last executing test programs: 10.038552061s ago: executing program 0 (id=502): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='0') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0xc8) 9.338178795s ago: executing program 0 (id=505): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file1', [{0x20, 'u\x00\x00erdir'}], 0xa, "dc60b2d263933e33f06bac23a62c07b04cbf6c832ae99b072d1963efa3789698af16c455220ae4f18438b253fa46976f211fc46414adc65e925fbbce8bfa6aee720f80cd076ad7c3ec7a5c3cb5fdc577bc078453657f6e28612e8295ee9d0c2e0a80364ab1ba1176b97a3eba6fdb6fc401d059aad4aa39a34b59e3b3cef576a1065a935af91f0bfef935decb75d82933391c0020"}, 0xa8) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0xc0085508, &(0x7f00000000c0)=0x18) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0xb9) read$char_usb(r2, &(0x7f0000000140)=""/100, 0x64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"a79528ad203432405643259f4963f22a", 0x0, 0x0, {0xe37, 0x6}, {0x9, 0x4}, 0x4, [0x8000, 0xf, 0x5, 0x3, 0x3, 0x1, 0x100000000, 0x9, 0x12b, 0x1, 0xb4, 0x1000, 0x2, 0xfffffffffffffffa, 0x80000000]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000004c0)={{}, r3, 0x14, @unused=[0x80000001, 0x1ff, 0x5, 0xfffffffffffffffc], @subvolid}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 8.490834552s ago: executing program 0 (id=513): r0 = syz_ublk_setup_io_uring(0x7782, &(0x7f0000000240)={0x0, 0xd58c, 0x100, 0x2, 0x253}, &(0x7f0000000100)=0x0, &(0x7f0000000e40)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) r4 = eventfd2(0x1, 0x80001) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000004c0)={0x1, 0x1, &(0x7f0000000040)=""/35, &(0x7f00000002c0)=""/226, &(0x7f0000000480), 0x5000}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r4, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffffde, &(0x7f0000000200)=@any_dev={0x6, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 6.918977519s ago: executing program 3 (id=524): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x2000, @mcast2, 0x9}, 0x0, {[0x1, 0x0, 0x0, 0xfffffffc, 0x9, 0x8]}}, 0x5c) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000280)={0x3}) socket$kcm(0x29, 0x7, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 6.742027882s ago: executing program 3 (id=525): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xd, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bb", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x25, &(0x7f0000000340)=[@mss, @timestamp, @window={0x3, 0x9, 0x9}, @mss={0x2, 0x1}], 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(r2, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) acct(&(0x7f0000000040)='./file0\x00') openat$mice(0xffffff9c, &(0x7f0000000040), 0x167342) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) 6.347120811s ago: executing program 3 (id=527): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a40)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0xfa}, 0x8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000010000001c00000018000600a0910200d91e6e65746c657673696d30000000005f945505cadc7eb5346a746c84fd2309090000005eda1bd4a0448e219cdbca6f79c104a42e52780604ee779a3255a06e5152c92a6860b508d0f3e66dc68e016976834a2997b68d0d06367b881dda0a9412c1b32ee995d6"], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x5) socket$phonet(0x23, 0x2, 0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000002c0)={@multicast1, @rand_addr=0x64010101, r4}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.54102809s ago: executing program 2 (id=529): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000300)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_VMA(0x50, 0x21, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r4, 0x29, 0x46, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f0000000180)=""/142, &(0x7f0000000340), &(0x7f0000000440), 0x1, r5}, 0x38) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 4.534443044s ago: executing program 3 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) (async) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000000000003900000008000300", @ANYBLOB="009d86c5d3bef1080500ce6af89b9420ac3e72b76199ab1943c9009fc2915fe09bb4990a504caf4c1d483014c0486ad6aac8eabfc08eeaed7a8b800efeee0837dca98b69c506eccdf3dd7206c6e8a9f6a991fdf9d2b7961595883aa31c3b4877b52a5766ed0edb65bec85b24cd1d12282628e530adaaf568b75557d444609960c1b50da9fc75217ea68c68c43edaa6aab1ecda45f9919d329b573235b1312838c5a1d1713a74de647b375225da686856ec4c6e83066b638c5e63b10375d012d40ba0658d2100cc17b28e84fe96b8f8", @ANYBLOB="0c005a8028", @ANYRES64=r1, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000000000003900000008000300", @ANYBLOB="009d86c5d3bef1080500ce6af89b9420ac3e72b76199ab1943c9009fc2915fe09bb4990a504caf4c1d483014c0486ad6aac8eabfc08eeaed7a8b800efeee0837dca98b69c506eccdf3dd7206c6e8a9f6a991fdf9d2b7961595883aa31c3b4877b52a5766ed0edb65bec85b24cd1d12282628e530adaaf568b75557d444609960c1b50da9fc75217ea68c68c43edaa6aab1ecda45f9919d329b573235b1312838c5a1d1713a74de647b375225da686856ec4c6e83066b638c5e63b10375d012d40ba0658d2100cc17b28e84fe96b8f8", @ANYBLOB="0c005a8028", @ANYRES64=r1, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) 4.16288509s ago: executing program 3 (id=535): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x800, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x6, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12013701000000407d1e502d0000000000fde772d86ff81db335af1dbe48010902240001000080010904000002030002000921fd7f000122eb00090581031000f60000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x10000001, 0xfffffffd, 0x0, 0x10003, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) pipe2$watch_queue(0x0, 0x80) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x52, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x1ff}, @rumble={0xa, 0x6}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x4) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0xc0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x6044}, 0x24004050) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) ioprio_set$pid(0x0, 0x0, 0x4007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1002, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) 4.162423998s ago: executing program 2 (id=536): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x400) ioctl$BLKRASET(r1, 0x1262, 0x0) sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000001800)="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", 0x587, 0x4048000, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c) 4.042634433s ago: executing program 2 (id=538): close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='configfs\x00', 0xe, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x8818) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 3.662285162s ago: executing program 4 (id=539): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000200040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000008000000000000000000000000000000000000000000120000"], 0x50) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000140)}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) accept4(r1, &(0x7f0000000040)=@rc={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x4d) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000003c0)=0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="ff0f0000b24f7be358ceb769434c1bfd3176ca00d71ea710bad9fe09dc078f79d85e451d87f19cef678d4bb12057ae1925f3713debf38b3fa265c3a483aa3438a447189897c9c9c00cc257e34da83cc2708e3f821f60e487c327417c0ce677fdb904d8033c0c88984676e9a63e0c707bb4627772", @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="04005b00"], 0x20}}, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) write$snapshot(r8, &(0x7f0000000040)='X', 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) r9 = fcntl$dupfd(r8, 0x406, r8) ioctl$SNAPSHOT_FREE(r9, 0x3305) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) 3.524079133s ago: executing program 4 (id=541): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x6}) ioctl$TCXONC(r0, 0x540a, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000001c0)={0x1, r4}) openat$full(0xffffff9c, &(0x7f0000000200), 0x248200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xdb58}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0e000000040000000400000006"], 0x48) 3.37340355s ago: executing program 1 (id=542): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f000078f000/0x1000)=nil, 0x1000, 0xf) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2e, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffe50, &(0x7f0000000100)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x1) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xb0821, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x280000d, 0x11, r0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0x5) 3.307248839s ago: executing program 4 (id=543): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000048882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x100005, 0x0, 0x80000}, 0x20) bind$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) mount$overlay(0x0, 0x0, 0x0, 0x2403002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000019400), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102384, 0x18ff0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) poll(0x0, 0x0, 0xffff7fff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = geteuid() msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000) getresgid(0x0, 0x0, &(0x7f0000000240)=0x0) r9 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000019300)={{0x3, r7, 0xee00, r7, r8, 0x84, 0xd}, 0x0, 0x0, 0x4, 0xa000000000000000, 0x2, 0x9, 0x7, 0x101, 0x9, 0xa, r9, 0xffffffffffffffff}) sendmsg$nl_route(r6, 0x0, 0x24) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) 3.070643156s ago: executing program 2 (id=544): syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) tkill(r0, 0x34) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006119600000000000950000f0ff000000"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000000180)=[{0xfffc, 0x7542516e8c0da11f, 0x3b, &(0x7f0000000340)="b1e08b770b0feb6c103f051666ae8e7b39dfd1fa2f7414332e922d84c807ea684340f2084ac558f3f36b97004b02ed70db99005fa520cf1b1667a2"}], 0x1}) 2.249728529s ago: executing program 1 (id=545): timer_create(0x0, &(0x7f00000003c0)={0x0, 0x27}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f00000001c0)=[{r2}, {r2}], 0x2, 0x9) close(0xffffffffffffffff) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x9c) lseek(r2, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x40}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x45, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x500, 0x70bd2d, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x100) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x1b, 0x4e21, 0xc, @private2, 0x2}, {0xa, 0x4e21, 0x7, @private2, 0x6b8d}, 0xffffffffffffffff, 0xffff3d9b}}, 0x48) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) pidfd_send_signal(r7, 0x40, &(0x7f0000000000)={0x6, 0x5, 0x7f}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000884}, 0x80) fstat(r3, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f00000004c0)) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000004) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 2.067144917s ago: executing program 1 (id=546): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x9, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000f74ace22db03000000e7fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100180a04001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x5, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000051000/0x1000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a2a, 0xc000, 0x7, 0x378}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) (async) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x17, 0x0, 0x0, 0x2c}, 0x4048844) (async) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x4}, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.995058597s ago: executing program 4 (id=547): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fscache,cachetag=']) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cpuinfo\x00', 0x1800, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1, 0x7, 0x1009) r6 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0x4}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_usb_connect$midi(0x2, 0x39, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27, 0x1, 0x1, 0xf, 0x10, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xf, [@ms_header={0x7, 0x24, 0x1, 0xd, 0x7}], [{{0x9, 0x5, 0xf, 0x2, 0x8, 0x4, 0x1, 0x5, {0x5, 0x25, 0x1, 0x1, "8f"}}}]}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r10, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b3000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) r13 = dup(r12) write$UHID_INPUT(r13, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x22, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_val={0x18, 0x1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x3c, &(0x7f0000000540)=""/60, 0x41100, 0x40, '\x00', r7, 0x1b, r8, 0x8, &(0x7f00000005c0)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r9, 0x0, 0x6, &(0x7f0000000600)=[r10, r13], &(0x7f0000000640)=[{0x5, 0x1, 0x7, 0x8}, {0x1, 0x1, 0x7, 0x8}, {0x3, 0x4, 0x6, 0x5}, {0x4, 0x2, 0xe, 0x5}, {0x3, 0x5, 0x5}, {0x1, 0x3, 0x5, 0xa}], 0x10, 0x81}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sysfs$1(0x1, 0x0) r14 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r14, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000680)='\xfc\xa5\x13\x9c\xa1\xfdcP\x9a\xf0\x12Eu[2E\x89\xe7\xa0W%\xd2\x8d\xc2\xab\xb9y\xe9\xc0\\\r\x18u\xd4C=\xe9\xee+\xd4J\xfd\x1ew\x99\xe8<\xcdjk(\xfe\xbf\xe9\x81j;\xe7n\bG\xb5<\xcdN.\xd9Y\xee\xbd\a\xa0\xcdv\x81\xaf\x17\xfc\xa3r\xc8m\xa8\xa0t\x02\xf1\f/@\x00\x00\x009\xca\xd1q\xa1`\x99\xad*\x10\xb1\x02\x05\xde:1/N8\x03\xcbe\xb7\x9c\xcf\x15\x90E\x9e\xe06\x85!\xbe\xf3\x9d\xcc`C\x15\x959\xa4\xd0j\xf9l\x82\xe1\xeaL\xc2\xab\xc7F;\x87]\xd7\xda\x98\xddI=;\x13j\xcf\x9cw\xf8\xf7\x17\xdah\x01\x9bL\x00\x969\x8b\x04\x85\xe5\xcc,\xe0\xd3\x02%\xf7\\7\xd7d\xdbX\x9b[\x8b\xb6\xc7\xf7\x00'/223, 0x0) 1.95471754s ago: executing program 0 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x29, 0x10, &(0x7f0000002e00), &(0x7f00000002c0), 0x8, 0x6c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000040, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 1.922906417s ago: executing program 1 (id=549): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x25, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(r2, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) acct(&(0x7f0000000040)='./file0\x00') openat$mice(0xffffff9c, &(0x7f0000000040), 0x167342) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) 1.52812814s ago: executing program 0 (id=550): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x40000080) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x90}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) io_setup(0x10000, &(0x7f0000000140)=0x0) io_submit(r3, 0x3, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x100, r0, &(0x7f0000000180)="8901635cb36dc98250af04f74a782738513e850d", 0x14, 0x80000000}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x3, r2, &(0x7f0000000280)="a61ee8e576a88b9ce3ad19ea7e000875214175bfd6537f3bb02103022f7eef55ed578d3d3c4fabb78f8defc7be44744db72b13c6aa5960275f", 0x39, 0x1, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0xfd, r0, &(0x7f0000000340)="86b877c2457309579b785b36935053048e8001e676a4ca403cea499cc008a6068b0c1bb16b60e49111416aec391fc4df47e84e99399459a6b4da3a7c0326ff32c09134f5da824cb25e175e6a0789e6e2ef37f50b49dc9b61d8416fce5604c401c1bc0444d836e88a60", 0x69, 0x7, 0x0, 0x3, r0}]) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.391318378s ago: executing program 2 (id=551): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000200), 0x4) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0xffff, 0x0, 0x4, {[@mss={0x2, 0x4, 0xcbb}]}}}}}}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="e4e5848c02a67603e2f9bcfc1d", 0xd, 0x4000808, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x2, 0x3, 0x2}}, 0x80) ioctl$sock_ifreq(r0, 0xf7, &(0x7f0000000080)={'team_slave_1\x00', @ifru_ivalue=0x4}) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000040)='p') 1.119926669s ago: executing program 3 (id=552): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) openat$zero(0xffffff9c, 0x0, 0x18000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff, 0x13, 0x0, @void}, 0x10) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000140), 0x1001) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20000, 0x0) ioctl$MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x8001) r7 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) 961.375728ms ago: executing program 1 (id=553): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x1e060c80) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x65dfdbfc, 0x10000}, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r4, 0x80106408, &(0x7f0000000280)={0xb, &(0x7f00000001c0)}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e23, 