytes leftover after parsing attributes in process `syz.8.886'. [ 628.666422][ T9092] netlink: 80 bytes leftover after parsing attributes in process `syz.9.885'. [ 629.061021][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.888'. [ 629.086994][ T7260] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 629.254871][ T5939] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 629.316215][ T9101] netlink: 'syz.7.890': attribute type 12 has an invalid length. [ 629.324061][ T9101] netlink: 9472 bytes leftover after parsing attributes in process `syz.7.890'. [ 629.626175][ T7260] usb 10-1: config 0 has an invalid interface number: 3 but max is 0 [ 629.635216][ T7260] usb 10-1: config 0 has no interface number 0 [ 629.641510][ T7260] usb 10-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 629.654175][ T7260] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.679719][ T7260] usb 10-1: config 0 descriptor?? [ 629.687337][ T5939] usb 6-1: config 2 has an invalid interface number: 174 but max is 0 [ 629.705440][ T5939] usb 6-1: config 2 has no interface number 0 [ 629.713480][ T7260] hub 10-1:0.3: bad descriptor, ignoring hub [ 629.724868][ T5939] usb 6-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 629.741282][ T7260] hub 10-1:0.3: probe with driver hub failed with error -5 [ 629.751928][ T5939] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 629.761426][ T7260] sierra 10-1:0.3: Sierra USB modem converter detected [ 629.768354][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.776557][ T5939] usb 6-1: Product: syz [ 629.780858][ T5939] usb 6-1: Manufacturer: syz [ 629.785524][ T5939] usb 6-1: SerialNumber: syz [ 629.793543][ T9096] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 630.174340][ T9110] random: crng reseeded on system resumption [ 630.302779][ T7260] usb 10-1: Sierra USB modem converter now attached to ttyUSB0 [ 630.450632][ T7260] usb 10-1: USB disconnect, device number 19 [ 630.479560][ T5939] usb 6-1: probing VID:PID(0424:012C) [ 630.564047][ T5939] usb 6-1: vub300 testing BULK IN EndPoint(0) 82 [ 630.575504][ T7260] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 630.624912][ T5939] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 630.647722][ T7260] sierra 10-1:0.3: device disconnected [ 630.719622][ T5939] vub300 6-1:2.174: probe with driver vub300 failed with error -22 [ 631.184919][ T5939] usb 6-1: USB disconnect, device number 5 [ 631.504883][ T7526] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 631.671050][ T7526] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 631.704701][ T7526] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 631.719227][ T7526] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.763351][ T7526] usb 8-1: config 0 descriptor?? [ 632.815196][ T7526] ath6kl: Failed to submit usb control message: -110 [ 633.414971][ T7526] ath6kl: unable to send the bmi data to the device: -110 [ 633.424393][ T7526] ath6kl: Unable to send get target info: -110 [ 633.431551][ T7526] ath6kl: Failed to init ath6kl core: -110 [ 633.437961][ T7526] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 633.485668][ T9140] netlink: 1004 bytes leftover after parsing attributes in process `syz.6.900'. [ 634.160260][ T9146] netlink: 80 bytes leftover after parsing attributes in process `syz.8.901'. [ 635.101538][ T5940] usb 8-1: USB disconnect, device number 18 [ 635.364984][ T5939] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 635.840752][ T9161] Cannot find add_set index 0 as target [ 635.850837][ T9161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.261591][ T9154] 8021q: VLANs not supported on vcan0 [ 636.453459][ T9167] netlink: 80 bytes leftover after parsing attributes in process `syz.7.905'. [ 636.579048][ T5939] usb 9-1: unable to read config index 0 descriptor/all [ 636.586723][ T5939] usb 9-1: can't read configurations, error -71 [ 636.735023][ T7260] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 637.516605][ T7260] usb 8-1: config 0 has an invalid interface number: 3 but max is 0 [ 637.544999][ T7260] usb 8-1: config 0 has no interface number 0 [ 637.558583][ T7260] usb 8-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 637.573090][ T7260] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.581350][ T5939] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 637.785274][ T5939] usb 9-1: Using ep0 maxpacket: 16 [ 637.790936][ T7260] usb 8-1: config 0 descriptor?? [ 637.993599][ T7260] hub 8-1:0.3: bad descriptor, ignoring hub [ 638.000143][ T5939] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 638.013132][ T7260] hub 8-1:0.3: probe with driver hub failed with error -5 [ 638.020502][ T5939] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.030327][ T7260] sierra 8-1:0.3: Sierra USB modem converter detected [ 638.038795][ T5939] usb 9-1: config 0 descriptor?? [ 638.264709][ T7260] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 638.306517][ T7260] usb 8-1: USB disconnect, device number 19 [ 638.321744][ T7260] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 638.343455][ T7260] sierra 8-1:0.3: device disconnected [ 638.493394][ T5939] lenovo 0003:17EF:6047.000A: hidraw0: USB HID v1.01 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0 [ 640.093514][ T9197] random: crng reseeded on system resumption [ 640.281155][ T5939] lenovo 0003:17EF:6047.000A: Fn-lock setting failed: -71 [ 640.336269][ T5939] lenovo 0003:17EF:6047.000A: Sensitivity setting failed: -71 [ 640.417323][ T5939] usb 9-1: USB disconnect, device number 15 [ 640.535095][ T5940] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 640.705448][ T5940] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 640.842572][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.951599][ T5940] usb 6-1: config 0 descriptor?? [ 640.991279][ T5940] cp210x 6-1:0.0: cp210x converter detected [ 