last executing test programs: 18.477519472s ago: executing program 0 (id=3544): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x2, 0x5}}, 0x20) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x20084814) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x185) r3 = socket$inet(0x2, 0x1, 0x100) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67a", 0x2a, 0x11, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8000) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(0x0, 0x0) 14.559994047s ago: executing program 1 (id=3549): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x24, 0x2, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000b22dc1ede54b179f4813e3e1000e0601040090aa1dd75cc037145f8bafbf63ab010000c500"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="58ac7327d1a136a13861d4022b48322d9bbc50f1b0a25c10d12c034c1a3c59ecdfd99ac19e9d1d7d1394bfd1b04c90ed5ac1c50dd110bd75f644826ca36f977c5942f1a5ce1e274b4102aa3e99481fb8166fb987731e5ee90406af40d17168d877a3198e1d7886789206b39c40a02abc32af", @ANYRES16=r4, @ANYBLOB="010023bd7000ffdbdf250800000018000180140002007465616d5f736c6176655f3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000005}, 0x880) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6b23, 0x0, 0x0, 0x0, 0x10000004}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, &(0x7f0000000100)) 13.140081318s ago: executing program 1 (id=3552): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x1, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) ioctl$TUNGETFILTER(r1, 0x801054db, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x48000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000010c0)={0x8, 0x5, 0x2, {0x2, @pix_mp={0x3fe, 0x200, 0x43564548, 0x5, 0x1, [{0xf, 0xfffffff8}, {0x9, 0xc12b}, {0x8, 0x101}, {0x0, 0x3}, {0x401, 0x6}, {0xfffffff9, 0x32ceb250}, {0x6, 0x9}, {0x6, 0x5}], 0x3, 0x6, 0x6, 0x3, 0x4}}, 0xb658}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r4, 0x541b, &(0x7f0000001780)) socket(0xa, 0x3, 0x3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xa, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r5}, 0x38) 11.866341997s ago: executing program 0 (id=3554): utime(0x0, 0xfffffffffffffffc) 11.109095709s ago: executing program 4 (id=3556): r0 = io_uring_setup(0x357b, &(0x7f0000000180)={0x0, 0xfffffffa, 0x100, 0xb733, 0xffffffbe}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) syz_open_dev$ndb(&(0x7f0000000680), 0x0, 0x80080) write$binfmt_misc(r2, &(0x7f0000000740), 0xff67) sendfile(r1, r2, &(0x7f00000000c0), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="d3", 0x1}], 0x1, 0x1, 0x400) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x1}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000001c00000030fb0000030000000a000000000000110b000000080000000f0000000000001203000000005f00f54108b0a65eec7d22f97452fb864fa64f2961dba23512d94e63c22a56d31b4649a61ceb2bf482df4ae5aca117eac089fd039c1ba22ce100f6"], &(0x7f0000000080)=""/165, 0x37, 0xa5, 0x1, 0x7, 0x10000, @value}, 0x28) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="040027bd7000fedbdf250300000008000200000000000c000300040000000000000014000b00fe8000000000000000000000000000aa08000500e000000108000400e0000002080008000100000014000b00ff01000000000000000000000000000108000100", @ANYRES32=0x0, @ANYBLOB="79d62b447d207f3deb85f918bdf6e48c7073611d543ae303366b6bb6"], 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0x24004800) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc4c85513, &(0x7f0000001280)={{0xa, 0x3, 0x6df, 0x8000}, 0x1, [0xfffffffffffffff8, 0x4, 0x6, 0x8, 0x3, 0x3, 0x1, 0x7, 0x8, 0x3, 0x7, 0x2aab, 0xa, 0x7a1, 0x401, 0x0, 0xffffffff, 0x80, 0x5, 0x80, 0x672, 0x9, 0x101, 0x4, 0x3, 0x4, 0x0, 0x4, 0x400, 0xa1fc, 0xb, 0x10000, 0xf7, 0x1, 0x9, 0x996, 0xc, 0xffffffffffff35b7, 0x8000, 0x2, 0x1000, 0x4, 0xfffffffffffffff9, 0x7, 0x0, 0xfff, 0x8, 0x478, 0x1d5, 0x1ff, 0x1, 0xffffffffffff41ee, 0x1ff, 0x7ff, 0x2, 0xfffffffffffffffa, 0x3f87, 0x9, 0xfffffffffffffff3, 0x7fffffff, 0x7, 0x4, 0x0, 0x8000000000000001, 0x8, 0x8000, 0x9831, 0x3, 0x54f, 0x7, 0x8, 0x0, 0x6, 0x8, 0x45503cab, 0x1, 0x0, 0xffffffffffffffb9, 0x7, 0x9, 0xfffffffffffff882, 0x4, 0x4, 0x9d, 0x9, 0xb, 0x4, 0x8a90, 0x40, 0x2, 0xff, 0xfffffffffffffffd, 0x6, 0x5, 0xa43, 0x5, 0xbe50, 0xffffffffffffffec, 0x7ff, 0x2, 0x9, 0x6, 0x80000000, 0xffffffffffffffff, 0x6af00000000000, 0x9, 0x9, 0x9, 0x0, 0xfc8, 0x8000, 0x1, 0x7fffffff, 0x8, 0x400, 0xffffffff, 0x100000001, 0xc, 0x31, 0x3, 0x7ff, 0xa08, 0x1, 0x400, 0x10000, 0x4, 0x1, 0x6f]}) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, 0x0) sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000800)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="c0060000", @ANYRES16=0x0, @ANYBLOB="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"], 0x6c0}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) 11.043921797s ago: executing program 0 (id=3557): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c696d6974000000240002800c00024000000000800000010c0001400000000000000008080005"], 0xe8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, &(0x7f0000000200)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[{}, {}]}) r4 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xbf0e, 0x400, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={[{@cpuset_v2_mode}, {@name}, {}, {@nofavordynmods}, {@clone_children}, {@noprefix}], [{@subj_type={'subj_type', 0x3d, '}'}}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x45, 0x0, @fd_index, 0x1, 0x0, 0x0, 0x4, 0x1}) r7 = msgget(0x1, 0x40) msgsnd(r7, &(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00#\x00\x00\x00\x00'], 0x4, 0x800) msgctl$IPC_RMID(r7, 0x0) msgrcv(r7, &(0x7f0000000240)={0x0, ""/4}, 0xc, 0x3, 0x0) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) chown(&(0x7f0000000300)='./file0\x00', r8, 0xee01) 9.870960957s ago: executing program 4 (id=3559): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x6000, 0xfffffffc, 0x0, 0xf6f09ebf0b0c9208}, 0x9c) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x80, 0x2}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000520001000000000000001cb3ba2b00000a00000008000100feffffff"], 0x1c}}, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000000)={0x23, 0x20}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r7, &(0x7f0000003680)={0x2020}, 0x2020) 9.673439969s ago: executing program 2 (id=3561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r7 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000005c0)="cd8a325c7a", 0x5, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000340)={r8, r6, r7}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r9) 9.407419653s ago: executing program 1 (id=3562): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) getresgid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000540)='rxrpc_rx_ack\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="e77c0000a4"], 0x5b0}, 0x20008001) getrusage(0x1, &(0x7f0000000300)) sendmsg$inet6(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x371}], 0x1}, 0x20000044) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000580)="0888afcb6de1047958f95867ba437194faaafea6fcc976b5ac685fe6ee0406056c586508532a44c666ab9755b6a564f2ea1bd1c41787b430d2495709b2fe66c53b69ba4227288bb5e244f2f8131693e8a0c9c1bddcc309e545517d566d1d2b74bbcf82b92f7b2b707771137ce67b39677c258aedc3aafd9d2c7e0bfc1967f42f59c2d0f14e4fcd8c97", &(0x7f00000001c0)=@tcp}, 0x20) shutdown(r8, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100), &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0xc, 0x34565348, 0x8, 0x6, 0x6, 0x4, 0xa6e, 0x0, 0x2, 0x1, 0x5}}) 8.275894974s ago: executing program 3 (id=3563): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x24, 0x2, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000b22dc1ede54b179f4813e3e1000e0601040090aa1dd75cc037145f8bafbf63ab010000c500"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="58ac7327d1a136a13861d4022b48322d9bbc50f1b0a25c10d12c034c1a3c59ecdfd99ac19e9d1d7d1394bfd1b04c90ed5ac1c50dd110bd75f644826ca36f977c5942f1a5ce1e274b4102aa3e99481fb8166fb987731e5ee90406af40d17168d877a3198e1d7886789206b39c40a02abc32af", @ANYRES16=r4, @ANYBLOB="010023bd7000ffdbdf250800000018000180140002007465616d5f736c6176655f3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000005}, 0x880) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6b23, 0x0, 0x0, 0x0, 0x10000004}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, &(0x7f0000000100)) 8.275380363s ago: executing program 2 (id=3564): r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000000)='mounts\x00') r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) recvmsg(r1, &(0x7f00000011c0)={&(0x7f0000000080)=@in6, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/80, 0x50}], 0x1, &(0x7f00000001c0)=""/4096, 0x1000}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000012c0)={'syztnl2\x00', &(0x7f0000001200)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x1ff, 0xb, {{0x25, 0x4, 0x3, 0x3, 0x94, 0x65, 0x0, 0x33, 0x29, 0x0, @local, @loopback, {[@rr={0x7, 0xb, 0x3f, [@local, @multicast2]}, @generic={0x82, 0xe, "4024392bb61cfb9c8c78a56f"}, @ra={0x94, 0x4, 0x1}, @end, @generic={0x83, 0x2}, @noop, @generic={0x88, 0x2}, @timestamp_prespec={0x44, 0x34, 0xc7, 0x3, 0x2, [{@broadcast, 0x7f3}, {@loopback, 0x7}, {@remote, 0x101}, {@multicast2, 0x10001}, {@multicast1, 0xfffffff7}, {@loopback, 0x7}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x69, 0x1, 0xe, [{@local, 0x8}, {@remote, 0x4}, {@multicast1, 0x8875}, {@local, 0x3}]}]}}}}}) sendmsg(r1, &(0x7f0000001780)={&(0x7f0000001300)=@can={0x1d, r4}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001380)="536b6986246d4a803fee00420dee8bdccff6eea9cfd09f92d1b119a9b43dc177b882801729fbfe7363a1ba0d7147de8a83a8428740836c4c46becc2d5849347d45fbfe95d9236a60d4b0f1f22ac3d6", 0x4f}, {&(0x7f0000001400)="823d53464929bade3f1211be0b2f057f953e2127910323e8f64458e8951426d5e8cedc7aeebab1872813f0957b8a7a02a9a0dc28224dfe65311a8a77fcb19fc9db7d8b3f71ce8627bc56552e9e9e83e8f45880affb4845f3c9d04c55a0458aba9938c6597b545d3160fb6865fe0d2a17f51f8ddf74ad6f3dd3557f0332ef7a3c7341e8b9aa6117972a36d5e206fa193e968d02151d9602566e613bab379093e41cb3", 0xa2}, {&(0x7f00000014c0)="5ef029dec223fd6507d29a99e520da283047810c75cc291a7c63db1abe08f9df639fbd82557f6b5f4924ead88a4b87621bb27f3bde60a3b8989e8ed5e4be42e6df36459f71f527483d28b66628967f61ca0196800a9b050eab3c302938b60e4778a02a66c5cb41d7f9443701c09f4c128b5a47ac9528429082dbdcb63612919f8b1885a530a17c8dd53d37e3a12eeac6c365012d012da4520edb4e2beb342cd2df1d606ef3c2b07cec558077e41c591ab8b8a84476eb4366df1992d0138a3fe790c42f64eff4b120784ad926f7", 0xcd}, {&(0x7f00000015c0)="fc489e5699271f81faa9b68f9a8f516fbf8876", 0x13}, {&(0x7f0000001600)="2884993ac86a87bf6324bf4fc9ddc42c7bebdf6ccae9b35e80225332349ba88fce39fb62f836f40c6be11b786b1e69af62f6c3caf7839fc724ad35d95028d4ecd85be58ef36439cefea29cb041315b0e0181b01c4317bee4f3a583d37dc69a0df934ca5928455b777c784a7e9781e0b28702256a35a9d963367c952b581bf6bcb7556116a5b64ea5008f8667a06d73b4561ea6f032e0d0", 0x97}], 0x5, &(0x7f0000001740)=[{0x18, 0x29, 0x2, "5cf4e03211"}, {0x18, 0xfda834039bf151c2, 0x9, "107e7fbe24259b"}], 0x30}, 0x20004004) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f00000017c0)=0x7fff, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x7c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4a}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6bd3}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x80000000}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000030) r6 = accept$unix(r3, &(0x7f0000001940)=@abs, &(0x7f00000019c0)=0x6e) connect$unix(r6, &(0x7f0000001a00)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r7, &(0x7f0000001a80)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000001ac0)={0x0, r3}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000001b00)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) fcntl$getflags(r8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000001b80)=0x13) read$FUSE(0xffffffffffffffff, &(0x7f0000001bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f0000003c00)={0x18, 0x0, r9, {0x4}}, 0x18) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000003c40), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003f80)={0x11, 0x14, &(0x7f0000003c80)=@raw=[@jmp={0x5, 0x0, 0x9, 0x9, 0xf, 0x1, 0xfffffffffffffffc}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000003d40)='GPL\x00', 0xffff, 0xee, &(0x7f0000003d80)=""/238, 0x41000, 0x28, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000003e80)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000003ec0)={0x4, 0x2, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000003f00)=[r1, r3, r1, r3, r3, r1], &(0x7f0000003f40)=[{0xff, 0x1, 0xa}, {0x2, 0x1, 0xb, 0x3}], 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) readlinkat(r1, &(0x7f0000004040)='./file0\x00', &(0x7f0000004080)=""/219, 0xdb) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8982, &(0x7f0000004180)={0x7, 'wg2\x00', {0x10001}, 0x4}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10010, r2, 0xa6e6000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004240)={{r1, 0xffffffffffffffff}, &(0x7f00000041c0), &(0x7f0000004200)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004540)={0x18, 0x20, &(0x7f0000004280)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @call={0x85, 0x0, 0x0, 0x1c}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6caa}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000004380)='syzkaller\x00', 0x5, 0xa2, &(0x7f00000043c0)=""/162, 0x40f00, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000004480)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000044c0)={0x5, 0x3, 0xfff, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000004500)=[r1, r1, r1, r3, r1], 0x0, 0x10, 0x6, @void, @value}, 0x94) getsockname$qrtr(0xffffffffffffffff, &(0x7f0000004640), 0xffffffffffffffff) 7.724879841s ago: executing program 4 (id=3565): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = fcntl$getown(r6, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x2, &(0x7f0000000040)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) 6.730918126s ago: executing program 1 (id=3566): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x542e}}, {0x0, 0x0}]}) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x40004840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r7, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x98b, &(0x7f00000000c0)={0x0, 0xbbee, 0x2000, 0xfffffffd, 0x25d}, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000140)=""/103, &(0x7f0000000400)=""/183, &(0x7f00000001c0)=""/54, 0x2}) 6.660587819s ago: executing program 3 (id=3567): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x4000014, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000080)='gid_map\x00') sendmsg$nl_netfilter(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0400958003bdcb78248eeb4d956b6af2e4ba67539223cf24197b965d3931f16d528eb8850b9fad04008600"], 0x310}, 0x1, 0x0, 0x0, 0x6000004}, 0x20000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000001680)=ANY=[@ANYBLOB="0407ff08000000"], 0x102) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x120, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x106f) keyctl$dh_compute(0x17, &(0x7f0000000680), 0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={'cbcmac-aes-neon\x00'}}) socket$rxrpc(0x21, 0x2, 0x2) 6.507191748s ago: executing program 2 (id=3568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'team0\x00', @broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a090400000000000000000200000a200004801c0001800a00010072616e67650000000c00028008000140000000000900010073797a30000000000900020073790000000000000000000000000a"], 0x74}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 6.399303077s ago: executing program 0 (id=3569): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000400)={0x5, 0xfffffffe, 0x8, 0x8}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a00030002", 0x15) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, &(0x7f00002cef88)="d8", 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000001380)="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", 0x3ce, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000bc0)={0x0, 0x0, 0x80000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = userfaultfd(0x801) r4 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) close(r3) 5.327773873s ago: executing program 3 (id=3570): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x400000}, 0xc) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x18040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x0, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000001f00)) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet_sctp(r6, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f0000000000)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x3, 0x6, 0x8}}, @init={0x18, 0x84, 0x0, {0x0, 0x4, 0x1, 0xc}}], 0x38}], 0x1, 0x0) open$dir(&(0x7f0000000440)='./file0\x00', 0x50500, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x49313c43, 0x80) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000001c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r7, 0xc1105518, &(0x7f00000002c0)={{0x3, 0x4, 0x40, 0x9c01, '\x00', 0x1}, 0x3, 0x1, 0x1, r8, 0x1, 0x1, 'syz0\x00', &(0x7f0000000280)=['rfc4106(gcm(aes))\x00'], 0x12}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)=0x2) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r10, 0x80047437, 0x0) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xd8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="a95c55bcc7cb4a93", 0x8) 4.893894547s ago: executing program 4 (id=3571): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmmsg(r0, &(0x7f0000007ac0)=[{{&(0x7f0000000d40)=@ll={0x11, 0x15, r1, 0x1, 0xf4, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0xcc885) (fail_nth: 4) 4.860000404s ago: executing program 2 (id=3572): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r0], 0x310}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}]}, 0x24}}, 0x40080) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = getpid() sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x64802, 0x2002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0xa4d3ca24dbb9a942, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x3c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syslog(0x2, &(0x7f0000000700)=""/31, 0x1f) inotify_init1(0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 4.267218004s ago: executing program 0 (id=3573): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) readv(r9, &(0x7f0000003400)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000000306050400000000000000000500000005000100074888693b00000005000100"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="010000000000000000005200090008000300a1c8511346a3c1b995b2c0da2c1e3fed751070cd3b81049394e73beb53655b6a21afb44a3a7134c5ba41ef7bb2b0d3cbeb5247b804db663d564e8f100b48727582e761f6d840d8e5764f0afa88c2b2a088b7df8326d7845031fdafc68be8de44a80d213878e21a85bbdf09610b7389515409775c6d99d4bb44bf1bf3955ac72ba4bd581a3faa7503926d78debc8daa86bc86b6f5a83c29f8790b4ea757fc8decc09a222f67763ffa2cabf7ca9dfd1ac6a8", @ANYRESOCT=r3, @ANYBLOB], 0x1c}}, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x105000) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00036f14cfe84b5b360df4a2dfb70cdc1725bd7000fddbdf25270000000c"], 0x24}, 0x1, 0x0, 0x0, 0x10044801}, 0x40040) 3.985460135s ago: executing program 3 (id=3574): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2b, 0x2, 0x0, "d52b3d000000fa44966262631e8ac11e0000000000000000000000000100"}) (fail_nth: 4) 3.97008021s ago: executing program 4 (id=3575): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x6000, 0xfffffffc, 0x0, 0xf6f09ebf0b0c9208}, 0x9c) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x80, 0x2}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000520001000000000000001cb3ba2b00000a00000008000100feffffff"], 0x1c}}, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000000)={0x23, 0x20}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) 3.842907859s ago: executing program 2 (id=3576): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) getresgid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000540)='rxrpc_rx_ack\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="e77c0000a4"], 0x5b0}, 0x20008001) getrusage(0x1, &(0x7f0000000300)) sendmsg$inet6(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x371}], 0x1}, 0x20000044) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000580)="0888afcb6de1047958f95867ba437194faaafea6fcc976b5ac685fe6ee0406056c586508532a44c666ab9755b6a564f2ea1bd1c41787b430d2495709b2fe66c53b69ba4227288bb5e244f2f8131693e8a0c9c1bddcc309e545517d566d1d2b74bbcf82b92f7b2b707771137ce67b39677c258aedc3aafd9d2c7e0bfc1967f42f59c2d0f14e4fcd8c97", &(0x7f00000001c0)=@tcp}, 0x20) shutdown(r8, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100), &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0xc, 0x34565348, 0x8, 0x6, 0x6, 0x4, 0xa6e, 0x0, 0x2, 0x1, 0x5}}) 3.228127273s ago: executing program 3 (id=3577): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x24, 0x2, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000b22dc1ede54b179f4813e3e1000e0601040090aa1dd75cc037145f8bafbf63ab010000c500"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4810) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="58ac7327d1a136a13861d4022b48322d9bbc50f1b0a25c10d12c034c1a3c59ecdfd99ac19e9d1d7d1394bfd1b04c90ed5ac1c50dd110bd75f644826ca36f977c5942f1a5ce1e274b4102aa3e99481fb8166fb987731e5ee90406af40d17168d877a3198e1d7886789206b39c40a02abc32af", @ANYRES16=r4, @ANYBLOB="010023bd7000ffdbdf250800000018000180140002007465616d5f736c6176655f3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000005}, 0x880) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6b23, 0x0, 0x0, 0x0, 0x10000004}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, &(0x7f0000000100)) 2.432870291s ago: executing program 0 (id=3578): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x141200, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x63a3, 0x200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)=0x81) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x6, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_pts(r3, 0x440) r7 = dup3(r6, r3, 0x0) capset(&(0x7f0000002300)={0x19980330}, &(0x7f0000002340)={0x7, 0xffff, 0x1, 0x1000, 0x7, 0xfffffffd}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) ioctl$TCGETS2(r6, 0x802c542a, &(0x7f0000000380)) write$sndseq(r8, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x68) ioctl$TCSETSW2(r7, 0x5437, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="c80f12f904fb14b2b0b5843b7dc8a4fc680c1ed2c7e07f4fa2e306709ef0b843d1d23814ecc7a8d77fda1c8e05086fc5fa3de1f798be9e308fd9b76f8af9d074dc2b525f126901c38fc819cfac0720a1c9cda7ea20b990fe368def", 0x5b}, {&(0x7f00000000c0)="3e24d173b59142d7a59d82112d3dafbb687ca2b1d8d6714207a76e0727fd8ecb60e33689a52fb8e41115851a9b883c68e766311207db397f74d8b432598c6ad6281124505d1d90842d42508899a534ea073205897efa465cf47a910b7daf2b238ae84267b4cc9afcfc4f67d999d9a279c04a76848226a261a7b8c6e8", 0x7c}, {&(0x7f0000000240)="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", 0xfe}, {&(0x7f0000000140)="b750c53d1462da04b2dff54bce9c22127ad34abae25c0f1d50e8eaa403b4950820151f27fe13089b1f573a2b2bfd961453d5639d4a1187b0c9ca63a5aab6cdb82381089839004a1ca7f0cf10716b1a37dfa046209a5ff95494006623a7db360d1abb1d3aa8999c7591d86bc88bf93962e93f8fe6a8793b44953865c3a185ece71a39dbd99695d6f76a55d9d06d8a4b189c1080e28a4dad99e5e8ab8ad239db021bef97efd549ad246186fe4681b1c4f3", 0xb0}], 0x4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', r10, 0x2f, 0x39, 0xf, 0xe3a1, 0xa, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x1, 0x1, 0x3}}) r11 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x6) ioctl$TIOCGPKT(r11, 0x80045438, &(0x7f0000000480)) sendto$packet(r9, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa6a2ddcf6177a0800450000280068070000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5400800290780000dfa4a5be4f17e962cc194ee24edd66124fd738724a239f23a7d773e03c60a1718349389f9c3a269f9e21456ffd16b163b7da572020fd953d176ae50e83ff31a3fd7f4d308d039a068bbedb62f2d56ed8398b703d6953b315d4"], 0x0) 2.033394269s ago: executing program 1 (id=3579): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x800) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x810) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4, 0x0, 0x200000003}, 0x18) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000180), 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x42, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10) setitimer(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) fanotify_init(0x200, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.951582131s ago: executing program 4 (id=3580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000280)="93") syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002580)={&(0x7f0000000080)=[{0x2050, 0x5800, 0x0, 0x0}], 0x1}) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r10, 0x0, &(0x7f0000001780)=""/4096}, 0x20) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xffffffff, 0x0, 0x12, 0x1d, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x400, 0x8000000000000000]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0xb00, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f00000004c0)={0x0, 0x8000, 0x2, 0x5, 0x3, [], [0xfffeffff, 0x2e53, 0x2, 0xffff], [0x67d, 0x5, 0x8, 0x8000], [0x3, 0xff, 0x4, 0x400]}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000540)={0x0, 0x0, 0xe, 0x0, 0x1, [], [0x4f56, 0x9d3, 0x8000, 0x4], [0x1, 0x9, 0x7fff], [0xfff, 0x81, 0x2, 0x697cbc65]}) 1.795943375s ago: executing program 2 (id=3581): bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) pipe2(0x0, 0x84880) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4008044) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c, 0x80800) sendto$inet6(r5, &(0x7f0000000240)="70a8b570c1e281399070c022cc505344a95d79c7faf23cd4c760d50042bec471f629c2916d2ecd70c2d7d1ea4e6303dc983544edadee29c3ac9dbe67355141ab2beebfbde64a4686c99ad957f0cc225f7170e0990b1502b704c32383a1906a77eb93b0af88a7d441a3953103d0d76ce4ddcb79d1380c0ccf9798ef896224113c834cf60ce3c51da42784bc5dde7a5e325f73a4b2a1bb54ec3062d03b12bda5df2da61f2c054894547e4ad91029679a96a5207f2744e1faa64016ccb2e53c27cbd42853a94dd4bc2f0c0a51c6025e387710b11dd23fc7b49e589b3fbb2d3ef1dd0c5fd07b12981af9a38f6982508357bd56ce063597b9", 0xf6, 0x20000890, &(0x7f0000000340)={0xa, 0x4e24, 0x9, @remote}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 1.462828913s ago: executing program 3 (id=3582): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x172, 0x0) (fail_nth: 4) 0s ago: executing program 1 (id=3583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) epoll_create1(0x0) socket(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0xbc, 0x8000e, 0x2, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee1, 0x8031, 0xffffffffffffffff, 0xffffc000) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000280)=0x24) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): urb failed: -32 [ 1666.793526][ T24] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1666.805668][ T24] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1666.818795][ T24] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1666.831127][ T24] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1666.841125][ T24] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1666.847582][ T24] input input31: Timeout waiting for response from device. [ 1667.008346][T19937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 1668.230922][ T58] usb 4-1: USB disconnect, device number 57 [ 1668.464336][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.470664][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.956581][T19950] overlayfs: missing 'workdir' [ 1669.882449][T19956] erofs (device nbd2): cannot find valid erofs superblock [ 1670.362732][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 1670.362747][ T30] audit: type=1400 audit(1747889260.666:76334): avc: denied { prog_load } for pid=19951 comm="syz.2.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1670.472539][T19959] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1670.479055][T19959] audit: audit_lost=5855 audit_rate_limit=0 audit_backlog_limit=64 [ 1670.486971][T19959] audit: backlog limit exceeded [ 1670.492353][T19959] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1670.498830][T19959] audit: audit_lost=5856 audit_rate_limit=0 audit_backlog_limit=64 [ 1670.506761][T19959] audit: backlog limit exceeded [ 1670.512927][T19954] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1670.519464][T19954] audit: audit_lost=5857 audit_rate_limit=0 audit_backlog_limit=64 [ 1670.527391][T19954] audit: backlog limit exceeded [ 1671.647627][T19967] infiniband syz!: set active [ 1671.654562][T19967] infiniband syz!: added team_slave_0 [ 1671.722516][T19967] RDS/IB: syz!: added [ 1671.727371][T19967] smc: adding ib device syz! with port count 1 [ 1671.734256][T19967] smc: ib device syz! port 1 has pnetid [ 1671.791780][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3299'. [ 1672.486462][T19977] overlayfs: missing 'workdir' [ 1674.330770][ T911] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1674.544725][ T911] usb 1-1: Using ep0 maxpacket: 16 [ 1674.590843][ T911] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 1674.615228][ T911] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1675.167093][ T911] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1675.186495][ T911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1675.208626][ T911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1675.220303][T19992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3303'. [ 1675.271295][ T911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1675.340796][ T911] usb 1-1: string descriptor 0 read error: -71 [ 1675.359038][ T911] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1675.423394][ T30] kauditd_printk_skb: 373 callbacks suppressed [ 1675.423411][ T30] audit: type=1400 audit(1747889265.726:76699): avc: denied { read write } for pid=19203 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1675.461909][ T911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.544738][ T911] usb 1-1: config 0 descriptor?? [ 1675.558899][ T911] usb 1-1: can't set config #0, error -71 [ 1675.589601][ T911] usb 1-1: USB disconnect, device number 45 [ 1675.595692][ T30] audit: type=1400 audit(1747889265.756:76700): avc: denied { read write open } for pid=19203 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1675.857830][ T30] audit: type=1400 audit(1747889265.776:76701): avc: denied { ioctl } for pid=19203 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1675.889358][ T30] audit: type=1400 audit(1747889265.786:76702): avc: denied { read write } for pid=18447 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1676.341230][ T30] audit: type=1400 audit(1747889265.786:76703): avc: denied { read write open } for pid=18447 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1676.537263][ T30] audit: type=1400 audit(1747889265.786:76704): avc: denied { allowed } for pid=19990 comm="syz.4.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1676.556877][ T30] audit: type=1400 audit(1747889265.786:76705): avc: denied { ioctl } for pid=18447 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1676.592005][ T30] audit: type=1400 audit(1747889265.786:76706): avc: denied { create } for pid=19990 comm="syz.4.3302" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1677.521487][T19600] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1677.527999][T19600] audit: audit_lost=5861 audit_rate_limit=0 audit_backlog_limit=64 [ 1678.080669][T20010] overlayfs: missing 'workdir' [ 1678.945549][T20017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3306'. [ 1679.081430][T18282] Bluetooth: hci3: unexpected event 0x09 length: 6 > 3 [ 1679.456758][T20027] overlayfs: missing 'workdir' [ 1680.435154][ T30] kauditd_printk_skb: 148 callbacks suppressed [ 1680.435166][ T30] audit: type=1400 audit(1747889270.736:76851): avc: denied { write } for pid=20031 comm="syz.2.3313" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1680.650850][ T30] audit: type=1400 audit(1747889270.736:76852): avc: denied { write open } for pid=20031 comm="syz.2.3313" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1680.690050][ T30] audit: type=1400 audit(1747889270.766:76853): avc: denied { create } for pid=20034 comm="syz.4.3312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1680.710885][ T30] audit: type=1400 audit(1747889270.816:76854): avc: denied { write } for pid=20034 comm="syz.4.3312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1680.731770][ T30] audit: type=1400 audit(1747889270.876:76855): avc: denied { read } for pid=20034 comm="syz.4.3312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1680.752588][ T30] audit: type=1400 audit(1747889270.906:76856): avc: denied { read } for pid=20034 comm="syz.4.3312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1681.509231][ T30] audit: type=1400 audit(1747889270.976:76857): avc: denied { read write } for pid=20032 comm="syz.0.3311" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1681.535082][ T30] audit: type=1400 audit(1747889270.976:76858): avc: denied { read write open } for pid=20032 comm="syz.0.3311" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1681.559500][ T30] audit: type=1400 audit(1747889270.996:76859): avc: denied { read write } for pid=18447 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1681.584053][ T30] audit: type=1400 audit(1747889270.996:76860): avc: denied { read write open } for pid=18447 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1682.030898][ T24] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1682.199343][ T24] usb 2-1: config 0 has an invalid interface number: 76 but max is 0 [ 1682.237201][ T24] usb 2-1: config 0 has no interface number 0 [ 1682.275772][ T24] usb 2-1: too many endpoints for config 0 interface 76 altsetting 133: 31, using maximum allowed: 30 [ 1682.317417][ T24] usb 2-1: config 0 interface 76 altsetting 133 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1682.351391][ T24] usb 2-1: config 0 interface 76 altsetting 133 has 1 endpoint descriptor, different from the interface descriptor's value: 31 [ 1682.409940][ T24] usb 2-1: config 0 interface 76 has no altsetting 0 [ 1682.447377][ T24] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1682.524636][ T24] usb 2-1: New USB device strings: Mfr=0, Product=244, SerialNumber=0 [ 1682.709786][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3317'. [ 1682.988109][ T24] usb 2-1: Product: syz [ 1683.018554][ T24] usb 2-1: config 0 descriptor?? [ 1683.166914][ T24] usbtouchscreen 2-1:0.76: probe with driver usbtouchscreen failed with error -12 [ 1683.531163][T20047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1683.589842][T20047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.623076][ T24] usb 2-1: USB disconnect, device number 48 [ 1685.442354][ T30] kauditd_printk_skb: 212 callbacks suppressed [ 1685.442372][ T30] audit: type=1400 audit(1747889275.746:77073): avc: denied { create } for pid=20074 comm="syz.1.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1685.968073][ T30] audit: type=1400 audit(1747889275.836:77074): avc: denied { prog_load } for pid=20072 comm="syz.3.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1686.006904][T20078] syzkaller1: entered promiscuous mode [ 1686.083601][T20078] syzkaller1: entered allmulticast mode [ 1686.134893][ T30] audit: type=1400 audit(1747889275.846:77075): avc: denied { bpf } for pid=20072 comm="syz.3.3322" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1686.254108][ T30] audit: type=1400 audit(1747889275.846:77076): avc: denied { perfmon } for pid=20072 comm="syz.3.3322" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1686.373465][ T30] audit: type=1400 audit(1747889275.876:77077): avc: denied { write } for pid=20072 comm="syz.3.3322" name="if_inet6" dev="proc" ino=4026533428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1686.472304][T20088] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1686.499553][T19534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1686.500948][ T30] audit: type=1400 audit(1747889275.876:77078): avc: denied { write } for pid=20072 comm="syz.3.3322" path="/proc/336/net/if_inet6" dev="proc" ino=4026533428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1686.547841][T20088] audit: audit_lost=5863 audit_rate_limit=0 audit_backlog_limit=64 [ 1686.550892][ T951] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1686.583463][T20089] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1686.678732][T20088] sctp: [Deprecated]: syz.3.3324 (pid 20088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1686.678732][T20088] Use struct sctp_sack_info instead [ 1686.751084][ T951] usb 2-1: device descriptor read/64, error -71 [ 1687.620761][ T951] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1687.870761][ T951] usb 2-1: device descriptor read/64, error -71 [ 1688.081689][ T951] usb usb2-port1: attempt power cycle [ 1688.850803][ T951] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1689.010393][T16965] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1689.179502][ T951] usb 2-1: device descriptor read/8, error -71 [ 1689.210841][T16965] usb 1-1: Using ep0 maxpacket: 8 [ 1689.236099][T16965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1689.290358][T16965] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1689.325078][T16965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.364871][T16965] usb 1-1: config 0 descriptor?? [ 1689.950829][T15531] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1690.450888][ T30] kauditd_printk_skb: 360 callbacks suppressed [ 1690.450906][ T30] audit: type=1400 audit(1747889280.746:77407): avc: denied { getattr } for pid=20119 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1690.500890][T15531] usb 3-1: config 131 has an invalid interface number: 242 but max is 0 [ 1690.534395][T15531] usb 3-1: config 131 has no interface number 0 [ 1690.560816][T15531] usb 3-1: config 131 interface 242 altsetting 13 endpoint 0x2 has invalid maxpacket 7573, setting to 64 [ 1690.590973][T15531] usb 3-1: config 131 interface 242 has no altsetting 0 [ 1690.598057][ T30] audit: type=1400 audit(1747889280.746:77408): avc: denied { search } for pid=20119 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1690.629852][T20124] FAULT_INJECTION: forcing a failure. [ 1690.629852][T20124] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1690.692874][T20124] CPU: 1 UID: 0 PID: 20124 Comm: syz.4.3328 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1690.692902][T20124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1690.692912][T20124] Call