last executing test programs: 7m8.034415909s ago: executing program 0 (id=348): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xe0ff, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0xe0ff}}], 0x48}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r6, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r6, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 7m3.823284776s ago: executing program 0 (id=371): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0x1, 0x2, &(0x7f00000004c0)=[@cr4={0x1, 0x100404}], 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0xfffffd86}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x1, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb0280000788fb", 0x15}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001880)={'wg0\x00'}) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000f825d90000000100000024000300a05c05006c9c8e3853e2fd7a83d04c6a781ed0d28b70ae0fb20fa152600cb0f744", @ANYBLOB], 0x40}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) 7m2.983960398s ago: executing program 0 (id=375): r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80400) tee(r0, 0xffffffffffffffff, 0x10001, 0x1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x4) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{}, {0x0, "eb7d58bb82d91f1c"}}}}, 0xf) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) r3 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x41, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 7m1.563454608s ago: executing program 0 (id=382): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="05000d000100000008000a00", @ANYRES32=0x0, @ANYBLOB="15000100000000000000e2020000000000000070040000000c000b00000000000000000008000e"], 0x60}}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 7m0.919136899s ago: executing program 0 (id=387): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1bb2512b86180e01, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, 0xfffffffffffffffe) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='task_newtask\x00', r2, 0x0, 0x4}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) mount$9p_xen(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x1, &(0x7f00000002c0)) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r6, 0x5608, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r5, r0, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r7, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="2f0000000020000004000000", @ANYRES32=r8, @ANYBLOB="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"/280, @ANYRES64=0x0], 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) 7m0.018693786s ago: executing program 0 (id=390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="29003300d0980700ffffffffffff080211000000505050505050020004"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x44050) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40880, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x2, 0x4, 0x2) (async, rerun: 32) r7 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x500400, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) 6m57.495148492s ago: executing program 32 (id=390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="29003300d0980700ffffffffffff080211000000505050505050020004"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x44050) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40880, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x2, 0x4, 0x2) (async, rerun: 32) r7 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x500400, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) 5m48.847528868s ago: executing program 1 (id=623): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f000000bb80)=0x7fff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f000000bc80), r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c000000100003040000", @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) bpf$PROG_LOAD(0x5, 0x0, 0x405a51bc3e632e7c) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2, 0x24, &(0x7f0000000080)={0x80, 0x0, 0x5, 0xffff, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x2, 0xdb, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) writev(r1, 0x0, 0x0) unshare(0x6a040000) fsopen(&(0x7f00000043c0)='devpts\x00', 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 5m47.94397704s ago: executing program 1 (id=630): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x80000081, 0xffffffff}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x8001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000028000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="c48a570389e85e8182eab41a2f16", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x400000, 0x14b}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r4, 0x247f6, 0x80ffff, 0x0, 0x0, 0x0) 5m47.065569975s ago: executing program 1 (id=633): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) close(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 5m45.359081631s ago: executing program 1 (id=644): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="15000100000000000000e2020000000000000070040000000c000b00000000000000000008000e", @ANYBLOB], 0x60}}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 5m44.69860884s ago: executing program 1 (id=646): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2c}, 0x28) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={r3, @remote, @rand_addr=0x64010100}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x10, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x7, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) write(r0, &(0x7f0000000080)="76b990069cc4076ba926d5748971c0cfe6eb252676f540a39b0d6faf49687123061e7d4ca3a1240d1f804c42fab6fa640edebd06a314f2dad02a48cc2039421b5025c60c6d36d7a3183cf86033e354b31f222c10b4de98d50cfc979de94f46835d19d87966229c4f937da85ef78ee97933d785", 0x73) 5m42.902449111s ago: executing program 1 (id=649): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b35, &(0x7f0000000040)) 5m42.582564901s ago: executing program 33 (id=649): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b35, &(0x7f0000000040)) 11.339509656s ago: executing program 4 (id=1897): mkdir(&(0x7f0000000080)='./file0\x00', 0xa8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400"], 0x0) inotify_init1(0x80000) r2 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) unshare(0x20000400) pselect6(0x40, &(0x7f0000000180)={0x3, 0x7, 0x100000000, 0x80000000000101, 0x7ff, 0x67, 0x8, 0x3}, 0x0, &(0x7f0000000280)={0xff, 0x8, 0x4, 0x6, 0x9, 0xf, 0x3, 0x7}, &(0x7f00000002c0), 0x0) getpeername$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x20) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000040)=0x80) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xc87b, 0x400, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.615563166s ago: executing program 6 (id=1900): setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) (async) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40041, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb9) (async) fstat(r0, 0x0) (async) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) (async, rerun: 32) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x101) (rerun: 32) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r4, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x8004}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'vcan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x16b5, 0x401, {{0x34, 0x4, 0x2, 0x20, 0xd0, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x24, 0xd9, 0x3, 0xa, [{@broadcast, 0xe}, {@multicast1, 0x7}, {@multicast2, 0xe8d}, {@rand_addr=0x64010100, 0x79d3}]}, @timestamp={0x44, 0x20, 0xba, 0x0, 0x0, [0x5, 0x0, 0x4, 0xb7000000, 0xfffffffe, 0x100, 0x8]}, @rr={0x7, 0x13, 0x40, [@local, @rand_addr=0x64010101, @private=0xa010102, @broadcast]}, @timestamp_prespec={0x44, 0x54, 0x7b, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x4}, {@rand_addr=0x64010102, 0xcacc7d2a}, {@multicast1, 0x5}, {@remote, 0x1}, {@broadcast, 0x9}, {@multicast2, 0x6d7901a2}, {@rand_addr=0x64010100, 0x6e4c}, {@empty, 0x7}, {@local, 0xff}, {@local, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x0, 