642.145558][ T9220] netlink: 24 bytes leftover after parsing attributes in process `syz.8.923'. [ 642.365138][ T5940] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 643.275248][ T5940] usb 6-1: cp210x converter now attached to ttyUSB0 [ 643.368489][ T5940] usb 6-1: USB disconnect, device number 6 [ 643.405760][ T5940] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 643.566560][ T5940] cp210x 6-1:0.0: device disconnected [ 643.813556][ T9236] netlink: 80 bytes leftover after parsing attributes in process `syz.6.929'. [ 643.906628][ T9241] random: crng reseeded on system resumption [ 643.982438][ T9243] netlink: 12 bytes leftover after parsing attributes in process `syz.7.931'. [ 644.054901][ T5939] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 644.138562][ T9244] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 644.226661][ T5939] usb 7-1: config 0 has an invalid interface number: 3 but max is 0 [ 644.242832][ T5939] usb 7-1: config 0 has no interface number 0 [ 644.252221][ T5939] usb 7-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 644.261567][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.277224][ T5939] usb 7-1: config 0 descriptor?? [ 644.317097][ T5939] hub 7-1:0.3: bad descriptor, ignoring hub [ 644.342717][ T5939] hub 7-1:0.3: probe with driver hub failed with error -5 [ 644.355617][ T5939] sierra 7-1:0.3: Sierra USB modem converter detected [ 644.374988][ T5869] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 644.434858][ T5940] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 644.524485][ T5939] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 644.568585][ T5939] usb 7-1: USB disconnect, device number 16 [ 644.577094][ T5939] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 644.592541][ T5939] sierra 7-1:0.3: device disconnected [ 644.625992][ T5869] usb 8-1: Using ep0 maxpacket: 16 [ 644.634463][ T30] audit: type=1400 audit(1751715503.551:338): avc: denied { ioctl } for pid=9248 comm="syz.7.933" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 644.665059][ T5940] usb 6-1: Using ep0 maxpacket: 16 [ 644.665508][ T5869] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 644.679295][ T5940] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 644.679321][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.701373][ T5940] usb 6-1: config 0 descriptor?? [ 644.720709][ T5940] usb 6-1: can't set config #0, error -71 [ 644.725373][ T30] audit: type=1400 audit(1751715503.581:339): avc: denied { create } for pid=9259 comm="syz.9.937" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 644.731648][ T5940] usb 6-1: USB disconnect, device number 7 [ 644.748066][ T5869] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.762261][ T30] audit: type=1400 audit(1751715503.581:340): avc: denied { read } for pid=9259 comm="syz.9.937" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 644.796827][ T30] audit: type=1400 audit(1751715503.581:341): avc: denied { open } for pid=9259 comm="syz.9.937" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 644.820873][ T5869] usb 8-1: config 0 descriptor?? [ 644.829675][ T5869] usb 8-1: can't set config #0, error -71 [ 644.858159][ T30] audit: type=1400 audit(1751715503.621:342): avc: denied { prog_load } for pid=9259 comm="syz.9.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 644.860635][ T5869] usb 8-1: USB disconnect, device number 20 [ 644.884975][ T30] audit: type=1400 audit(1751715503.621:343): avc: denied { bpf } for pid=9259 comm="syz.9.937" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 644.909609][ T30] audit: type=1400 audit(1751715503.621:344): avc: denied { perfmon } for pid=9259 comm="syz.9.937" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 644.933179][ T30] audit: type=1400 audit(1751715503.621:345): avc: denied { prog_run } for pid=9259 comm="syz.9.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 644.955114][ T30] audit: type=1400 audit(1751715503.621:346): avc: denied { ioctl } for pid=9259 comm="syz.9.937" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 644.983513][ T30] audit: type=1400 audit(1751715503.641:347): avc: denied { read write } for pid=9254 comm="syz.8.936" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 645.153012][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.9.939'. [ 647.471694][ T5939] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 647.534214][ T9295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 647.699815][ T5939] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 648.285166][ T5939] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 648.298959][ T5939] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 648.309872][ T5939] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 648.322774][ T5939] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 648.367579][ T5939] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 648.711620][ T5939] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 649.045252][ T5939] usb 10-1: Product: syz [ 649.049510][ T5939] usb 10-1: Manufacturer: syz [ 649.112374][ T5939] cdc_wdm 10-1:1.0: skipping garbage [ 649.138246][ T5939] cdc_wdm 10-1:1.0: skipping garbage [ 649.161429][ T5939] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 649.186685][ T5939] cdc_wdm 10-1:1.0: Unknown control protocol [ 649.287619][ T9313] sp0: Synchronizing with TNC [ 649.393271][ T9314] netlink: 80 bytes leftover after parsing attributes in process `syz.5.951'. [ 649.575035][ T2146] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 649.647141][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 649.647180][ T30] audit: type=1400 audit(1751715508.571:426): avc: denied { prog_load } for pid=9288 comm="syz.9.