Trace: [ 1690.692917][T20124] [ 1690.692925][T20124] dump_stack_lvl+0x16c/0x1f0 [ 1690.692955][T20124] should_fail_ex+0x512/0x640 [ 1690.692981][T20124] _copy_to_user+0x32/0xd0 [ 1690.693008][T20124] simple_read_from_buffer+0xcb/0x170 [ 1690.693035][T20124] proc_fail_nth_read+0x197/0x270 [ 1690.693064][T20124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1690.693092][T20124] ? rw_verify_area+0xcf/0x680 [ 1690.693115][T20124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1690.693143][T20124] vfs_read+0x1e1/0xc70 [ 1690.693173][T20124] ? __pfx___mutex_lock+0x10/0x10 [ 1690.693200][T20124] ? __pfx_vfs_read+0x10/0x10 [ 1690.693233][T20124] ? __fget_files+0x20e/0x3c0 [ 1690.693258][T20124] ksys_read+0x12a/0x240 [ 1690.693284][T20124] ? __pfx_ksys_read+0x10/0x10 [ 1690.693320][T20124] do_syscall_64+0xcd/0x260 [ 1690.693349][T20124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.693368][T20124] RIP: 0033:0x7f40a8b8d37c [ 1690.693382][T20124] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1690.693400][T20124] RSP: 002b:00007f40a9994030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1690.693417][T20124] RAX: ffffffffffffffda RBX: 00007f40a8db6080 RCX: 00007f40a8b8d37c [ 1690.693428][T20124] RDX: 000000000000000f RSI: 00007f40a99940a0 RDI: 0000000000000003 [ 1690.693438][T20124] RBP: 00007f40a9994090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.693448][T20124] R10: 000020000000d000 R11: 0000000000000246 R12: 0000000000000001 [ 1690.693458][T20124] R13: 0000000000000001 R14: 00007f40a8db6080 R15: 00007ffe6c485a18 [ 1690.693484][T20124] [ 1690.706155][T15531] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=19.10 [ 1690.750885][ T951] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1690.991071][ T30] audit: type=1400 audit(1747889280.756:77409): avc: denied { search } for pid=20119 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1691.080948][T16965] usbhid 1-1:0.0: can't add hid device: -71 [ 1691.086980][T16965] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1691.147113][T16965] usb 1-1: USB disconnect, device number 46 [ 1691.150755][ T30] audit: type=1400 audit(1747889280.756:77410): avc: denied { search } for pid=20119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1691.240654][T15531] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.248780][T15531] usb 3-1: Product: syz [ 1691.249211][ T30] audit: type=1400 audit(1747889280.756:77411): avc: denied { search } for pid=20119 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1691.323298][T15531] usb 3-1: Manufacturer: syz [ 1691.331531][T15531] usb 3-1: SerialNumber: syz [ 1691.340632][ T30] audit: type=1400 audit(1747889280.766:77412): avc: denied { search } for pid=20119 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1691.377924][T20128] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1691.388241][T20128] audit: audit_lost=5875 audit_rate_limit=0 audit_backlog_limit=64 [ 1691.397743][T20118] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1691.404415][T20118] audit: audit_lost=5876 audit_rate_limit=0 audit_backlog_limit=64 [ 1691.432924][T20118] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1691.447201][ T951] usb 2-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1691.469061][ T951] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 7 [ 1691.522437][ T951] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59262, setting to 1024 [ 1691.587394][ T951] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1691.619244][ T951] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1691.651185][ T58] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1691.672640][ T951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.713944][T20123] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1691.778363][ T951] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1691.824697][ T951] usb 2-1: invalid MIDI in EP 0 [ 1691.878892][ T58] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1691.901112][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.909147][ T58] usb 5-1: Product: syz [ 1691.952032][ T58] usb 5-1: Manufacturer: syz [ 1691.956677][ T58] usb 5-1: SerialNumber: syz [ 1692.020436][ T58] usb 5-1: config 0 descriptor?? [ 1692.085727][ T951] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1692.163693][ T951] usb 2-1: USB disconnect, device number 53 [ 1692.513106][ T5896] usb 5-1: USB disconnect, device number 40 [ 1692.651009][ T911] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1692.880782][ T911] usb 1-1: Using ep0 maxpacket: 8 [ 1692.953741][ T911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1692.986166][T17964] udevd[17964]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1692.990754][ T911] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1693.054766][T15531] kvaser_usb 3-1:131.242: error -ENODEV: Cannot get usb endpoint(s) [ 1693.094837][ T911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.236891][T15531] usb 3-1: USB disconnect, device number 55 [ 1693.456488][ T911] usb 1-1: config 0 descriptor?? [ 1693.956326][T20149] syzkaller1: entered promiscuous mode [ 1694.198576][T20149] syzkaller1: entered allmulticast mode [ 1694.832895][T18293] udevd[18293]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1695.041145][ T911] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1695.460761][ T5896] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1695.540830][ T30] kauditd_printk_skb: 313 callbacks suppressed [ 1695.540850][ T30] audit: type=1400 audit(1747889285.776:77691): avc: denied { execmem } for pid=20168 comm="syz.1.3344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1695.773179][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3344'. [ 1696.044721][ T30] audit: type=1400 audit(1747889285.876:77692): avc: denied { ioctl } for pid=20163 comm="syz.3.3342" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1696.069870][ T30] audit: type=1400 audit(1747889285.876:77693): avc: denied { ioctl } for pid=20163 comm="syz.3.3342" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1696.095729][ T30] audit: type=1400 audit(1747889285.876:77694): avc: denied { ioctl } for pid=20163 comm="syz.3.3342" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1696.123074][ T30] audit: type=1400 audit(1747889285.996:77695): avc: denied { read } for pid=20168 comm="syz.1.3344" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1696.139191][ T5896] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1696.260957][ T30] audit: type=1400 audit(1747889285.996:77696): avc: denied { read open } for pid=20168 comm="syz.1.3344" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1696.320745][ T5896] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1696.354882][ T30] audit: type=1400 audit(1747889286.006:77697): avc: denied { ioctl } for pid=20168 comm="syz.1.3344" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1696.390358][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1696.425337][ T911] usb 1-1: USB disconnect, device number 47 [ 1696.463090][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1696.506343][ T30] audit: type=1400 audit(1747889286.026:77698): avc: denied { map } for pid=20168 comm="syz.1.3344" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1696.520779][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1696.602903][ T5896] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1696.620800][ T30] audit: type=1400 audit(1747889286.036:77699): avc: denied { read execute } for pid=20168 comm="syz.1.3344" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1696.630745][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1696.674509][T20177] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1696.709504][T20179] FAULT_INJECTION: forcing a failure. [ 1696.709504][T20179] name failslab, interval 1, probability 0, space 0, times 0 [ 1696.741022][ T5896] usb 4-1: Product: syz [ 1696.764890][ T5896] usb 4-1: Manufacturer: syz [ 1696.770014][T20179] CPU: 0 UID: 0 PID: 20179 Comm: syz.1.3347 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1696.770040][T20179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1696.770050][T20179] Call Trace: [ 1696.770056][T20179] [ 1696.770062][T20179] dump_stack_lvl+0x16c/0x1f0 [ 1696.770091][T20179] should_fail_ex+0x512/0x640 [ 1696.770114][T20179] ? __kvmalloc_node_noprof+0x122/0x600 [ 1696.770143][T20179] should_failslab+0xc2/0x120 [ 1696.770162][T20179] __kvmalloc_node_noprof+0x135/0x600 [ 1696.770187][T20179] ? copy_from_sockptr_offset+0xed/0x1b0 [ 1696.770210][T20179] ? xt_alloc_table_info+0x3e/0xa0 [ 1696.770237][T20179] ? xt_alloc_table_info+0x3e/0xa0 [ 1696.770258][T20179] xt_alloc_table_info+0x3e/0xa0 [ 1696.770281][T20179] do_ipt_set_ctl+0x50e/0xae0 [ 1696.770305][T20179] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1696.770326][T20179] ? find_held_lock+0x2b/0x80 [ 1696.770350][T20179] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1696.770374][T20179] ? lockdep_hardirqs_on+0x7c/0x110 [ 1696.770399][T20179] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1696.770437][T20179] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1696.770460][T20179] nf_setsockopt+0x8d/0xf0 [ 1696.770480][T20179] ip_setsockopt+0xcb/0xf0 [ 1696.770507][T20179] udp_setsockopt+0x7d/0xd0 [ 1696.770529][T20179] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1696.770551][T20179] do_sock_setsockopt+0x221/0x470 [ 1696.770573][T20179] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1696.770613][T20179] __sys_setsockopt+0x1a0/0x230 [ 1696.770638][T20179] __x64_sys_setsockopt+0xbd/0x160 [ 1696.770655][T20179] ? do_syscall_64+0x91/0x260 [ 1696.770683][T20179] ? lockdep_hardirqs_on+0x7c/0x110 [ 1696.770705][T20179] do_syscall_64+0xcd/0x260 [ 1696.770729][T20179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.770746][T20179] RIP: 0033:0x7f025cd8e969 [ 1696.770760][T20179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1696.770776][T20179] RSP: 002b:00007f025dc10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1696.770793][T20179] RAX: ffffffffffffffda RBX: 00007f025cfb5fa0 RCX: 00007f025cd8e969 [ 1696.770805][T20179] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 1696.770816][T20179] RBP: 00007f025dc10090 R08: 00000000000003e0 R09: 0000000000000000 [ 1696.770827][T20179] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000001 [ 1696.770837][T20179] R13: 0000000000000000 R14: 00007f025cfb5fa0 R15: 00007ffd0b7e2008 [ 1696.770863][T20179] [ 1697.461827][ T5896] cdc_wdm 4-1:1.0: skipping garbage [ 1697.467071][ T5896] cdc_wdm 4-1:1.0: skipping garbage [ 1697.571747][T20185] netlink: 'syz.2.3346': attribute type 2 has an invalid length. [ 1697.701043][ T5896] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1697.707063][ T5896] cdc_wdm 4-1:1.0: Unknown control protocol [ 1698.053448][T20189] FAULT_INJECTION: forcing a failure. [ 1698.053448][T20189] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.066622][T20189] CPU: 0 UID: 0 PID: 20189 Comm: syz.1.3349 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1698.066648][T20189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1698.066660][T20189] Call Trace: [ 1698.066666][T20189] [ 1698.066674][T20189] dump_stack_lvl+0x16c/0x1f0 [ 1698.066703][T20189] should_fail_ex+0x512/0x640 [ 1698.066731][T20189] should_failslab+0xc2/0x120 [ 1698.066756][T20189] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1698.066775][T20189] ? __inet_hash_connect+0x7cb/0x1e30 [ 1698.066797][T20189] __inet_hash_connect+0x7cb/0x1e30 [ 1698.066823][T20189] ? __pfx___inet6_check_established+0x10/0x10 [ 1698.066850][T20189] ? __pfx___inet_hash_connect+0x10/0x10 [ 1698.066871][T20189] ? inet6_hash_connect+0xe2/0x180 [ 1698.066893][T20189] tcp_v6_connect+0x12df/0x2150 [ 1698.066915][T20189] ? avc_has_perm_noaudit+0x2bd/0x3b0 [ 1698.066939][T20189] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1698.066974][T20189] ? __pfx_avc_has_perm+0x10/0x10 [ 1698.067010][T20189] ? __lock_acquire+0xaa4/0x1ba0 [ 1698.067041][T20189] ? __inet_stream_connect+0x3c5/0x1020 [ 1698.067067][T20189] __inet_stream_connect+0x3c5/0x1020 [ 1698.067098][T20189] ? __pfx___inet_stream_connect+0x10/0x10 [ 1698.067124][T20189] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1698.067149][T20189] ? __pfx_inet_stream_connect+0x10/0x10 [ 1698.067174][T20189] ? __local_bh_enable_ip+0xa4/0x120 [ 1698.067200][T20189] ? __pfx_inet_stream_connect+0x10/0x10 [ 1698.067221][T20189] inet_stream_connect+0x57/0xa0 [ 1698.067248][T20189] __sys_connect_file+0x141/0x1a0 [ 1698.067269][T20189] __sys_connect+0x14d/0x170 [ 1698.067286][T20189] ? __pfx___sys_connect+0x10/0x10 [ 1698.067314][T20189] ? __pfx_ksys_write+0x10/0x10 [ 1698.067340][T20189] ? rcu_is_watching+0x12/0xc0 [ 1698.067367][T20189] __x64_sys_connect+0x72/0xb0 [ 1698.067383][T20189] ? lockdep_hardirqs_on+0x7c/0x110 [ 1698.067407][T20189] do_syscall_64+0xcd/0x260 [ 1698.067435][T20189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.067454][T20189] RIP: 0033:0x7f025cd8e969 [ 1698.067469][T20189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1698.067487][T20189] RSP: 002b:00007f025dc10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1698.067504][T20189] RAX: ffffffffffffffda RBX: 00007f025cfb5fa0 RCX: 00007f025cd8e969 [ 1698.067515][T20189] RDX: 000000000000001c RSI: 0000200000000180 RDI: 0000000000000003 [ 1698.067526][T20189] RBP: 00007f025dc10090 R08: 0000000000000000 R09: 0000000000000000 [ 1698.067537][T20189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1698.067547][T20189] R13: 0000000000000000 R14: 00007f025cfb5fa0 R15: 00007ffd0b7e2008 [ 1698.067574][T20189] [ 1698.910769][ T5896] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1699.652950][ T5896] usb 2-1: device descriptor read/64, error -71 [ 1699.900846][ T5896] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1699.974093][T15531] usb 4-1: USB disconnect, device number 58 [ 1700.060970][ T5896] usb 2-1: device descriptor read/64, error -71 [ 1700.285684][ T5896] usb usb2-port1: attempt power cycle [ 1700.868630][ T30] kauditd_printk_skb: 268 callbacks suppressed [ 1700.868647][ T30] audit: type=1400 audit(1747889290.956:77918): avc: denied { create } for pid=20207 comm="syz.2.3356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1700.894618][ C0] vkms_vblank_simulate: vblank timer overrun [ 1700.911096][ T30] audit: type=1400 audit(1747889291.116:77919): avc: denied { search } for pid=20206 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1701.140770][ T5896] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1701.244837][ T30] audit: type=1400 audit(1747889291.116:77920): avc: denied { search } for pid=20206 comm="rm" name="dhcpcd" dev="tmpfs" ino=1832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1701.510485][ T5896] usb 2-1: device descriptor read/8, error -71 [ 1701.529186][ T30] audit: type=1400 audit(1747889291.116:77921): avc: denied { search } for pid=20206 comm="rm" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1701.812288][ T30] audit: type=1400 audit(1747889291.126:77922): avc: denied { read write open } for pid=20211 comm="syz.0.3357" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1702.152765][ T30] audit: type=1400 audit(1747889291.126:77923): avc: denied { read } for pid=20211 comm="syz.0.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1702.320783][ T30] audit: type=1400 audit(1747889291.136:77924): avc: denied { search } for pid=20105 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1702.507738][ T30] audit: type=1400 audit(1747889291.146:77925): avc: denied { create } for pid=20208 comm="syz.4.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1702.578029][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3358'. [ 1703.520649][ T30] audit: type=1400 audit(1747889291.156:77926): avc: denied { ioctl } for pid=20194 comm="syz.1.3353" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1703.729819][ T58] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1703.737670][ T30] audit: type=1400 audit(1747889291.156:77927): avc: denied { ioctl } for pid=20194 comm="syz.1.3353" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1703.920781][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 1703.942004][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1703.996290][ T58] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1704.030753][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.082359][ T58] usb 3-1: config 0 descriptor?? [ 1704.282783][T20243] FAULT_INJECTION: forcing a failure. [ 1704.282783][T20243] name failslab, interval 1, probability 0, space 0, times 0 [ 1704.296617][T20243] CPU: 0 UID: 0 PID: 20243 Comm: syz.0.3362 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1704.296644][T20243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1704.296654][T20243] Call Trace: [ 1704.296660][T20243] [ 1704.296667][T20243] dump_stack_lvl+0x16c/0x1f0 [ 1704.296697][T20243] should_fail_ex+0x512/0x640 [ 1704.296721][T20243] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1704.296742][T20243] should_failslab+0xc2/0x120 [ 1704.296762][T20243] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1704.296785][T20243] ? __alloc_skb+0x2b2/0x380 [ 1704.296806][T20243] ? rcu_is_watching+0x12/0xc0 [ 1704.296831][T20243] __alloc_skb+0x2b2/0x380 [ 1704.296849][T20243] ? __pfx___alloc_skb+0x10/0x10 [ 1704.296877][T20243] netlink_alloc_large_skb+0x69/0x130 [ 1704.296902][T20243] netlink_sendmsg+0x6a1/0xdd0 [ 1704.296929][T20243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1704.296963][T20243] ____sys_sendmsg+0xa95/0xc70 [ 1704.296989][T20243] ? copy_msghdr_from_user+0x10a/0x160 [ 1704.297008][T20243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1704.297037][T20243] ? lock_acquire+0x179/0x350 [ 1704.297064][T20243] ? find_held_lock+0x2b/0x80 [ 1704.297089][T20243] ___sys_sendmsg+0x134/0x1d0 [ 1704.297110][T20243] ? __pfx____sys_sendmsg+0x10/0x10 [ 1704.297164][T20243] __sys_sendmsg+0x16d/0x220 [ 1704.297185][T20243] ? __pfx___sys_sendmsg+0x10/0x10 [ 1704.297203][T20243] ? rcu_is_watching+0x12/0xc0 [ 1704.297235][T20243] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1704.297259][T20243] do_syscall_64+0xcd/0x260 [ 1704.297287][T20243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.297305][T20243] RIP: 0033:0x7f03ca18e969 [ 1704.297320][T20243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1704.297337][T20243] RSP: 002b:00007f03caf7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1704.297354][T20243] RAX: ffffffffffffffda RBX: 00007f03ca3b6160 RCX: 00007f03ca18e969 [ 1704.297365][T20243] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 1704.297377][T20243] RBP: 00007f03caf7b090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.297387][T20243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.297398][T20243] R13: 0000000000000000 R14: 00007f03ca3b6160 R15: 00007ffc70580738 [ 1704.297423][T20243] [ 1704.529090][ C0] vkms_vblank_simulate: vblank timer overrun [ 1705.320775][T14302] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1705.534142][ T58] usbhid 3-1:0.0: can't add hid device: -71 [ 1705.540169][ T58] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1705.550905][T14302] usb 4-1: device descriptor read/64, error -71 [ 1705.624376][ T58] usb 3-1: USB disconnect, device number 56 [ 1705.873851][ T30] kauditd_printk_skb: 311 callbacks suppressed [ 1705.873869][ T30] audit: type=1400 audit(1747889296.176:78239): avc: denied { name_bind } for pid=20248 comm="syz.0.3366" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1706.358949][T14302] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1706.366770][ T30] audit: type=1400 audit(1747889296.176:78240): avc: denied { node_bind } for pid=20248 comm="syz.0.3366" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1706.393431][ T30] audit: type=1400 audit(1747889296.276:78241): avc: denied { create } for pid=20245 comm="syz.1.