0xb, "d39217e3735931d302"}]}}}}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 8.097075212s ago: executing program 4 (id=1907): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x10, 0x9}, 0x94) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000140)=0x7, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x40) syz_open_procfs(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) prctl$PR_SET_THP_DISABLE(0x29, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000780)={0xc, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={r3, @in={{0x2, 0x4e22, @empty}}, 0x811e, 0x2, 0xff, 0x5, 0x4a, 0x1, 0x6}, &(0x7f0000000580)=0x9c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000180)="1000000000000000010000000c000000", 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r8, &(0x7f0000000000)=""/42, 0x2a) 7.071758034s ago: executing program 4 (id=1910): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010001000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="850b01000000000014000300070000006563300a000100aaaaaaaaaaaa0000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000000), 0x4) 6.838233798s ago: executing program 6 (id=1911): socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x80, 0x3, 0xb}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x8, 0x0, @fd=r1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) 5.221821891s ago: executing program 6 (id=1916): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r1 = getpgid(0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001300)={0x0}, &(0x7f0000001340)=0xc) statx(0xffffffffffffffff, &(0x7f0000001380)='./file0\x00', 0xa000, 0x100, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = geteuid() stat(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001580)=0x0) getresuid(&(0x7f00000015c0), &(0x7f0000001600)=0x0, &(0x7f0000001640)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001680)=0x0) r12 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r14, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r14, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r15, r16, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001780)={0x10001, 0x6, {r1}, {0x0}, 0x3}) fstat(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000001840)={0x0, 0x0, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000001980)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000240)="9bca90beebcc83063ea7e99c327aa693726a9055f1d9cd215c00600ac41a406ac81998e630e3755a36ec8d5a4bbd4cbc0be0a660fa7b95d1631330ee04708537cee00218167ef3aa5934f9808fa3d9f63891c168b5da08dea21de42587c8d5a3762cc384f8bb398eb675368c4134e485f3438b7924337e7bb4", 0x79}, {&(0x7f00000002c0)="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", 0x1000}], 0x2, &(0x7f0000001880)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r1, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r1, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r1, r13, r16}}}, @cred={{0x1c, 0x1, 0x2, {r1, r17, r18}}}, @rights={{0x18, 0x1, 0x1, [r0, r19]}}], 0xd8, 0x20008800}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x2, &(0x7f0000000040)) r20 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x9c0c2) close_range(r20, 0xffffffffffffffff, 0x0) 4.467516795s ago: executing program 6 (id=1917): mmap(&(0x7f00008b5000/0x1000)=nil, 0x1000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008e8805ab0ac7c795d8b6010203010902120001007c4905f1000000090401000015cc1c00"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000780)=[{0x4, 0x800, 0x0, 0x0}], 0x1}) syz_open_dev$usbfs(0x0, 0x203, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() ptrace$peekuser(0x3, r2, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x300000d, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000dc0)=0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x36, "40f0f8fe9f9c98d0c2d585a705bced38c35a7ef7995d9f8d255fa2f3eff8e288fec18e1077d4165b2ae04463a2852d8eb6c45b662f03"}, &(0x7f0000000100)=0x3e) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x1}}, 0x9, 0x6}, 0x90) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, 0x0) 4.248441079s ago: executing program 5 (id=1918): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x18dc, 0x4, "3be76ca1312c2f84e0960d40dd23cd1a97ff8ef45db27a4d99fa7e693ce358d9", 0x4, 0x7f, 0x84d5, 0x8001, 0x109}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002c40)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)=0x1) write$dsp(r0, &(0x7f0000000000)="81", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@ipv4_newroute={0x20, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x20000050) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x2, 0x0, 0x13, @dev={0xfe, 0x80, '\x00', 0x35}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7, 0x2d5e, 0x6}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x2c, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {0xffff, 0x5}, {0x7, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f00000000c0)=0x9, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.125134403s ago: executing program 5 (id=1919): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_io_uring_setup(0xadc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x5, 0x0, r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.00767386s ago: executing program 5 (id=1920): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc71a6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) socket$isdn(0x22, 0x2, 0x25) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0102"], 0x14}}, 0x80) syz_emit_ethernet(0x6a, &(0x7f0000000580)={@random="856b1200ff00", @local, @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x2, 0x1, 0x1}}, {@ipv6={0x86dd, @dccp_packet={0x6, 0x6, '&_Y', 0x2c, 0x21, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @empty}, {[@fragment={0x32, 0x0, 0x5, 0x0, 0x0, 0x6, 0x66}, @dstopts={0x3a, 0x0, '\x00', [@pad1]}], {{0x4e21, 0x4e21, 0x4, 0x1, 0xc, 0x0, 0x0, 0x1, 0x7, "fbec15", 0x0, "9b07b0"}, "e5a8d83a"}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001000370400000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="9345050001000000180012800900010069706970"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4) 3.782588037s ago: executing program 4 (id=1921): r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a051702fc000000000109022400010000000009040000010300000009210100080122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220700000085a3091f82"], 0x0}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, 'Hic~'}]}}, 0x0}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000010c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r6, 0x3, &(0x7f0000000180)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001001d}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r7, 0x8b2a, &(0x7f0000000040)) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x42d, 0x3, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="02000000300100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB='\b'], 0x48}}, 0x11) syz_usb_control_io(r3, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="310300000000000020000800000008000300", @ANYRES32=r1, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="b74953c7b270099d0d9bff98b9e94219d201c52a386f59ea3e2e418443c109edd161dba508bda78012872a7bf4d91ddbebf4f53dff994de33f7d040332060a5d6b01626c50d55ff56999b4828ce65ba7313d8900ddbab27175713ac0b4a8d8e7f3702e766e25f4bfc5cb12c3d6ade1073f44fed87d0302543df78809000000d4e3f0468a4e00bd0537c1fc2d87b7f1a7851746df9f8b5bffc4b04ecb30551e7ce3a2611dae1343c3f69a2ca267839c4ab6c0f2c178108d6ecfdc1f1f93681f9b57367c68cf5f397c6c514cce18ebb1d6f090caf76d4c"], 0x24}}, 0x0) 3.062150044s ago: executing program 5 (id=1922): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c) prlimit64(0x0, 0x5, &(0x7f00000000c0)={0x8002, 0x1001b7fff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r4, 0x0, 0xffffffff004) 2.766067215s ago: executing program 3 (id=1923): syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e700070122b30409050c0200020103400905df02"], 0x0) r0 = socket$inet6(0xa, 0x3, 0x38) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 2.704274467s ago: executing program 4 (id=1924): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r3 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000100)='./control\x00', 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getpeername(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f00000002c0)='./control\x00') syz_usb_ep_read(r0, 0xf, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000800)=ANY=[@ANYRES32=r0], &(0x7f00000006c0)={0x0, 0x0, 0xc, 0x0}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(0xffffffffffffffff) 2.183824627s ago: executing program 3 (id=1925): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='westwood\x00', 0x9) sendto$inet(r0, &(0x7f0000000080)="a2695dd4b02cb4fd7c6c9b639797b977c6c6736eb01a4e37d489aa80f2096403c9b5e09de77507d59d059abd48bab4329528d171c96851bf46c583d0730b71e340e8abd564ad65350c3dd3e6a5bdf7f3617da0b209d4a3821c94c6d99fc3e5b3b4dc6ceb03615ae0f26a75e50b135791f739dca75c7056ff7adee51326bd79c69b1e238fcd1321b034cf05134e898ddf8d68a82304760f82a0cb38ca851f8bc68f49299bd6c8fe135f37e2fddf0ff2ef30686fd4edef4d4c272258bda962ccd61c1ca5c5f5309e9294d6aad16daa17c28466ac95cb080c10633b42a55689bbc5265bbbe855da", 0xe6, 0x10, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10) memfd_create(&(0x7f0000000240)='westwood\x00', 0x1) 2.183152841s ago: executing program 3 (id=1926): socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x80, 0x3, 0xb}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x8, 0x0, @fd=r1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) 2.102158366s ago: executing program 4 (id=1927): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c) prlimit64(0x0, 0x5, &(0x7f00000000c0)={0x8002, 0x1001b7fff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r4, 0x0, 0xffffffff004) 2.054002788s ago: executing program 3 (id=1928): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$getregs(0xe, 0xffffffffffffffff, 0x33a, &(0x7f00000004c0)=""/215) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) pipe(&(0x7f0000000200)) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000280)=0x4, 0x4) 1.915676033s ago: executing program 2 (id=1929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="003f86dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff0200000000000000000000000000013a0000"], 0xfce) 1.772869659s ago: executing program 5 (id=1930): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x18dc, 0x4, "3be76ca1312c2f84e0960d40dd23cd1a97ff8ef45db27a4d99fa7e693ce358d9", 0x4, 0x7f, 0x84d5, 0x8001, 0x109}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002c40)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)=0x1) write$dsp(r0, &(0x7f0000000000)="81", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@ipv4_newroute={0x20, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x20000050) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x2, 0x0, 0x13, @dev={0xfe, 0x80, '\x00', 0x35}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7, 0x2d5e, 0x6}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x2c, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {0xffff, 0x5}, {0x7, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f00000000c0)=0x9, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.526367534s ago: executing program 2 (id=1931): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[], [], 0x2f}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x7800, 0x1, 0x6, 0x2027, {{0x1b, 0x4, 0x3, 0x8, 0x6c, 0x64, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_addr={0x44, 0x2c, 0xb8, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@rand_addr=0x64010100, 0x9}, {@private=0xa010102, 0x800}, {@multicast2, 0xd}, {@multicast2, 0x401}]}, @noop, @lsrr={0x83, 0x17, 0x35, [@broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2, @multicast2, @multicast1]}, @timestamp_addr={0x44, 0xc, 0xcc, 0x1, 0x6, [{@multicast2, 0x80000001}]}, @rr={0x7, 0x7, 0xa8, [@multicast1]}]}}}}}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) tee(r7, r7, 0x42e8, 0x5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r5, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x37, &(0x7f0000000bc0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp6\x00') preadv(r9, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/104, 0x68}], 0x1, 0x801f, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @generic={0x5, 0x7, 0xc, 0x6, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x40f00, 0x72, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, r8, 0x0, 0x6, &(0x7f0000000f40)=[r0, r9], &(0x7f0000000f80)=[{0x1, 0x2, 0xe, 0x3}, {0x5, 0x4, 0xa, 0xa}, {0x2, 0x2, 0x7, 0x9}, {0x0, 0x1, 0xc, 0x6}, {0x5, 0x3, 0x7, 0x9}, {0x2, 0x5, 0xc, 0x6}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf46242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) 1.055755538s ago: executing program 6 (id=1932): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) 930.452264ms ago: executing program 3 (id=1933): syz_open_dev$char_usb(0xc, 0xb4, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x2d, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x100}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_hsr\x00'}, @TCA_U32_CLASSID={0x0, 0x1, {0xfff1, 0xb}}]}}]}, 0x4c}}, 0x20040054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/uevent_helper', 0x2, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000fffffeff000000000101000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r5 = fcntl$getown(r4, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r5, r3, 0x0, 0x9, &(0x7f00000000c0)='fq_codel\x00'}, 0x30) 926.782976ms ago: executing program 6 (id=1934): mkdir(&(0x7f0000000080)='./file0\x00', 0xa8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400"], 0x0) inotify_init1(0x80000) r2 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) unshare(0x20000400) pselect6(0x40, &(0x7f0000000180)={0x3, 0x7, 0x100000000, 0x80000000000101, 0x7ff, 0x67, 0x8, 0x3}, 0x0, &(0x7f0000000280)={0xff, 0x8, 0x4, 0x6, 0x9, 0xf, 0x3, 0x7}, &(0x7f00000002c0), 0x0) getpeername$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x20) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000040)=0x80) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 869.274824ms ago: executing program 5 (id=1935): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001140)={'wlan0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x5, 0x3, 0x4, 0x5, 0xcc9, 0xf, 0x7, 0xa, 0x0, 0xefb, 0x4, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a449, 0x3, 0x40000007, 0x99, 0xcaa7, 0x4, 0x20001e58, 0x4, 0xe69, 0x3c, 0x8, 0x2, 0x0, 0xfffffff8]}) r6 = gettid() r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, 0x0) tkill(r6, 0xb) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x10, @empty, 0x2}, {0xa, 0x4e23, 0x7ffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20003}, 0xffffffffffffffff, 0x6}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 715.302341ms ago: executing program 2 (id=1936): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x3, 0x3}, 0x6) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x2e, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) 658.6015ms ago: executing program 2 (id=1937): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'multiq3\x00', [0x9e1, 0x2566, 0xfffffffb, 0x2, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x1ff, 0x1, 0x7, 0x0, 0x8, 0x3, 0x9, 0xe, 0x100, 0x1003, 0xff, 0xa, 0x5, 0x1, 0xb0c4, 0x7df, 0x7, 0x400007, 0x1]}) 507.516258ms ago: executing program 2 (id=1938): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r0 = getpid() (async) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)}, 0x8940) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc908ce8cb5049e077f3ba953190a8ce22e", 0x12}], 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000200000008001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r6, &(0x7f0000002540)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) 323.463996ms ago: executing program 3 (id=1939): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="d9620bb35df5a66a86e792bb95c26b1d77ca91a98aee8188776186a5e1b4ea4c95bfa044c6d0a0b0825516bbb9d3927a42b09c8a27765673f4f07489"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) syslog(0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x16) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000008010900000000000000000700000e0900010073797a30000000000600024088a80000050003002f00000014000480"], 