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 649.755091][ T2146] usb 7-1: Using ep0 maxpacket: 16 [ 649.765751][ T2146] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.863540][ T2146] usb 7-1: config 0 interface 0 has no altsetting 0 [ 649.926333][ T30] audit: type=1400 audit(1751715508.571:427): avc: denied { bpf } for pid=9288 comm="syz.9.947" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 650.052784][ T2146] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 650.154087][ T2146] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.207984][ T30] audit: type=1400 audit(1751715508.951:428): avc: denied { mounton } for pid=9316 comm="syz.7.954" path="/103/file1" dev="tmpfs" ino=560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 650.280635][ T2146] usb 7-1: Product: syz [ 650.510817][ T2146] usb 7-1: Manufacturer: syz [ 652.202964][ T30] audit: type=1400 audit(1751715508.991:429): avc: denied { mount } for pid=9316 comm="syz.7.954" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 652.241204][ T9318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.291716][ T2146] usb 7-1: SerialNumber: syz [ 652.379795][ T9304] [U] è [ 652.507556][ T2146] usb 7-1: config 0 descriptor?? [ 652.519138][ T2146] usb 7-1: can't set config #0, error -71 [ 652.536916][ T2146] usb 7-1: USB disconnect, device number 17 [ 652.576488][ T7260] usb 10-1: USB disconnect, device number 20 [ 652.710241][ T30] audit: type=1400 audit(1751715511.611:430): avc: denied { execmem } for pid=9320 comm="syz.5.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 652.780375][ T30] audit: type=1400 audit(1751715511.701:431): avc: denied { read write } for pid=9324 comm="syz.6.957" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 653.173242][ T30] audit: type=1400 audit(1751715511.701:432): avc: denied { open } for pid=9324 comm="syz.6.957" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 653.206736][ T30] audit: type=1400 audit(1751715511.731:433): avc: denied { create } for pid=9322 comm="syz.9.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 653.341204][ T30] audit: type=1400 audit(1751715511.731:434): avc: denied { write } for pid=9322 comm="syz.9.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 653.344961][ T9327] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 653.422825][ T30] audit: type=1400 audit(1751715511.731:435): avc: denied { nlmsg_write } for pid=9322 comm="syz.9.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 654.188434][ T5869] kernel read not supported for file /vga_arbiter (pid: 5869 comm: kworker/0:3) [ 654.351441][ T9341] netlink: 'syz.7.959': attribute type 12 has an invalid length. [ 654.359309][ T9341] netlink: 9472 bytes leftover after parsing attributes in process `syz.7.959'. [ 654.734585][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 654.734600][ T30] audit: type=1400 audit(1751715513.651:458): avc: denied { allowed } for pid=9338 comm="syz.5.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 654.868945][ T30] audit: type=1400 audit(1751715513.671:459): avc: denied { create } for pid=9338 comm="syz.5.960" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 654.959312][ T9349] netlink: 24 bytes leftover after parsing attributes in process `syz.9.962'. [ 655.069895][ T30] audit: type=1400 audit(1751715513.671:460): avc: denied { map } for pid=9338 comm="syz.5.960" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 655.138870][ T30] audit: type=1400 audit(1751715513.671:461): avc: denied { read write } for pid=9338 comm="syz.5.960" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 655.462011][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.7.965'. [ 655.475459][ T5940] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 655.635770][ T30] audit: type=1400 audit(1751715513.781:462): avc: denied { read } for pid=9345 comm="syz.9.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 655.688056][ T5940] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 655.708507][ T5940] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 655.726888][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.967'. [ 656.485351][ T30] audit: type=1400 audit(1751715513.871:463): avc: denied { ioctl } for pid=9345 comm="syz.9.962" path="socket:[21453]" dev="sockfs" ino=21453 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 656.567883][ T5940] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 656.568598][ T30] audit: type=1400 audit(1751715514.351:464): avc: denied { prog_run } for pid=9355 comm="syz.5.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 656.596144][ T30] audit: type=1400 audit(1751715514.361:465): avc: denied { create } for pid=9355 comm="syz.5.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 656.604925][ T5940] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 656.615795][ T30] audit: type=1400 audit(1751715514.581:466): avc: denied { ioctl } for pid=9355 comm="syz.5.967" path="socket:[21892]" dev="sockfs" ino=21892 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 656.653866][ T30] audit: type=1400 audit(1751715514.581:467): avc: denied { module_request } for pid=9355 comm="syz.5.967" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 656.769377][ T5940] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 656.806681][ T5940] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 656.816458][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 656.824461][ T5940] usb 7-1: Product: syz [ 656.863903][ T5940] usb 7-1: Manufacturer: syz [ 656.901029][ T5940] cdc_wdm 7-1:1.0: skipping garbage [ 656.910465][ T5940] cdc_wdm 7-1:1.0: skipping garbage [ 656.943351][ T5940] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 656.951364][ T5940] cdc_wdm 7-1:1.0: Unknown control protocol [ 657.270703][ T9381] netlink: 'syz.7.972': attribute type 5 has an invalid length. [ 657.279148][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.7.972'. [ 658.328413][ T7251] usb 7-1: USB disconnect, device number 18 [ 658.481593][ T9392] Cannot find add_set index 0 as target [ 658.494493][ T9392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 660.188317][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 660.188337][ T30] audit: type=1400 audit(1751715518.251:484): avc: denied { create } for pid=9386 comm="syz.9.