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1706.450142][ T30] audit: type=1400 audit(1747889296.296:78242): avc: denied { write } for pid=20245 comm="syz.1.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1706.541275][T14302] usb 4-1: device descriptor read/64, error -71 [ 1706.827940][ T30] audit: type=1400 audit(1747889296.666:78243): avc: denied { ioctl } for pid=20240 comm="syz.3.3363" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1706.858301][ T30] audit: type=1400 audit(1747889296.696:78244): avc: denied { ioctl } for pid=20240 comm="syz.3.3363" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1706.885484][ T30] audit: type=1400 audit(1747889296.696:78245): avc: denied { ioctl } for pid=20240 comm="syz.3.3363" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1706.913197][ T30] audit: type=1400 audit(1747889296.736:78246): avc: denied { create } for pid=20249 comm="syz.4.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1706.935150][T14302] usb usb4-port1: attempt power cycle [ 1706.946297][ T30] audit: type=1400 audit(1747889296.776:78247): avc: denied { ioctl } for pid=20240 comm="syz.3.3363" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1707.041020][ T30] audit: type=1400 audit(1747889296.886:78248): avc: denied { allowed } for pid=20249 comm="syz.4.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1707.459490][T20263] @: renamed from vlan0 (while UP) [ 1707.630842][T15531] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1707.805782][T20267] binder: 20260:20267 ioctl c00c642d 200000000100 returned -22 [ 1707.840849][T15531] usb 5-1: Using ep0 maxpacket: 16 [ 1707.861180][T14302] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 1707.902476][T15531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1707.946470][T15531] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1707.987346][T15531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.040884][T14302] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1708.126430][T14302] usb 4-1: config 123 has an invalid interface number: 89 but max is 0 [ 1708.158755][T14302] usb 4-1: config 123 has no interface number 0 [ 1708.207734][T14302] usb 4-1: config 123 interface 89 has no altsetting 0 [ 1708.283054][T14302] usb 4-1: New USB device found, idVendor=0c45, idProduct=60af, bcdDevice= 6.f5 [ 1708.340746][T14302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.384515][T14302] usb 4-1: Product: syz [ 1708.388838][T14302] usb 4-1: Manufacturer: syz [ 1708.399311][T15531] usb 5-1: config 0 descriptor?? [ 1708.411296][T14302] usb 4-1: SerialNumber: syz [ 1708.728738][T14302] gspca_main: sonixb-2.14.0 probing 0c45:60af [ 1708.749257][T14302] sonixb 4-1:123.89: Error reading register 00: -71 [ 1708.773657][T14302] usb 4-1: USB disconnect, device number 62 [ 1708.861535][T20279] FAULT_INJECTION: forcing a failure. [ 1708.861535][T20279] name failslab, interval 1, probability 0, space 0, times 0 [ 1708.890931][T20279] CPU: 1 UID: 0 PID: 20279 Comm: syz.0.3373 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1708.890959][T20279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1708.890971][T20279] Call Trace: [ 1708.890977][T20279] [ 1708.890985][T20279] dump_stack_lvl+0x16c/0x1f0 [ 1708.891015][T20279] should_fail_ex+0x512/0x640 [ 1708.891040][T20279] ? fs_reclaim_acquire+0xae/0x150 [ 1708.891068][T20279] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1708.891094][T20279] should_failslab+0xc2/0x120 [ 1708.891114][T20279] __kmalloc_noprof+0xd2/0x510 [ 1708.891140][T20279] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1708.891170][T20279] ? tomoyo_profile+0x47/0x60 [ 1708.891191][T20279] tomoyo_path_number_perm+0x245/0x580 [ 1708.891214][T20279] ? tomoyo_path_number_perm+0x237/0x580 [ 1708.891240][T20279] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1708.891265][T20279] ? find_held_lock+0x2b/0x80 [ 1708.891312][T20279] ? find_held_lock+0x2b/0x80 [ 1708.891332][T20279] ? hook_file_ioctl_common+0x145/0x410 [ 1708.891357][T20279] ? __fget_files+0x20e/0x3c0 [ 1708.891380][T20279] security_file_ioctl+0x9b/0x240 [ 1708.891410][T20279] __x64_sys_ioctl+0xb7/0x200 [ 1708.891437][T20279] do_syscall_64+0xcd/0x260 [ 1708.891467][T20279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.891484][T20279] RIP: 0033:0x7f03ca18e969 [ 1708.891500][T20279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1708.891518][T20279] RSP: 002b:00007f03cafbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1708.891535][T20279] RAX: ffffffffffffffda RBX: 00007f03ca3b5fa0 RCX: 00007f03ca18e969 [ 1708.891546][T20279] RDX: 0000200000000380 RSI: 00000000c0045516 RDI: 0000000000000003 [ 1708.891557][T20279] RBP: 00007f03cafbd090 R08: 0000000000000000 R09: 0000000000000000 [ 1708.891567][T20279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1708.891577][T20279] R13: 0000000000000000 R14: 00007f03ca3b5fa0 R15: 00007ffc70580738 [ 1708.891604][T20279] [ 1708.891611][T20279] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1708.897235][T15531] mcp2221 0003:04D8:00DD.0044: unknown main item tag 0x0 [ 1709.347753][T20265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.584290][T20265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.743391][T20288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3374'. [ 1710.261363][T15531] mcp2221 0003:04D8:00DD.0044: unknown main item tag 0x0 [ 1710.268459][T15531] mcp2221 0003:04D8:00DD.0044: unknown main item tag 0x0 [ 1710.376976][T15531] mcp2221 0003:04D8:00DD.0044: unknown main item tag 0x0 [ 1710.431313][T15531] mcp2221 0003:04D8:00DD.0044: unknown main item tag 0x0 [ 1710.488135][T15531] mcp2221 0003:04D8:00DD.0044: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1710.720196][ C0] usb 5-1: input irq status -75 received [ 1710.895471][ T30] kauditd_printk_skb: 230 callbacks suppressed [ 1710.895486][ T30] audit: type=1400 audit(1747889301.196:78479): avc: denied { search } for pid=20221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1711.131598][ T30] audit: type=1400 audit(1747889301.206:78480): avc: denied { map_create } for pid=20292 comm="syz.0.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1711.922240][ T30] audit: type=1400 audit(1747889301.206:78481): avc: denied { prog_load } for pid=20292 comm="syz.0.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1712.062585][ T30] audit: type=1400 audit(1747889301.206:78482): avc: denied { bpf } for pid=20292 comm="syz.0.3376" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1712.690498][ T30] audit: type=1400 audit(1747889301.206:78483): avc: denied { create } for pid=20292 comm="syz.0.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1712.786816][T15531] usb 5-1: USB disconnect, device number 41 [ 1712.858531][ T30] audit: type=1400 audit(1747889301.206:78484): avc: denied { setopt } for pid=20292 comm="syz.0.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1712.958337][T19340] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1712.993051][T20308] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1713.001837][T19340] audit: audit_lost=5905 audit_rate_limit=0 audit_backlog_limit=64 [ 1713.070796][T19340] audit: backlog limit exceeded [ 1713.203192][T20308] No source specified [ 1715.030632][T20321] tty tty3: ldisc open failed (-12), clearing slot 2 [ 1715.678473][T20307] mmap: syz.3.3379 (20307): VmData 25972736 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 1716.052410][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 1716.052433][ T30] audit: type=1400 audit(1747889306.346:78640): avc: denied { read write } for pid=19203 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1716.698078][ T30] audit: type=1400 audit(1747889306.426:78641): avc: denied { read write open } for pid=19203 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1716.903409][ T30] audit: type=1400 audit(1747889306.496:78642): avc: denied { ioctl } for pid=19203 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1717.176361][ T30] audit: type=1400 audit(1747889306.776:78643): avc: denied { prog_load } for pid=20327 comm="syz.4.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1717.176405][ T30] audit: type=1400 audit(1747889306.806:78644): avc: denied { bpf } for pid=20327 comm="syz.4.3384" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1717.176440][ T30] audit: type=1400 audit(1747889306.866:78645): avc: denied { perfmon } for pid=20327 comm="syz.4.3384" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1717.176479][ T30] audit: type=1400 audit(1747889306.896:78646): avc: denied { perfmon } for pid=20327 comm="syz.4.3384" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1717.176513][ T30] audit: type=1400 audit(1747889306.976:78647): avc: denied { perfmon } for pid=20327 comm="syz.4.3384" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1717.176550][ T30] audit: type=1400 audit(1747889306.976:78648): avc: denied { search } for pid=20323 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1717.176594][ T30] audit: type=1400 audit(1747889307.036:78649): avc: denied { search } for pid=20323 comm="rm" name="dhcpcd" dev="tmpfs" ino=1832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1717.352957][T20330] tty tty28: ldisc open failed (-12), clearing slot 27 [ 1718.496932][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'. [ 1720.361982][T14302] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1720.598445][T14302] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1720.636485][T14302] usb 2-1: config 0 has no interface number 0 [ 1720.754355][T14302] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1720.851276][T14302] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1720.914244][T14302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.944334][T14302] usb 2-1: Product: syz [ 1720.961911][T14302] usb 2-1: Manufacturer: syz [ 1721.069204][ T30] kauditd_printk_skb: 209 callbacks suppressed [ 1721.081062][ T30] audit: type=1400 audit(1747889311.346:78859): avc: denied { create } for pid=20379 comm="syz.2.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1721.140782][T14302] usb 2-1: SerialNumber: syz [ 1721.320805][ T30] audit: type=1400 audit(1747889311.466:78860): avc: denied { create } for pid=20379 comm="syz.2.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1721.334427][T14302] usb 2-1: config 0 descriptor?? [ 1721.893956][ T30] audit: type=1400 audit(1747889311.476:78861): avc: denied { write } for pid=20379 comm="syz.2.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1721.968728][ T30] audit: type=1400 audit(1747889311.496:78862): avc: denied { write } for pid=20379 comm="syz.2.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1722.075675][ T30] audit: type=1400 audit(1747889311.526:78863): avc: denied { create } for pid=20379 comm="syz.2.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1722.168327][ T30] audit: type=1400 audit(1747889311.536:78864): avc: denied { write } for pid=20379 comm="syz.2.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1722.442813][ T30] audit: type=1400 audit(1747889311.566:78865): avc: denied { create } for pid=20379 comm="syz.2.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1722.553362][ T30] audit: type=1400 audit(1747889311.576:78866): avc: denied { write } for pid=20379 comm="syz.2.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1722.599256][T20393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3397'. [ 1722.695690][ T30] audit: type=1400 audit(1747889311.586:78867): avc: denied { read } for pid=20379 comm="syz.2.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1722.789751][ T30] audit: type=1400 audit(1747889311.586:78868): avc: denied { read } for pid=20379 comm="syz.2.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1723.795401][T14302] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1723.812488][T14302] usb 2-1: USB disconnect, device number 58 [ 1724.116238][T20407] x_tables: duplicate underflow at hook 1 [ 1724.636606][T20407] xt_hashlimit: overflow, rate too high: 0 [ 1726.138401][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 1726.138420][ T30] audit: type=1400 audit(1747889316.436:79038): avc: denied { map } for pid=20409 comm="syz.0.3403" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1726.470830][ T30] audit: type=1400 audit(1747889316.476:79039): avc: denied { read write } for pid=19534 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1726.579633][ T30] audit: type=1400 audit(1747889316.506:79040): avc: denied { read write open } for pid=19534 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1726.741908][T15531] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1726.801169][ T30] audit: type=1400 audit(1747889316.546:79041): avc: denied { read write } for pid=20409 comm="syz.0.3403" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1726.902413][ T30] audit: type=1400 audit(1747889316.556:79042): avc: denied { ioctl } for pid=19534 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1727.001927][T20425] loop6: detected capacity change from 0 to 524287999 [ 1727.432624][T15531] usb 1-1: device descriptor read/64, error -71 [ 1727.478431][ T30] audit: type=1400 audit(1747889316.596:79043): avc: denied { map } for pid=20409 comm="syz.0.3403" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1727.534356][T20430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3408'. [ 1727.552715][ T30] audit: type=1400 audit(1747889316.596:79044): avc: denied { read write } for pid=20409 comm="syz.0.3403" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1727.627085][ T30] audit: type=1400 audit(1747889316.636:79045): avc: denied { create } for pid=20409 comm="syz.0.3403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1727.670826][T15531] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1727.750999][ T30] audit: type=1400 audit(1747889316.646:79046): avc: denied { read write } for pid=19340 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1727.840960][T15531] usb 1-1: device descriptor read/64, error -71 [ 1727.880733][ T30] audit: type=1400 audit(1747889316.646:79047): avc: denied { read write open } for pid=19340 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1727.970549][T15531] usb usb1-port1: attempt power cycle [ 1728.030939][T14302] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1728.641007][T14302] usb 5-1: Using ep0 maxpacket: 16 [ 1728.662294][T14302] usb 5-1: too many configurations: 164, using maximum allowed: 8 [ 1728.714530][T14302] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1728.763064][T14302] usb 5-1: can't read configurations, error -61 [ 1728.930809][T14302] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1729.254608][T14302] usb 5-1: Using ep0 maxpacket: 16 [ 1729.267798][T14302] usb 5-1: too many configurations: 164, using maximum allowed: 8 [ 1729.292458][T14302] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1729.300064][T14302] usb 5-1: can't read configurations, error -61 [ 1729.319968][T14302] usb usb5-port1: attempt power cycle [ 1729.718600][T14302] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1729.904599][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.927065][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.142346][T20446] audit_log_start: 755 callbacks suppressed [ 1731.142371][T20446] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1731.154885][T20446] audit: audit_lost=6100 audit_rate_limit=0 audit_backlog_limit=64 [ 1731.163256][T20446] audit: backlog limit exceeded [ 1731.172599][T20446] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1731.179156][T20446] audit: audit_lost=6101 audit_rate_limit=0 audit_backlog_limit=64 [ 1731.187136][T20446] audit: backlog limit exceeded [ 1731.196128][T20446] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1731.202731][T20446] audit: audit_lost=6102 audit_rate_limit=0 audit_backlog_limit=64 [ 1731.210653][T20446] audit: backlog limit exceeded [ 1731.219523][T20446] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1731.721160][T14302] usb 5-1: device descriptor read/8, error -71 [ 1731.874868][T20451] FAULT_INJECTION: forcing a failure. [ 1731.874868][T20451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1731.920822][T20451] CPU: 0 UID: 0 PID: 20451 Comm: syz.2.3415 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1731.920849][T20451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1731.920860][T20451] Call Trace: [ 1731.920866][T20451] [ 1731.920873][T20451] dump_stack_lvl+0x16c/0x1f0 [ 1731.920901][T20451] should_fail_ex+0x512/0x640 [ 1731.920929][T20451] _copy_from_user+0x2e/0xd0 [ 1731.920950][T20451] __io_uring_register+0x4d0/0x2390 [ 1731.920969][T20451] ? trace_contention_end+0xdd/0x130 [ 1731.920980][T20451] ? __pfx___io_uring_register+0x10/0x10 [ 1731.920996][T20451] ? __mutex_lock+0x1ca/0xb90 [ 1731.921017][T20451] ? __x64_sys_io_uring_register+0x159/0x280 [ 1731.921064][T20451] __x64_sys_io_uring_register+0x169/0x280 [ 1731.921085][T20451] do_syscall_64+0xcd/0x260 [ 1731.921103][T20451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.921115][T20451] RIP: 0033:0x7f0382b8e969 [ 1731.921124][T20451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1731.921135][T20451] RSP: 002b:00007f03839b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1731.921146][T20451] RAX: ffffffffffffffda RBX: 00007f0382db5fa0 RCX: 00007f0382b8e969 [ 1731.921153][T20451] RDX: 0000200000000380 RSI: 0000000000000022 RDI: 0000000000000003 [ 1731.921160][T20451] RBP: 00007f03839b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1731.921167][T20451] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1731.921173][T20451] R13: 0000000000000000 R14: 00007f0382db5fa0 R15: 00007fff87bf8618 [ 1731.921188][T20451] [ 1732.510831][ T58] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1732.830849][T14302] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1733.923431][T14302] usb 5-1: Using ep0 maxpacket: 8 [ 1734.058657][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.231262][T14302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.278907][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1734.283641][T14302] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1734.288935][ T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1734.313359][ T58] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1734.323221][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.335790][T20469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3420'. [ 1734.389057][ T58] usb 2-1: config 0 descriptor?? [ 1734.427099][T14302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.582000][T14302] usb 5-1: config 0 descriptor?? [ 1735.023998][ T58] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1735.501145][ T58] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1735.550978][ T58] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1735.556455][T20455] netlink: 'syz.1.3417': attribute type 10 has an invalid length. [ 1735.597871][ T58] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1735.720798][ T58] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1735.780795][ T58] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1735.852313][ T58] plantronics 0003:047F:FFFF.0045: No inputs registered, leaving [ 1735.863153][T20455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1735.969268][ T58] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1735.993340][T14302] usbhid 5-1:0.0: can't add hid device: -71 [ 1735.999303][T14302] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1736.012754][T20455] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1736.142686][T14302] usb 5-1: USB disconnect, device number 45 [ 1736.237003][ T30] kauditd_printk_skb: 541 callbacks suppressed [ 1736.237018][ T30] audit: type=1400 audit(1747889326.536:79496): avc: denied { read write } for pid=19203 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1736.420833][ T30] audit: type=1400 audit(1747889326.586:79497): avc: denied { read write open } for pid=19203 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1736.584256][ T30] audit: type=1400 audit(1747889326.586:79498): avc: denied { ioctl } for pid=19203 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1737.196105][ T30] audit: type=1400 audit(1747889326.736:79499): avc: denied { bpf } for pid=20482 comm="syz.2.3422" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1737.311043][ T30] audit: type=1400 audit(1747889326.746:79500): avc: denied { prog_load } for pid=20482 comm="syz.2.