0x44}, 0x1, 0x0, 0x0, 0x2000c084}, 0x8c080) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002200)='/sys/fs/cgroup', 0x0, 0x0) 0s ago: executing program 2 (id=1940): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) fanotify_mark(0xffffffffffffffff, 0x400, 0x40000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) ptrace(0x11, r3) read$msr(r0, &(0x7f00000003c0)=""/87, 0x57) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffd75, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfa}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x42, 0x0) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340), &(0x7f00000005c0)) kernel console output (not intermixed with test programs): t(1753836098.560:863): avc: denied { name_connect } for pid=11207 comm="syz.4.1296" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 400.113103][ T9] ath6kl: Failed to read usb control message: -71 [ 400.140848][ T9] ath6kl: Unable to read the bmi data from the device: -71 [ 400.148158][ T9] ath6kl: unable to read target info byte count: -71 [ 400.156097][ T9] ath6kl: Failed to init ath6kl core: -71 [ 400.166064][ T9] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 400.179863][ T9] usb 6-1: USB disconnect, device number 31 [ 400.378549][ T30] audit: type=1400 audit(1753836098.970:864): avc: denied { bind } for pid=11182 comm="syz.6.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 400.489761][ T5889] usb 7-1: USB disconnect, device number 24 [ 400.516132][ T7018] udevd[7018]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.647262][ T30] audit: type=1400 audit(1753836099.240:865): avc: denied { create } for pid=11210 comm="syz.5.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 400.676301][ T30] audit: type=1400 audit(1753836099.270:866): avc: denied { wake_alarm } for pid=11210 comm="syz.5.1297" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 400.728899][ T30] audit: type=1400 audit(1753836099.320:867): avc: denied { ioctl } for pid=11210 comm="syz.5.1297" path="socket:[26996]" dev="sockfs" ino=26996 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 400.887721][ T30] audit: type=1400 audit(1753836099.480:868): avc: denied { create } for pid=11215 comm="syz.4.1299" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 400.908848][ T30] audit: type=1400 audit(1753836099.480:869): avc: denied { mounton } for pid=11215 comm="syz.4.1299" path="/321/file0" dev="tmpfs" ino=1705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 400.956158][T11218] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 400.968781][T11218] overlayfs: missing 'lowerdir' [ 401.320173][ T974] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 401.470207][ T974] usb 7-1: Using ep0 maxpacket: 8 [ 401.476593][ T974] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.509354][ T974] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 401.536808][T11222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11222 comm=syz.5.1303 [ 401.539355][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 401.708463][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 401.720954][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 401.732434][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 401.744367][ T974] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.762080][ T974] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 401.782585][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.791455][ T974] usb 7-1: Product: syz [ 401.795639][ T974] usb 7-1: Manufacturer: syz [ 401.800696][ T974] usb 7-1: SerialNumber: syz [ 401.959127][ T974] usb 7-1: config 0 descriptor?? [ 401.964976][T11220] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 401.999210][ T974] ati_remote 7-1:0.0: Initializing ati_remote hardware failed. [ 402.007044][ T974] ati_remote 7-1:0.0: probe with driver ati_remote failed with error -5 [ 402.798897][ T9] page_pool_release_retry() stalled pool shutdown: id 54, 9 inflight 122 sec [ 402.811572][T11233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1305'. [ 402.864087][ T974] usb 3-1: USB disconnect, device number 47 [ 404.303549][T11220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.312430][T11220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.373754][ T5889] usb 7-1: USB disconnect, device number 25 [ 404.419698][T11254] netlink: 'syz.4.1312': attribute type 10 has an invalid length. [ 404.429837][T11254] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.437162][T11254] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.574110][T11254] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.581343][T11254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.588848][T11254] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.596045][T11254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.608005][T11258] netlink: 'syz.2.1313': attribute type 1 has an invalid length. [ 405.156425][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 405.156437][ T30] audit: type=1400 audit(1753836103.350:879): avc: denied { create } for pid=11253 comm="syz.4.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 405.171118][T11262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1313'. [ 405.192430][ T30] audit: type=1400 audit(1753836103.350:880): avc: denied { bind } for pid=11253 comm="syz.4.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 405.224605][T11254] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 405.291474][T11258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.384909][T11270] batadv_slave_1: entered promiscuous mode [ 405.474435][ T30] audit: type=1400 audit(1753836104.070:881): avc: denied { setopt } for pid=11265 comm="syz.5.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 405.982452][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 405.991758][T11278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.000057][T11278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.046544][T11278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.060655][T11278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.343166][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1318'. [ 406.496197][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.510137][T11283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.610162][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.619442][T11283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.702666][ T30] audit: type=1400 audit(1753836105.221:882): avc: denied { write } for pid=11286 comm="syz.2.1321" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 406.729694][T11289] input: syz0 as /devices/virtual/input/input33 [ 406.759040][ T30] audit: type=1400 audit(1753836105.221:883): avc: denied { open } for pid=11286 comm="syz.2.1321" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 406.840889][ T30] audit: type=1400 audit(1753836105.240:884): avc: denied { ioctl } for pid=11286 comm="syz.2.1321" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 406.898549][ T30] audit: type=1400 audit(1753836105.249:885): avc: denied { read } for pid=5191 comm="acpid" name="js0" dev="devtmpfs" ino=3090 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.923008][ T30] audit: type=1400 audit(1753836105.258:886): avc: denied { open } for pid=5191 comm="acpid" path=2F6465762F696E7075742F6A7330202864656C6574656429 dev="devtmpfs" ino=3090 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.950507][ T5889] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 406.994723][ T30] audit: type=1400 audit(1753836105.483:887): avc: denied { create } for pid=11298 comm="syz.6.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 407.107557][ T30] audit: type=1400 audit(1753836105.520:888): avc: denied { setopt } for pid=11300 comm="syz.2.