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 660.214811][ T30] audit: type=1400 audit(1751715518.331:485): avc: denied { connect } for pid=9386 comm="syz.9.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 660.254629][ T30] audit: type=1400 audit(1751715518.401:486): avc: denied { setopt } for pid=9386 comm="syz.9.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 660.274308][ T30] audit: type=1400 audit(1751715518.521:487): avc: denied { ioctl } for pid=9391 comm="syz.8.977" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22558 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 660.956686][ T9407] netlink: 24 bytes leftover after parsing attributes in process `syz.7.978'. [ 661.289579][ T30] audit: type=1400 audit(1751715520.211:488): avc: denied { read write } for pid=9410 comm="syz.9.983" name="radio0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 661.334998][ T30] audit: type=1400 audit(1751715520.211:489): avc: denied { open } for pid=9410 comm="syz.9.983" path="/dev/radio0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 661.705008][ T30] audit: type=1400 audit(1751715520.241:490): avc: denied { read } for pid=9404 comm="syz.8.980" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 661.727695][ C0] vkms_vblank_simulate: vblank timer overrun [ 661.774910][ T30] audit: type=1400 audit(1751715520.241:491): avc: denied { open } for pid=9404 comm="syz.8.980" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 661.798384][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.277678][ T30] audit: type=1400 audit(1751715520.241:492): avc: denied { write } for pid=9404 comm="syz.8.980" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 662.301079][ T30] audit: type=1400 audit(1751715520.241:493): avc: denied { ioctl } for pid=9404 comm="syz.8.980" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 662.326018][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.612577][ T9416] sp0: Synchronizing with TNC [ 663.027559][ T5869] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 663.035210][ T7251] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 663.228517][ T7251] usb 8-1: Using ep0 maxpacket: 16 [ 663.241455][ T5869] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 663.254604][ T5869] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 663.270546][ T7251] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.281528][ T5869] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 663.290761][ T7251] usb 8-1: config 0 interface 0 has no altsetting 0 [ 663.321348][ T7251] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 663.452068][ T5869] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 663.522569][ T7251] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.167571][ T5869] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 664.178970][ T7251] usb 8-1: Product: syz [ 664.183140][ T7251] usb 8-1: Manufacturer: syz [ 664.220954][ T7251] usb 8-1: SerialNumber: syz [ 664.362799][ T5869] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 664.479280][ T7251] usb 8-1: config 0 descriptor?? [ 664.527539][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 664.591401][ T5869] usb 6-1: Product: syz [ 664.600376][ T9446] netlink: 24 bytes leftover after parsing attributes in process `syz.6.992'. [ 664.616882][ T5869] usb 6-1: Manufacturer: syz [ 664.672086][ T7251] usb 8-1: can't set config #0, error -71 [ 664.672725][ T9414] [U] è [ 664.696972][ T7251] usb 8-1: USB disconnect, device number 21 [ 664.719498][ T5869] cdc_wdm 6-1:1.0: skipping garbage [ 664.742591][ T9453] macvlan5: entered promiscuous mode [ 664.746178][ T5869] cdc_wdm 6-1:1.0: skipping garbage [ 664.786630][ T9453] macvlan5: entered allmulticast mode [ 664.798173][ T5869] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 664.804107][ T5869] cdc_wdm 6-1:1.0: Unknown control protocol [ 664.905922][ T5885] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 665.254921][ T5885] usb 9-1: Using ep0 maxpacket: 8 [ 665.296095][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 665.296108][ T30] audit: type=1400 audit(1751715524.161:543): avc: denied { read } for pid=9426 comm="syz.5.985" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 665.324899][ T30] audit: type=1400 audit(1751715524.161:544): avc: denied { open } for pid=9426 comm="syz.5.985" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 665.348514][ C0] vkms_vblank_simulate: vblank timer overrun [ 665.356892][ T30] audit: type=1400 audit(1751715524.171:545): avc: denied { create } for pid=9460 comm="syz.6.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 665.376199][ C0] vkms_vblank_simulate: vblank timer overrun [ 665.383114][ T5885] usb 9-1: no configurations [ 665.387808][ T5885] usb 9-1: can't read configurations, error -22 [ 665.394590][ T30] audit: type=1400 audit(1751715524.291:546): avc: denied { setopt } for pid=9460 comm="syz.6.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 665.568697][ T9465] netlink: 'syz.6.998': attribute type 12 has an invalid length. [ 665.578399][ T9465] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.998'. [ 665.615045][ T30] audit: type=1400 audit(1751715524.471:547): avc: denied { create } for pid=9460 comm="syz.6.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 665.736864][ T5885] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 665.819342][ T30] audit: type=1400 audit(1751715524.481:548): avc: denied { getopt } for pid=9460 comm="syz.6.