0xe76, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x90) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r5, 0x0, 0x3a, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d77741621473ac658833ca3a65d0cce88271044d28f364b55ad3b", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x18, 0xee, &(0x7f0000003600)="c56a8c847238ff52ad0600"/24, &(0x7f0000000500)="229659ccd6f855f1bd40fd739fa8de0cf1ea3f2f73819162675a1ad240b49256c8b5ad664c93136c96f3edc592119ca3df9a80f378d8a74b6a002cad87c687c57201c01f48a4b96bc64e86aafbe22b123676a913b97292c8b81cb7f354a8bbe56b6801d91ea0f5a62faf0660d63f0f204da7c2eb0ff4276ef0f673fc3e0daa8a6375ae443d958b949236f304d7b7ec3c74a34e82949b401a080000000000000019668bedd2eec7ed2766b9f69557646f981aeb9342e4fbd9ee239c7e20caa8beb6b9a56f39c059b4723325cfee096fe5c09269845ea686525461429559d4b3dcbb5134a83966f6c5c8a85a343480", 0x2, 0x0, 0x3}, 0x50) r6 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000000c0)='./file1\x00') syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 743.506914ms ago: executing program 2 (id=554): close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='configfs\x00', 0xe, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x8818) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 736.807977ms ago: executing program 0 (id=555): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000040)={'system_u:object_r:systemd_notify_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0xd11}, 0x4f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x9f5cb000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x8004, 0x4, 0x221, 0xc1, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0xfffffffd}, 0x50) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r7, 0x0, 0x8000f28, 0x0) r8 = socket(0x1d, 0x2, 0x6) setsockopt$inet_int(r8, 0x6a, 0x16, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010003fc2f6240c40911003806010203010902240001720610060904f0e802b51c800309050102ff03ff10030905ca021000100281183a5ac425ea73c60d54f86a027e129d4ab907a6b7e9ac112d5f247aacc112b6ffbe0d6a471ffe53e281d0fc89ad1799841d80b0d313e2eede83c44d38f50ccb8cff9972cee8e777204c6d5495c3f76a557bad05d11946a138218cb16555ab9abce44045eb480f08758ad426adbb9b9fa8fb75c54751"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2e, &(0x7f0000000100)=@string={0x2e, 0x3, "9422fdcc3b5ebe85b9c3b20006e82a5d436f13744a613460e4d92e888978251a6b67f941a2ee287326d5ef8b"}}, {0xa2, &(0x7f0000000400)=ANY=[@ANYBLOB="a203cbb2d6270a6187bda4f7a4e1028a7a70f9488cf4fc7a11a89d57c6192bb8c87f2fd9a3a8d1ab5798bb84e1be55bb47e2040717df3f93e24750a3c116e7afce7c66347b31094a8bcaa17e4cd3de395125eb7d0bb716934948318ea8545ae3c83d1b3db2be41869f072225d54713944bf8f893519fcd51a72411ff648a256bc409f265b306825f4ecdef74f4b504703f12d9365dd900"/162]}]}) splice(r6, 0x0, r2, 0x0, 0x8, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r9, &(0x7f0000000580)='smaps_rollup\x00') 295.275082ms ago: executing program 4 (id=556): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) ioctl$LOOP_CHANGE_FD(r0, 0x80081272, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendto$inet(r2, &(0x7f00000001c0)="07795cca7bf7", 0x6, 0x20000000, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r3, &(0x7f0000000a80), &(0x7f0000000b40)=""/61}, 0x20) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xf9) r6 = socket$kcm(0x21, 0x2, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x5452, &(0x7f0000000300)) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0x4044454) 41.363075ms ago: executing program 1 (id=557): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x9}, 0x4) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000cc0)={0x34, &(0x7f0000000b00)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0d, &(0x7f0000000040)) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, &(0x7f00000001c0)=@raw=[@ldst={0x0, 0x0, 0x1, 0xa, 0x1, 0x0, 0xffffffffffffffff}, @generic={0x5, 0xc, 0xe, 0xffff, 0x1}], 0x0, 0x4, 0x0, 0x0, 0x1e00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mq_open(0x0, 0x40, 0xa0, &(0x7f0000000140)={0x7, 0x2, 0x1, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x33, 0x0, 0x0) setsockopt$packet_int(r5, 0x107, 0x12, &(0x7f0000000080)=0x10, 0x4) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140)="3c0d25faab", 0x5, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r7, 0x40046210, &(0x7f0000000300)) sendmsg$inet_sctp(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41, 0xc0, 0x200002}}], 0x20, 0x4044}, 0x4804) 0s ago: executing program 4 (id=558): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d800", 0x2}], 0x1}, 0x0) socket$igmp6(0xa, 0x3, 0x2) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x380000, 0x5, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x0, 0xfff, 0xae, 0x5, 0xa, 0xc, 0xfffffffffffff04d, 0x10002, 0x81, 0xbba, 0x0, 0x4000000006, 0x0, 0x100, 0x4, 0x2, 0x21, 0xffffffffffffffff, 0xc, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x2, 0xb, 0x8000000000000000, 0x6, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0x6, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x1000000000000000, 0x5, 0xc0, 0x7, 0x3, 0x6}) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) kernel console output (not intermixed with test programs): 923][ T29] usb 1-1: SerialNumber: syz [ 78.375598][ T5930] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.385219][ T29] hub 1-1:1.0: bad descriptor, ignoring hub [ 78.409805][ T29] hub 1-1:1.0: probe with driver hub failed with error -5 [ 78.469465][ T29] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 78.587687][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 78.599978][ T5704] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.619189][ T5704] usb 4-1: config 0 has no interface number 0 [ 78.631450][ T5704] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 78.677089][ T5704] usb 4-1: config 0 interface 1 has no altsetting 0 [ 78.715694][ T5704] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 78.746735][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.762729][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 78.762745][ T30] audit: type=1400 audit(1783965906.247:277): avc: denied { read write } for pid=5922 comm="syz.1.33" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.786866][ T29] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 78.813256][ T5704] usb 4-1: Product: syz [ 78.826964][ T5704] usb 4-1: Manufacturer: syz [ 78.830933][ T29] usb 1-1: USB disconnect, device number 3 [ 78.849325][ T5704] usb 4-1: SerialNumber: syz [ 78.882437][ T5704] usb 4-1: config 0 descriptor?? [ 78.893957][ T30] audit: type=1400 audit(1783965906.247:278): avc: denied { open } for pid=5922 comm="syz.1.33" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.136348][ T5704] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 79.155899][ T5704] cx231xx 4-1:0.1: Failed to read PCB config [ 79.164010][ T5704] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 79.198780][ T5704] usb 4-1: USB disconnect, device number 3 [ 79.303918][ T30] audit: type=1400 audit(1783965906.787:279): avc: denied { map } for pid=5948 comm="syz.1.41" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.380237][ T30] audit: type=1400 audit(1783965906.817:280): avc: denied { read write } for pid=5948 comm="syz.1.41" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.471403][ T30] audit: type=1400 audit(1783965906.847:281): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.771009][ T5704] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.898489][ T29] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.925086][ T30] audit: type=1400 audit(1783965907.407:282): avc: denied { name_bind } for pid=5959 comm="syz.4.45" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 79.956970][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.979643][ T30] audit: type=1400 audit(1783965907.427:283): avc: denied { name_connect } for pid=5959 comm="syz.4.45" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 80.003880][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 80.010771][ T5704] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 80.019867][ T5704] usb 4-1: config 0 has no interface number 0 [ 80.025986][ T5704] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 80.037093][ T5704] usb 4-1: config 0 interface 1 has no altsetting 0 [ 80.046768][ T5704] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 80.056209][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.064447][ T5704] usb 4-1: Product: syz [ 80.069139][ T5704] usb 4-1: Manufacturer: syz [ 80.073763][ T5704] usb 4-1: SerialNumber: syz [ 80.082740][ T29] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 80.085328][ T5704] usb 4-1: config 0 descriptor?? [ 80.100301][ T5961] netlink: 'syz.4.45': attribute type 1 has an invalid length. [ 80.111172][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.130929][ T29] usb 2-1: Product: syz [ 80.143296][ T29] usb 2-1: Manufacturer: syz [ 80.156813][ T29] usb 2-1: SerialNumber: syz [ 80.157769][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 80.176081][ T9] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 80.195344][ T9] usb 1-1: config 0 has no interface number 0 [ 80.205622][ T9] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.224339][ T9] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 80.239416][ T9] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 80.252018][ T9] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 80.263544][ T9] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 80.277819][ T9] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.288591][ T9] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 80.299071][ T9] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29304, setting to 1024 [ 80.312416][ T9] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 80.340862][ T5704] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 80.352113][ T9] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.370360][ T5704] cx231xx 4-1:0.1: Failed to read PCB config [ 80.376866][ T5704] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 80.397595][ T9] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 80.407566][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.425673][ T5963] TCP: TCP_TX_DELAY enabled [ 80.432746][ T5704] usb 4-1: USB disconnect, device number 4 [ 80.447513][ T9] usb 1-1: Product: syz [ 80.458435][ T9] usb 1-1: Manufacturer: syz [ 80.464661][ T9] usb 1-1: SerialNumber: syz [ 80.500858][ T9] usb 1-1: config 0 descriptor?? [ 80.512641][ T5958] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 80.522722][ T5958] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 80.535513][ T30] audit: type=1400 audit(1783965908.017:284): avc: denied { read write } for pid=5962 comm="syz.2.46" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 80.564667][ T9] usb 1-1: will this work? Response EP is not usually 3 [ 80.575997][ T9] usb 1-1: will this work? Image data EP is not usually 2 [ 80.584351][ T30] audit: type=1400 audit(1783965908.017:285): avc: denied { open } for pid=5962 comm="syz.2.46" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 80.614646][ T9] scsi host1: microtekX6 [ 80.645843][ T30] audit: type=1400 audit(1783965908.017:286): avc: denied { mount } for pid=5965 comm="syz.4.47" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.691450][ T5969] netlink: 96 bytes leftover after parsing attributes in process `syz.2.46'. [ 80.737486][ T29] rtl8150 2-1:1.0: couldn't reset the device [ 80.758556][ T29] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 80.792109][ T29] usb 2-1: USB disconnect, device number 3 [ 80.826002][ T9] usb 1-1: USB disconnect, device number 4 [ 81.080097][ T5984] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.183560][ T24] cfg80211: failed to load regulatory.db [ 81.202616][ T5985] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 81.447717][ T5704] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.551170][ T29] kernel read not supported for file /video9 (pid: 29 comm: kworker/1:1) [ 81.642274][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.656560][ T5704] usb 3-1: Using ep0 maxpacket: 16 [ 81.678163][ T5704] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.700833][ T5704] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.051574][ T5704] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 82.065339][ T5704] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.180328][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 82.189155][ T6011] netlink: 348 bytes leftover after parsing attributes in process `syz.0.58'. [ 82.198909][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 82.207689][ T6011] netlink: 348 bytes leftover after parsing attributes in process `syz.0.58'. [ 82.216958][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 82.597301][ T5704] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 82.598912][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.631165][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.667708][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.681701][ T5704] usb 3-1: config 0 descriptor?? [ 82.682907][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 82.698228][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 82.706969][ T6011] netlink: 348 bytes leftover after parsing attributes in process `syz.0.58'. [ 82.715876][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 82.715884][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.724582][ T6011] netlink: 348 bytes leftover after parsing attributes in process `syz.0.58'. [ 82.725558][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 82.816996][ T24] usb 2-1: config 0 descriptor?? [ 83.036685][ T5994] ALSA: mixer_oss: invalid OSS volume '&xQ-2p2';IfE_' [ 83.068680][ T6029] bond1: entered promiscuous mode [ 83.073984][ T6029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.085022][ T5994] ALSA: mixer_oss: invalid OSS volume '$*HM:XOx|Ni-' [ 83.346616][ T24] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 83.380943][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.411619][ T5270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.421910][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.466550][ T24] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 83.480205][ T5607] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.504918][ T5704] hid (null): unknown global tag 0xdf [ 83.513997][ T5704] hid (null): global environment stack underflow [ 83.533964][ T5704] hid (null): unknown global tag 0xc [ 83.563490][ T5704] hid (null): report_id 1516233401 is invalid [ 83.581191][ T5704] hid (null): unknown global tag 0xe [ 83.594663][ T5704] hid (null): unknown global tag 0x6b [ 83.610409][ T5704] hid (null): unknown global tag 0xe [ 83.639634][ T5607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.647316][ T6052] overlayfs: workdir and upperdir must be separate subtrees [ 83.666122][ T5607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.703377][ T5607] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 83.716169][ T5607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.740813][ T5607] usb 5-1: config 0 descriptor?? [ 83.778699][ T5738] usb 2-1: USB disconnect, device number 4 [ 84.074971][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 84.075012][ T30] audit: type=1400 audit(1783965911.557:320): avc: denied { ioctl } for pid=6056 comm="syz.3.69" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9065 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.124160][ T30] audit: type=1400 audit(1783965911.597:321): avc: denied { create } for pid=6056 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.357087][ T5738] usb 3-1: USB disconnect, device number 2 [ 84.403148][ T5607] usb 5-1: language id specifier not provided by device, defaulting to English [ 84.510452][ T30] audit: type=1400 audit(1783965911.997:322): avc: denied { write } for pid=6059 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 85.006918][ T6071] evm: overlay not supported [ 85.251235][ T30] audit: type=1400 audit(1783965912.487:323): avc: denied { unlink } for pid=6066 comm="syz.0.73" name="#1" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.602521][ T5607] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input6 [ 85.636821][ T30] audit: type=1400 audit(1783965912.487:324): avc: denied { mount } for pid=6066 comm="syz.0.73" name="/" dev="overlay" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 85.663528][ T30] audit: type=1400 audit(1783965912.507:325): avc: denied { execute } for pid=6066 comm="syz.0.73" path="/14/bus/file1" dev="overlay" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.690616][ T30] audit: type=1400 audit(1783965913.117:326): avc: denied { read write } for pid=5605 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.780826][ T30] audit: type=1400 audit(1783965913.117:327): avc: denied { open } for pid=5605 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.836405][ T5607] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input7 [ 85.883379][ T30] audit: type=1400 audit(1783965913.117:328): avc: denied { ioctl } for pid=5605 