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1737.323584][T20488] FAULT_INJECTION: forcing a failure. [ 1737.323584][T20488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1737.344460][T20488] CPU: 0 UID: 0 PID: 20488 Comm: syz.4.3423 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1737.344484][T20488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1737.344494][T20488] Call Trace: [ 1737.344500][T20488] [ 1737.344507][T20488] dump_stack_lvl+0x16c/0x1f0 [ 1737.344535][T20488] should_fail_ex+0x512/0x640 [ 1737.344562][T20488] _copy_from_iter+0x2a4/0x15b0 [ 1737.344595][T20488] ? __pfx__copy_from_iter+0x10/0x10 [ 1737.344624][T20488] ? rcu_is_watching+0x12/0xc0 [ 1737.344646][T20488] ? trace_kmalloc+0x2b/0xd0 [ 1737.344663][T20488] ? __kmalloc_noprof+0x242/0x510 [ 1737.344684][T20488] kernfs_fop_write_iter+0x19a/0x510 [ 1737.344718][T20488] aio_write+0x3b6/0x910 [ 1737.344747][T20488] ? __pfx_aio_write+0x10/0x10 [ 1737.344772][T20488] ? __lock_acquire+0xaa4/0x1ba0 [ 1737.344817][T20488] ? __might_fault+0xe3/0x190 [ 1737.344833][T20488] ? __might_fault+0x13b/0x190 [ 1737.344857][T20488] ? io_submit_one+0x1243/0x1da0 [ 1737.344882][T20488] io_submit_one+0x1243/0x1da0 [ 1737.344912][T20488] ? __lock_acquire+0xaa4/0x1ba0 [ 1737.344943][T20488] ? __pfx_io_submit_one+0x10/0x10 [ 1737.344980][T20488] ? __might_fault+0xe3/0x190 [ 1737.344995][T20488] ? __might_fault+0x13b/0x190 [ 1737.345019][T20488] ? __x64_sys_io_submit+0x1a9/0x350 [ 1737.345035][T20488] __x64_sys_io_submit+0x1a9/0x350 [ 1737.345055][T20488] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1737.345070][T20488] ? fput+0x70/0xf0 [ 1737.345102][T20488] do_syscall_64+0xcd/0x260 [ 1737.345128][T20488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.345145][T20488] RIP: 0033:0x7f40a8b8e969 [ 1737.345159][T20488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1737.345176][T20488] RSP: 002b:00007f40a9994038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1737.345193][T20488] RAX: ffffffffffffffda RBX: 00007f40a8db6080 RCX: 00007f40a8b8e969 [ 1737.345205][T20488] RDX: 0000200000000500 RSI: 0000000000000001 RDI: 00007f40a9952000 [ 1737.345216][T20488] RBP: 00007f40a9994090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.345226][T20488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.345236][T20488] R13: 0000000000000000 R14: 00007f40a8db6080 R15: 00007ffe6c485a18 [ 1737.345263][T20488] [ 1737.370434][ T30] audit: type=1400 audit(1747889326.746:79501): avc: denied { bpf } for pid=20482 comm="syz.2.3422" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1737.858941][T20495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3424'. [ 1738.281049][ T58] usb 2-1: USB disconnect, device number 59 [ 1738.511077][T20498] audit: audit_lost=6203 audit_rate_limit=0 audit_backlog_limit=64 [ 1738.519037][T20498] audit: out of memory in audit_log_start [ 1738.710905][ T30] audit: type=1400 audit(1747889326.756:79502): avc: denied { read } for pid=20482 comm="syz.2.3422" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1738.827124][ T30] audit: type=1400 audit(1747889326.756:79503): avc: denied { read open } for pid=20482 comm="syz.2.3422" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1739.118200][T20497] fido_id[20497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1739.670883][T14302] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1739.831064][T14302] usb 3-1: device descriptor read/64, error -71 [ 1740.271448][T14302] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1740.590837][T14302] usb 3-1: device descriptor read/64, error -71 [ 1740.701649][T14302] usb usb3-port1: attempt power cycle [ 1741.291379][ T30] kauditd_printk_skb: 164 callbacks suppressed [ 1741.291396][ T30] audit: type=1400 audit(1747889331.396:79665): avc: denied { execmem } for pid=20510 comm="syz.0.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1741.380984][T14302] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1741.534029][T14302] usb 3-1: device descriptor read/8, error -71 [ 1741.797246][ T30] audit: type=1400 audit(1747889331.596:79666): avc: denied { ioctl } for pid=20507 comm="syz.2.3429" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1741.990946][ T30] audit: type=1400 audit(1747889331.636:79667): avc: denied { read write } for pid=18447 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1742.043733][T14302] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1742.268119][ T30] audit: type=1400 audit(1747889331.706:79668): avc: denied { ioctl } for pid=20507 comm="syz.2.3429" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1742.296240][ T30] audit: type=1400 audit(1747889331.726:79669): avc: denied { read write } for pid=20510 comm="syz.0.3430" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1742.394421][ T30] audit: type=1400 audit(1747889331.736:79670): avc: denied { read write open } for pid=20510 comm="syz.0.3430" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1742.494643][ T30] audit: type=1400 audit(1747889331.796:79671): avc: denied { mounton } for pid=20510 comm="syz.0.3430" path="/45/file0" dev="tmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1742.583889][ T30] audit: type=1400 audit(1747889331.856:79673): avc: denied { read write open } for pid=18447 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1742.732088][ T30] audit: type=1400 audit(1747889331.846:79672): avc: denied { ioctl } for pid=20507 comm="syz.2.3429" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1742.843912][ T30] audit: type=1400 audit(1747889331.866:79674): avc: denied { ioctl } for pid=18447 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1743.455934][T14302] usb 3-1: device descriptor read/8, error -71 [ 1743.781119][T14302] usb usb3-port1: unable to enumerate USB device [ 1744.686080][T20559] netlink: 'syz.0.3442': attribute type 1 has an invalid length. [ 1744.796924][T20566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3444'. [ 1744.812422][T20559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1744.899220][T20567] bond1: (slave gretap1): making interface the new active one [ 1744.947676][T20567] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1744.992127][T20563] sctp: [Deprecated]: syz.2.3443 (pid 20563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1744.992127][T20563] Use struct sctp_sack_info instead [ 1746.374886][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 1746.374903][ T30] audit: type=1400 audit(1747889336.666:79881): avc: denied { read write open } for pid=19600 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1746.486248][ T30] audit: type=1400 audit(1747889336.666:79882): avc: denied { ioctl } for pid=19600 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1746.590912][ T30] audit: type=1400 audit(1747889336.666:79883): avc: denied { read } for pid=20572 comm="syz.2.3446" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1746.633457][ T30] audit: type=1400 audit(1747889336.666:79884): avc: denied { read open } for pid=20572 comm="syz.2.3446" path="net:[4026532882]" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1746.698801][ T30] audit: type=1400 audit(1747889336.666:79885): avc: denied { create } for pid=20572 comm="syz.2.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1746.758347][ T30] audit: type=1400 audit(1747889336.686:79886): avc: denied { read write } for pid=18447 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1746.783575][ T30] audit: type=1400 audit(1747889336.686:79887): avc: denied { read write open } for pid=18447 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1746.810190][ T30] audit: type=1400 audit(1747889336.686:79888): avc: denied { ioctl } for pid=18447 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1746.985705][ T30] audit: type=1400 audit(1747889336.736:79889): avc: denied { bind } for pid=20572 comm="syz.2.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1747.015542][ T30] audit: type=1400 audit(1747889336.736:79890): avc: denied { connect } for pid=20572 comm="syz.2.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1750.787727][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3456'. [ 1750.913110][T20624] random: crng reseeded on system resumption [ 1751.383103][ T30] kauditd_printk_skb: 1530 callbacks suppressed [ 1751.383121][ T30] audit: type=1400 audit(1747889341.686:80989): avc: denied { ioctl } for pid=20628 comm="syz.2.3457" path="socket:[92331]" dev="sockfs" ino=92331 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1751.514391][ T30] audit: type=1400 audit(1747889341.726:80990): avc: denied { read } for pid=20617 comm="syz.1.3458" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1751.537631][ C0] vkms_vblank_simulate: vblank timer overrun [ 1751.619974][ T30] audit: type=1400 audit(1747889341.726:80991): avc: denied { read open } for pid=20617 comm="syz.1.3458" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1751.691119][ T30] audit: type=1400 audit(1747889341.796:80992): avc: denied { create } for pid=20617 comm="syz.1.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1751.717243][ T30] audit: type=1400 audit(1747889341.906:80993): avc: denied { read write } for pid=20633 comm="syz.4.3462" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1751.750939][ T30] audit: type=1400 audit(1747889341.916:80994): avc: denied { read write open } for pid=20633 comm="syz.4.3462" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1751.828397][ T30] audit: type=1400 audit(1747889341.916:80995): avc: denied { ioctl } for pid=20621 comm="syz.0.3460" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1751.910840][T20490] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1751.934740][ T30] audit: type=1400 audit(1747889341.916:80996): avc: denied { read write } for pid=19534 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1751.963849][ T30] audit: type=1400 audit(1747889341.916:80997): avc: denied { read write open } for pid=19534 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1751.999285][ T30] audit: type=1400 audit(1747889341.916:80998): avc: denied { ioctl } for pid=19534 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1752.081227][T20490] usb 5-1: Using ep0 maxpacket: 8 [ 1752.115392][T20490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.147376][T20490] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1752.213354][T20644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3461'. [ 1752.226790][T20642] vivid-004: disconnect [ 1752.270861][T20490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.290627][T20490] usb 5-1: config 0 descriptor?? [ 1752.700062][T20637] vivid-004: reconnect [ 1753.090998][ T951] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1753.302687][ T951] usb 2-1: not running at top speed; connect to a high speed hub [ 1753.341481][T20490] usbhid 5-1:0.0: can't add hid device: -71 [ 1753.347592][T20490] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1753.373369][T20490] usb 5-1: USB disconnect, device number 46 [ 1753.373626][ T951] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1753.393737][ T951] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1753.405774][ T951] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1754.119764][ T951] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1754.132683][ T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.220303][ T951] usb 2-1: Product: ꏪೠ炝稂㤒⪅쑤ᘅⳭ챢伂♆ ֖츾딸䰊웦洄㟴㗡훒垿㶩槕葏甴騡氀솂Ꝺ㡇콭帲᩾躑ụ䈅ᨙ悂쩍튤鱀᧯ၺ불欍偬뮒筊䤀쩱꩓ힹ疄灊敐就寴鶎곸༩鱷䴼ἝṔủꕃ⸫ⴈ⬷꣖쭳팚灓誷䮢ꍣ쟝 [ 1754.294966][ T951] usb 2-1: Manufacturer: 嚚䆍ꬴ㿎䜡煐ꬋ湼씭箆쾹觘↭燨췱ᤴ钬窓澘槗ꪷ휽ꤩ碠௚ꢕ쇇ⅸ低ꞎ귩┛䓺◶速芋᮰迈ধ䒀ꫫ榐⥾Ӎڎ蜵ೋ睵㔍런츳㚞燜컳ᜳ슸伦뺕將鄽⡰맂Ю횓擽㢎墎實簤溴ዂ袗铛龛텄뽸諲묽紘埙꼒笄ⅶ䱦天쿪✥꫸䆰鳌⬠஗Ḱ섀㛴├뜡ꭓ [ 1754.395650][ T951] usb 2-1: SerialNumber: 挝挲栽箃༠讽瑋픩袬凾窸꒦⅂轲⠄᛬漁ﷁ⃐褼⡢듻ꋭ멛⧕潏ꅺ坂蝨䛅០㨶톶Ὶ䴉⑜唠⺊ֶ摀紤뜥䰽咦噽솱澨蚆犈眄艿䔞ס閵ზ䎭ṫ䖪瞷駒ፅ뷞꺙䯄ᴢ쉗 [ 1754.597110][T20663] FAULT_INJECTION: forcing a failure. [ 1754.597110][T20663] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.648621][T20663] CPU: 0 UID: 0 PID: 20663 Comm: syz.2.3470 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1754.648648][T20663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1754.648660][T20663] Call Trace: [ 1754.648666][T20663] [ 1754.648674][T20663] dump_stack_lvl+0x16c/0x1f0 [ 1754.648705][T20663] should_fail_ex+0x512/0x640 [ 1754.648729][T20663] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1754.648751][T20663] should_failslab+0xc2/0x120 [ 1754.648771][T20663] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1754.648790][T20663] ? sock_alloc_inode+0x25/0x1c0 [ 1754.648818][T20663] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1754.648839][T20663] sock_alloc_inode+0x25/0x1c0 [ 1754.648861][T20663] alloc_inode+0x64/0x240 [ 1754.648885][T20663] sock_alloc+0x40/0x280 [ 1754.648906][T20663] do_accept+0xf7/0x530 [ 1754.648931][T20663] ? do_raw_spin_lock+0x12c/0x2b0 [ 1754.648952][T20663] ? __pfx_do_accept+0x10/0x10 [ 1754.648996][T20663] __sys_accept4+0x100/0x1b0 [ 1754.649021][T20663] ? __pfx___sys_accept4+0x10/0x10 [ 1754.649044][T20663] ? ksys_write+0x1b9/0x240 [ 1754.649066][T20663] ? __pfx_ksys_write+0x10/0x10 [ 1754.649088][T20663] ? rcu_is_watching+0x12/0xc0 [ 1754.649111][T20663] __x64_sys_accept+0x74/0xb0 [ 1754.649124][T20663] ? lockdep_hardirqs_on+0x7c/0x110 [ 1754.649145][T20663] do_syscall_64+0xcd/0x260 [ 1754.649170][T20663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1754.649187][T20663] RIP: 0033:0x7f0382b8e969 [ 1754.649200][T20663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1754.649216][T20663] RSP: 002b:00007f03839b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1754.649233][T20663] RAX: ffffffffffffffda RBX: 00007f0382db5fa0 RCX: 00007f0382b8e969 [ 1754.649245][T20663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1754.649263][T20663] RBP: 00007f03839b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1754.649275][T20663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1754.649285][T20663] R13: 0000000000000000 R14: 00007f0382db5fa0 R15: 00007fff87bf8618 [ 1754.649311][T20663] [ 1754.670634][T20646] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1755.432012][ T951] cdc_ncm 2-1:1.0: bind() failure [ 1755.439156][ T951] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1755.480822][ T951] cdc_ncm 2-1:1.1: bind() failure [ 1755.499517][ T951] usb 2-1: USB disconnect, device number 60 [ 1755.653114][T14302] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1755.831301][T14302] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1755.850959][T14302] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1755.875926][T14302] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1755.906493][T14302] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1755.929648][T20687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3476'. [ 1755.946558][T14302] usb 5-1: Product: syz [ 1755.946580][T14302] usb 5-1: Manufacturer: syz [ 1755.946594][T14302] usb 5-1: SerialNumber: syz [ 1755.968886][T14302] usb 5-1: config 0 descriptor?? [ 1756.084489][T20689] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3477'. [ 1756.191098][ T951] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1756.192376][T14302] usb 5-1: selecting invalid altsetting 0 [ 1756.392266][ T30] kauditd_printk_skb: 302 callbacks suppressed [ 1756.392336][ T30] audit: type=1400 audit(1747889346.696:81301): avc: denied { ioctl } for pid=20681 comm="syz.2.3475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1756.467658][ T30] audit: type=1400 audit(1747889346.726:81302): avc: denied { ioctl } for pid=20681 comm="syz.2.3475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1756.502485][T14302] usb 5-1: USB disconnect, device number 47 [ 1756.543555][ T30] audit: type=1400 audit(1747889346.726:81303): avc: denied { ioctl } for pid=20681 comm="syz.2.3475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1756.576384][ T30] audit: type=1400 audit(1747889346.806:81304): avc: denied { ioctl } for pid=20681 comm="syz.2.3475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1756.612955][ T951] usb 3-1: Using ep0 maxpacket: 8 [ 1756.982499][ T30] audit: type=1400 audit(1747889346.826:81305): avc: denied { create } for pid=20690 comm="syz.0.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1757.078554][ T30] audit: type=1400 audit(1747889346.836:81306): avc: denied { bind } for pid=20690 comm="syz.0.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1757.098145][ C0] vkms_vblank_simulate: vblank timer overrun [ 1757.253475][ T30] audit: type=1400 audit(1747889346.836:81307): avc: denied { listen } for pid=20690 comm="syz.0.