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 665.898947][ T5869] usb 6-1: USB disconnect, device number 9 [ 665.929921][ T30] audit: type=1400 audit(1751715524.851:549): avc: denied { create } for pid=9468 comm="syz.7.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 665.954916][ T5885] usb 9-1: Using ep0 maxpacket: 8 [ 666.015115][ T5885] usb 9-1: no configurations [ 666.162461][ T5885] usb 9-1: can't read configurations, error -22 [ 666.174988][ T30] audit: type=1400 audit(1751715525.081:550): avc: denied { write } for pid=9468 comm="syz.7.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 666.185590][ T9475] netlink: 1068 bytes leftover after parsing attributes in process `syz.6.1002'. [ 666.194979][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.197183][ T5885] usb usb9-port1: attempt power cycle [ 666.262320][ T9472] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1001'. [ 666.352392][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1000'. [ 666.382781][ T30] audit: type=1400 audit(1751715525.081:551): avc: denied { nlmsg_write } for pid=9468 comm="syz.7.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 666.774841][ T5885] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 667.390965][ T30] audit: type=1400 audit(1751715525.081:552): avc: denied { write } for pid=9468 comm="syz.7.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 667.428959][ T5885] usb 9-1: Using ep0 maxpacket: 8 [ 667.434556][ T5885] usb 9-1: no configurations [ 667.439556][ T5885] usb 9-1: can't read configurations, error -22 [ 667.663108][ T9488] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1006'. [ 667.732562][ T5885] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 667.899629][ T5885] usb 9-1: device descriptor read/8, error -71 [ 667.959394][ T9496] sp0: Synchronizing with TNC [ 667.974150][ T9495] macvlan4: entered promiscuous mode [ 667.979692][ T9495] macvlan4: entered allmulticast mode [ 668.026234][ T5885] usb usb9-port1: unable to enumerate USB device [ 668.277037][ T7252] usb 10-1: new low-speed USB device number 21 using dummy_hcd [ 668.304993][ T5912] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 668.306467][ T9508] netlink: 'syz.5.1013': attribute type 12 has an invalid length. [ 668.325004][ T9508] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.1013'. [ 668.611750][ T7252] usb 10-1: config index 0 descriptor too short (expected 1307, got 27) [ 668.620538][ T7252] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 668.632005][ T7252] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 668.641468][ T7252] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 668.654391][ T7252] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 668.676496][ T7252] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 668.687739][ T5912] usb 8-1: Using ep0 maxpacket: 16 [ 668.694145][ T7252] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 668.713527][ T5912] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.963085][ T5912] usb 8-1: config 0 interface 0 has no altsetting 0 [ 668.985767][ T7252] usb 10-1: string descriptor 0 read error: -22 [ 669.009932][ T5912] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 669.019150][ T7252] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 669.032679][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.044751][ T7252] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.054227][ T5912] usb 8-1: Product: syz [ 669.066627][ T7252] usb 10-1: config 0 descriptor?? [ 669.071786][ T5912] usb 8-1: Manufacturer: syz [ 669.078416][ T5912] usb 8-1: SerialNumber: syz [ 669.084274][ T9499] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 669.086228][ T5912] usb 8-1: config 0 descriptor?? [ 669.100146][ T7252] hub 10-1:0.0: bad descriptor, ignoring hub [ 669.106215][ T7252] hub 10-1:0.0: probe with driver hub failed with error -5 [ 669.115593][ T5912] hub 8-1:0.0: bad descriptor, ignoring hub [ 669.123654][ T5912] hub 8-1:0.0: probe with driver hub failed with error -5 [ 669.132920][ T7252] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input11 [ 669.164454][ T5912] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 669.184464][ T6034] usb 8-1: Failed to submit usb control message: -71 [ 669.205968][ T6034] usb 8-1: unable to send the bmi data to the device: -71 [ 669.214137][ T6034] usb 8-1: unable to get target info from device [ 669.222858][ T6034] usb 8-1: could not get target info (-71) [ 669.455096][ T5869] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 670.104960][ T6034] usb 8-1: could not probe fw (-71) [ 670.133641][ T7252] usb 10-1: USB disconnect, device number 21 [ 670.134384][ T9489] [U] è [ 670.367312][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 670.367331][ T30] audit: type=1400 audit(1751715529.091:599): avc: denied { execmem } for pid=9523 comm="syz.6.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 670.400713][ T30] audit: type=1400 audit(1751715529.121:600): avc: denied { name_bind } for pid=9525 comm="syz.8.1019" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 670.432658][ T30] audit: type=1400 audit(1751715529.121:601): avc: denied { node_bind } for pid=9525 comm="syz.8.1019" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 670.624938][ T5912] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 670.785838][ T5912] usb 9-1: Using ep0 maxpacket: 8 [ 670.799482][ T5912] usb 9-1: no configurations [ 670.824734][ T5912] usb 9-1: can't read configurations, error -22 [ 671.930146][ T7260] usb 8-1: USB disconnect, device number 22 [ 673.250235][ T30] audit: type=1400 audit(1751715531.601:602): avc: denied { read } for pid=9529 comm="syz.9.1020" dev="nsfs" ino=4026534216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 673.772220][ T5912] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 683.278172][ T30] audit: type=1400 audit(1751715531.601:603): avc: denied { open } for pid=9529 comm="syz.9.1020" path="net:[4026534216]" dev="nsfs" ino=4026534216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 683.719800][ T5869] usb 6-1: device descriptor read/all, error -71 [ 686.598687][ T30] audit: type=1400 audit(1751715532.201:604): avc: denied { create } for pid=9529 comm="syz.9.