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 407.250511][T11304] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1323'. [ 407.667182][ T5889] usb 6-1: config 4 has an invalid interface number: 29 but max is 0 [ 407.675713][ T5889] usb 6-1: config 4 has no interface number 0 [ 407.682016][ T5889] usb 6-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 407.693949][ T5889] usb 6-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 407.707356][ T5889] usb 6-1: config 4 interface 29 has no altsetting 0 [ 407.716335][ T5889] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 407.725463][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.733671][ T5889] usb 6-1: Product: syz [ 407.738015][ T5889] usb 6-1: Manufacturer: syz [ 407.742725][ T5889] usb 6-1: SerialNumber: syz [ 407.750066][T11285] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 407.929166][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 407.992993][ T5889] usb 6-1: USB disconnect, device number 32 [ 408.241778][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 408.251196][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.261182][T11312] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.262240][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 408.403743][ T9] usb 3-1: config 1 has no interface number 1 [ 408.409888][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 408.422754][ T9] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 408.455090][T11311] tmpfs: Unknown parameter 'quo' [ 408.463177][T11311] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.470360][T11311] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.477964][T11311] bridge0: entered promiscuous mode [ 408.483202][T11311] bridge0: entered allmulticast mode [ 408.493583][T11311] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.500707][T11311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.508057][T11311] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.515112][T11311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.535765][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.545176][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.554169][ T9] usb 3-1: Product: syz [ 408.559122][ T9] usb 3-1: Manufacturer: syz [ 408.564184][ T9] usb 3-1: SerialNumber: syz [ 408.806948][ T9] usb 3-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 408.814528][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 408.850931][ T9] usb 3-1: USB disconnect, device number 48 [ 408.910903][ T7921] udevd[7921]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.145955][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 409.155663][T11325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.172817][T11325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.207186][T11326] 9pnet_fd: Insufficient options for proto=fd [ 410.324744][T11354] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1340'. [ 410.334840][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1340'. [ 410.420027][ T5889] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 410.452120][ T54] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 410.569698][ T5889] usb 6-1: device descriptor read/64, error -71 [ 410.612417][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 410.618640][ T54] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 410.627797][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.644857][ T54] pvrusb2: Hardware description: Terratec Grabster AV400 [ 410.651917][ T54] pvrusb2: ********** [ 410.657487][ T54] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 410.667702][ T54] pvrusb2: Important functionality might not be entirely working. [ 410.675510][ T54] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 410.686888][ T54] pvrusb2: ********** [ 410.826314][ T5889] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 410.863226][T11350] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1338'. [ 410.875978][ T2337] pvrusb2: Invalid write control endpoint [ 410.883138][ T54] usb 3-1: USB disconnect, device number 49 [ 410.922675][ T2337] pvrusb2: Invalid write control endpoint [ 410.928443][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 410.942779][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 410.965205][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 410.965292][ T5889] usb 6-1: device descriptor read/64, error -71 [ 410.975215][ T2337] pvrusb2: Device being rendered inoperable [ 410.998612][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 411.005906][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 411.021584][ T2337] pvrusb2: Attached sub-driver cx25840 [ 411.038044][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 411.059083][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 411.172371][ T5889] usb usb6-port1: attempt power cycle [ 412.103461][ T5889] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 412.216794][ T5889] usb 6-1: device descriptor read/8, error -71 [ 412.259190][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 412.259202][ T30] audit: type=1400 audit(1753836110.403:910): avc: denied { kexec_image_load } for pid=11372 comm="syz.3.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 412.330499][ T30] audit: type=1400 audit(1753836110.478:911): avc: denied { mount } for pid=11376 comm="syz.2.1347" name="/" dev="overlay" ino=1226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 412.978039][ T5889] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 413.043872][T11381] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 413.050506][T11381] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 413.058265][T11381] vhci_hcd vhci_hcd.0: Device attached [ 413.363178][ T5990] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 413.378495][T11385] vhci_hcd: connection closed [ 413.399590][ T6552] vhci_hcd: stop threads [ 414.201927][ T5889] usb 6-1: device descriptor read/8, error -71 [ 414.203022][ T6552] vhci_hcd: release socket [ 414.227232][ T6552] vhci_hcd: disconnect device [ 414.308894][ T30] audit: type=1400 audit(1753836112.330:912): avc: denied { read } for pid=5501 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 414.333321][ T5889] usb usb6-port1: unable to enumerate USB device [ 414.568755][ T30] audit: type=1400 audit(1753836112.517:913): avc: denied { search } for pid=5501 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.655238][ T30] audit: type=1400 audit(1753836112.601:914): avc: denied { search } for pid=5501 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.709955][ T30] audit: type=1400 audit(1753836112.601:915): avc: denied { search } for pid=5501 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.755563][ T30] audit: type=1400 audit(1753836112.601:916): avc: denied { search } for pid=5501 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.846031][ T30] audit: type=1400 audit(1753836112.601:917): avc: denied { search } for pid=5501 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.867650][ T974] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 414.876520][ T30] audit: type=1400 audit(1753836112.601:918): avc: denied { search } for pid=5501 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.069285][ T974] usb 6-1: device descriptor read/64, error -71 [ 415.234235][ T30] audit: type=1400 audit(1753836112.601:919): avc: denied { read } for pid=5501 comm="dhcpcd" name="n127" dev="tmpfs" ino=5319 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 415.966295][ T974] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 416.128823][ T974] usb 6-1: device descriptor read/64, error -71 [ 416.384980][ T974] usb usb6-port1: attempt power cycle [ 416.674699][T11421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11421 comm=syz.2.1356 [ 416.778688][ T974] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 416.802876][ T974] usb 6-1: device descriptor read/8, error -71 [ 417.059219][ T974] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 417.152263][ T974] usb 6-1: device descriptor read/8, error -71 [ 417.602836][ T974] usb usb6-port1: unable to enumerate USB device [ 417.794622][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 417.794637][ T30] audit: type=1400 audit(1753836115.585:923): avc: denied { create } for pid=11431 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 418.141758][ T974] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 418.161580][ T30] audit: type=1400 audit(1753836115.810:924): avc: denied { bind } for pid=11431 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 418.182948][ T30] audit: type=1400 audit(1753836115.810:925): avc: denied { write } for pid=11431 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 418.524707][ T974] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 418.579253][ T974] usb 6-1: config 0 has no interface number 0 [ 418.591100][ T974] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 418.601342][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.610641][ T974] usb 6-1: Product: syz [ 418.615084][ T974] usb 6-1: Manufacturer: syz [ 418.620899][ T974] usb 6-1: SerialNumber: syz [ 418.633820][ T974] usb 6-1: config 0 descriptor?? [ 418.859109][ T974] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 418.876018][ T974] usb 6-1: USB disconnect, device number 41 [ 419.724791][ T5990] vhci_hcd: vhci_device speed not set [ 419.875419][T11464] pim6reg: entered allmulticast mode [ 419.900463][T11463] pim6reg: left allmulticast mode [ 420.309261][ T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 420.340922][ T5889] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 420.480142][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 420.540704][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.552084][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.562976][ T5889] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.564122][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.576308][ T5889] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 420.613938][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 420.627007][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 420.638006][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.638496][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 420.648103][ T5889] usb 7-1: config 0 descriptor?? [ 420.663783][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 420.697456][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 420.712974][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.740981][ T9] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 420.750688][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.762442][ T9] usb 6-1: Product: syz [ 420.778478][ T9] usb 6-1: Manufacturer: syz [ 420.787365][ T9] usb 6-1: SerialNumber: syz [ 420.800119][ T9] usb 6-1: config 0 descriptor?? [ 420.810076][T11462] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 420.821686][ T9] ati_remote 6-1:0.0: Initializing ati_remote hardware failed. [ 420.835444][ T9] ati_remote 6-1:0.0: probe with driver ati_remote failed with error -5 [ 420.944135][ T5889] usbhid 7-1:0.0: can't add hid device: -71 [ 420.953225][ T5889] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 421.016879][ T5889] usb 7-1: USB disconnect, device number 26 [ 421.184037][T11475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.198702][T11475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.483845][ T54] usb 6-1: USB disconnect, device number 42 [ 421.894111][ T30] audit: type=1400 audit(1753836119.420:926): avc: denied { create } for pid=11483 comm="syz.2.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 422.005623][T11492] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1375'. [ 422.019735][T11487] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1375'. [ 422.105016][ T30] audit: type=1400 audit(1753836119.430:927): avc: denied { setopt } for pid=11483 comm="syz.2.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 422.308017][ T54] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 422.328452][T11495] overlayfs: failed to resolve './file1': -2 [ 422.494866][ T54] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 422.519140][ T54] usb 3-1: config 0 interface 0 has no altsetting 0 [ 422.521562][T11495] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1377'. [ 422.540366][ T54] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 422.543952][ T30] audit: type=1400 audit(1753836120.028:928): avc: denied { getopt } for pid=11494 comm="syz.6.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 422.549851][ T54] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 423.838518][ T30] audit: type=1400 audit(1753836121.151:929): avc: denied { create } for pid=11500 comm="syz.5.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 423.963394][ T30] audit: type=1400 audit(1753836121.160:930): avc: denied { getopt } for pid=11500 comm="syz.5.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 424.104090][ T54] usb 3-1: Product: syz [ 424.110813][ T54] usb 3-1: Manufacturer: syz [ 424.115597][ T54] usb 3-1: SerialNumber: syz [ 424.153250][ T54] usb 3-1: config 0 descriptor?? [ 424.242181][ T54] usb 3-1: selecting invalid altsetting 0 [ 424.532213][T11521] 9pnet_fd: Insufficient options for proto=fd [ 424.596148][ T9] usb 3-1: USB disconnect, device number 50 [ 424.778614][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1381'. [ 425.103438][ T974] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 425.730540][ T9] IPVS: starting estimator thread 0... [ 425.844311][T11511] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1381'. [ 425.906592][ T974] usb 6-1: device descriptor read/64, error -71 [ 425.940579][T11533] IPVS: using max 76 ests per chain, 182400 per kthread [ 426.178104][ T974] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 426.206306][T11541] loop6: detected capacity change from 0 to 524287999 [ 426.400295][ T974] usb 6-1: device descriptor read/64, error -71 [ 426.573994][ T974] usb usb6-port1: attempt power cycle [ 426.691406][ T30] audit: type=1400 audit(1753836123.920:931): avc: denied { read } for pid=11544 comm="syz.2.1387" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 426.710976][T11545] cgroup: fork rejected by pids controller in /syz2 [ 426.937091][ T974] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 426.960234][ T974] usb 6-1: device descriptor read/8, error -71 [ 427.276897][T11555] bridge0: port 3(team0) entered blocking state [ 427.283693][T11555] bridge0: port 3(team0) entered disabled state [ 427.299160][T11555] team0: entered promiscuous mode [ 427.304318][T11555] team_slave_0: entered promiscuous mode [ 427.311876][T11555] team_slave_1: entered promiscuous mode [ 427.925339][ T974] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 428.155724][ T974] usb 6-1: device not accepting address 46, error -71 [ 428.172376][ T974] usb usb6-port1: unable to enumerate USB device [ 428.331359][T11565] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1391'. [ 429.775854][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'. [ 430.022688][T11584] netlink: 'syz.6.1400': attribute type 10 has an invalid length. [ 430.031821][T11584] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.040153][T11584] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.061589][T11584] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.068929][T11584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.076967][T11584] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.084378][T11584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.104096][T11584] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 430.811697][ T30] audit: type=1400 audit(1753836127.764:932): avc: denied { ioctl } for pid=11590 comm="syz-executor" path="socket:[28069]" dev="sockfs" ino=28069 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 430.856714][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.879331][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 430.888168][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 430.897772][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 430.910835][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 430.942121][T11590] lo speed is unknown, defaulting to 1000 [ 430.980522][ T30] audit: type=1400 audit(1753836127.867:933): avc: denied { mounton } for pid=11590 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 431.002341][ T30] audit: type=1400 audit(1753836127.904:934): avc: denied { read write } for pid=11592 