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1757.278591][ T30] audit: type=1400 audit(1747889346.906:81308): avc: denied { read write } for pid=19600 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1757.305085][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1757.316042][ T911] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1757.330767][ T30] audit: type=1400 audit(1747889346.906:81309): avc: denied { read write open } for pid=19600 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1757.386896][ T951] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1757.397988][ T30] audit: type=1400 audit(1747889346.906:81310): avc: denied { ioctl } for pid=19600 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1757.430829][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.456007][ T951] usb 3-1: config 0 descriptor?? [ 1757.460838][ T911] usb 2-1: Using ep0 maxpacket: 16 [ 1757.475429][ T911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1757.527057][ T911] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1757.547994][T20702] FAULT_INJECTION: forcing a failure. [ 1757.547994][T20702] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.561143][T20702] CPU: 0 UID: 0 PID: 20702 Comm: syz.0.3481 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1757.561169][T20702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1757.561179][T20702] Call Trace: [ 1757.561185][T20702] [ 1757.561193][T20702] dump_stack_lvl+0x16c/0x1f0 [ 1757.561224][T20702] should_fail_ex+0x512/0x640 [ 1757.561253][T20702] should_failslab+0xc2/0x120 [ 1757.561280][T20702] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1757.561300][T20702] ? dst_alloc+0x99/0x1a0 [ 1757.561322][T20702] dst_alloc+0x99/0x1a0 [ 1757.561343][T20702] rt_dst_alloc+0x35/0x3a0 [ 1757.561368][T20702] ip_route_input_rcu.part.0+0x5e8/0xdf0 [ 1757.561401][T20702] ? __pfx_ip_route_input_rcu.part.0+0x10/0x10 [ 1757.561430][T20702] ? __pfx_ipt_do_table+0x10/0x10 [ 1757.561460][T20702] ip_route_input_noref+0x1c1/0x2e0 [ 1757.561488][T20702] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1757.561519][T20702] ? nf_hook_slow_list+0x30e/0x460 [ 1757.561543][T20702] ip_rcv_finish_core+0x46f/0x2290 [ 1757.561569][T20702] ip_list_rcv_finish+0x1b8/0x720 [ 1757.561593][T20702] ? __pfx_ip_list_rcv_finish+0x10/0x10 [ 1757.561610][T20702] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1757.561628][T20702] ? ip_rcv_core+0x934/0xe80 [ 1757.561651][T20702] ip_list_rcv+0x335/0x450 [ 1757.561673][T20702] ? __pfx_ip_list_rcv+0x10/0x10 [ 1757.561695][T20702] ? __pfx_ip_list_rcv+0x10/0x10 [ 1757.561715][T20702] __netif_receive_skb_list_core+0x752/0x950 [ 1757.561743][T20702] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1757.561762][T20702] ? lock_acquire+0x179/0x350 [ 1757.561802][T20702] netif_receive_skb_list_internal+0x752/0xdb0 [ 1757.561828][T20702] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1757.561860][T20702] ? __pfx_eth_type_trans+0x10/0x10 [ 1757.561887][T20702] napi_complete_done+0x23f/0x970 [ 1757.561908][T20702] ? __pfx_napi_complete_done+0x10/0x10 [ 1757.561924][T20702] ? napi_gro_frags+0x902/0x11a0 [ 1757.561950][T20702] ? tun_get_user+0x2a35/0x3b10 [ 1757.561967][T20702] tun_get_user+0x2a4f/0x3b10 [ 1757.561998][T20702] ? __pfx_tun_get_user+0x10/0x10 [ 1757.562015][T20702] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1757.562049][T20702] ? find_held_lock+0x2b/0x80 [ 1757.562072][T20702] ? tun_get+0x191/0x370 [ 1757.562107][T20702] tun_chr_write_iter+0xdc/0x210 [ 1757.562128][T20702] vfs_write+0x5ba/0x1180 [ 1757.562156][T20702] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1757.562177][T20702] ? __pfx_vfs_write+0x10/0x10 [ 1757.562200][T20702] ? find_held_lock+0x2b/0x80 [ 1757.562241][T20702] ksys_write+0x12a/0x240 [ 1757.562273][T20702] ? __pfx_ksys_write+0x10/0x10 [ 1757.562297][T20702] ? rcu_is_watching+0x12/0xc0 [ 1757.562325][T20702] do_syscall_64+0xcd/0x260 [ 1757.562354][T20702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.562377][T20702] RIP: 0033:0x7f03ca18e969 [ 1757.562393][T20702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1757.562410][T20702] RSP: 002b:00007f03cafbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1757.562428][T20702] RAX: ffffffffffffffda RBX: 00007f03ca3b5fa0 RCX: 00007f03ca18e969 [ 1757.562439][T20702] RDX: 0000000000000032 RSI: 0000200000000080 RDI: 0000000000000003 [ 1757.562449][T20702] RBP: 00007f03cafbd090 R08: 0000000000000000 R09: 0000000000000000 [ 1757.562459][T20702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1757.562470][T20702] R13: 0000000000000000 R14: 00007f03ca3b5fa0 R15: 00007ffc70580738 [ 1757.562497][T20702] [ 1757.563820][ T911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.920432][ T911] usb 2-1: config 0 descriptor?? [ 1758.650986][T16965] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1758.986743][ T911] mcp2221 0003:04D8:00DD.0046: unknown main item tag 0x0 [ 1759.240412][T20715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1759.326094][ T911] mcp2221 0003:04D8:00DD.0046: unknown main item tag 0x0 [ 1759.334941][ T911] mcp2221 0003:04D8:00DD.0046: unknown main item tag 0x0 [ 1759.383659][ T911] mcp2221 0003:04D8:00DD.0046: unknown main item tag 0x0 [ 1759.543953][ T911] mcp2221 0003:04D8:00DD.0046: unknown main item tag 0x0 [ 1759.681554][T20698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1759.693211][ T951] usbhid 3-1:0.0: can't add hid device: -71 [ 1759.699267][ T951] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1759.699940][ T911] mcp2221 0003:04D8:00DD.0046: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1759.728293][ T951] usb 3-1: USB disconnect, device number 61 [ 1759.770889][T20698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1759.812901][ C0] usb 2-1: input irq status -75 received [ 1759.936575][ T911] usb 2-1: USB disconnect, device number 61 [ 1760.714284][T16965] usb 5-1: config 0 has no interfaces? [ 1760.734049][T16965] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1760.743279][T16965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.753403][T16965] usb 5-1: Product: syz [ 1760.763739][T16965] usb 5-1: Manufacturer: syz [ 1760.768381][T16965] usb 5-1: SerialNumber: syz [ 1760.831226][T16965] usb 5-1: config 0 descriptor?? [ 1760.990327][T20723] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1761.087085][ T911] usb 5-1: USB disconnect, device number 48 [ 1761.404379][ T30] kauditd_printk_skb: 202 callbacks suppressed [ 1761.404397][ T30] audit: type=1400 audit(1747889351.706:81513): avc: denied { write } for pid=20731 comm="syz.1.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1761.404438][T20734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3489'. [ 1761.469385][ T30] audit: type=1400 audit(1747889351.766:81514): avc: denied { read write } for pid=20733 comm="syz.3.3491" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1761.533477][ T30] audit: type=1400 audit(1747889351.816:81515): avc: denied { create } for pid=20736 comm="syz.4.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1761.617870][ T30] audit: type=1400 audit(1747889351.816:81516): avc: denied { write } for pid=20736 comm="syz.4.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1761.741384][ T30] audit: type=1400 audit(1747889351.816:81517): avc: denied { read write open } for pid=20733 comm="syz.3.3491" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1761.767929][ T30] audit: type=1400 audit(1747889351.816:81518): avc: denied { read } for pid=20736 comm="syz.4.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1761.789553][ T30] audit: type=1400 audit(1747889351.816:81519): avc: denied { read } for pid=20736 comm="syz.4.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1761.812164][ T30] audit: type=1400 audit(1747889351.856:81520): avc: denied { read write } for pid=20733 comm="syz.3.3491" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1761.836313][ T30] audit: type=1400 audit(1747889351.856:81521): avc: denied { read write open } for pid=20733 comm="syz.3.3491" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1761.861460][T20490] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1761.874265][ T30] audit: type=1400 audit(1747889351.916:81522): avc: denied { ioctl } for pid=20733 comm="syz.3.3491" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1762.020897][T20490] usb 4-1: Using ep0 maxpacket: 8 [ 1762.098297][T20490] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1762.204545][T20740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3490'. [ 1762.490125][T20490] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1762.529914][T20490] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.368404][T20747] netlink: 'syz.4.3495': attribute type 1 has an invalid length. [ 1763.396725][T20490] usb 4-1: config 0 descriptor?? [ 1763.471149][T20747] bond1: entered promiscuous mode [ 1763.477685][T20747] bond1: entered allmulticast mode [ 1763.553000][T20752] bond1: (slave ip6gretap1): making interface the new active one [ 1763.572844][T20752] ip6gretap1: entered promiscuous mode [ 1763.593525][T20752] ip6gretap1: entered allmulticast mode [ 1763.600594][T20752] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1763.741336][T16965] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1763.890928][T16965] usb 1-1: device descriptor read/64, error -71 [ 1764.342935][T16965] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1764.490889][T16965] usb 1-1: device descriptor read/64, error -71 [ 1764.681122][T16965] usb usb1-port1: attempt power cycle [ 1765.030732][T16965] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 1765.043494][T20767] 9pnet: p9_errstr2errno: server reported unknown error @΂(Q0x0000000000000006 [ 1765.070038][T20768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3501'. [ 1765.080864][T20768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3501'. [ 1765.098038][T16965] usb 1-1: device descriptor read/8, error -71 [ 1765.482244][T16965] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1765.517911][T16965] usb 1-1: device descriptor read/8, error -71 [ 1766.041040][T20778] evm: overlay not supported [ 1766.065412][T16965] usb usb1-port1: unable to enumerate USB device [ 1766.153989][T20490] usbhid 4-1:0.0: can't add hid device: -71 [ 1766.161221][T20490] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1766.221346][T20490] usb 4-1: USB disconnect, device number 63 [ 1766.415063][ T30] kauditd_printk_skb: 232 callbacks suppressed [ 1766.415080][ T30] audit: type=1400 audit(1747889356.716:81753): avc: denied { read write } for pid=19340 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1766.510800][ T30] audit: type=1400 audit(1747889356.726:81754): avc: denied { read write open } for pid=19340 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1766.584605][ T30] audit: type=1400 audit(1747889356.726:81755): avc: denied { ioctl } for pid=19340 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1766.641491][ T30] audit: type=1400 audit(1747889356.786:81756): avc: denied { read write } for pid=19600 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1766.703449][T20788] audit: audit_lost=6351 audit_rate_limit=0 audit_backlog_limit=64 [ 1766.717041][ T30] audit: type=1400 audit(1747889356.786:81757): avc: denied { read write open } for pid=19600 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1766.754353][T20788] audit: out of memory in audit_log_start [ 1766.768111][ T30] audit: type=1400 audit(1747889356.786:81758): avc: denied { ioctl } for pid=19600 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1767.158741][ T30] audit: type=1400 audit(1747889356.816:81759): avc: denied { create } for pid=20781 comm="syz.3.3504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1767.183009][ T30] audit: type=1400 audit(1747889356.816:81760): avc: denied { connect } for pid=20781 comm="syz.3.3504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1767.973016][T20809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3513'. [ 1768.041670][ T7558] bond0: (slave bond_slave_0): interface is now down [ 1768.060779][ T7558] bond0: (slave bond_slave_1): interface is now down [ 1768.086947][ T7558] bond0: now running without any active interface! [ 1768.200788][ T911] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1768.275302][T20817] veth3: entered promiscuous mode [ 1768.294457][T20817] veth3: entered allmulticast mode [ 1768.381061][ T911] usb 5-1: Using ep0 maxpacket: 8 [ 1768.401273][ T911] usb 5-1: config index 0 descriptor too short (expected 6418, got 18) [ 1768.431424][ T911] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 1768.441345][ T911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.449362][ T911] usb 5-1: Product: syz [ 1768.453710][ T911] usb 5-1: Manufacturer: syz [ 1768.458316][ T911] usb 5-1: SerialNumber: syz [ 1768.468684][ T911] usb 5-1: config 0 descriptor?? [ 1768.520981][ T951] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1768.680576][T20829] FAULT_INJECTION: forcing a failure. [ 1768.680576][T20829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.694371][ T911] peak_usb 5-1:0.0: PEAK-System PCAN-USB X6 v125 fw v93.0.0 (2 channels) [ 1768.718389][T20829] CPU: 1 UID: 0 PID: 20829 Comm: syz.0.3520 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1768.718417][T20829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1768.718431][T20829] Call Trace: [ 1768.718437][T20829] [ 1768.718444][T20829] dump_stack_lvl+0x16c/0x1f0 [ 1768.718475][T20829] should_fail_ex+0x512/0x640 [ 1768.718506][T20829] _copy_from_iter+0x2a4/0x15b0 [ 1768.718533][T20829] ? kmem_cache_free+0x2d4/0x4d0 [ 1768.718560][T20829] ? skb_free_head+0x18a/0x1d0 [ 1768.718579][T20829] ? __pfx__copy_from_iter+0x10/0x10 [ 1768.718605][T20829] ? skb_free_head+0x18a/0x1d0 [ 1768.718620][T20829] ? skb_headers_offset_update+0x129/0x260 [ 1768.718645][T20829] ? pskb_expand_head+0x617/0x10b0 [ 1768.718673][T20829] skb_copy_datagram_from_iter+0x124/0x740 [ 1768.718713][T20829] tun_get_user+0x17ac/0x3b10 [ 1768.718745][T20829] ? __pfx_tun_get_user+0x10/0x10 [ 1768.718761][T20829] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1768.718797][T20829] ? find_held_lock+0x2b/0x80 [ 1768.718820][T20829] ? tun_get+0x191/0x370 [ 1768.718852][T20829] tun_chr_write_iter+0xdc/0x210 [ 1768.718873][T20829] vfs_write+0x5ba/0x1180 [ 1768.718900][T20829] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1768.718920][T20829] ? __pfx_vfs_write+0x10/0x10 [ 1768.718943][T20829] ? find_held_lock+0x2b/0x80 [ 1768.718982][T20829] ksys_write+0x12a/0x240 [ 1768.719006][T20829] ? __pfx_ksys_write+0x10/0x10 [ 1768.719029][T20829] ? rcu_is_watching+0x12/0xc0 [ 1768.719058][T20829] do_syscall_64+0xcd/0x260 [ 1768.719086][T20829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.719103][T20829] RIP: 0033:0x7f03ca18e969 [ 1768.719119][T20829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1768.719134][T20829] RSP: 002b:00007f03cafbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1768.719152][T20829] RAX: ffffffffffffffda RBX: 00007f03ca3b5fa0 RCX: 00007f03ca18e969 [ 1768.719163][T20829] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000003 [ 1768.719173][T20829] RBP: 00007f03cafbd090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.719184][T20829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.719194][T20829] R13: 0000000000000000 R14: 00007f03ca3b5fa0 R15: 00007ffc70580738 [ 1768.719221][T20829] [ 1768.719348][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1768.840838][ T975] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1768.861614][T20831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1768.896645][ T911] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 1768.899722][T20831] batadv_slave_0: entered promiscuous mode [ 1768.916892][ T911] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 1768.923520][ T951] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1768.939569][ T911] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 1768.957025][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.972934][T20831] batadv_slave_0: entered allmulticast mode [ 1768.986010][ T951] usb 3-1: config 0 descriptor?? [ 1769.065148][ T975] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1769.082638][ T975] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1769.094234][ T975] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1769.262235][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.373615][T20827] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1769.510160][ T975] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1769.572192][ T911] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 1769.696061][ T975] usb 2-1: USB disconnect, device number 62 [ 1769.750515][ T951] usbhid 3-1:0.0: can't add hid device: -71 [ 1769.773113][ T951] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1769.813046][ T951] usb 3-1: USB disconnect, device number 62 [ 1770.092200][ T911] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1770.444032][T20848] netlink: 'syz.0.3524': attribute type 4 has an invalid length. [ 1770.471262][T20848] netlink: 'syz.0.3524': attribute type 4 has an invalid length. [ 1770.866394][T20852] binder: 20847:20852 ioctl c0306201 200000000780 returned -11 [ 1771.210374][ T975] usb 5-1: USB disconnect, device number 49 [ 1771.550969][ T30] kauditd_printk_skb: 379 callbacks suppressed [ 1771.550989][ T30] audit: type=1400 audit(1747889361.726:82140): avc: denied { execmem } for pid=20855 comm="syz.1.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1771.594262][ T30] audit: type=1400 audit(1747889361.896:82141): avc: denied { create } for pid=20857 comm="syz.4.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1772.580872][ T30] audit: type=1400 audit(1747889361.916:82142): avc: denied { create } for pid=20857 comm="syz.4.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1772.583189][T20858] netlink: zone id is out of range [ 1772.607451][ T951] libceph: connect (1)[c::]:6789 error -101 [ 1772.613693][ T951] libceph: mon0 (1)[c::]:6789 connect error [ 1772.620123][T20858] netlink: zone id is out of range [ 1772.678517][T20862] ceph: No mds server is up or the cluster is laggy [ 1772.686974][T20858] netlink: zone id is out of range [ 1772.711043][T20858] netlink: zone id is out of range [ 1772.716177][T20858] netlink: zone id is out of range [ 1772.778503][ T30] audit: type=1400 audit(1747889362.696:82143): avc: denied { create } for pid=20855 comm="syz.1.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1772.805027][T20858] netlink: zone id is out of range [ 1772.810369][T20858] netlink: zone id is out of range [ 1772.830755][T20858] netlink: zone id is out of range [ 1772.835901][T20858] netlink: zone id is out of range [ 1772.915103][ T30] audit: type=1400 audit(1747889362.706:82144): avc: denied { read write } for pid=20853 comm="syz.2.3526" name="media5" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1772.922769][T20858] netlink: zone id is out of range [ 1772.939208][ T30] audit: type=1400 audit(1747889362.706:82145): avc: denied { read write open } for pid=20853 comm="syz.2.3526" path="/dev/media5" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1773.019854][ T30] audit: type=1400 audit(1747889362.706:82146): avc: denied { ioctl } for pid=20853 comm="syz.2.3526" path="/dev/media5" dev="devtmpfs" ino=973 ioctlcmd=0x7c02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1773.121961][ T30] audit: type=1400 audit(1747889362.716:82147): avc: denied { write } for pid=20855 comm="syz.1.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1773.171225][ T30] audit: type=1400 audit(1747889362.716:82148): avc: denied { create } for pid=20855 comm="syz.1.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1773.197513][T20874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3531'. [ 1773.361384][T20879] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20879 comm=syz.2.3531 [ 1773.362853][ T30] audit: type=1400 audit(1747889362.726:82149): avc: denied { allowed } for pid=20855 comm="syz.1.