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 689.158736][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.176418][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.166409][ T30] audit: type=1400 audit(1751715532.201:605): avc: denied { allowed } for pid=9529 comm="syz.9.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 703.699336][ T30] audit: type=1400 audit(1751715532.201:606): avc: denied { map } for pid=9529 comm="syz.9.1020" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 710.379014][ T30] audit: type=1400 audit(1751715532.201:607): avc: denied { read write } for pid=9529 comm="syz.9.1020" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 746.918358][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 822.314730][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 822.321712][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9532/1:b..l P7281/1:b..l [ 822.331179][ C1] rcu: (detected by 1, t=10503 jiffies, g=30309, q=295 ncpus=2) [ 822.338897][ C1] task:syz-executor state:R running task stack:23544 pid:7281 tgid:7281 ppid:7262 task_flags:0x400140 flags:0x00004002 [ 822.353269][ C1] Call Trace: [ 822.356550][ C1] [ 822.359483][ C1] __schedule+0x116a/0x5de0 [ 822.364015][ C1] ? __lock_acquire+0x622/0x1c90 [ 822.368960][ C1] ? __pfx___schedule+0x10/0x10 [ 822.373829][ C1] ? mark_held_locks+0x49/0x80 [ 822.378594][ C1] preempt_schedule_irq+0x51/0x90 [ 822.383625][ C1] irqentry_exit+0x36/0x90 [ 822.388051][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 822.394030][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 822.399318][ C1] Code: 0f c1 05 48 7a 38 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 5d 38 38 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 822.418931][ C1] RSP: 0018:ffffc900040a7348 EFLAGS: 00000206 [ 822.425004][ C1] RAX: 5e8023e46ae17300 RBX: ffffffff8e5c4940 RCX: ffffc900040a7354 [ 822.432972][ C1] RDX: 0000000000000001 RSI: ffffffff8de0c233 RDI: ffffffff8c1587e0 [ 822.440948][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 822.448920][ C1] R10: 0000000000000000 R11: 000000000001180e R12: ffffffff816acad4 [ 822.456890][ C1] R13: 0000000000000206 R14: ffff88802eeb4880 R15: 0000000000000002 [ 822.464866][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 822.470087][ C1] unwind_next_frame+0x3f9/0x20a0 [ 822.475111][ C1] ? __put_partials+0x16d/0x1c0 [ 822.479968][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 822.486130][ C1] arch_stack_walk+0x94/0x100 [ 822.490812][ C1] ? qlist_free_all+0x4d/0x120 [ 822.495587][ C1] stack_trace_save+0x8e/0xc0 [ 822.500281][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 822.505731][ C1] ? __lock_acquire+0x622/0x1c90 [ 822.510678][ C1] save_stack+0x160/0x1f0 [ 822.515014][ C1] ? __pfx_save_stack+0x10/0x10 [ 822.519870][ C1] ? __free_frozen_pages+0x7fe/0x1180 [ 822.525246][ C1] ? __put_partials+0x16d/0x1c0 [ 822.530104][ C1] ? page_ext_put+0x3e/0xd0 [ 822.534604][ C1] __reset_page_owner+0x84/0x1a0 [ 822.539551][ C1] __free_frozen_pages+0x7fe/0x1180 [ 822.544761][ C1] __put_partials+0x16d/0x1c0 [ 822.549447][ C1] qlist_free_all+0x4d/0x120 [ 822.554045][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 822.559510][ C1] __kasan_kmalloc+0x8a/0xb0 [ 822.564108][ C1] __kmalloc_node_noprof+0x21e/0x500 [ 822.569406][ C1] ? __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 822.575569][ C1] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 822.581480][ C1] ? xt_counters_alloc+0x4c/0x70 [ 822.586430][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 822.592782][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 822.598168][ C1] ? xt_counters_alloc+0x4c/0x70 [ 822.603115][ C1] __vmalloc_node_noprof+0xad/0xf0 [ 822.608241][ C1] ? xt_counters_alloc+0x4c/0x70 [ 822.613194][ C1] xt_counters_alloc+0x4c/0x70 [ 822.617967][ C1] __do_replace+0x97/0x9e0 [ 822.622398][ C1] ? __pfx___do_replace+0x10/0x10 [ 822.627426][ C1] ? xt_alloc_table_info+0x3e/0xa0 [ 822.632583][ C1] do_ipt_set_ctl+0x86d/0xae0 [ 822.637274][ C1] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 822.643274][ C1] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 822.648495][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 822.653709][ C1] ? sockopt_release_sock+0x52/0x60 [ 822.658935][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 822.664935][ C1] ? sockopt_release_sock+0x52/0x60 [ 822.670159][ C1] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 822.676147][ C1] nf_setsockopt+0x8a/0xf0 [ 822.680593][ C1] ip_setsockopt+0xcb/0xf0 [ 822.685020][ C1] tcp_setsockopt+0xa7/0x100 [ 822.689620][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 822.695519][ C1] do_sock_setsockopt+0x221/0x470 [ 822.700567][ C1] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 822.706125][ C1] ? handle_mm_fault+0x2ab/0xd10 [ 822.711072][ C1] ? find_held_lock+0x2b/0x80 [ 822.715759][ C1] __sys_setsockopt+0x1a0/0x230 [ 822.720620][ C1] __x64_sys_setsockopt+0xbd/0x160 [ 822.725737][ C1] ? do_syscall_64+0x91/0x4c0 [ 822.730420][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 822.735625][ C1] do_syscall_64+0xcd/0x4c0 [ 822.740138][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.746029][ C1] RIP: 0033:0x7f1371f9081a [ 822.750442][ C1] RSP: 002b:00007ffc6fb9aad8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 822.758856][ C1] RAX: ffffffffffffffda RBX: 00007ffc6fb9ab60 RCX: 00007f1371f9081a [ 822.766824][ C1] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 822.774792][ C1] RBP: 0000000000000003 R08: 0000000000000408 R09: 00007ffc6fb9af17 [ 822.782764][ C1] R10: 00007f1372183c20 R11: 