comm="syz.6.1402" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 431.026950][ T30] audit: type=1400 audit(1753836127.904:935): avc: denied { open } for pid=11592 comm="syz.6.1402" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 431.168705][T11598] xt_l2tp: missing protocol rule (udp|l2tpip) [ 431.210224][T11598] netlink: 'syz.5.1403': attribute type 4 has an invalid length. [ 431.242183][ T5936] lo speed is unknown, defaulting to 1000 [ 431.251495][T11590] chnl_net:caif_netlink_parms(): no params data found [ 431.284143][T11598] netlink: 'syz.5.1403': attribute type 4 has an invalid length. [ 431.294201][ T5936] syz1: Port: 1 Link DOWN [ 431.319363][ T5936] lo speed is unknown, defaulting to 1000 [ 431.326253][ T5936] syz1: Port: 1 Link ACTIVE [ 431.369743][T11590] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.385247][T11590] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.401632][T11590] bridge_slave_0: entered allmulticast mode [ 431.415670][T11590] bridge_slave_0: entered promiscuous mode [ 431.426553][T11590] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.439371][T11590] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.456422][T11590] bridge_slave_1: entered allmulticast mode [ 431.471454][T11590] bridge_slave_1: entered promiscuous mode [ 431.479442][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1403'. [ 431.532442][T11590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.547785][T11590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.597114][T11590] team0: Port device team_slave_0 added [ 431.605931][T11590] team0: Port device team_slave_1 added [ 431.639717][T11590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.647180][T11590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.673644][T11590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.686680][T11590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.693734][T11590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.720408][T11590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.773781][T11590] hsr_slave_0: entered promiscuous mode [ 431.781582][T11590] hsr_slave_1: entered promiscuous mode [ 431.787968][T11590] debugfs: 'hsr0' already exists in 'hsr' [ 431.804936][T11590] Cannot create hsr debugfs directory [ 431.903947][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1405'. [ 431.940006][T11609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1405'. [ 432.165783][T11620] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 432.181479][T11620] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1406'. [ 432.622945][T11590] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.697049][T11590] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.755143][T11590] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.881686][T11590] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 432.883550][ T5936] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 432.892890][T11590] bridge0: port 3(netdevsim0) entered disabled state [ 432.915582][T11590] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.084465][ T5834] Bluetooth: hci2: command tx timeout [ 433.436916][ T5936] usb 6-1: Using ep0 maxpacket: 32 [ 433.991615][ T5936] usb 6-1: config 0 has an invalid descriptor of length 7, skipping remainder of the config [ 434.001955][ T5936] usb 6-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 434.015466][ T5936] usb 6-1: config 0 interface 0 has no altsetting 0 [ 434.023123][ T5936] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 434.034182][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=22 [ 434.042742][ T5936] usb 6-1: SerialNumber: syz [ 434.150626][ T5936] usb 6-1: config 0 descriptor?? [ 434.164069][ T5936] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 434.190735][T11590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 434.229430][T11590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 434.243448][T11590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 434.253831][T11590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 434.438486][T11590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.490324][T11590] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.501283][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.508423][ T6552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.531460][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.538596][ T6552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.720686][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 434.902796][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 434.917952][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.929281][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 435.017020][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 435.032000][T11590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.058009][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 435.093968][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 435.124903][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 435.139643][T11590] veth0_vlan: entered promiscuous mode [ 435.147750][T11665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.148880][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.157944][T11665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.174416][T11590] veth1_vlan: entered promiscuous mode [ 435.202593][ T24] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 435.212070][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.222845][ T24] usb 7-1: Product: syz [ 435.236426][ T24] usb 7-1: Manufacturer: syz [ 435.246169][ T24] usb 7-1: SerialNumber: syz [ 435.273623][T11590] veth0_macvtap: entered promiscuous mode [ 435.289894][ T24] usb 7-1: config 0 descriptor?? [ 435.298021][ T5834] Bluetooth: hci2: command tx timeout [ 435.307464][T11590] veth1_macvtap: entered promiscuous mode [ 435.329189][ T30] audit: type=1400 audit(1753836131.973:936): avc: denied { execute } for pid=11627 comm="syz.5.1409" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 435.361773][T11654] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 435.406816][ T24] ati_remote 7-1:0.0: Initializing ati_remote hardware failed. [ 435.463371][T11590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.474699][T11590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.504103][ T24] ati_remote 7-1:0.0: probe with driver ati_remote failed with error -5 [ 435.515724][T11590] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.594020][T11590] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.681117][T11590] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.691486][T11590] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.902704][ T6543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.921608][ T6543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.013840][T11654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.022604][T11654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.065526][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.075780][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.094682][ T30] audit: type=1400 audit(1753836132.703:937): avc: denied { mounton } for pid=11590 comm="syz-executor" path="/root/syzkaller.Q8XxBN/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 436.129430][ T30] audit: type=1400 audit(1753836132.703:938): avc: denied { mount } for pid=11590 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 436.225222][ T30] audit: type=1400 audit(1753836132.703:939): avc: denied { mounton } for pid=11590 comm="syz-executor" path="/root/syzkaller.Q8XxBN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 436.306606][T11675] ieee802154 phy0 wpan0: encryption failed: -22 [ 436.317321][ T5983] usb 7-1: USB disconnect, device number 27 [ 436.340113][ T30] audit: type=1400 audit(1753836132.703:940): avc: denied { mounton } for pid=11590 comm="syz-executor" path="/root/syzkaller.Q8XxBN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=29050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 436.417907][ T30] audit: type=1400 audit(1753836132.768:941): avc: denied { mounton } for pid=11590 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 