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1773.962996][T16965] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1774.020535][T20490] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1774.615131][T16965] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1774.625491][T16965] usb 4-1: config 0 has no interfaces? [ 1774.633010][T16965] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1774.645946][T16965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.650848][ T911] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1774.661562][T16965] usb 4-1: config 0 descriptor?? [ 1774.680966][T20490] usb 2-1: Using ep0 maxpacket: 8 [ 1774.720238][T20490] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1774.738721][T20490] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 1774.751539][T20490] usb 2-1: config 8 has no interface number 0 [ 1774.758098][T20490] usb 2-1: config 8 interface 255 has no altsetting 0 [ 1774.835530][T20490] usb 2-1: string descriptor 0 read error: -22 [ 1774.847657][T20490] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1774.867292][T20490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.890941][ T911] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1774.917584][ T911] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 1774.938794][ T911] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 1774.953032][ T911] usb 1-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1774.969701][ T911] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1774.982207][ T911] usb 1-1: config 129 has no interface number 0 [ 1774.990405][ T911] usb 1-1: config 129 has no interface number 1 [ 1775.000322][ T911] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1775.025087][ T911] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1775.038754][ T911] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1775.065417][ T911] usb 1-1: config 129 interface 135 has no altsetting 0 [ 1775.082064][ T911] usb 1-1: config 129 interface 5 has no altsetting 0 [ 1775.128513][ T911] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 1775.169092][ T911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.189760][ T911] usb 1-1: Product: syz [ 1775.196162][ T911] usb 1-1: Manufacturer: syz [ 1775.203844][ T911] usb 1-1: SerialNumber: syz [ 1775.579289][ T911] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1775.586376][ T911] usb 1-1: MIDIStreaming interface descriptor not found [ 1775.621710][ T975] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1775.826915][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 1776.136560][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1776.285328][T20490] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.1-1, 00:00:00:00:00:00. [ 1776.339083][ T975] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1776.411902][ T911] usb 1-1: USB disconnect, device number 55 [ 1776.432921][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.674899][ T30] kauditd_printk_skb: 336 callbacks suppressed [ 1776.674916][ T30] audit: type=1400 audit(1747889366.946:82486): avc: denied { create } for pid=20912 comm="syz.0.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1776.754775][ T975] usb 3-1: config 0 descriptor?? [ 1776.850473][ T30] audit: type=1400 audit(1747889366.956:82487): avc: denied { write } for pid=20912 comm="syz.0.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1776.925816][T15531] usb 4-1: USB disconnect, device number 65 [ 1776.960984][ T30] audit: type=1400 audit(1747889366.956:82488): avc: denied { create } for pid=20912 comm="syz.0.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1777.043196][ T30] audit: type=1400 audit(1747889366.956:82489): avc: denied { allowed } for pid=20912 comm="syz.0.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1777.073599][T20884] orangefs_mount: mount request failed with -4 [ 1777.109956][ T5826] usb 2-1: USB disconnect, device number 63 [ 1777.178719][ T30] audit: type=1400 audit(1747889366.966:82490): avc: denied { create } for pid=20912 comm="syz.0.3540" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1777.244396][ T30] audit: type=1400 audit(1747889366.966:82491): avc: denied { map } for pid=20912 comm="syz.0.3540" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1777.391909][ T30] audit: type=1400 audit(1747889366.966:82492): avc: denied { read write } for pid=20912 comm="syz.0.3540" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1778.584840][ T30] audit: type=1400 audit(1747889366.966:82493): avc: denied { map } for pid=20912 comm="syz.0.3540" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1779.811597][T20929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.892227][T20929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.900193][ T30] audit: type=1400 audit(1747889366.966:82494): avc: denied { read write } for pid=20912 comm="syz.0.3540" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1779.926241][ T30] audit: type=1400 audit(1747889366.966:82495): avc: denied { prog_load } for pid=20912 comm="syz.0.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1780.460939][T15531] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1780.534878][ T975] usbhid 3-1:0.0: can't add hid device: -71 [ 1780.552352][ T975] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1780.593086][ T975] usb 3-1: USB disconnect, device number 63 [ 1780.624336][T15531] usb 1-1: Using ep0 maxpacket: 8 [ 1780.670219][T15531] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1781.009111][T15531] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1781.047879][T15531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.069948][T15531] usb 1-1: config 0 descriptor?? [ 1781.680835][ T30] kauditd_printk_skb: 138 callbacks suppressed [ 1781.680875][ T30] audit: type=1400 audit(1747889371.926:82634): avc: denied { map_read map_write } for pid=20947 comm="syz.4.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1781.762000][ T30] audit: type=1400 audit(1747889372.036:82635): avc: denied { read } for pid=20930 comm="syz.0.3544" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1781.787604][ T30] audit: type=1400 audit(1747889372.036:82636): avc: denied { read open } for pid=20930 comm="syz.0.3544" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1781.909485][T20953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3546'. [ 1782.448036][T20953] net_ratelimit: 2 callbacks suppressed [ 1782.448054][T20953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1782.527571][ T30] audit: type=1400 audit(1747889372.036:82637): avc: denied { read write } for pid=20950 comm="syz.2.3550" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1782.630901][ T975] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1782.669503][ T30] audit: type=1400 audit(1747889372.046:82638): avc: denied { read write open } for pid=20950 comm="syz.2.3550" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1782.727374][T15531] usbhid 1-1:0.0: can't add hid device: -71 [ 1782.741760][T15531] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1782.771967][ T30] audit: type=1400 audit(1747889372.046:82639): avc: denied { create } for pid=20948 comm="syz.1.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1782.777443][T15531] usb 1-1: USB disconnect, device number 56 [ 1782.854544][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 1782.859883][ T30] audit: type=1400 audit(1747889372.046:82640): avc: denied { write } for pid=20948 comm="syz.1.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1782.887275][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.919688][ T975] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1782.939911][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.951996][T20961] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1782.974079][T20961] audit: audit_lost=6352 audit_rate_limit=0 audit_backlog_limit=64 [ 1782.985034][ T975] usb 3-1: config 0 descriptor?? [ 1782.990744][T20961] audit: backlog limit exceeded [ 1785.228631][T20989] cgroup: Bad value for 'name' [ 1786.027976][ T975] usbhid 3-1:0.0: can't add hid device: -71 [ 1786.071350][ T975] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1786.117211][ T975] usb 3-1: USB disconnect, device number 64 [ 1787.077784][ T30] kauditd_printk_skb: 233 callbacks suppressed [ 1787.077815][ T30] audit: type=1400 audit(1747889377.376:82870): avc: denied { create } for pid=21001 comm="syz.2.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1787.355925][ T30] audit: type=1400 audit(1747889377.376:82871): avc: denied { setopt } for pid=21001 comm="syz.2.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1787.403194][ T30] audit: type=1400 audit(1747889377.696:82872): avc: denied { create } for pid=20999 comm="syz.4.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1787.433376][ T30] audit: type=1400 audit(1747889377.706:82873): avc: denied { bind } for pid=20999 comm="syz.4.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1787.453155][ T30] audit: type=1400 audit(1747889377.706:82874): avc: denied { read write } for pid=18447 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1787.477783][ T30] audit: type=1400 audit(1747889377.756:82875): avc: denied { read write open } for pid=18447 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1787.561555][ T30] audit: type=1400 audit(1747889377.756:82876): avc: denied { ioctl } for pid=18447 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1787.590718][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 1787.653379][ T30] audit: type=1400 audit(1747889377.786:82877): avc: denied { read write } for pid=19534 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1787.678876][ T30] audit: type=1400 audit(1747889377.786:82878): avc: denied { read write open } for pid=19534 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1787.822770][ T30] audit: type=1400 audit(1747889377.786:82879): avc: denied { ioctl } for pid=19534 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1790.160727][ T975] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 1790.218826][T21029] team0: entered promiscuous mode [ 1790.231137][T21029] team_slave_0: entered promiscuous mode [ 1790.251924][T21029] team_slave_1: entered promiscuous mode [ 1790.257907][T21029] team0: entered allmulticast mode [ 1790.265519][T21029] team_slave_0: entered allmulticast mode [ 1790.277177][T21030] could not allocate digest TFM handle cbcmac-aes-neon [ 1790.362505][T21029] team_slave_1: entered allmulticast mode [ 1790.373839][ T975] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1790.416803][ T975] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1790.480841][ T975] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1790.505073][ T975] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1790.549197][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1790.596467][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1790.669661][ T975] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1790.873568][ T975] usb 2-1: language id specifier not provided by device, defaulting to English [ 1791.049335][ T975] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1791.074286][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.092771][ T975] usb 2-1: Product: 吮 [ 1791.114522][ T975] usb 2-1: config 0 descriptor?? [ 1791.139326][ T975] hub 2-1:0.0: bad descriptor, ignoring hub [ 1791.157362][ T975] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1791.185696][ T975] input: 吮 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34 [ 1791.340420][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.347436][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.708407][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3572'. [ 1791.754543][T21024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3566'. [ 1792.233780][ T30] kauditd_printk_skb: 305 callbacks suppressed [ 1792.233797][ T30] audit: type=1400 audit(1747889382.536:83185): avc: denied { read write } for pid=19534 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1792.356266][ T30] audit: type=1400 audit(1747889382.566:83186): avc: denied { read write open } for pid=19534 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1792.447442][ T30] audit: type=1400 audit(1747889382.566:83187): avc: denied { ioctl } for pid=19534 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1792.587738][ T30] audit: type=1400 audit(1747889382.576:83188): avc: denied { create } for pid=21057 comm="syz.0.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1792.609981][ T30] audit: type=1400 audit(1747889382.586:83189): avc: denied { read write } for pid=21056 comm="syz.3.3574" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1792.662472][ T5826] usb 2-1: USB disconnect, device number 64 [ 1792.672315][ T30] audit: type=1400 audit(1747889382.616:83190): avc: denied { read write open } for pid=21056 comm="syz.3.3574" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1792.886440][T21066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1793.036467][ T30] audit: type=1400 audit(1747889382.616:83191): avc: denied { ioctl } for pid=21057 comm="syz.0.3573" path="socket:[94441]" dev="sockfs" ino=94441 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1793.062564][ T30] audit: type=1400 audit(1747889382.626:83192): avc: denied { prog_load } for pid=21057 comm="syz.0.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1793.239203][T21067] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1793.245798][T21067] audit: audit_lost=6355 audit_rate_limit=0 audit_backlog_limit=64 [ 1794.195625][T21076] capability: warning: `syz.0.3578' uses 32-bit capabilities (legacy support in use) [ 1795.721227][ T5826] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1795.728004][T21089] FAULT_INJECTION: forcing a failure. [ 1795.728004][T21089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1795.729494][T21089] [ 1795.729503][T21089] ====================================================== [ 1795.729509][T21089] WARNING: possible circular locking dependency detected [ 1795.729516][T21089] 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 Not tainted [ 1795.729526][T21089] ------------------------------------------------------ [ 1795.729531][T21089] syz.3.3582/21089 is trying to acquire lock: [ 1795.729539][T21089] ffffffff8e2cd040 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x4d4/0x6d0 [ 1795.729581][T21089] [ 1795.729581][T21089] but task is already holding lock: [ 1795.729585][T21089] ffff8880b8439dd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 1795.729619][T21089] [ 1795.729619][T21089] which lock already depends on the new lock. [ 1795.729619][T21089] [ 1795.729624][T21089] [ 1795.729624][T21089] the existing dependency chain (in reverse order) is: [ 1795.729629][T21089] [ 1795.729629][T21089] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1795.729648][T21089] _raw_spin_lock_nested+0x31/0x40 [ 1795.729667][T21089] raw_spin_rq_lock_nested+0x29/0x130 [ 1795.729684][T21089] task_rq_lock+0xcf/0x490 [ 1795.729701][T21089] cgroup_move_task+0x81/0x2a0 [ 1795.729719][T21089] css_set_move_task+0x288/0x5f0 [ 1795.729740][T21089] cgroup_post_fork+0x201/0x9e0 [ 1795.729755][T21089] copy_process+0x5006/0x91b0 [ 1795.729774][T21089] kernel_clone+0xfc/0x960 [ 1795.729792][T21089] user_mode_thread+0xc7/0x110 [ 1795.729810][T21089] rest_init+0x23/0x2b0 [ 1795.729823][T21089] start_kernel+0x3e9/0x4d0 [ 1795.729836][T21089] x86_64_start_reservations+0x18/0x30 [ 1795.729850][T21089] x86_64_start_kernel+0xb0/0xc0 [ 1795.729862][T21089] common_startup_64+0x13e/0x148 [ 1795.729879][T21089] [ 1795.729879][T21089] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1795.729897][T21089] _raw_spin_lock_irqsave+0x3a/0x60 [ 1795.729921][T21089] try_to_wake_up+0xb2/0x1680 [ 1795.729936][T21089] __wake_up_common+0x132/0x1f0 [ 1795.729957][T21089] __wake_up+0x31/0x60 [ 1795.729975][T21089] tty_port_default_wakeup+0x2a/0x40 [ 1795.729994][T21089] serial8250_tx_chars+0x68e/0x860 [ 1795.730011][T21089] serial8250_handle_irq+0x761/0xcb0 [ 1795.730030][T21089] serial8250_default_handle_irq+0x9a/0x210 [ 1795.730049][T21089] serial8250_interrupt+0x106/0x210 [ 1795.730069][T21089] __handle_irq_event_percpu+0x229/0x7d0 [ 1795.730086][T21089] handle_irq_event+0xab/0x1e0 [ 1795.730102][T21089] handle_edge_irq+0x263/0xd10 [ 1795.730117][T21089] __common_interrupt+0xe2/0x250 [ 1795.730138][T21089] common_interrupt+0xba/0xe0 [ 1795.730153][T21089] asm_common_interrupt+0x26/0x40 [ 1795.730167][T21089] irqentry_exit_to_user_mode+0x120/0x280 [ 1795.730187][T21089] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1795.730202][T21089] [ 1795.730202][T21089] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1795.730221][T21089] _raw_spin_lock_irqsave+0x3a/0x60 [ 1795.730237][T21089] __wake_up+0x1c/0x60 [ 1795.730255][T21089] tty_port_default_wakeup+0x2a/0x40 [ 1795.730272][T21089] serial8250_tx_chars+0x68e/0x860 [ 1795.730289][T21089] serial8250_handle_irq+0x761/0xcb0 [ 1795.730308][T21089] serial8250_default_handle_irq+0x9a/0x210 [ 1795.730327][T21089] serial8250_interrupt+0x106/0x210 [ 1795.730347][T21089] __handle_irq_event_percpu+0x229/0x7d0 [ 1795.730364][T21089] handle_irq_event+0xab/0x1e0 [ 1795.730379][T21089] handle_edge_irq+0x263/0xd10 [ 1795.730393][T21089] __common_interrupt+0xe2/0x250 [ 1795.730413][T21089] common_interrupt+0xba/0xe0 [ 1795.730427][T21089] asm_common_interrupt+0x26/0x40 [ 1795.730440][T21089] _raw_spin_unlock_irqrestore+0x31/0x80 [ 1795.730458][T21089] uart_write+0x2a4/0xb30 [ 1795.730473][T21089] n_tty_write+0x40f/0x1160 [ 1795.730492][T21089] file_tty_write.constprop.0+0x502/0x9b0 [ 1795.730508][T21089] redirected_tty_write+0xd4/0x150 [ 1795.730524][T21089] vfs_write+0x5ba/0x1180 [ 1795.730545][T21089] ksys_write+0x12a/0x240 [ 1795.730565][T21089] do_syscall_64+0xcd/0x260 [ 1795.730584][T21089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.730598][T21089] [ 1795.730598][T21089] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1795.730616][T21089] _raw_spin_lock_irqsave+0x3a/0x60 [ 1795.730633][T21089] serial8250_console_write+0x181/0x1890 [ 1795.730653][T21089] console_flush_all+0x801/0xc60 [ 1795.730668][T21089] console_unlock+0xd8/0x210 [ 1795.730683][T21089] vprintk_emit+0x418/0x6d0 [ 1795.730699][T21089] _printk+0xc7/0x100 [ 1795.730719][T21089] register_console+0xc2d/0x11b0 [ 1795.730736][T21089] univ8250_console_init+0x5f/0x90 [ 1795.730761][T21089] console_init+0x14f/0x680 [ 1795.730775][T21089] start_kernel+0x29f/0x4d0 [ 1795.730787][T21089] x86_64_start_reservations+0x18/0x30 [ 1795.730800][T21089] x86_64_start_kernel+0xb0/0xc0 [ 1795.730812][T21089] common_startup_64+0x13e/0x148 [ 1795.730829][T21089] [ 1795.730829][T21089] -> #0 (console_owner){-.-.