0000000000000206 R12: 00007f1372183bc0 [ 822.790743][ C1] R13: 00007ffc6fb9aafc R14: 0000000000000000 R15: 00007f1372185000 [ 822.798904][ C1] [ 822.801935][ C1] task:syz.9.1020 state:R running task stack:27560 pid:9532 tgid:9529 ppid:7289 task_flags:0x40044c flags:0x00004006 [ 822.815432][ C1] Call Trace: [ 822.818712][ C1] [ 822.821641][ C1] __schedule+0x116a/0x5de0 [ 822.826156][ C1] ? __lock_acquire+0x581/0x1c90 [ 822.831108][ C1] ? __pfx___schedule+0x10/0x10 [ 822.835960][ C1] ? lock_acquire+0x179/0x350 [ 822.840643][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 822.845672][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 822.851054][ C1] preempt_schedule_common+0x44/0xc0 [ 822.856342][ C1] preempt_schedule_thunk+0x16/0x30 [ 822.861570][ C1] _raw_spin_unlock+0x3e/0x50 [ 822.866266][ C1] unmap_page_range+0x106b/0x4350 [ 822.871329][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 822.876714][ C1] ? uprobe_munmap+0x20/0x5c0 [ 822.881406][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 822.887309][ C1] unmap_vmas+0x218/0x470 [ 822.891643][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 822.896496][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 822.901459][ C1] exit_mmap+0x1b9/0xb90 [ 822.905711][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 822.910510][ C1] __mmput+0x12a/0x410 [ 822.914587][ C1] mmput+0x62/0x70 [ 822.918311][ C1] do_exit+0x7c4/0x2bd0 [ 822.922467][ C1] ? __pfx___might_resched+0x10/0x10 [ 822.927761][ C1] ? __pfx_do_exit+0x10/0x10 [ 822.932357][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 822.937382][ C1] ? find_held_lock+0x2b/0x80 [ 822.942066][ C1] do_group_exit+0xd3/0x2a0 [ 822.946580][ C1] get_signal+0x2673/0x26d0 [ 822.951090][ C1] ? __pfx___up_read+0x10/0x10 [ 822.955863][ C1] ? __pfx_get_signal+0x10/0x10 [ 822.960718][ C1] ? madvise_unlock+0xf6/0x190 [ 822.965492][ C1] ? do_madvise+0x19d/0x230 [ 822.969995][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 822.975554][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 822.981728][ C1] exit_to_user_mode_loop+0x84/0x110 [ 822.987032][ C1] do_syscall_64+0x3f6/0x4c0 [ 822.991639][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.997531][ C1] RIP: 0033:0x7f014e38e929 [ 823.001947][ C1] RSP: 002b:00007f014f241038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 823.010364][ C1] RAX: ffffffffffffffea RBX: 00007f014e5b6160 RCX: 00007f014e38e929 [ 823.018341][ C1] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000200000000000 [ 823.026310][ C1] RBP: 00007f014e410b39 R08: 0000000000000000 R09: 0000000000000000 [ 823.034281][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.042256][ C1] R13: 0000000000000001 R14: 00007f014e5b6160 R15: 00007fff6249c878 [ 823.050240][ C1] [ 823.053255][ C1] rcu: rcu_preempt kthread starved for 8734 jiffies! g30309 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 823.064357][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 823.074323][ C1] rcu: RCU grace-period kthread stack dump: [ 823.080204][ C1] task:rcu_preempt state:R running task stack:27464 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 823.093709][ C1] Call Trace: [ 823.096984][ C1] [ 823.099916][ C1] __schedule+0x116a/0x5de0 [ 823.104450][ C1] ? __pfx___schedule+0x10/0x10 [ 823.109298][ C1] ? find_held_lock+0x2b/0x80 [ 823.113974][ C1] ? schedule+0x2d7/0x3a0 [ 823.118319][ C1] schedule+0xe7/0x3a0 [ 823.122397][ C1] schedule_timeout+0x123/0x290 [ 823.127256][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 823.132625][ C1] ? __pfx_process_timeout+0x10/0x10 [ 823.137934][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 823.143751][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 823.149229][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 823.154001][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 823.159288][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 823.164493][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 823.169431][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 823.174284][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 823.180102][ C1] rcu_gp_kthread+0x270/0x380 [ 823.184793][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 823.189988][ C1] ? rcu_is_watching+0x12/0xc0 [ 823.194760][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 823.199966][ C1] ? __kthread_parkme+0x19e/0x250 [ 823.204996][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 823.210192][ C1] kthread+0x3c2/0x780 [ 823.214264][ C1] ? __pfx_kthread+0x10/0x10 [ 823.218856][ C1] ? rcu_is_watching+0x12/0xc0 [ 823.223625][ C1] ? __pfx_kthread+0x10/0x10 [ 823.228219][ C1] ret_from_fork+0x5d4/0x6f0 [ 823.232818][ C1] ? __pfx_kthread+0x10/0x10 [ 823.237410][ C1] ret_from_fork_asm+0x1a/0x30 [ 823.242186][ C1] [ 823.245200][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 823.251511][ C1] Sending NMI from CPU 1 to CPUs 0: [ 823.256711][ C0] NMI backtrace for cpu 0 [ 823.256722][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 823.256739][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 823.256747][ C0] RIP: 0010:check_preemption_disabled+0x27/0xe0 [ 823.256770][ C0] Code: 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 35 5c 48 08 65 8b 05 2a 5c 48 08 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c c4 de 02 00 9c 58 f6 c4 02 74 ea 48 89 fd 65 48 8b 05 ea 5b 48 [ 823.256783][ C0] RSP: 0018:ffffc90000007068 EFLAGS: 00000096 [ 823.256795][ C0] RAX: 0000000000000000 RBX: ffffffff8e5c4940 RCX: ffffc9000000707c [ 823.256804][ C0] RDX: 0000000000000003 RSI: ffffffff8de0c233 RDI: ffffffff8c1587e0 [ 823.256813][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 823.256821][ C0] R10: 0000000000000000 R11: 000000000008bd38 R12: ffffffff816acad4 [ 823.256830][ C0] R13: 0000000000000206 R14: ffffffff8e297780 R15: 0000000000000004 [ 823.256839][ C0] FS: 