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.947861][ T5607] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input8 [ 85.992950][ T30] audit: type=1400 audit(1783965913.147:329): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.044837][ T5607] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input9 [ 86.331772][ T5607] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 86.349703][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.359342][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.375781][ T5607] usb 5-1: USB disconnect, device number 3 [ 86.627301][ T6098] bond1: entered promiscuous mode [ 86.632557][ T6098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.694526][ T6094] fido_id[6094]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 86.972873][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.980487][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.520600][ T6111] xt_hashlimit: size too large, truncated to 1048576 [ 88.063572][ T6126] FAULT_INJECTION: forcing a failure. [ 88.063572][ T6126] name failslab, interval 1, probability 0, space 0, times 1 [ 88.076398][ T6126] CPU: 1 UID: 0 PID: 6126 Comm: syz.2.86 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.076425][ T6126] Tainted: [L]=SOFTLOCKUP [ 88.076431][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 88.076440][ T6126] Call Trace: [ 88.076445][ T6126] [ 88.076452][ T6126] dump_stack_lvl+0x100/0x190 [ 88.076478][ T6126] should_fail_ex.cold+0x5/0xa [ 88.076500][ T6126] should_failslab+0xc2/0x120 [ 88.076522][ T6126] __kmalloc_cache_noprof+0x91/0x6c0 [ 88.076547][ T6126] ? __rcu_read_unlock+0x26a/0x5e0 [ 88.076568][ T6126] ? alloc_fs_context+0x57/0xf40 [ 88.076593][ T6126] alloc_fs_context+0x57/0xf40 [ 88.076613][ T6126] ? __get_fs_type+0xe3/0x200 [ 88.076636][ T6126] path_mount+0xdbd/0x23d0 [ 88.076659][ T6126] ? __pfx_path_mount+0x10/0x10 [ 88.076681][ T6126] ? putname+0xb1/0x110 [ 88.076697][ T6126] ? kmem_cache_free+0x127/0x6b0 [ 88.076729][ T6126] ? __x64_sys_mount+0x293/0x310 [ 88.076748][ T6126] __x64_sys_mount+0x293/0x310 [ 88.076768][ T6126] ? __pfx___x64_sys_mount+0x10/0x10 [ 88.076795][ T6126] do_syscall_64+0x115/0x870 [ 88.076821][ T6126] ? clear_bhb_loop+0x40/0x90 [ 88.076842][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.076859][ T6126] RIP: 0033:0x7fd85259de59 [ 88.076874][ T6126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.076890][ T6126] RSP: 002b:00007fd8533b3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.076908][ T6126] RAX: ffffffffffffffda RBX: 00007fd852826180 RCX: 00007fd85259de59 [ 88.076919][ T6126] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 88.076929][ T6126] RBP: 00007fd8533b3090 R08: 0000000000000000 R09: 0000000000000000 [ 88.076939][ T6126] R10: 0000000001000080 R11: 0000000000000246 R12: 0000000000000002 [ 88.076949][ T6126] R13: 00007fd852826218 R14: 00007fd852826180 R15: 00007ffd3a785338 [ 88.076973][ T6126] [ 88.342045][ T6088] infiniband syz1: set active [ 88.368716][ T6088] infiniband syz1: added bond_slave_1 [ 88.501761][ T6088] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 88.545109][ T6088] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 88.569880][ T6088] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 88.659077][ T6088] RDS/IB: syz1: added [ 88.684961][ T6088] smc: adding ib device syz1 with port count 1 [ 88.706883][ T6139] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 89.060196][ T6088] smc: ib device syz1 port 1 has no pnetid [ 89.117711][ T5711] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.281319][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 89.281334][ T30] audit: type=1326 audit(1783965916.767:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz.3.89" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ef99de59 code=0x7ffc0000 [ 89.344358][ T5711] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.354747][ T5711] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 89.380111][ T6147] __nla_validate_parse: 5 callbacks suppressed [ 89.380127][ T6147] netlink: 96 bytes leftover after parsing attributes in process `syz.2.91'. [ 89.390679][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.404994][ T30] audit: type=1326 audit(1783965916.767:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz.3.89" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ef99de59 code=0x7ffc0000 [ 89.474356][ T5711] usb 5-1: config 0 descriptor?? [ 89.501267][ T5711] pwc: Askey VC010 type 2 USB webcam detected. [ 89.902970][ T5711] pwc: recv_control_msg error -71 req 02 val 2b00 [ 89.910725][ T5711] pwc: recv_control_msg error -71 req 02 val 2700 [ 89.918265][ T5711] pwc: recv_control_msg error -71 req 02 val 2c00 [ 89.925093][ T5711] pwc: recv_control_msg error -71 req 04 val 1000 [ 89.931962][ T5711] pwc: recv_control_msg error -71 req 04 val 1300 [ 89.943556][ T5711] pwc: recv_control_msg error -71 req 04 val 1400 [ 89.951308][ T5711] pwc: recv_control_msg error -71 req 02 val 2000 [ 89.958903][ T5711] pwc: recv_control_msg error -71 req 02 val 2100 [ 89.965756][ T5711] pwc: recv_control_msg error -71 req 04 val 1500 [ 89.973961][ T5711] pwc: recv_control_msg error -71 req 02 val 2500 [ 89.983648][ T30] audit: type=1400 audit(1783965917.467:373): avc: denied { bind } for pid=6158 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.009707][ T5711] pwc: recv_control_msg error -71 req 02 val 2400 [ 90.034370][ T5711] pwc: recv_control_msg error -71 req 02 val 2600 [ 90.060486][ T5711] pwc: recv_control_msg error -71 req 02 val 2900 [ 90.070754][ T30] audit: type=1400 audit(1783965917.467:374): avc: denied { setopt } for pid=6158 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.102105][ T5711] pwc: recv_control_msg error -71 req 02 val 2800 [ 90.133287][ T5711] pwc: recv_control_msg error -71 req 04 val 1100 [ 90.158131][ T5711] pwc: recv_control_msg error -71 req 04 val 1200 [ 90.163924][ T6161] Unknown options in mask 5 [ 90.185357][ T5711] pwc: Registered as video103. [ 90.196300][ T30] audit: type=1400 audit(1783965917.677:375): avc: denied { ioctl } for pid=6160 comm="syz.4.97" path="socket:[10007]" dev="sockfs" ino=10007 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.235755][ T5711] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 90.427012][ T5711] usb 5-1: USB disconnect, device number 4 [ 90.604283][ T5738] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.657391][ T6174] xt_hashlimit: size too large, truncated to 1048576 [ 90.843233][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.945529][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.973813][ T5738] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 90.983744][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.023757][ T5738] usb 3-1: config 0 descriptor?? [ 92.230742][ T30] audit: type=1400 audit(1783965919.717:376): avc: denied { write } for pid=6189 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 92.440112][ T5704] Process accounting resumed [ 92.467540][ T6203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6203 comm=syz.3.107 [ 92.486432][ T6203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6203 comm=syz.3.107 [ 92.516788][ T30] audit: type=1400 audit(1783965919.997:377): avc: denied { connect } for pid=6199 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.553936][ T30] audit: type=1400 audit(1783965919.997:378): avc: denied { setopt } for pid=6199 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.654089][ T6200] Process accounting resumed [ 92.906792][ T5738] usbhid 3-1:0.0: can't add hid device: -71 [ 92.945732][ T5738] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 92.992524][ T5738] usb 3-1: USB disconnect, device number 3 [ 93.020461][ T30] audit: type=1400 audit(1783965920.497:379): avc: denied { map } for pid=6214 comm="syz.3.112" path="/dev/video9" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 93.119036][ T30] audit: type=1400 audit(1783965920.497:380): avc: denied { execute } for pid=6214 comm="syz.3.112" path="/dev/video9" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 93.788312][ T6233] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6233 comm=syz.3.115 [ 93.945824][ T6234] xt_hashlimit: size too large, truncated to 1048576 [ 94.040059][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.383709][ T30] audit: type=1400 audit(1783965921.867:381): avc: denied { read write } for pid=6242 comm="syz.3.118" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 94.467175][ T30] audit: type=1400 audit(1783965921.867:382): avc: denied { open } for pid=6242 comm="syz.3.118" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 94.515517][ T30] audit: type=1400 audit(1783965921.907:383): avc: denied { ioctl } for pid=6242 comm="syz.3.118" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 94.579684][ T24] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 94.589905][ T6249] batadv_slave_0: entered promiscuous mode [ 94.612258][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 94.635060][ T6249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.664373][ T30] audit: type=1400 audit(1783965922.147:384): avc: denied { create } for pid=6242 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.749149][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.761082][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 94.774814][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 94.784869][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 94.788215][ T6249] batadv_slave_0 (unregistering): left promiscuous mode [ 94.793095][ T24] usb 2-1: SerialNumber: syz [ 94.817243][ T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 94.833189][ T24] usb-storage 2-1:1.0: USB Mass Storage device detected [ 94.845365][ T24] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 94.850312][ T6249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.861669][ T24] scsi host1: usb-storage 2-1:1.0 [ 95.109632][ T5711] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 95.226109][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.234273][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.250414][ T24] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 95.267429][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 95.319581][ T6261] netlink: 44 bytes leftover after parsing attributes in process `syz.3.122'. [ 95.339404][ T5711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.352716][ T5711] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 95.362164][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.402253][ T6261] bond2: entered promiscuous mode [ 95.408340][ T5711] usb 3-1: Product: syz [ 95.413104][ T6261] bond2: entered allmulticast mode [ 95.413262][ T6260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=6260 comm=syz.3.122 [ 95.418294][ T5711] usb 3-1: Manufacturer: syz [ 95.418311][ T5711] usb 3-1: SerialNumber: syz [ 95.440287][ T30] audit: type=1400 audit(1783965922.917:385): avc: denied { checkpoint_restore } for pid=6259 comm="syz.3.122" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.441802][ T6261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.492790][ T24] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 95.570781][ T24] usb 5-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 95.693508][ T24] usb 5-1: config 0 has no interface number 0 [ 95.744605][ T24] usb 5-1: config 0 interface 214 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 95.872201][ T24] usb 5-1: config 0 interface 214 has no altsetting 0 [ 95.875662][ T5711] usb 3-1: config 0 descriptor?? [ 95.906898][ T24] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 95.932815][ T24] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 95.941824][ T5711] mvusb_mdio 3-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 95.976994][ T24] usb 5-1: Manufacturer: syz [ 95.997960][ T24] usb 5-1: SerialNumber: syz [ 96.006394][ T24] usb 5-1: config 0 descriptor?? [ 96.082111][ T30] audit: type=1400 audit(1783965923.567:386): avc: denied { read } for pid=6270 comm="syz.3.124" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.184884][ T30] audit: type=1400 audit(1783965923.567:387): avc: denied { open } for pid=6270 comm="syz.3.124" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.311021][ T30] audit: type=1400 audit(1783965923.787:388): avc: denied { ioctl } for pid=6272 comm="syz.0.125" path="socket:[11513]" dev="sockfs" ino=11513 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.360744][ T6273] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 96.897220][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 96.983661][ T29] usb 2-1: USB disconnect, device number 5 [ 97.080456][ T6281] netlink: 'syz.1.127': attribute type 2 has an invalid length. [ 97.102222][ T30] audit: type=1400 audit(1783965924.577:389): avc: denied { read write } for pid=6255 comm="syz.4.120" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 97.129370][ T5711] usb 3-1: USB disconnect, device number 4 [ 97.220213][ T6285] FAULT_INJECTION: forcing a failure. [ 97.220213][ T6285] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.243531][ T6285] CPU: 0 UID: 0 PID: 6285 Comm: syz.3.128 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.243561][ T6285] Tainted: [L]=SOFTLOCKUP [ 97.243567][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 97.243577][ T6285] Call Trace: [ 97.243583][ T6285] [ 97.243589][ T6285] dump_stack_lvl+0x100/0x190 [ 97.243616][ T6285] should_fail_ex.cold+0x5/0xa [ 97.243641][ T6285] _copy_from_user+0x2e/0xd0 [ 97.243664][ T6285] copy_msghdr_from_user+0x9f/0x4c0 [ 97.243691][ T6285] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 97.243726][ T6285] ___sys_sendmsg+0x106/0x1e0 [ 97.243751][ T6285] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.243773][ T6285] ? __lock_acquire+0x49f/0x1a40 [ 97.243793][ T6285] ? get_pid_task+0x106/0x250 [ 97.243845][ T6285] __sys_sendmsg+0x160/0x210 [ 97.243864][ T6285] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.243896][ T6285] do_syscall_64+0x115/0x870 [ 97.243920][ T6285] ? clear_bhb_loop+0x40/0x90 [ 97.243942][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.243959][ T6285] RIP: 0033:0x7fc9ef99de59 [ 97.243975][ T6285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.243991][ T6285] RSP: 002b:00007fc9f07f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.244014][ T6285] RAX: ffffffffffffffda RBX: 00007fc9efc25fa0 RCX: 00007fc9ef99de59 [ 97.244025][ T6285] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 97.244035][ T6285] RBP: 00007fc9f07f0090 R08: 0000000000000000 R09: 0000000000000000 [ 97.244045][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.244054][ T6285] R13: 00007fc9efc26038 R14: 00007fc9efc25fa0 R15: 00007ffc4cad59e8 [ 97.244077][ T6285] [ 97.356370][ T30] audit: type=1400 audit(1783965924.577:390): avc: denied { open } for pid=6255 comm="syz.4.120" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 97.576189][ T24] usb 5-1: USB disconnect, device number 5 [ 101.259176][ T5738] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 101.270245][ T5711] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.302459][ T6322] FAULT_INJECTION: forcing a failure. [ 101.302459][ T6322] name failslab, interval 1, probability 0, space 0, times 0 [ 101.315621][ T6322] CPU: 0 UID: 0 PID: 6322 Comm: syz.3.140 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.315649][ T6322] Tainted: [L]=SOFTLOCKUP [ 101.315655][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 101.315664][ T6322] Call Trace: [ 101.315670][ T6322] [ 101.315677][ T6322] dump_stack_lvl+0x100/0x190 [ 101.315703][ T6322] should_fail_ex.cold+0x5/0xa [ 101.315721][ T6322] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 101.315746][ T6322] should_failslab+0xc2/0x120 [ 101.315764][ T6322] kmem_cache_alloc_noprof+0x91/0x6a0 [ 101.315776][ T6322] ? skb_clone+0x190/0x400 [ 101.315788][ T6322] skb_clone+0x190/0x400 [ 101.315799][ T6322] netlink_deliver_tap+0xaed/0xcc0 [ 101.315816][ T6322] netlink_unicast+0x62b/0x850 [ 101.315833][ T6322] ? __pfx_netlink_unicast+0x10/0x10 [ 101.315851][ T6322] netlink_sendmsg+0x8b0/0xda0 [ 101.315868][ T6322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.315884][ T6322] ? selinux_socket_sendmsg+0x198/0x2f0 [ 101.315901][ T6322] ____sys_sendmsg+0xa4d/0xbe0 [ 101.315913][ T6322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.315930][ T6322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.315950][ T6322] ___sys_sendmsg+0x190/0x1e0 [ 101.315965][ T6322] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.315978][ T6322] ? __lock_acquire+0x49f/0x1a40 [ 101.315990][ T6322] ? get_pid_task+0x106/0x250 [ 101.316019][ T6322] __sys_sendmsg+0x160/0x210 [ 101.316030][ T6322] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.316048][ T6322] do_syscall_64+0x115/0x870 [ 101.316063][ T6322] ? clear_bhb_loop+0x40/0x90 [ 101.316076][ T6322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.316087][ T6322] RIP: 0033:0x7fc9ef99de59 [ 101.316097][ T6322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.316106][ T6322] RSP: 002b:00007fc9f07f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.316117][ T6322] RAX: ffffffffffffffda RBX: 00007fc9efc25fa0 RCX: 00007fc9ef99de59 [ 101.316123][ T6322] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000007 [ 101.316129][ T6322] RBP: 00007fc9f07f0090 R08: 0000000000000000 R09: 0000000000000000 [ 101.316135][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.316141][ T6322] R13: 00007fc9efc26038 R14: 00007fc9efc25fa0 R15: 00007ffc4cad59e8 [ 101.316154][ T6322] [ 101.593164][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 101.627693][ T5738] usb 5-1: Using ep0 maxpacket: 32 [ 101.633749][ T5711] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 101.642682][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.653202][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.664664][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.676461][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.685519][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.693354][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.704564][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.713955][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.723778][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.744620][ T5738] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.754810][ T5738] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 101.764122][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.773909][ T5738] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 101.783445][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.797987][ T5738] usb 5-1: Product: syz [ 101.808234][ T5738] usb 5-1: Manufacturer: syz [ 101.817421][ T5738] usb 5-1: SerialNumber: syz [ 101.839352][ T5738] usb 5-1: config 0 descriptor?? [ 101.850953][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.870731][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.886831][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.895713][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.934047][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.946112][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.955165][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 101.964759][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.983544][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.995908][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.016659][ T9] usb 1-1: config 0 descriptor?? [ 102.024324][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.045954][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.074139][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.088867][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.107748][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.127951][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.143014][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.152286][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.163424][ T5738] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 102.187538][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.197546][ T5711] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 102.206889][ T5711] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 102.219707][ T5711] usb 2-1: Product: syz [ 102.223919][ T5711] usb 2-1: Manufacturer: syz [ 102.229005][ T5711] usb 2-1: SerialNumber: syz [ 102.239645][ T5711] usb 2-1: config 0 descriptor?? [ 102.260601][ T5711] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 102.290163][ T6312] xt_connbytes: Forcing CT accounting to be enabled [ 102.302594][ T6334] syzkaller0: entered promiscuous mode [ 102.308397][ T6312] set match dimension is over the limit! [ 102.314141][ T6334] syzkaller0: entered allmulticast mode [ 102.322627][ T6333] unsupported nlmsg_type 40 [ 102.326182][ T6334] tipc: Started in network mode [ 102.332276][ T6334] tipc: Node identity 5e44fdc99477, cluster identity 4711 [ 102.339135][ T5738] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.342482][ T6334] tipc: Enabled bearer , priority 0 [ 102.351777][ T5738] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 102.365866][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.376796][ T6334] tipc: Resetting bearer [ 102.381985][ T5711] usb 5-1: USB disconnect, device number 6 [ 102.390843][ T5738] usb 3-1: Product: syz [ 102.396445][ T5738] usb 3-1: Manufacturer: syz [ 102.401737][ T5738] usb 3-1: SerialNumber: syz [ 102.401919][ T6332] tipc: Resetting bearer [ 102.413628][ T5738] usb 3-1: config 0 descriptor?? [ 102.430735][ T6332] tipc: Disabling bearer [ 102.441813][ T5738] mvusb_mdio 3-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 102.453076][ T9] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 102.465813][ T9] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 102.480253][ T9] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 102.488651][ T9] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 102.496100][ T9] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 102.496599][ T29] usb 2-1: USB disconnect, device number 6 [ 102.521382][ T9] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 102.539590][ T29] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 103.045358][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 103.257693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.663360][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 103.663397][ T30] audit: type=1400 audit(1783965931.147:395): avc: denied { append } for pid=6317 comm="syz.0.138" path="/dev/hidraw0" dev="devtmpfs" ino=2888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.677785][ T6318] playstation 0003:054C:0DF2.0004: pid 6318 passed too large report [ 103.779552][ T9] playstation 0003:054C:0DF2.0004: Failed to retrieve feature with reportID 9: -71 [ 103.807750][ T9] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -71 [ 103.837717][ T9] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense [ 103.852609][ T9] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 103.879208][ T9] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -71 [ 103.969948][ T5711] usb 3-1: USB disconnect, device number 5 [ 104.233370][ T6352] netlink: 32 bytes leftover after parsing attributes in process `syz.1.148'. [ 104.253619][ T6352] bond2: entered promiscuous mode [ 104.258851][ T6352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.709777][ T30] audit: type=1400 audit(1783965932.197:396): avc: denied { write } for pid=6363 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 104.809793][ T30] audit: type=1400 audit(1783965932.297:397): avc: denied { read } for pid=6358 comm="syz.1.149" name="sg0" dev="devtmpfs" ino=818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.851213][ T30] audit: type=1400 audit(1783965932.297:398): avc: denied { open } for pid=6358 comm="syz.1.149" path="/dev/sg0" dev="devtmpfs" ino=818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.951156][ T9] usb 1-1: USB disconnect, device number 5 [ 104.962985][ T30] audit: type=1400 audit(1783965932.297:399): avc: denied { ioctl } for pid=6358 comm="syz.1.149" path="/dev/sg0" dev="devtmpfs" ino=818 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.012273][ T30] audit: type=1400 audit(1783965932.497:400): avc: denied { bind } for pid=6371 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.088171][ T30] audit: type=1400 audit(1783965932.577:401): avc: denied { read write } for pid=6369 comm="syz.0.151" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 105.088543][ T30] audit: type=1400 audit(1783965932.577:402): avc: denied { open } for pid=6369 comm="syz.0.151" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 105.102607][ T30] audit: type=1400 audit(1783965932.587:403): avc: denied { mount } for pid=6369 comm="syz.0.151" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 105.171578][ T30] audit: type=1400 audit(1783965932.647:404): avc: denied { read write } for pid=6369 comm="syz.0.151" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 106.935656][ T6399] EXT4-fs (loop0): unable to read superblock [ 107.240495][ T6356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.387072][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 107.529606][ T6419] netlink: 48 bytes leftover after parsing attributes in process `syz.4.167'. [ 107.658159][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.679783][ T10] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 107.696777][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.705060][ T10] usb 2-1: Product: syz [ 107.715664][ T10] usb 2-1: Manufacturer: syz [ 107.728927][ T10] usb 2-1: SerialNumber: syz [ 108.047703][ T10] usb 2-1: config 0 descriptor?? [ 108.171991][ T6424] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.168'. [ 108.710811][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 108.710838][ T30] audit: type=1400 audit(1783965936.197:418): avc: denied { sqpoll } for pid=6422 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 109.524583][ T10] mvusb_mdio 2-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 109.679306][ T30] audit: type=1400 audit(1783965937.167:419): avc: denied { append } for pid=6422 comm="syz.3.168" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 109.997849][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.045571][ T9] usb 2-1: USB disconnect, device number 7 [ 110.132744][ T6438] autofs: Unknown parameter 'usrquota' [ 110.138951][ T30] audit: type=1400 audit(1783965937.627:420): avc: denied { connect } for pid=6430 comm="syz.0.170" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.169347][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 110.184617][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.204975][ T10] usb 3-1: config 0 descriptor?? [ 110.218284][ T10] cp210x 3-1:0.0: cp210x converter detected [ 110.933850][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 111.070906][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.104015][ T10] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 111.172581][ T10] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 111.196252][ T10] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 111.252692][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 111.306021][ T10] usb 3-1: USB disconnect, device number 6 [ 111.317735][ T807] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.341905][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 111.347710][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 111.368677][ T10] cp210x 3-1:0.0: device disconnected [ 111.467713][ T807] usb 4-1: Using ep0 maxpacket: 32 [ 111.474196][ T807] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.482497][ T807] usb 4-1: config 0 has no interface number 0 [ 111.489122][ T807] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.500378][ T807] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.512020][ T807] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 111.529523][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.558345][ T807] usb 4-1: config 0 descriptor?? [ 111.949778][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.960769][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 111.970419][ T24] usb 1-1: can't read configurations, error -71 [ 112.469365][ T807] ft260 0003:0403:6030.0005: item fetching failed at offset 0/2 [ 112.478218][ T807] ft260 0003:0403:6030.0005: failed to parse HID [ 112.484644][ T807] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -22 [ 112.687134][ T30] audit: type=1400 audit(1783965940.167:421): avc: denied { getopt } for pid=6439 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.775367][ T6476] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 112.907386][ T6478] 8021q: VLANs not supported on lo [ 112.943724][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 113.237793][ T24] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 113.245355][ T807] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 113.400751][ T24] usb 1-1: no configurations [ 113.410149][ T807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.422793][ T24] usb 1-1: can't read configurations, error -22 [ 113.437854][ T24] usb usb1-port1: attempt power cycle [ 113.446914][ T807] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 114.101098][ T24] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 114.420483][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.430652][ T807] usb 3-1: Product: syz [ 114.434874][ T807] usb 3-1: Manufacturer: syz [ 114.439839][ T807] usb 3-1: SerialNumber: syz [ 114.477287][ T5607] usb 4-1: USB disconnect, device number 5 [ 114.494326][ T24] usb 1-1: no configurations [ 114.499145][ T24] usb 1-1: can't read configurations, error -22 [ 114.516525][ T807] usb 3-1: config 0 descriptor?? [ 114.611309][ T807] mvusb_mdio 3-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 114.637882][ T24] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 114.671307][ T24] usb 1-1: no configurations [ 114.676964][ T24] usb 1-1: can't read configurations, error -22 [ 114.685975][ T30] audit: type=1400 audit(1783965942.167:422): avc: denied { write } for pid=6494 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.705869][ T24] usb usb1-port1: unable to enumerate USB device [ 114.732653][ T30] audit: type=1400 audit(1783965942.167:423): avc: denied { setopt } for pid=6494 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 115.137702][ T5711] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.156116][ T24] usb 3-1: USB disconnect, device number 7 [ 115.329635][ T6504] process 'syz.1.191' launched './file0' with NULL argv: empty string added [ 115.360429][ T30] audit: type=1400 audit(1783965942.827:424): avc: denied { execute_no_trans } for pid=6502 comm="syz.1.191" path="/42/file0" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.167542][ T30] audit: type=1400 audit(1783965943.647:425): avc: denied { connect } for pid=6506 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.207783][ T5711] usb 5-1: Using ep0 maxpacket: 8 [ 116.214330][ T5711] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 116.227031][ T5711] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 116.228184][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.192'. [ 116.236361][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.257162][ T5711] usb 5-1: Product: syz [ 116.261442][ T5711] usb 5-1: Manufacturer: syz [ 116.269817][ T5711] usb 5-1: SerialNumber: syz [ 116.286403][ T5711] usb 5-1: config 0 descriptor?? [ 116.303537][ T5711] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 116.312690][ T5711] usb 5-1: setting power ON [ 116.321037][ T5711] dvb-usb: bulk message failed: -22 (2/0) [ 116.348310][ T6515] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6515 comm=syz.3.192 [ 116.361948][ T5711] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.374995][ T5711] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 116.392184][ T5711] usb 5-1: media controller created [ 116.407318][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.438217][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 116.450380][ T5711] usb 5-1: selecting invalid altsetting 6 [ 116.470691][ T5711] usb 5-1: digital interface selection failed (-22) [ 116.485189][ T5711] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 116.494857][ T5711] usb 5-1: setting power OFF [ 116.495378][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'. [ 116.500985][ T5711] dvb-usb: bulk message failed: -22 (2/0) [ 116.519061][ T6500] dvb-usb: bulk message failed: -22 (3/0) [ 116.525610][ T6500] cxusb: i2c wr: len=79 is too big! [ 116.525610][ T6500] [ 116.535341][ T5711] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 116.565293][ T5711] (NULL device *): no alternate interface [ 116.633330][ T5711] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 116.649587][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 116.659705][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 116.678605][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.702641][ T5711] usb 5-1: USB disconnect, device number 7 [ 116.710031][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.729058][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.741541][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.770841][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.783950][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.897718][ T5607] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 117.043267][ T10] usb 3-1: usb_control_msg returned -32 [ 117.049535][ T10] usbtmc 3-1:16.0: can't read capabilities [ 117.059867][ T5607] usb 2-1: Using ep0 maxpacket: 32 [ 117.076626][ T30] audit: type=1400 audit(1783965944.557:426): avc: denied { write } for pid=6537 comm="syz.0.199" name="sg0" dev="devtmpfs" ino=818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.081815][ T5607] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 117.119038][ T5607] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 117.128066][ T5607] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 117.137056][ T5607] usb 2-1: config 1 has no interface number 0 [ 117.143858][ T30] audit: type=1326 