}-{0:0}: [ 1795.730847][T21089] __lock_acquire+0x1173/0x1ba0 [ 1795.730867][T21089] lock_acquire+0x179/0x350 [ 1795.730888][T21089] vprintk_emit+0x4e5/0x6d0 [ 1795.730904][T21089] _printk+0xc7/0x100 [ 1795.730930][T21089] should_fail_ex+0x4e7/0x640 [ 1795.730949][T21089] strncpy_from_user+0x3b/0x2e0 [ 1795.730965][T21089] strncpy_from_user_nofault+0x7f/0x180 [ 1795.730983][T21089] bpf_probe_read_user_str+0x26/0x70 [ 1795.731001][T21089] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 1795.731013][T21089] bpf_trace_run4+0x24c/0x5a0 [ 1795.731034][T21089] __bpf_trace_sched_switch+0x145/0x190 [ 1795.731051][T21089] __traceiter_sched_switch+0x6f/0xc0 [ 1795.731066][T21089] __schedule+0x1bf3/0x5de0 [ 1795.731084][T21089] preempt_schedule_common+0x44/0xc0 [ 1795.731102][T21089] preempt_schedule_thunk+0x16/0x30 [ 1795.731115][T21089] _raw_spin_unlock_irqrestore+0x61/0x80 [ 1795.731133][T21089] avc_alloc_node+0x420/0x6a0 [ 1795.731147][T21089] avc_update_node.isra.0+0x6d/0xb60 [ 1795.731160][T21089] avc_denied+0x141/0x190 [ 1795.731172][T21089] avc_perm_nonode+0x160/0x180 [ 1795.731185][T21089] avc_has_perm_noaudit+0x2de/0x3b0 [ 1795.731198][T21089] avc_has_perm+0xc0/0x1c0 [ 1795.731212][T21089] sock_has_perm+0x252/0x2f0 [ 1795.731227][T21089] security_socket_recvmsg+0x238/0x260 [ 1795.731245][T21089] sock_recvmsg+0x4a/0x250 [ 1795.731264][T21089] ____sys_recvmsg+0x218/0x6b0 [ 1795.731283][T21089] ___sys_recvmsg+0x114/0x1a0 [ 1795.731297][T21089] do_recvmmsg+0x2fe/0x740 [ 1795.731311][T21089] __x64_sys_recvmmsg+0x22a/0x280 [ 1795.731327][T21089] do_syscall_64+0xcd/0x260 [ 1795.731346][T21089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.731360][T21089] [ 1795.731360][T21089] other info that might help us debug this: [ 1795.731360][T21089] [ 1795.731365][T21089] Chain exists of: [ 1795.731365][T21089] console_owner --> &p->pi_lock --> &rq->__lock [ 1795.731365][T21089] [ 1795.731385][T21089] Possible unsafe locking scenario: [ 1795.731385][T21089] [ 1795.731389][T21089] CPU0 CPU1 [ 1795.731394][T21089] ---- ---- [ 1795.731398][T21089] lock(&rq->__lock); [ 1795.731406][T21089] lock(&p->pi_lock); [ 1795.731416][T21089] lock(&rq->__lock); [ 1795.731426][T21089] lock(console_owner); [ 1795.731435][T21089] [ 1795.731435][T21089] *** DEADLOCK *** [ 1795.731435][T21089] [ 1795.731439][T21089] 2 locks held by syz.3.3582/21089: [ 1795.731447][T21089] #0: ffff8880b8439dd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 1795.731483][T21089] #1: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1cf/0x5a0 [ 1795.731523][T21089] [ 1795.731523][T21089] stack backtrace: [ 1795.731530][T21089] CPU: 0 UID: 0 PID: 21089 Comm: syz.3.3582 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1795.731549][T21089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1795.731559][T21089] Call Trace: [ 1795.731564][T21089] [ 1795.731570][T21089] dump_stack_lvl+0x116/0x1f0 [ 1795.731592][T21089] print_circular_bug+0x275/0x350 [ 1795.731615][T21089] check_noncircular+0x14c/0x170 [ 1795.731640][T21089] __lock_acquire+0x1173/0x1ba0 [ 1795.731666][T21089] lock_acquire+0x179/0x350 [ 1795.731687][T21089] ? vprintk_emit+0x4d4/0x6d0 [ 1795.731705][T21089] ? vprintk_emit+0x4c2/0x6d0 [ 1795.731724][T21089] vprintk_emit+0x4e5/0x6d0 [ 1795.731741][T21089] ? vprintk_emit+0x4d4/0x6d0 [ 1795.731758][T21089] ? __pfx_vprintk_emit+0x10/0x10 [ 1795.731775][T21089] ? fixup_exception+0x10c/0xaf0 [ 1795.731795][T21089] _printk+0xc7/0x100 [ 1795.731816][T21089] ? __pfx__printk+0x10/0x10 [ 1795.731838][T21089] ? ___ratelimit+0x24c/0x570 [ 1795.731858][T21089] ? __pfx____ratelimit+0x10/0x10 [ 1795.731880][T21089] should_fail_ex+0x4e7/0x640 [ 1795.731901][T21089] strncpy_from_user+0x3b/0x2e0 [ 1795.731922][T21089] ? lock_acquire+0x179/0x350 [ 1795.731945][T21089] strncpy_from_user_nofault+0x7f/0x180 [ 1795.731965][T21089] bpf_probe_read_user_str+0x26/0x70 [ 1795.731985][T21089] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 1795.731997][T21089] bpf_trace_run4+0x24c/0x5a0 [ 1795.732020][T21089] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1795.732044][T21089] ? sched_clock_cpu+0x6c/0x530 [ 1795.732065][T21089] ? lock_acquire+0x179/0x350 [ 1795.732089][T21089] __bpf_trace_sched_switch+0x145/0x190 [ 1795.732108][T21089] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1795.732130][T21089] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 1795.732158][T21089] __traceiter_sched_switch+0x6f/0xc0 [ 1795.732176][T21089] __schedule+0x1bf3/0x5de0 [ 1795.732194][T21089] ? ____sys_recvmsg+0x218/0x6b0 [ 1795.732213][T21089] ? ___sys_recvmsg+0x114/0x1a0 [ 1795.732228][T21089] ? do_recvmmsg+0x2fe/0x740 [ 1795.732243][T21089] ? __x64_sys_recvmmsg+0x22a/0x280 [ 1795.732259][T21089] ? do_syscall_64+0xcd/0x260 [ 1795.732279][T21089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.732300][T21089] ? __pfx___schedule+0x10/0x10 [ 1795.732322][T21089] ? rcu_is_watching+0x12/0xc0 [ 1795.732339][T21089] ? irqentry_exit+0x3b/0x90 [ 1795.732359][T21089] ? lockdep_hardirqs_on+0x7c/0x110 [ 1795.732379][T21089] ? preempt_schedule_thunk+0x16/0x30 [ 1795.732393][T21089] preempt_schedule_common+0x44/0xc0 [ 1795.732414][T21089] preempt_schedule_thunk+0x16/0x30 [ 1795.732430][T21089] _raw_spin_unlock_irqrestore+0x61/0x80 [ 1795.732449][T21089] avc_alloc_node+0x420/0x6a0 [ 1795.732463][T21089] ? avc_alloc_node+0xe0/0x6a0 [ 1795.732479][T21089] avc_update_node.isra.0+0x6d/0xb60 [ 1795.732494][T21089] ? find_held_lock+0x2b/0x80 [ 1795.732514][T21089] avc_denied+0x141/0x190 [ 1795.732531][T21089] avc_perm_nonode+0x160/0x180 [ 1795.732547][T21089] ? __pfx_avc_perm_nonode+0x10/0x10 [ 1795.732563][T21089] ? find_held_lock+0x2b/0x80 [ 1795.732581][T21089] ? avc_has_perm_noaudit+0x2bd/0x3b0 [ 1795.732598][T21089] avc_has_perm_noaudit+0x2de/0x3b0 [ 1795.732615][T21089] avc_has_perm+0xc0/0x1c0 [ 1795.732630][T21089] ? __pfx_avc_has_perm+0x10/0x10 [ 1795.732649][T21089] sock_has_perm+0x252/0x2f0 [ 1795.732666][T21089] ? __pfx_sock_has_perm+0x10/0x10 [ 1795.732687][T21089] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1795.732708][T21089] ? is_bpf_text_address+0x94/0x1a0 [ 1795.732728][T21089] security_socket_recvmsg+0x238/0x260 [ 1795.732748][T21089] sock_recvmsg+0x4a/0x250 [ 1795.732769][T21089] ____sys_recvmsg+0x218/0x6b0 [ 1795.732791][T21089] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1795.732816][T21089] ? __lock_acquire+0x5ca/0x1ba0 [ 1795.732840][T21089] ___sys_recvmsg+0x114/0x1a0 [ 1795.732856][T21089] ? __pfx____sys_recvmsg+0x10/0x10 [ 1795.732873][T21089] ? find_held_lock+0x2b/0x80 [ 1795.732898][T21089] do_recvmmsg+0x2fe/0x740 [ 1795.732920][T21089] ? __pfx_do_recvmmsg+0x10/0x10 [ 1795.732939][T21089] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1795.732965][T21089] ? __fget_files+0x20e/0x3c0 [ 1795.732981][T21089] __x64_sys_recvmmsg+0x22a/0x280 [ 1795.732999][T21089] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1795.733016][T21089] ? rcu_is_watching+0x12/0xc0 [ 1795.733036][T21089] do_syscall_64+0xcd/0x260 [ 1795.733058][T21089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.733073][T21089] RIP: 0033:0x7f7cfbd8e969 [ 1795.733085][T21089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1795.733100][T21089] RSP: 002b:00007f7cfcbcc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1795.733115][T21089] RAX: ffffffffffffffda RBX: 00007f7cfbfb5fa0 RCX: 00007f7cfbd8e969 [ 1795.733125][T21089] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 1795.733135][T21089] RBP: 00007f7cfcbcc090 R08: 0000000000000000 R09: 0000000000000000 [ 1795.733145][T21089] R10: 0000000000000172 R11: 0000000000000246 R12: 0000000000000001 [ 1795.733154][T21089] R13: 0000000000000000 R14: 00007f7cfbfb5fa0 R15: 00007ffeb7af0e98 [ 1795.733171][T21089] [ 1796.975062][T21089] CPU: 0 UID: 0 PID: 21089 Comm: syz.3.3582 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1796.975079][T21089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1796.975085][T21089] Call Trace: [ 1796.975092][T21089] [ 1796.975099][T21089] dump_stack_lvl+0x116/0x1f0 [ 1796.975119][T21089] should_fail_ex+0x512/0x640 [ 1796.975137][T21089] strncpy_from_user+0x3b/0x2e0 [ 1796.975150][T21089] ? lock_acquire+0x179/0x350 [ 1796.975168][T21089] strncpy_from_user_nofault+0x7f/0x180 [ 1796.975184][T21089] bpf_probe_read_user_str+0x26/0x70 [ 1796.975201][T21089] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 1796.975211][T21089] bpf_trace_run4+0x24c/0x5a0 [ 1796.975228][T21089] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1796.975247][T21089] ? sched_clock_cpu+0x6c/0x530 [ 1796.975263][T21089] ? lock_acquire+0x179/0x350 [ 1796.975280][T21089] __bpf_trace_sched_switch+0x145/0x190 [ 1796.975295][T21089] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1796.975311][T21089] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 1796.975332][T21089] __traceiter_sched_switch+0x6f/0xc0 [ 1796.975345][T21089] __schedule+0x1bf3/0x5de0 [ 1796.975359][T21089] ? ____sys_recvmsg+0x218/0x6b0 [ 1796.975375][T21089] ? ___sys_recvmsg+0x114/0x1a0 [ 1796.975385][T21089] ? do_recvmmsg+0x2fe/0x740 [ 1796.975396][T21089] ? __x64_sys_recvmmsg+0x22a/0x280 [ 1796.975408][T21089] ? do_syscall_64+0xcd/0x260 [ 1796.975424][T21089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.975440][T21089] ? __pfx___schedule+0x10/0x10 [ 1796.975455][T21089] ? rcu_is_watching+0x12/0xc0 [ 1796.975469][T21089] ? irqentry_exit+0x3b/0x90 [ 1796.975483][T21089] ? lockdep_hardirqs_on+0x7c/0x110 [ 1796.975498][T21089] ? preempt_schedule_thunk+0x16/0x30 [ 1796.975509][T21089] preempt_schedule_common+0x44/0xc0 [ 1796.975524][T21089] preempt_schedule_thunk+0x16/0x30 [ 1796.975536][T21089] _raw_spin_unlock_irqrestore+0x61/0x80 [ 1796.975551][T21089] avc_alloc_node+0x420/0x6a0 [ 1796.975562][T21089] ? avc_alloc_node+0xe0/0x6a0 [ 1796.975572][T21089] avc_update_node.isra.0+0x6d/0xb60 [ 1796.975583][T21089] ? find_held_lock+0x2b/0x80 [ 1796.975598][T21089] avc_denied+0x141/0x190 [ 1796.975610][T21089] avc_perm_nonode+0x160/0x180 [ 1796.975621][T21089] ? __pfx_avc_perm_nonode+0x10/0x10 [ 1796.975632][T21089] ? find_held_lock+0x2b/0x80 [ 1796.975645][T21089] ? avc_has_perm_noaudit+0x2bd/0x3b0 [ 1796.975658][T21089] avc_has_perm_noaudit+0x2de/0x3b0 [ 1796.975670][T21089] avc_has_perm+0xc0/0x1c0 [ 1796.975681][T21089] ? __pfx_avc_has_perm+0x10/0x10 [ 1796.975695][T21089] sock_has_perm+0x252/0x2f0 [ 1796.975708][T21089] ? __pfx_sock_has_perm+0x10/0x10 [ 1796.975723][T21089] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1796.975738][T21089] ? is_bpf_text_address+0x94/0x1a0 [ 1796.975751][T21089] security_socket_recvmsg+0x238/0x260 [ 1796.975766][T21089] sock_recvmsg+0x4a/0x250 [ 1796.975783][T21089] ____sys_recvmsg+0x218/0x6b0 [ 1796.975799][T21089] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1796.975817][T21089] ? __lock_acquire+0x5ca/0x1ba0 [ 1796.975835][T21089] ___sys_recvmsg+0x114/0x1a0 [ 1796.975847][T21089] ? __pfx____sys_recvmsg+0x10/0x10 [ 1796.975859][T21089] ? find_held_lock+0x2b/0x80 [ 1796.975876][T21089] do_recvmmsg+0x2fe/0x740 [ 1796.975889][T21089] ? __pfx_do_recvmmsg+0x10/0x10 [ 1796.975902][T21089] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1796.975921][T21089] ? __fget_files+0x20e/0x3c0 [ 1796.975933][T21089] __x64_sys_recvmmsg+0x22a/0x280 [ 1796.975946][T21089] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1796.975959][T21089] ? rcu_is_watching+0x12/0xc0 [ 1796.975973][T21089] do_syscall_64+0xcd/0x260 [ 1796.975995][T21089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.976006][T21089] RIP: 0033:0x7f7cfbd8e969 [ 1796.976016][T21089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1796.976026][T21089] RSP: 002b:00007f7cfcbcc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1796.976037][T21089] RAX: ffffffffffffffda RBX: 00007f7cfbfb5fa0 RCX: 00007f7cfbd8e969 [ 1796.976044][T21089] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 1796.976051][T21089] RBP: 00007f7cfcbcc090 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1796.976057][T21089] R10: 0000000000000172 R11: 0000000000000246 R12: 0000000000000001 [ 1796.976063][T21089] R13: 0000000000000000 R14: 00007f7cfbfb5fa0 R15: 00007ffeb7af0e98 [ 1796.976075][T21089] [ 1797.395612][ C0] vkms_vblank_simulate: vblank timer overrun [ 1797.416685][ T951] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1797.493878][ T30] kauditd_printk_skb: 188 callbacks suppressed [ 1797.493896][ T30] audit: type=1400 audit(1747889387.286:83368): avc: denied { ioctl } for pid=21081 comm="syz.4.3580" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1797.525663][ T30] audit: type=1400 audit(1747889387.286:83369): avc: denied { write } for pid=5802 comm="syz-executor" path="pipe:[5137]" dev="pipefs" ino=5137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1797.817691][ T30] audit: type=1400 audit(1747889387.286:83370): avc: denied { write } for pid=5802 comm="syz-executor" path="pipe:[5137]" dev="pipefs" ino=5137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1797.842190][ T30] audit: type=1400 audit(1747889387.286:83371): avc: denied { write } for pid=5802 comm="syz-executor" path="pipe:[5137]" dev="pipefs" ino=5137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1797.868788][ T30] audit: type=1400 audit(1747889387.766:83372): avc: denied { read } for pid=21088 comm="syz.3.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1798.054377][ T7564] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.185423][ T7564] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.304467][ T7564] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.394182][ T7564] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.483866][ T7564] bridge_slave_1: left allmulticast mode [ 1798.489546][ T7564] bridge_slave_1: left promiscuous mode [ 1798.495624][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.503463][ T7564] bridge_slave_0: left allmulticast mode [ 1798.509091][ T7564] bridge_slave_0: left promiscuous mode [ 1798.515610][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.548038][ T7564] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1798.594942][ T7564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1798.604919][ T7564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1798.615291][ T7564] bond0 (unregistering): Released all slaves [ 1798.706673][ T7564] bond1 (unregistering): Released all slaves [ 1798.915301][ T7564] hsr_slave_0: left promiscuous mode [ 1798.921918][ T7564] hsr_slave_1: left promiscuous mode [ 1798.927447][ T7564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1798.936021][ T7564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1798.944511][ T7564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1798.955055][ T7564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1798.964581][ T7564] veth1_macvtap: left promiscuous mode [ 1798.970056][ T7564] veth0_macvtap: left promiscuous mode [ 1798.976514][ T7564] veth1_vlan: left promiscuous mode [ 1798.982846][ T7564] veth0_vlan: left promiscuous mode [ 1799.056688][ T7564] team0 (unregistering): Port device team_slave_1 removed [ 1799.083162][ T7564] team0 (unregistering): Port device team_slave_0 removed [ 1799.405524][ T7564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.453630][ T7564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.493831][ T7564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.543911][ T7564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.626116][ T7564] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.684049][ T7564] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.743031][ T7564] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.793291][ T7564] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.845220][ T7564] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.883168][ T7564] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.944105][ T7564] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.993408][ T7564] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.054089][ T7564] bridge_slave_1: left allmulticast mode [ 1800.059759][ T7564] bridge_slave_1: left promiscuous mode [ 1800.065569][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.073389][ T7564] bridge_slave_0: left allmulticast mode [ 1800.079239][ T7564] bridge_slave_0: left promiscuous mode [ 1800.085107][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.093208][ T7564] bridge_slave_1: left allmulticast mode [ 1800.098834][ T7564] bridge_slave_1: left promiscuous mode [ 1800.104617][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.112515][ T7564] bridge_slave_0: left allmulticast mode [ 1800.118136][ T7564] bridge_slave_0: left promiscuous mode [ 1800.124665][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.132898][ T7564] bridge_slave_1: left allmulticast mode [ 1800.138518][ T7564] bridge_slave_1: left promiscuous mode [ 1800.144280][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.152033][ T7564] bridge_slave_0: left allmulticast mode [ 1800.157653][ T7564] bridge_slave_0: left promiscuous mode [ 1800.163498][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.208808][ T7564] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1800.217272][ T7564] ip6gretap1 (unregistering): left promiscuous mode [ 1800.226329][ T7564] ip6gretap1 (unregistering): left allmulticast mode [ 1800.288464][ T7564] team0: Port device geneve0 removed [ 1800.463987][ T7564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1800.473382][ T7564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1800.483494][ T7564] bond0 (unregistering): Released all slaves [ 1800.493692][ T7564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1800.503627][ T7564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1800.513135][ T7564] bond0 (unregistering): Released all slaves [ 1800.521374][ T7564] bond1 (unregistering): Released all slaves [ 1800.531912][ T7564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1800.543210][ T7564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1800.553138][ T7564] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1800.563819][ T7564] bond0 (unregistering): Released all slaves [ 1802.693472][ T7564] hsr_slave_0: left promiscuous mode [ 1802.699252][ T7564] hsr_slave_1: left promiscuous mode [ 1802.707327][ T7564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1802.714854][ T7564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.722717][ T7564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1802.730086][ T7564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.739480][ T7564] hsr_slave_0: left promiscuous mode [ 1802.745415][ T7564] hsr_slave_1: left promiscuous mode [ 1802.751121][ T7564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1802.758513][ T7564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.766176][ T7564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1802.773617][ T7564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.783243][ T7564] hsr_slave_0: left promiscuous mode [ 1802.788807][ T7564] hsr_slave_1: left promiscuous mode [ 1802.794506][ T7564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1802.801942][ T7564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.809318][ T7564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1802.816737][ T7564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.828415][ T7564] veth1_macvtap: left promiscuous mode [ 1802.833956][ T7564] veth0_macvtap: left promiscuous mode [ 1802.839445][ T7564] veth1_vlan: left promiscuous mode [ 1802.844765][ T7564] veth0_vlan: left promiscuous mode [ 1802.850405][ T7564] veth1_macvtap: left promiscuous mode [ 1802.855998][ T7564] veth0_macvtap: left promiscuous mode [ 1802.862083][ T7564] veth1_vlan: left promiscuous mode [ 1802.867315][ T7564] veth0_vlan: left promiscuous mode [ 1802.874009][ T7564] veth1_macvtap: left promiscuous mode [ 1802.879495][ T7564] veth0_macvtap: left promiscuous mode [ 1802.885110][ T7564] veth1_vlan: left promiscuous mode [ 1802.890330][ T7564] veth0_vlan: left promiscuous mode [ 1803.037416][ T7564] team_slave_1 (unregistering): left promiscuous mode [ 1803.045330][ T7564] team_slave_1 (unregistering): left allmulticast mode [ 1803.054333][ T7564] team0 (unregistering): Port device team_slave_1 removed [ 1803.073658][ T7564] team_slave_0 (unregistering): left promiscuous mode [ 1803.080424][ T7564] team_slave_0 (unregistering): left allmulticast mode [ 1803.088736][ T7564] team0 (unregistering): Port device team_slave_0 removed [ 1803.222100][ T7564] team0 (unregistering): Port device team_slave_1 removed [ 1803.244697][ T7564] team0 (unregistering): Port device team_slave_0 removed [ 1803.369202][ T7564] team0 (unregistering): Port device team_slave_1 removed [ 1803.380554][ T7564] team0 (unregistering): Port device team_slave_0 removed