0000000000000000(0000) GS:ffff888124715000(0000) knlGS:0000000000000000 [ 823.256853][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 823.256862][ C0] CR2: 00007ffc81d0ffc8 CR3: 000000000e382000 CR4: 00000000003526f0 [ 823.256871][ C0] Call Trace: [ 823.256875][ C0] [ 823.256880][ C0] lock_release+0x153/0x2f0 [ 823.256896][ C0] unwind_next_frame+0x3f9/0x20a0 [ 823.256909][ C0] ? nft_do_chain_inet+0x18a/0x340 [ 823.256931][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 823.256950][ C0] arch_stack_walk+0x94/0x100 [ 823.256965][ C0] ? nf_hook_slow+0xbe/0x200 [ 823.256985][ C0] stack_trace_save+0x8e/0xc0 [ 823.257002][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 823.257020][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 823.257033][ C0] kasan_save_stack+0x33/0x60 [ 823.257049][ C0] ? kasan_save_stack+0x33/0x60 [ 823.257065][ C0] ? kasan_save_track+0x14/0x30 [ 823.257080][ C0] ? kasan_save_free_info+0x3b/0x60 [ 823.257097][ C0] ? __kasan_slab_free+0x51/0x70 [ 823.257113][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 823.257129][ C0] ? skb_free_head+0x1b7/0x210 [ 823.257145][ C0] ? skb_release_data+0x776/0x9c0 [ 823.257161][ C0] ? consume_skb+0xbf/0x100 [ 823.257179][ C0] ? nft_synproxy_do_eval+0x943/0xd80 [ 823.257193][ C0] ? nft_do_chain+0x2e9/0x1920 [ 823.257207][ C0] ? nft_do_chain_inet+0x18a/0x340 [ 823.257230][ C0] kasan_save_track+0x14/0x30 [ 823.257247][ C0] kasan_save_free_info+0x3b/0x60 [ 823.257261][ C0] __kasan_slab_free+0x51/0x70 [ 823.257278][ C0] kmem_cache_free+0x2d1/0x4d0 [ 823.257294][ C0] ? skb_free_head+0x1b7/0x210 [ 823.257310][ C0] skb_free_head+0x1b7/0x210 [ 823.257326][ C0] skb_release_data+0x776/0x9c0 [ 823.257347][ C0] ? dst_release+0x8d/0x340 [ 823.257365][ C0] consume_skb+0xbf/0x100 [ 823.257383][ C0] nft_synproxy_do_eval+0x943/0xd80 [ 823.257399][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 823.257415][ C0] ? lock_acquire+0x179/0x350 [ 823.257427][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 823.257444][ C0] ? sched_clock+0x38/0x60 [ 823.257460][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 823.257476][ C0] nft_do_chain+0x2e9/0x1920 [ 823.257490][ C0] ? ip6t_do_table+0xbf5/0x1c30 [ 823.257504][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 823.257523][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 823.257544][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 823.257562][ C0] nft_do_chain_inet+0x18a/0x340 [ 823.257575][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 823.257589][ C0] ? nf_nat_ipv6_local_in+0x3ad/0x6b0 [ 823.257606][ C0] ? lock_acquire+0x179/0x350 [ 823.257620][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 823.257633][ C0] nf_hook_slow+0xbe/0x200 [ 823.257651][ C0] nf_hook.constprop.0+0x422/0x750 [ 823.257666][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 823.257682][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 823.257698][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 823.257716][ C0] ip6_input+0xe0/0x2f0 [ 823.257730][ C0] ? __pfx_ip6_input+0x10/0x10 [ 823.257745][ C0] ipv6_rcv+0x265/0x680 [ 823.257760][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 823.257774][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 823.257792][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 823.257809][ C0] ? lock_acquire+0x179/0x350 [ 823.257823][ C0] ? process_backlog+0x3f0/0x15e0 [ 823.257838][ C0] __netif_receive_skb+0x1d/0x160 [ 823.257854][ C0] process_backlog+0x442/0x15e0 [ 823.257872][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 823.257888][ C0] ? rcu_is_watching+0x12/0xc0 [ 823.257905][ C0] net_rx_action+0xa9f/0xfe0 [ 823.257930][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 823.257947][ C0] ? rcu_is_watching+0x12/0xc0 [ 823.257963][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 823.257980][ C0] ? tmigr_handle_remote+0x132/0x380 [ 823.258001][ C0] ? run_timer_base+0x121/0x190 [ 823.258020][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 823.258040][ C0] handle_softirqs+0x219/0x8e0 [ 823.258057][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 823.258074][ C0] __irq_exit_rcu+0x109/0x170 [ 823.258089][ C0] irq_exit_rcu+0x9/0x30 [ 823.258103][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 823.258119][ C0] [ 823.258124][ C0] [ 823.258129][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 823.258143][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 823.258160][ C0] Code: cb 6b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 c0 21 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 823.258172][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 823.258182][ C0] RAX: 00000000036f7fad RBX: 0000000000000000 RCX: ffffffff8b884c69 [ 823.258191][ C0] RDX: 0000000000000000 RSI: ffffffff8de31723 RDI: ffffffff8c1587e0 [ 823.258199][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 823.258207][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 823.258216][ C0] R13: ffffffff8e297780 R14: ffffffff90a97550 R15: 0000000000000000 [ 823.258227][ C0] ? ct_kernel_exit+0x139/0x190 [ 823.258247][ C0] default_idle+0x13/0x20 [ 823.258259][ C0] default_idle_call+0x6d/0xb0 [ 823.258270][ C0] do_idle+0x391/0x510 [ 823.258286][ C0] ? __pfx_do_idle+0x10/0x10 [ 823.258302][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 823.258321][ C0] cpu_startup_entry+0x4f/0x60 [ 823.258337][ C0] rest_init+0x16b/0x2b0 [ 823.258350][ C0] ? acpi_subsystem_init+0x133/0x180 [ 823.258367][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 823.258387][ C0] start_kernel+0x3ee/0x4d0 [ 823.258406][ C0] x86_64_start_reservations+0x18/0x30 [ 823.258425][ C0] x86_64_start_kernel+0x130/0x190 [ 823.258444][ C0] common_startup_64+0x13e/0x148 [ 823.258461][ C0] [ 823.933440][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 829.058503][ T1295] ieee802154 phy0 wpan0: encryption failed: -22