audit(1783965944.627:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.0.199" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbb9de59 code=0x0 [ 117.144173][ T5607] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.185127][ T5607] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 117.198345][ T5607] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 117.208062][ T5607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.245555][ T5607] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 117.441092][ T6527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.541220][ T5607] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 117.676992][ T6539] netlink: 80 bytes leftover after parsing attributes in process `syz.2.194'. [ 117.710205][ T6544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.721124][ T30] audit: type=1400 audit(1783965945.197:428): avc: denied { read append } for pid=6552 comm="syz.4.201" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 117.750068][ T30] audit: type=1400 audit(1783965945.197:429): avc: denied { open } for pid=6552 comm="syz.4.201" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 117.774276][ T30] audit: type=1400 audit(1783965945.197:430): avc: denied { ioctl } for pid=6552 comm="syz.4.201" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 117.805979][ T30] audit: type=1400 audit(1783965945.227:431): avc: denied { setopt } for pid=6552 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.969676][ T5613] usb 2-1: USB disconnect, device number 8 [ 117.984858][ T5613] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 118.135766][ T6539] usbtmc 3-1:16.0: stb usb_control_msg returned -32 [ 118.172068][ T5607] usb 3-1: USB disconnect, device number 8 [ 119.032641][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 119.271618][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 119.477837][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.212'. [ 119.523099][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 119.608260][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.212'. [ 119.858275][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 119.858292][ T30] audit: type=1400 audit(1783965947.337:443): avc: denied { read append } for pid=6587 comm="syz.4.213" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 119.952507][ T30] audit: type=1400 audit(1783965947.347:444): avc: denied { open } for pid=6587 comm="syz.4.213" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 120.111847][ T30] audit: type=1400 audit(1783965947.437:445): avc: denied { setopt } for pid=6587 comm="syz.4.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.119685][ T6601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.219'. [ 120.160526][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 120.177284][ T30] audit: type=1400 audit(1783965947.487:446): avc: denied { read } for pid=6590 comm="syz.0.215" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 120.201656][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'. [ 120.217794][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 120.232111][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'. [ 120.241262][ T30] audit: type=1400 audit(1783965947.487:447): avc: denied { open } for pid=6590 comm="syz.0.215" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 120.266061][ T30] audit: type=1400 audit(1783965947.497:448): avc: denied { mount } for pid=6587 comm="syz.4.213" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 120.323021][ T30] audit: type=1400 audit(1783965947.497:449): avc: denied { mounton } for pid=6587 comm="syz.4.213" path="/42/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 120.450510][ T30] audit: type=1400 audit(1783965947.937:450): avc: denied { connect } for pid=6614 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.474280][ T6607] nbd: nbd64 already in use [ 120.637521][ T5631] udevd[5631]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 120.686749][ T6589] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.694347][ T6589] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.747446][ T6589] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.775897][ T6589] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.894645][ T6589] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.902814][ T6589] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.910979][ T6589] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.919122][ T6589] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.926477][ T6589] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.936014][ T6589] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 121.393443][ T6589] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 121.408310][ T6589] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 121.435748][ T6589] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.452234][ T6589] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.467074][ T6589] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.520649][ T30] audit: type=1400 audit(1783965949.007:451): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 121.585468][ T6634] x_tables: duplicate underflow at hook 1 [ 121.728165][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 121.737800][ T5613] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.948763][ T5613] usb 3-1: Using ep0 maxpacket: 16 [ 122.026868][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.040350][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 122.044799][ T5613] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 122.046780][ T10] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 122.061914][ T10] usb 4-1: config 0 has no interface number 0 [ 122.070777][ T10] usb 4-1: config 0 interface 64 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 122.074014][ T5613] usb 3-1: config 4 has no interface number 0 [ 122.088393][ T10] usb 4-1: config 0 interface 64 altsetting 2 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 122.100738][ T10] usb 4-1: config 0 interface 64 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.111912][ T10] usb 4-1: config 0 interface 64 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 122.121900][ T10] usb 4-1: config 0 interface 64 has no altsetting 0 [ 122.137385][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=35.bc [ 122.146792][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.157238][ T10] usb 4-1: Product: syz [ 122.168545][ T10] usb 4-1: Manufacturer: syz [ 122.173500][ T10] usb 4-1: SerialNumber: syz [ 122.182007][ T5613] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 122.222793][ T5613] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 122.223986][ T10] usb 4-1: config 0 descriptor?? [ 122.261646][ T5613] usb 3-1: config 4 interface 51 has no altsetting 0 [ 122.285226][ T5613] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 122.296452][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.305856][ T5613] usb 3-1: Product: syz [ 122.311570][ T5613] usb 3-1: Manufacturer: syz [ 122.316329][ T5613] usb 3-1: SerialNumber: syz [ 122.346264][ T6611] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 122.891097][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.898011][ T6611] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 122.929329][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.931406][ T10] ttusbir 4-1:0.64: cannot find expected altsetting [ 123.009048][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 123.348559][ T10] usb 4-1: USB disconnect, device number 6 [ 123.387511][ T5613] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -71 [ 123.452284][ T6644] Process accounting paused [ 123.460715][ T30] audit: type=1400 audit(1783965950.937:452): avc: denied { read append } for pid=6659 comm="syz.4.233" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 123.490021][ T5613] usb 3-1: USB disconnect, device number 9 [ 123.497558][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.982816][ T6678] syzkaller0: entered promiscuous mode [ 123.988805][ T6678] syzkaller0: entered allmulticast mode [ 124.000400][ T6678] binder: 6677:6678 ioctl 4018620d 0 returned -22 [ 124.067794][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.177701][ T5613] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 124.997711][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.017825][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.097771][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.135113][ T5607] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.161903][ T6686] __nla_validate_parse: 9 callbacks suppressed [ 125.161920][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 125.318243][ T6686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.239'. [ 125.361132][ T5613] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 125.577794][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.855302][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 125.867534][ T5613] usb 2-1: can't read configurations, error -22 [ 125.874684][ T6686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.239'. [ 125.918035][ T5607] usb 4-1: Using ep0 maxpacket: 16 [ 125.930241][ T5607] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 125.939909][ T5607] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.951838][ T5607] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.963092][ T5607] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.975240][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.983913][ T5607] usb 4-1: Product: syz [ 125.988618][ T5607] usb 4-1: Manufacturer: syz [ 125.997743][ T5613] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 126.009214][ T5607] usb 4-1: SerialNumber: syz [ 126.033883][ T5607] usb 4-1: 0:2 : does not exist [ 126.041489][ T6691] netlink: 96 bytes leftover after parsing attributes in process `syz.4.240'. [ 126.096693][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 126.096709][ T30] audit: type=1326 audit(1783965953.577:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6693 comm="syz.0.242" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4dbb9de59 code=0x0 [ 126.130374][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.179636][ T5613] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 126.189797][ T5613] usb 2-1: can't read configurations, error -22 [ 126.197072][ T5613] usb usb2-port1: attempt power cycle [ 126.228666][ T5798] usb 4-1: USB disconnect, device number 7 [ 126.539142][ T5613] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 126.559811][ T5613] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 126.567914][ T5613] usb 2-1: can't read configurations, error -22 [ 126.697713][ T5613] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 126.719932][ T5613] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 126.728184][ T5613] usb 2-1: can't read configurations, error -22 [ 126.736222][ T5613] usb usb2-port1: unable to enumerate USB device [ 126.982965][ T6703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.245'. [ 126.999543][ T30] audit: type=1400 audit(1783965954.487:455): avc: denied { mount } for pid=6696 comm="syz.4.243" name="/" dev="configfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 127.032428][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.103896][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.125899][ T6706] netlink: 32 bytes leftover after parsing attributes in process `syz.0.246'. [ 127.167822][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.199344][ T30] audit: type=1400 audit(1783965954.687:456): avc: denied { append } for pid=6708 comm="syz.2.247" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 127.267206][ T30] audit: type=1400 audit(1783965954.727:457): avc: denied { module_request } for pid=6708 comm="syz.2.247" kmod="net-pf-10-proto-5-type-10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 127.290541][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.299650][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.361604][ T30] audit: type=1400 audit(1783965954.837:458): avc: denied { shutdown } for pid=6711 comm="syz.1.248" laddr=::1 lport=59452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.495348][ T6722] netlink: 48 bytes leftover after parsing attributes in process `syz.1.250'. [ 127.657758][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.976566][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 128.108615][ T6725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.251'. [ 129.823997][ T6730] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.892742][ T6730] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 129.904722][ T30] audit: type=1400 audit(1783965957.387:459): avc: denied { ioctl } for pid=6734 comm="syz.3.254" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 129.953675][ T6302] Bluetooth: hci5: Frame reassembly failed (-84) [ 130.779349][ T30] audit: type=1400 audit(1783965958.247:460): avc: denied { mounton } for pid=6743 comm="syz.0.255" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 130.831984][ T6744] affs: No valid root block on device nullb0 [ 131.072490][ T6754] coredump: 186(syz.3.258): Core dump to core aborted: cannot preserve file permissions [ 131.122304][ T6756] __nla_validate_parse: 3 callbacks suppressed [ 131.122318][ T6756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.259'. [ 131.969616][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 131.976830][ T5621] Bluetooth: hci5: command 0x1003 tx timeout [ 132.058144][ T6759] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 132.265916][ T30] audit: type=1400 audit(1783965959.747:461): avc: denied { mounton } for pid=6758 comm="syz.1.260" path="/59/file0" dev="tmpfs" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.603979][ T30] audit: type=1400 audit(1783965959.747:462): avc: denied { mount } for pid=6758 comm="syz.1.260" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 132.817143][ T30] audit: type=1400 audit(1783965960.297:463): avc: denied { mounton } for pid=6774 comm="syz.2.267" path="/41/file0" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 132.840277][ T6775] 9p: Bad value for 'wfdno' [ 132.884915][ T6780] overlayfs: conflicting lowerdir path [ 132.915554][ T30] audit: type=1400 audit(1783965960.397:464): avc: denied { remount } for pid=6770 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.940449][ T6779] netlink: 96 bytes leftover after parsing attributes in process `syz.3.265'. [ 132.957844][ T30] audit: type=1400 audit(1783965960.447:465): avc: denied { bind } for pid=6777 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.983937][ T30] audit: type=1400 audit(1783965960.467:466): avc: denied { write } for pid=6777 comm="syz.4.268" path="socket:[13554]" dev="sockfs" ino=13554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.071847][ T30] audit: type=1400 audit(1783965960.557:467): avc: denied { ioctl } for pid=6785 comm="syz.4.271" path="socket:[12754]" dev="sockfs" ino=12754 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.098552][ T6786] devpts: Bad value for 'max' [ 133.105213][ T5704] IPVS: starting estimator thread 0... [ 133.197471][ T30] audit: type=1400 audit(1783965960.677:468): avc: denied { write } for pid=6787 comm="syz.2.270" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 133.221764][ T6790] random: crng reseeded on system resumption [ 133.279662][ T6789] IPVS: using max 42 ests per chain, 100800 per kthread [ 134.100074][ T6798] warning: `syz.3.273' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.262975][ T30] audit: type=1400 audit(1783965961.747:469): avc: denied { write } for pid=6803 comm="syz.2.277" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 134.327008][ T30] audit: type=1400 audit(1783965961.747:470): avc: denied { open } for pid=6803 comm="syz.2.277" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 134.505611][ T6816] FAULT_INJECTION: forcing a failure. [ 134.505611][ T6816] name failslab, interval 1, probability 0, space 0, times 0 [ 134.556231][ T6816] CPU: 1 UID: 0 PID: 6816 Comm: syz.2.281 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.556260][ T6816] Tainted: [L]=SOFTLOCKUP [ 134.556266][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 134.556277][ T6816] Call Trace: [ 134.556283][ T6816] [ 134.556290][ T6816] dump_stack_lvl+0x100/0x190 [ 134.556316][ T6816] should_fail_ex.cold+0x5/0xa [ 134.556338][ T6816] should_failslab+0xc2/0x120 [ 134.556359][ T6816] __kmalloc_noprof+0xfc/0x820 [ 134.556377][ T6816] ? rcu_is_watching+0x12/0xc0 [ 134.556403][ T6816] ? tomoyo_realpath_from_path+0xb6/0x690 [ 134.556436][ T6816] tomoyo_realpath_from_path+0xb6/0x690 [ 134.556468][ T6816] tomoyo_path_number_perm+0x23c/0x580 [ 134.556486][ T6816] ? tomoyo_path_number_perm+0x22e/0x580 [ 134.556509][ T6816] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 134.556557][ T6816] ? find_held_lock+0x2b/0x80 [ 134.556582][ T6816] ? __fget_files+0x215/0x3d0 [ 134.556608][ T6816] ? hook_file_ioctl_common+0x140/0x440 [ 134.556630][ T6816] ? __fget_files+0x215/0x3d0 [ 134.556662][ T6816] ? __fget_files+0x21f/0x3d0 [ 134.556693][ T6816] security_file_ioctl+0xd3/0x230 [ 134.556719][ T6816] __x64_sys_ioctl+0xb7/0x210 [ 134.556745][ T6816] do_syscall_64+0x115/0x870 [ 134.556771][ T6816] ? clear_bhb_loop+0x40/0x90 [ 134.556794][ T6816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.556812][ T6816] RIP: 0033:0x7fd85259de59 [ 134.556827][ T6816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.556844][ T6816] RSP: 002b:00007fd8533f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.556861][ T6816] RAX: ffffffffffffffda RBX: 00007fd852825fa0 RCX: 00007fd85259de59 [ 134.556873][ T6816] RDX: 0000200000000040 RSI: 00000000401870cc RDI: 0000000000000004 [ 134.556884][ T6816] RBP: 00007fd8533f5090 R08: 0000000000000000 R09: 0000000000000000 [ 134.556894][ T6816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.556905][ T6816] R13: 00007fd852826038 R14: 00007fd852825fa0 R15: 00007ffd3a785338 [ 134.556930][ T6816] [ 134.556936][ T6816] ERROR: Out of memory at tomoyo_realpath_from_path. [ 134.793231][ T6823] netlink: 96 bytes leftover after parsing attributes in process `syz.0.283'. [ 134.950534][ T6832] netlink: 27 bytes leftover after parsing attributes in process `syz.1.285'. [ 135.009433][ T5711] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 135.415656][ T5711] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 135.425041][ T5711] usb 4-1: can't read configurations, error -71 [ 135.450073][ T6837] Bluetooth: MGMT ver 1.23 [ 135.851716][ T6834] loop5: detected capacity change from 0 to 7 [ 135.861105][ T6834] Dev loop5: unable to read RDB block 7 [ 135.867415][ T6834] loop5: AHDI p1 [ 135.871140][ T6834] loop5: partition table partially beyond EOD, truncated [ 136.269044][ T6843] xt_TPROXY: Can be used only with -p tcp or -p udp [ 137.737824][ T5607] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 138.293014][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 138.293029][ T30] audit: type=1400 audit(1783965965.777:476): avc: denied { view } for pid=6868 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 138.317665][ T5607] usb 3-1: Using ep0 maxpacket: 16 [ 138.362501][ T5607] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.393153][ T5607] usb 3-1: New USB device found, idVendor=7fbd, idProduct=2a66, bcdDevice= 0.00 [ 138.405394][ T29] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.450971][ T5607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.578750][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 138.670383][ T5607] usb 3-1: config 0 descriptor?? [ 138.691607][ T29] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 138.755737][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.815210][ T29] usb 4-1: Product: syz [ 138.853704][ T29] usb 4-1: Manufacturer: syz [ 138.888815][ T29] usb 4-1: SerialNumber: syz [ 139.108269][ T29] usb 4-1: config 0 descriptor?? [ 139.125809][ T29] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 139.189425][ T30] audit: type=1400 audit(1783965966.677:477): avc: denied { ioctl } for pid=6872 comm="syz.1.296" path="socket:[12865]" dev="sockfs" ino=12865 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.351770][ T30] audit: type=1400 audit(1783965966.837:478): avc: denied { write } for pid=6857 comm="syz.2.293" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 139.376841][ T5607] usbhid 3-1:0.0: can't add hid device: -71 [ 139.383153][ T5607] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 139.451918][ T6877] capability: warning: `syz.0.297' uses deprecated v2 capabilities in a way that may be insecure [ 139.479972][ T5622] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 139.495177][ T5607] usb 3-1: USB disconnect, device number 10 [ 139.503786][ T30] audit: type=1400 audit(1783965966.957:479): avc: denied { connect } for pid=6874 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.012732][ T6882] 9p: Bad value for 'rfdno' [ 140.139606][ T6883] netlink: 96 bytes leftover after parsing attributes in process `syz.1.298'. [ 140.387711][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 140.504103][ T6893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=6893 comm=syz.2.302 [ 140.542743][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 140.558506][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.568587][ T9] usb 1-1: Product: syz [ 140.576091][ T9] usb 1-1: Manufacturer: syz [ 140.582528][ T9] usb 1-1: SerialNumber: syz [ 140.878879][ T29] gspca_topro: reg_r err -110 [ 140.888554][ T29] gspca_topro: Sensor soi763a [ 140.930121][ T6906] netlink: 48 bytes leftover after parsing attributes in process `syz.1.305'. [ 140.994419][ T9] rtl8150 1-1:1.0: couldn't reset the device [ 141.001353][ T9] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 141.030063][ T9] usb 1-1: USB disconnect, device number 10 [ 141.105997][ T6909] input: syz1 as /devices/virtual/input/input15 [ 141.129135][ T30] audit: type=1400 audit(1783965968.617:480): avc: denied { read } for pid=4960 comm="acpid" name="event4" dev="devtmpfs" ino=2946 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.159584][ T30] audit: type=1400 audit(1783965968.617:481): avc: denied { open } for pid=4960 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2946 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.328127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.135439][ T5798] usb 4-1: USB disconnect, device number 10 [ 142.141552][ T30] audit: type=1400 audit(1783965968.617:482): avc: denied { ioctl } for pid=4960 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2946 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.466789][ T30] audit: type=1400 audit(1783965969.947:483): avc: denied { create } for pid=6914 comm="syz.3.307" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.796493][ T30] audit: type=1400 audit(1783965970.067:484): avc: denied { write } for pid=6914 comm="syz.3.307" name="file0" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.290427][ T30] audit: type=1400 audit(1783965970.067:485): avc: denied { open } for pid=6914 comm="syz.3.307" path="/68/file0" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.358295][ T30] audit: type=1400 audit(1783965970.117:486): avc: denied { ioctl } for pid=6914 comm="syz.3.307" path="/68/file0" dev="tmpfs" ino=366 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.379244][ T6924] syzkaller0: entered promiscuous mode [ 143.404724][ T30] audit: type=1400 audit(1783965970.877:487): avc: denied { unlink } for pid=5606 comm="syz-executor" name="file0" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.423029][ T6924] syzkaller0: entered allmulticast mode [ 143.483912][ T30] audit: type=1400 audit(1783965970.967:488): avc: denied { create } for pid=6927 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.523644][ T30] audit: type=1400 audit(1783965971.007:489): avc: denied { ioctl } for pid=6927 comm="syz.0.311" path="socket:[12949]" dev="sockfs" ino=12949 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 143.557865][ T30] audit: type=1400 audit(1783965971.007:490): avc: denied { listen } for pid=6927 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.768006][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 143.918262][ T5704] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 143.939108][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 144.006603][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 144.028345][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 144.047906][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.095759][ T30] audit: type=1400 audit(1783965971.567:491): avc: denied { setattr } for pid=6939 comm="syz.1.314" name="midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 144.119626][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.133080][ T6941] comedi comedi3: 8255: I/O base address not correctly aligned [ 144.141476][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.150891][ T30] audit: type=1400 audit(1783965971.567:492): avc: denied { write } for pid=6939 comm="syz.1.314" path="socket:[12962]" dev="sockfs" ino=12962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.174044][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.182324][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 144.194587][ T5704] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 144.206647][ T30] audit: type=1400 audit(1783965971.687:493): avc: denied { watch } for pid=6939 comm="syz.1.314" path="/68/net_prio.prioidx" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.249098][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.249982][ T30] audit: type=1400 audit(1783965971.687:494): avc: denied { watch_sb watch_reads } for pid=6939 comm="syz.1.314" path="/68/net_prio.prioidx" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.283130][ T5704] usb 1-1: config 0 descriptor?? [ 144.308038][ T6934] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 144.447043][ T6930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.470243][ T6944] netlink: 96 bytes leftover after parsing attributes in process `syz.2.315'. [ 144.486288][ T6930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.517327][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 144.554394][ T9] usbtmc 4-1:16.0: can't read capabilities [ 144.735975][ T9] usb 4-1: USB disconnect, device number 11 [ 144.755509][ T5704] hid (null): report_id 0 is invalid [ 144.763487][ T5704] hid (null): bogus close delimiter [ 144.775324][ T5704] hid (null): global environment stack underflow [ 144.793830][ T5704] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 144.804481][ T5704] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 144.807719][ T5613] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 144.813421][ T5704] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 144.828871][ T5704] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 144.840087][ T5704] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 144.849010][ T5704] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 144.857165][ T5704] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 144.865732][ T5704] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 144.873944][ T5704] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 144.882117][ T5704] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 144.891004][ T5704] logitech-djreceiver 0003:046D:C71F.0006: collection stack underflow [ 144.900046][ T5704] logitech-djreceiver 0003:046D:C71F.0006: item 0 0 0 12 parsing failed [ 144.908988][ T5704] logitech-djreceiver 0003:046D:C71F.0006: logi_dj_probe: parse failed [ 144.917299][ T5704] logitech-djreceiver 0003:046D:C71F.0006: probe with driver logitech-djreceiver failed with error -22 [ 144.971452][ T5704] usb 1-1: USB disconnect, device number 11 [ 144.977730][ T5613] usb 2-1: Using ep0 maxpacket: 16 [ 144.992153][ T5613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 145.013609][ T5613] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.037962][ T5613] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 145.057801][ T5613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.079346][ T5613] usb 2-1: config 0 descriptor?? [ 145.427913][ T29] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 145.686712][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.730697][ T5613] hid-picolcd 0003:04D8:C002.0007: bogus close delimiter [ 145.744662][ T6946] random: crng reseeded on system resumption [ 145.756557][ T5613] hid-picolcd 0003:04D8:C002.0007: item 0 2 2 10 parsing failed [ 145.768411][ T29] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 145.778143][ T5613] hid-picolcd 0003:04D8:C002.0007: device report parse failed [ 145.786932][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.809518][ T5613] hid-picolcd 0003:04D8:C002.0007: probe with driver hid-picolcd failed with error -22 [ 145.819841][ T29] usb 3-1: Product: syz [ 145.829286][ T29] usb 3-1: Manufacturer: syz [ 145.844394][ T29] usb 3-1: SerialNumber: syz [ 145.852680][ T5613] usb 2-1: USB disconnect, device number 13 [ 145.975203][ T29] usb 3-1: config 0 descriptor?? [ 146.451929][ T30] audit: type=1400 audit(1783965973.567:495): avc: denied { connect } for pid=6958 comm="syz.4.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.724386][ T29] mvusb_mdio 3-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 147.017680][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 147.651732][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 147.663093][ T9] usb 1-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40 [ 147.674304][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.682582][ T9] usb 1-1: Product: 䃤ꧽ輥遨՛兊ﱂ䒟㴃ⵢ׀塗럭闙땙벨晦꧀폿蠡卐ኜῐ帮柪貂瘴壺皕ᣃ൛䬀핅㶮ᒋ깃腇䶅캨砅鸟詽啅蝖﬚竻挊䷬ൻ鷽嘕ᖩ싓摚淨넜엶ᙹ芴쪴뮢৖࢔鬧؛埵샃̪ꛛ硴麶苚쏦汷ᵊ躙៾쾯裉逐ﻼ剂 [ 147.683341][ T5798] usb 3-1: USB disconnect, device number 11 [ 147.712009][ T9] usb 1-1: Manufacturer: Ы [ 147.733428][ T9] usb 1-1: SerialNumber: 瑃娅﯏╀⒇헙睝䆮Đꭼ⿼ࣉ폆ᛩ洪錫䅹⠭妇蒾ߣ㠜⼡渇ǻ귟្䥾ݷ笚猫ቚꐾ퉞ẩᰂ祥朻祭攔뼚➮批 [ 147.956307][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 148.009862][ T6990] netlink: 44 bytes leftover after parsing attributes in process `syz.1.325'. [ 148.076121][ T6990] bond3: entered promiscuous mode [ 148.090109][ T9] usb 1-1: USB disconnect, device number 12 [ 148.115612][ T6986] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=6986 comm=syz.1.325 [ 148.144919][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 148.195672][ T6990] bond3: entered allmulticast mode [ 148.309093][ T5621] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 148.469902][ T6990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.919667][ T5704] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 149.173035][ T5704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.088368][ T5704] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 150.097821][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.105852][ T5704] usb 3-1: Product: syz [ 150.113849][ T5704] usb 3-1: Manufacturer: syz [ 150.118660][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 150.118804][ T5704] usb 3-1: SerialNumber: syz [ 150.141989][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.336'. [ 150.158891][ T5704] usb 3-1: config 0 descriptor?? [ 150.243582][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 150.258929][ T5794] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.268884][ T5794] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.278192][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.336'. [ 150.399558][ T5794] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.449077][ T5794] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.701079][ T5704] mvusb_mdio 3-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 151.226175][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 151.281629][ T7034] fuse: Bad value for 'fd' [ 151.425841][ T7028] can0: slcan on ptm0. [ 151.442606][ T7034] team0 (unregistering): Port device team_slave_0 removed [ 151.894172][ T7034] team0 (unregistering): Port device team_slave_1 removed [ 151.988263][ T7026] can0 (unregistered): slcan off ptm0. [ 152.037467][ T9] usb 3-1: USB disconnect, device number 12 [ 152.152671][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 152.164081][ T7049] netlink: 96 bytes leftover after parsing attributes in process `syz.4.343'. [ 152.173072][ T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 152.329753][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.440435][ T10] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 152.457705][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.531810][ T10] usb 1-1: Product: syz [ 152.543569][ T10] usb 1-1: Manufacturer: syz [ 152.557425][ T10] usb 1-1: SerialNumber: syz [ 152.588801][ T10] usb 1-1: config 0 descriptor?? [ 152.746099][ T10] mvusb_mdio 1-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 152.815842][ T7060] kAFS: unable to lookup cell '' [ 152.960575][ T7065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.347'. [ 153.350170][ T7069] openvswitch: netlink: Flow key attr not present in new flow. [ 153.484426][ T30] audit: type=1400 audit(1783965980.967:496): avc: denied { connect } for pid=7072 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.606462][ T5798] usb 1-1: USB disconnect, device number 13 [ 153.616050][ T30] audit: type=1400 audit(1783965981.097:497): avc: denied { read append } for pid=7072 comm="syz.2.351" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 153.663262][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'. [ 153.674719][ T30] audit: type=1400 audit(1783965981.097:498): avc: denied { ioctl open } for pid=7072 comm="syz.2.351" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 153.699543][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'. [ 153.719006][ T7088] netlink: 96 bytes leftover after parsing attributes in process `syz.4.355'. [ 153.765206][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.354'. [ 153.779740][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 153.859835][ T5711] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 154.017713][ T5711] usb 3-1: Using ep0 maxpacket: 16 [ 154.030010][ T5711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.052012][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.079717][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.101256][ T5711] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 154.121351][ T5711] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.154028][ T5711] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 154.169432][ T5711] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 154.186213][ T5711] usb 3-1: Manufacturer: syz [ 154.202143][ T5711] usb 3-1: config 0 descriptor?? [ 154.361813][ T7106] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 155.325204][ T7126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 155.339871][ T7126] netlink: 'syz.1.364': attribute type 2 has an invalid length. [ 155.347568][ T7126] netlink: 'syz.1.364': attribute type 2 has an invalid length. [ 155.472445][ T7128] netlink: 96 bytes leftover after parsing attributes in process `syz.3.366'. [ 155.711153][ T5711] rc_core: IR keymap rc-hauppauge not found [ 155.744210][ T7138] wlan0 speed is unknown, defaulting to 1000 [ 155.750667][ T7138] wlan0 speed is unknown, defaulting to 1000 [ 155.763223][ T7138] wlan0 speed is unknown, defaulting to 1000 [ 155.784312][ T7138] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 155.799265][ T7138] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 155.816902][ T7138] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 155.830321][ T7138] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 155.844455][ T7138] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 155.926203][ T7138] wlan0 speed is unknown, defaulting to 1000 [ 155.934742][ T7138] wlan0 speed is unknown, defaulting to 1000 [ 155.942170][ T7138] wlan0 speed is unknown, defaulting to 1000 [ 155.949459][ T7138] wlan0 speed is unknown, defaulting to 1000 [ 155.956889][ T7138] wlan0 speed is unknown, defaulting to 1000 [ 156.251969][ T7139] xt_TPROXY: Can be used only with -p tcp or -p udp [ 156.286389][ T5711] Registered IR keymap rc-empty [ 156.362875][ T7138] smc: removing ib device syz1 [ 156.373809][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 156.401563][ T7138] smbdirect: ib_dev[syz1] removed [ 156.426680][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 156.502087][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 156.672943][ T30] audit: type=1400 audit(1783965984.157:499): avc: denied { create } for pid=7142 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.696289][ T5711] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 157.055448][ T5711] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 157.252015][ T30] audit: type=1400 audit(1783965984.187:500): avc: denied { bind } for pid=7142 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.297835][ T30] audit: type=1400 audit(1783965984.197:501): avc: denied { write } for pid=7142 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.400073][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.477940][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.552879][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.598115][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.651641][ T7155] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 157.932471][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.978025][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.028023][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.039136][ T30] audit: type=1400 audit(1783965985.507:502): avc: denied { firmware_load } for pid=7146 comm="syz.0.372" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 158.087858][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.107924][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.138168][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.185021][ T5711] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 158.212123][ T7147] syz.0.372 (7147) used greatest stack depth: 18472 bytes left [ 158.213817][ T5711] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 158.389662][ T5711] usb 3-1: USB disconnect, device number 13 [ 158.556746][ T7162] fuse: Bad value for 'fd' [ 158.681150][ T7162] team0 (unregistering): Port device team_slave_0 removed [ 158.720364][ T7162] team0 (unregistering): Port device team_slave_1 removed [ 158.789168][ T7169] netlink: 96 bytes leftover after parsing attributes in process `syz.1.377'. [ 159.167827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c4!!! [ 159.217620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 159.337620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 159.397620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 159.457620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 159.517619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 159.577743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 159.697620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 159.817620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 159.960649][ T5711] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 160.182098][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.227653][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.252600][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 160.279355][ T5711] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.314576][ T5711] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.327692][ T30] audit: type=1400 audit(1783965987.797:503): avc: denied { write } for pid=7186 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 160.354726][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.379276][ T5711] usb 3-1: config 0 descriptor?? [ 160.403152][ T7185] netlink: 32 bytes leftover after parsing attributes in process `syz.4.383'. [ 160.601894][ T13] wlan0: Trigger new scan to find an IBSS to join [ 160.698106][ T7185] netlink: 36 bytes leftover after parsing attributes in process `syz.4.383'. [ 160.790010][ T7195] netlink: 'syz.0.385': attribute type 11 has an invalid length. [ 160.829550][ T5711] hid_parser_main: 48 callbacks suppressed [ 160.829586][ T5711] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.849961][ T5711] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.862911][ T5711] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.871614][ T5711] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.880336][ T5711] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.888990][ T5711] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.897259][ T5711] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.906021][ T5711] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.916576][ T5711] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.941057][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'. [ 160.947817][ T5711] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 160.992576][ T5711] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 161.006346][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 161.075702][ T7206] netlink: 96 bytes leftover after parsing attributes in process `syz.3.389'. [ 161.107517][ T7174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.123719][ T30] audit: type=1400 audit(1783965988.607:504): avc: denied { bind } for pid=7208 comm="syz.0.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.153156][ T7174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.194981][ T30] audit: type=1400 audit(1783965988.677:505): avc: denied { mount } for pid=7208 comm="syz.0.390" name="/" dev="hugetlbfs" ino=15565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 161.224026][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 161.255458][ T5798] usb 3-1: USB disconnect, device number 14 [ 161.414957][ T30] audit: type=1400 audit(1783965988.897:506): avc: denied { getopt } for pid=7216 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.440780][ T7218] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 161.698053][ T7224] netlink: 32 bytes leftover after parsing attributes in process `syz.2.395'. [ 161.787465][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 161.803931][ T7224] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 161.876283][ T7224] ip6gretap1: entered promiscuous mode [ 163.140161][ T7246] xt_hashlimit: size too large, truncated to 1048576 [ 164.469850][ T48] wlan0: Trigger new scan to find an IBSS to join [ 167.115804][ T6302] wlan0: Creating new IBSS network, BSSID 9a:e6:bc:b1:f0:02 [ 167.553835][ T7280] netlink: 'syz.0.406': attribute type 1 has an invalid length. [ 167.586176][ T7280] bond2: entered promiscuous mode [ 167.591569][ T7280] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.606157][ T7280] __nla_validate_parse: 1 callbacks suppressed [ 167.606176][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 167.695338][ T30] audit: type=1400 audit(1783965995.177:507): avc: denied { kexec_image_load } for pid=7284 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 167.966540][ T7285] 9p: Bad value for 'wfdno' [ 168.136700][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 169.804103][ T7301] xt_hashlimit: size too large, truncated to 1048576 [ 170.584938][ T30] audit: type=1400 audit(1783965998.067:508): avc: denied { bind } for pid=7318 comm="syz.0.420" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.623942][ T30] audit: type=1400 audit(1783965998.067:509): avc: denied { name_bind } for pid=7318 comm="syz.0.420" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 170.773848][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 171.267395][ T7334] kAFS: unable to lookup cell '' [ 171.425426][ T5621] Bluetooth: hci0: unexpected event for opcode 0x0428 [ 172.362084][ T7345] xt_hashlimit: size too large, truncated to 1048576 [ 172.773125][ T30] audit: type=1400 audit(1783966000.257:510): avc: denied { getopt } for pid=7343 comm="syz.4.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.182716][ T5621] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 173.283588][ T30] audit: type=1400 audit(1783966000.767:511): avc: denied { ioctl } for pid=7357 comm="syz.2.427" path="socket:[15898]" dev="sockfs" ino=15898 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.550581][ T7374] netlink: 'syz.1.431': attribute type 32 has an invalid length. [ 173.560212][ T30] audit: type=1400 audit(1783966001.037:512): avc: denied { bind } for pid=7373 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.608014][ T30] audit: type=1400 audit(1783966001.097:513): avc: denied { setopt } for pid=7373 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.701807][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 173.718776][ T5798] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 174.127728][ T5798] usb 3-1: Using ep0 maxpacket: 16 [ 174.146646][ T5798] usb 3-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 174.177835][ T5798] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.203719][ T5798] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024 [ 174.249761][ T5798] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 174.284214][ T5798] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 174.330890][ T5798] usb 3-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 174.353169][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.381206][ T5798] usb 3-1: Product: syz [ 174.391211][ T5798] usb 3-1: Manufacturer: syz [ 174.404496][ T5798] usb 3-1: SerialNumber: syz [ 174.423838][ T7372] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 174.723790][ T5798] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.747741][ T5798] usb 3-1: MIDIStreaming interface descriptor not found [ 175.259247][ T7405] fuse: Bad value for 'fd' [ 175.270397][ T30] audit: type=1400 audit(1783966002.687:514): avc: denied { write } for pid=7401 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 175.370431][ T5798] usb 3-1: USB disconnect, device number 15 [ 175.476569][ T30] audit: type=1400 audit(1783966002.957:515): avc: denied { mount } for pid=7409 comm="syz.1.440" name="/" dev="ramfs" ino=14868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 175.554128][ T30] audit: type=1804 audit(1783966002.997:516): pid=7410 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.440" name="bus" dev="ramfs" ino=14870 res=1 errno=0 [ 175.617731][ T30] audit: type=1804 audit(1783966003.057:517): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.440" name="bus" dev="ramfs" ino=14870 res=1 errno=0 [ 175.776241][ T7418] xt_hashlimit: size too large, truncated to 1048576 [ 176.052418][ T7419] netlink: 68 bytes leftover after parsing attributes in process `syz.4.442'. [ 176.296403][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 177.061297][ T7456] mmap: syz.2.444 (7456) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 177.086639][ T30] audit: type=1400 audit(1783966004.557:518): avc: denied { write } for pid=7455 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.126278][ T30] audit: type=1400 audit(1783966004.557:519): avc: denied { write } for pid=7455 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 177.369131][ T6366] wlan0: Selected IBSS BSSID 9a:e6:bc:b1:f0:02 based on configured SSID [ 177.612267][ T7481] netlink: 48 bytes leftover after parsing attributes in process `syz.2.462'. [ 181.506446][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 182.085300][ T7494] netlink: 48 bytes leftover after parsing attributes in process `syz.0.468'. [ 182.307083][ T7498] netlink: 96 bytes leftover after parsing attributes in process `syz.1.467'. [ 182.928229][ T5613] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 183.427752][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 183.479907][ T5613] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 183.522819][ T5613] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 183.549404][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.582878][ T5613] usb 3-1: Product: syz [ 183.591219][ T5613] usb 3-1: Manufacturer: syz [ 183.596126][ T5613] usb 3-1: SerialNumber: syz [ 184.370848][ T5613] usb 3-1: USB disconnect, device number 16 [ 186.842594][ T30] audit: type=1400 audit(1783966014.327:520): avc: denied { bind } for pid=7546 comm="syz.0.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 186.889571][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'. [ 186.961937][ T30] audit: type=1400 audit(1783966014.357:521): avc: denied { set_context_mgr } for pid=7548 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 187.130965][ T30] audit: type=1400 audit(1783966014.617:522): avc: denied { create } for pid=7548 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 187.188436][ T7550] binder: 7548:7550 ioctl c0306201 200000000080 returned -14 [ 187.203597][ T30] audit: type=1400 audit(1783966014.657:523): avc: denied { ioctl } for pid=7548 comm="syz.2.479" path="socket:[15129]" dev="sockfs" ino=15129 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 187.272844][ T30] audit: type=1400 audit(1783966014.667:524): avc: denied { bind } for pid=7548 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 187.439386][ T7561] netlink: 96 bytes leftover after parsing attributes in process `syz.3.482'. [ 187.952668][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 187.963351][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.993261][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.695151][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.701842][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.408828][ T5711] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 189.561501][ T7606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7606 comm=syz.3.497 [ 189.577783][ T5711] usb 3-1: device descriptor read/64, error -71 [ 189.592637][ T7604] overlayfs: failed to clone upperpath [ 189.618404][ T7602] netlink: 96 bytes leftover after parsing attributes in process `syz.1.495'. [ 189.842907][ T5711] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 190.013667][ T5711] usb 3-1: device descriptor read/64, error -71 [ 190.075933][ T30] audit: type=1326 audit(1783966017.557:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.4.501" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156f19de59 code=0x7ffc0000 [ 190.143640][ T30] audit: type=1326 audit(1783966017.587:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.4.501" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f156f19de59 code=0x7ffc0000 [ 190.206782][ T5711] usb usb3-port1: attempt power cycle [ 190.229405][ T30] audit: type=1326 audit(1783966017.587:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.4.501" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156f19de59 code=0x7ffc0000 [ 190.291183][ T7626] wlan0 speed is unknown, defaulting to 1000 [ 190.300007][ T30] audit: type=1326 audit(1783966017.587:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.4.501" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f156f19de59 code=0x7ffc0000 [ 190.352841][ T30] audit: type=1326 audit(1783966017.587:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.4.501" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156f19de59 code=0x7ffc0000 [ 190.577795][ T5711] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 190.598705][ T5711] usb 3-1: device descriptor read/8, error -71 [ 190.877781][ T5711] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 190.889519][ T7638] overlayfs: failed to clone upperpath [ 190.920350][ T5711] usb 3-1: device descriptor read/8, error -71 [ 191.048284][ T5711] usb usb3-port1: unable to enumerate USB device [ 191.120864][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'. [ 191.356352][ T7648] netlink: 264 bytes leftover after parsing attributes in process `syz.1.509'. [ 191.379025][ T7648] netlink: 264 bytes leftover after parsing attributes in process `syz.1.509'. [ 191.408316][ T704] wlan0: Trigger new scan to find an IBSS to join [ 191.469322][ T7654] fuse: Bad value for 'fd' [ 191.547531][ T7653] netlink: 96 bytes leftover after parsing attributes in process `syz.4.511'. [ 192.441187][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 192.441204][ T30] audit: type=1400 audit(1783966019.927:556): avc: denied { setopt } for pid=7674 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.962789][ T30] audit: type=1400 audit(1783966020.447:557): avc: denied { ioctl } for pid=7689 comm="syz.4.522" path="socket:[16408]" dev="sockfs" ino=16408 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.058697][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 193.356299][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 193.366295][ T9] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 193.376728][ T9] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 193.386096][ T9] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 193.397458][ T9] usb 3-1: config 129 has no interface number 0 [ 193.404671][ T9] usb 3-1: config 129 has no interface number 1 [ 193.417744][ T9] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 193.450149][ T9] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 193.462671][ T9] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 193.483454][ T9] usb 3-1: config 129 interface 135 has no altsetting 0 [ 193.493244][ T7699] netlink: 96 bytes leftover after parsing attributes in process `syz.3.525'. [ 193.502849][ T9] usb 3-1: config 129 interface 5 has no altsetting 0 [ 193.513234][ T9] usb 3-1: string descriptor 0 read error: -22 [ 193.522929][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 193.544838][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.615055][ T7704] kAFS: unable to lookup cell '' [ 193.626592][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.652599][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 194.093375][ T9] usb 3-1: USB disconnect, device number 21 [ 195.123611][ T30] audit: type=1400 audit(1783966022.607:558): avc: denied { create } for pid=7725 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 195.208078][ T30] audit: type=1400 audit(1783966022.647:559): avc: denied { bind } for pid=7725 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 195.416461][ T36] wlan0: Trigger new scan to find an IBSS to join [ 195.572751][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 195.572770][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 195.620210][ T30] audit: type=1400 audit(1783966023.087:560): avc: denied { read } for pid=7729 comm="syz.1.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 195.939184][ T7738] netlink: 165 bytes leftover after parsing attributes in process `syz.3.535'. [ 196.017849][ T7740] netlink: 96 bytes leftover after parsing attributes in process `syz.4.537'. [ 196.364255][ T5798] IPVS: starting estimator thread 0... [ 196.467723][ T7747] IPVS: using max 42 ests per chain, 100800 per kthread [ 196.492164][ T6366] wlan0: Creating new IBSS network, BSSID 72:87:af:64:26:da [ 198.623760][ T7780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.666119][ T7775] netlink: 96 bytes leftover after parsing attributes in process `syz.1.549'. [ 198.878647][ T7769] 9p: Bad value for 'cachetag' [ 199.064768][ T7787] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 199.073482][ T7787] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 199.083607][ T7787] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 199.098637][ T30] audit: type=1400 audit(1783966026.567:561): avc: denied { firmware_load } for pid=7786 comm="syz.1.553" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 199.916641][ T7787] Process accounting resumed [ 200.073041][ T7807] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.408664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.077571][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 305.084533][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7798/1:b..l P7804/1:b..l [ 305.093977][ C1] rcu: (detected by 1, t=10502 jiffies, g=26789, q=342 ncpus=2) [ 305.101681][ C1] task:syz.1.557 state:R running task stack:26136 pid:7804 tgid:7803 ppid:5605 task_flags:0x400140 flags:0x00080000 [ 305.115614][ C1] Call Trace: [ 305.118887][ C1] [ 305.121811][ C1] __schedule+0x125c/0x6730 [ 305.126314][ C1] ? ring_buffer_unlock_commit+0x2e6/0x6f0 [ 305.132117][ C1] ? trace_event_buffer_commit+0x20a/0xa80 [ 305.137919][ C1] ? __pfx___schedule+0x10/0x10 [ 305.142765][ C1] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 305.150043][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 305.155494][ C1] preempt_schedule_common+0x42/0xc0 [ 305.160774][ C1] preempt_schedule_thunk+0x16/0x40 [ 305.165965][ C1] ? bpf_bprintf_cleanup+0xb5/0xd0 [ 305.171066][ C1] bpf_bprintf_cleanup+0xba/0xd0 [ 305.175993][ C1] bpf_trace_printk+0x11f/0x180 [ 305.180834][ C1] ? __pfx_bpf_trace_printk+0x10/0x10 [ 305.186199][ C1] ? find_held_lock+0x2b/0x80 [ 305.190868][ C1] ? bpf_test_timer_enter+0xf7/0x2b0 [ 305.196147][ C1] ? ktime_get+0x22c/0x320 [ 305.200551][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 305.205745][ C1] ? prandom_u32_state+0x12/0x180 [ 305.210779][ C1] bpf_prog_5a6bbf9be64096ef+0x41/0x4c [ 305.216228][ C1] bpf_flow_dissect+0x21c/0x730 [ 305.221077][ C1] bpf_prog_test_run_flow_dissector+0x438/0x980 [ 305.227321][ C1] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 305.234266][ C1] ? find_held_lock+0x2b/0x80 [ 305.238938][ C1] ? __fget_files+0x215/0x3d0 [ 305.243618][ C1] ? __fget_files+0x21f/0x3d0 [ 305.248301][ C1] ? fput+0x79/0x100 [ 305.252193][ C1] ? __bpf_prog_get+0x97/0x2a0 [ 305.256956][ C1] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 305.263710][ C1] __sys_bpf+0x2a12/0x4e80 [ 305.268138][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 305.272907][ C1] ? find_held_lock+0x2b/0x80 [ 305.277577][ C1] ? futex_wake+0x4ea/0x5e0 [ 305.282086][ C1] ? futex_wait+0x11e/0x370 [ 305.286662][ C1] ? __pfx_futex_wait+0x10/0x10 [ 305.291504][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 305.297405][ C1] ? __x64_sys_futex+0x34f/0x4d0 [ 305.302334][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 305.307268][ C1] ? xfd_validate_state+0x129/0x190 [ 305.312463][ C1] ? __x64_sys_bpf+0xce/0x140 [ 305.317126][ C1] __x64_sys_bpf+0xce/0x140 [ 305.321618][ C1] ? do_syscall_64+0x90/0x870 [ 305.326294][ C1] do_syscall_64+0x115/0x870 [ 305.330877][ C1] ? clear_bhb_loop+0x40/0x90 [ 305.335549][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.341428][ C1] RIP: 0033:0x7f710679de59 [ 305.345832][ C1] RSP: 002b:00007f71049f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.354318][ C1] RAX: ffffffffffffffda RBX: 00007f7106a25fa0 RCX: 00007f710679de59 [ 305.362275][ C1] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 305.370231][ C1] RBP: 00007f7106833e6f R08: 0000000000000000 R09: 0000000000000000 [ 305.378187][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.386146][ C1] R13: 00007f7106a26038 R14: 00007f7106a25fa0 R15: 00007ffe17a6ffe8 [ 305.394119][ C1] [ 305.397123][ C1] task:syz.0.555 state:R running task stack:25256 pid:7798 tgid:7795 ppid:5604 task_flags:0x400140 flags:0x00080001 [ 305.410616][ C1] Call Trace: [ 305.413880][ C1] [ 305.416804][ C1] __schedule+0x125c/0x6730 [ 305.421302][ C1] ? find_held_lock+0x2b/0x80 [ 305.425986][ C1] ? __pfx___schedule+0x10/0x10 [ 305.430832][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 305.437154][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 305.442520][ C1] preempt_schedule_common+0x42/0xc0 [ 305.447799][ C1] preempt_schedule_thunk+0x16/0x40 [ 305.452989][ C1] _raw_spin_unlock+0x3e/0x50 [ 305.457656][ C1] finish_fault+0x8e8/0x1400 [ 305.462256][ C1] do_fault+0xac5/0x1750 [ 305.466494][ C1] __handle_mm_fault+0x187d/0x2a00 [ 305.471610][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 305.476979][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 305.482434][ C1] ? pte_offset_map_lock+0x174/0x320 [ 305.487711][ C1] ? find_held_lock+0x2b/0x80 [ 305.492393][ C1] ? follow_page_pte+0x4d0/0x13f0 [ 305.497414][ C1] handle_mm_fault+0x37b/0xa30 [ 305.502176][ C1] __get_user_pages+0x1178/0x32a0 [ 305.507203][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 305.512574][ C1] populate_vma_page_range+0x267/0x3f0 [ 305.518030][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 305.524000][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 305.529809][ C1] ? do_mmap+0x93f/0x12f0 [ 305.534131][ C1] __mm_populate+0x107/0x3a0 [ 305.538713][ C1] ? __pfx___mm_populate+0x10/0x10 [ 305.543824][ C1] ? up_write+0x2e5/0x5c0 [ 305.548154][ C1] vm_mmap_pgoff+0x37f/0x470 [ 305.552744][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 305.557852][ C1] ? __pfx_do_futex+0x10/0x10 [ 305.562526][ C1] ksys_mmap_pgoff+0xe4/0x610 [ 305.567196][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 305.572128][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 305.577402][ C1] ? xfd_validate_state+0x129/0x190 [ 305.582597][ C1] __x64_sys_mmap+0x125/0x190 [ 305.587271][ C1] do_syscall_64+0x115/0x870 [ 305.591857][ C1] ? clear_bhb_loop+0x40/0x90 [ 305.596525][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.602414][ C1] RIP: 0033:0x7fe4dbb9de59 [ 305.606818][ C1] RSP: 002b:00007fe4dcb02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 305.615221][ C1] RAX: ffffffffffffffda RBX: 00007fe4dbe26180 RCX: 00007fe4dbb9de59 [ 305.623186][ C1] RDX: 0000000001000002 RSI: 0000000000fbe000 RDI: 0000200000000000 [ 305.631140][ C1] RBP: 00007fe4dbc33e6f R08: ffffffffffffffff R09: 0000000000000000 [ 305.639097][ C1] R10: 0000000004012831 R11: 0000000000000246 R12: 0000000000000000 [ 305.647055][ C1] R13: 00007fe4dbe26218 R14: 00007fe4dbe26180 R15: 00007ffebd8ac098 [ 305.655028][ C1] [ 305.658036][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g26789 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 305.670355][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=10007 [ 305.678222][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g26789 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 305.689570][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 305.699521][ C1] rcu: RCU grace-period kthread stack dump: [ 305.705390][ C1] task:rcu_preempt state:I stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 305.717298][ C1] Call Trace: [ 305.720562][ C1] [ 305.723484][ C1] __schedule+0x125c/0x6730 [ 305.728010][ C1] ? __pfx___schedule+0x10/0x10 [ 305.732875][ C1] ? find_held_lock+0x2b/0x80 [ 305.737563][ C1] ? schedule+0x225/0x2c0 [ 305.742289][ C1] schedule+0xdd/0x2c0 [ 305.746370][ C1] schedule_timeout+0x127/0x280 [ 305.751234][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 305.756617][ C1] ? __pfx_process_timeout+0x10/0x10 [ 305.762014][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 305.767829][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 305.773282][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 305.778039][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 305.783317][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 305.788251][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 305.793438][ C1] ? rcu_is_watching+0x12/0xc0 [ 305.798200][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 305.804004][ C1] rcu_gp_kthread+0x179/0x230 [ 305.808677][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 305.813862][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 305.819664][ C1] ? __kthread_parkme+0x18c/0x230 [ 305.824688][ C1] ? kthread+0x13a/0x450 [ 305.828926][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 305.834115][ C1] kthread+0x370/0x450 [ 305.838184][ C1] ? __pfx_kthread+0x10/0x10 [ 305.842788][ C1] ret_from_fork+0x72b/0xd50 [ 305.847373][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 305.852478][ C1] ? __switch_to+0x800/0x10f0 [ 305.857157][ C1] ? __pfx_kthread+0x10/0x10 [ 305.861747][ C1] ret_from_fork_asm+0x1a/0x30 [ 305.866518][ C1] [ 305.869525][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 305.875829][ C1] Sending NMI from CPU 1 to CPUs 0: [ 305.881038][ C0] NMI backtrace for cpu 0 [ 305.881051][ C0] CPU: 0 UID: 0 PID: 7806 Comm: syz.1.557 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.881071][ C0] Tainted: [L]=SOFTLOCKUP [ 305.881075][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 305.881083][ C0] RIP: 0010:__lock_acquire+0x216/0x1a40 [ 305.881100][ C0] Code: 8d 04 80 48 8d 04 80 48 8d 04 c5 e0 4d 6a 96 44 0f b6 88 c4 00 00 00 0f b7 43 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 1a f0 84 14 <0f> 83 a3 05 00 00 48 8d 04 80 48 8d 04 80 48 8d 04 c5 e0 4d 6a 96 [ 305.881112][ C0] RSP: 0018:ffffc90000007c18 EFLAGS: 00000047 [ 305.881125][ C0] RAX: 0000000000000000 RBX: ffff88806a48d648 RCX: 0000000000000000 [ 305.881134][ C0] RDX: 0000000000000000 RSI: ffff88806a48d620 RDI: ffffffff9b95c870 [ 305.881142][ C0] RBP: ffff88806a48ca80 R08: 0000000000000001 R09: 0000000000000002 [ 305.881151][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 305.881159][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 305.881167][ C0] FS: 00007f71049d56c0(0000) GS:ffff888123de8000(0000) knlGS:0000000000000000 [ 305.881182][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.881191][ C0] CR2: 0000000000000000 CR3: 0000000077c62000 CR4: 00000000003526f0 [ 305.881199][ C0] Call Trace: [ 305.881204][ C0] [ 305.881211][ C0] ? __lock_acquire+0x49f/0x1a40 [ 305.881228][ C0] lock_acquire+0x1b9/0x370 [ 305.881241][ C0] ? debug_object_activate+0x144/0x4b0 [ 305.881258][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 305.881274][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 305.881291][ C0] ? debug_object_activate+0x144/0x4b0 [ 305.881305][ C0] debug_object_activate+0x144/0x4b0 [ 305.881321][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 305.881337][ C0] ? do_raw_spin_lock+0x128/0x260 [ 305.881355][ C0] enqueue_hrtimer+0x75/0x2f0 [ 305.881373][ C0] __hrtimer_run_queues+0x6ed/0x9c0 [ 305.881394][ C0] hrtimer_interrupt+0x3e5/0x940 [ 305.881416][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 305.881437][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 305.881456][ C0] [ 305.881460][ C0] [ 305.881465][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 305.881480][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x40/0x90 [ 305.881494][ C0] Code: 48 83 f8 20 74 63 77 48 48 83 f8 08 74 63 41 be 03 00 00 00 48 83 f8 10 75 29 4c 8b 6d 00 31 db 4d 85 ed 74 1e 48 8b 74 dd 10 <48> 8b 4c 24 28 4c 89 e2 4c 89 f7 48 83 c3 01 e8 8c fd ff ff 49 39 [ 305.881506][ C0] RSP: 0018:ffffc90005547b10 EFLAGS: 00000202 [ 305.881517][ C0] RAX: 0000000000000002 RBX: 0000000000000002 RCX: ffffffff821e8737 [ 305.881525][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88806a48ca80 [ 305.881533][ C0] RBP: ffffffff8bd8caa0 R08: 0000000000000005 R09: 0000000000000001 [ 305.881542][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 305.881550][ C0] R13: 0000000000000027 R14: 0000000000000005 R15: ffffc90005547d60 [ 305.881560][ C0] ? __sys_bpf+0x467/0x4e80 [ 305.881583][ C0] __sys_bpf+0x467/0x4e80 [ 305.881601][ C0] ? futex_hash+0x311/0x400 [ 305.881618][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 305.881636][ C0] ? find_held_lock+0x2b/0x80 [ 305.881659][ C0] ? futex_wake+0x4ea/0x5e0 [ 305.881679][ C0] ? futex_private_hash_put+0x115/0x1c0 [ 305.881697][ C0] ? __pfx_futex_wake+0x10/0x10 [ 305.881718][ C0] ? do_getname+0x191/0x390 [ 305.881738][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 305.881755][ C0] ? __x64_sys_futex+0x358/0x4d0 [ 305.881772][ C0] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 305.881788][ C0] ? xfd_validate_state+0x129/0x190 [ 305.881805][ C0] ? __x64_sys_bpf+0xce/0x140 [ 305.881817][ C0] __x64_sys_bpf+0xce/0x140 [ 305.881828][ C0] ? do_syscall_64+0x90/0x870 [ 305.881849][ C0] do_syscall_64+0x115/0x870 [ 305.881866][ C0] ? clear_bhb_loop+0x40/0x90 [ 305.881882][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.881895][ C0] RIP: 0033:0x7f710679de59 [ 305.881906][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.881919][ C0] RSP: 002b:00007f71049d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.881932][ C0] RAX: ffffffffffffffda RBX: 00007f7106a26090 RCX: 00007f710679de59 [ 305.881940][ C0] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 305.881948][ C0] RBP: 00007f7106833e6f R08: 0000000000000000 R09: 0000000000000000 [ 305.881957][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.881965][ C0] R13: 00007f7106a26128 R14: 00007f7106a26090 R15: 00007ffe17a6ffe8 [ 305.881978][ C0]