436.444683][T11679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1420'. [ 436.467481][ T30] audit: type=1400 audit(1753836132.768:942): avc: denied { mount } for pid=11590 comm="syz-executor" name="/" dev="gadgetfs" ino=6936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 436.520187][ T30] audit: type=1400 audit(1753836132.768:943): avc: denied { mounton } for pid=11590 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 436.571853][ T30] audit: type=1400 audit(1753836133.040:944): avc: denied { read } for pid=11678 comm="syz.2.1420" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 436.630982][T11689] syz_tun: refused to change device tx_queue_len [ 436.730079][ T30] audit: type=1400 audit(1753836133.189:945): avc: denied { mount } for pid=11682 comm="syz.3.1421" name="/" dev="hugetlbfs" ino=29103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 436.759941][T11689] overlayfs: failed to clone lowerpath [ 436.795146][T11691] tipc: Enabling of bearer rejected, failed to enable media [ 436.819489][ T24] usb 6-1: USB disconnect, device number 47 [ 436.833714][ T30] audit: type=1400 audit(1753836133.189:946): avc: denied { watch watch_reads } for pid=11682 comm="syz.3.1421" path="/358/file0" dev="tmpfs" ino=1898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 436.945000][ T30] audit: type=1400 audit(1753836133.330:947): avc: denied { setopt } for pid=11688 comm="syz.3.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 436.964920][ T30] audit: type=1400 audit(1753836133.330:948): avc: denied { ioctl } for pid=11688 comm="syz.3.1425" path="socket:[29106]" dev="sockfs" ino=29106 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.521431][ T5834] Bluetooth: hci2: command tx timeout [ 438.771409][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 438.781986][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 438.800710][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 438.832061][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 438.847793][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 438.893273][T11737] fuse: Bad value for 'user_id' [ 438.902420][T11738] netlink: 'syz.2.1438': attribute type 13 has an invalid length. [ 438.920477][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 438.924534][T11737] fuse: Bad value for 'user_id' [ 438.941741][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 438.955025][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 438.963051][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.011582][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.028208][ T974] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 439.035974][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.044413][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.052401][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.071219][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.078852][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.101258][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.199131][ T974] usb 6-1: Using ep0 maxpacket: 16 [ 439.226113][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.238448][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.240556][ T974] usb 6-1: config 0 has no interfaces? [ 439.246079][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.246155][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.246225][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.246303][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.246378][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.246450][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.246522][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.246595][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.246668][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.246740][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.246812][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.246889][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.246966][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.247040][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.247105][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.256880][ T974] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 439.351245][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.382414][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.391069][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.456082][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.479419][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.509231][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.524429][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.543986][ T974] usb 6-1: Product: syz [ 439.555120][ T974] usb 6-1: Manufacturer: syz [ 439.563235][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.566656][ T974] usb 6-1: SerialNumber: syz [ 439.607358][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.615634][ T974] usb 6-1: config 0 descriptor?? [ 439.648281][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.661110][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.671355][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.681456][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.690762][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.699741][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.708812][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.718281][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.726509][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.734535][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.742113][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.749700][ T5834] Bluetooth: hci2: command tx timeout [ 439.758413][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.767077][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.774663][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.783473][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.791278][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.799117][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.806622][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.816458][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.825495][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 439.837687][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.845432][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.856416][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.865309][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.874416][T11730] binder: 11729:11730 ioctl c018620c 200000000000 returned -1 [ 439.894068][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 439.913413][ T5834] Bluetooth: hci3: Malformed LE Event: 0x0d [ 440.122259][T11753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.131083][T11753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.246832][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 440.253043][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.263477][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 440.275102][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 440.286063][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 440.297232][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 440.308762][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 440.319386][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.334144][ T9] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 440.348603][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.357725][ T9] usb 3-1: Product: syz [ 440.363097][ T9] usb 3-1: Manufacturer: syz [ 440.367799][ T9] usb 3-1: SerialNumber: syz [ 440.374078][ T9] usb 3-1: config 0 descriptor?? [ 440.379655][T11746] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 440.389868][ T9] ati_remote 3-1:0.0: Initializing ati_remote hardware failed. [ 440.397815][ T9] ati_remote 3-1:0.0: probe with driver ati_remote failed with error -5 [ 441.623595][T11774] FAULT_INJECTION: forcing a failure. [ 441.623595][T11774] name failslab, interval 1, probability 0, space 0, times 0 [ 441.637864][T11774] CPU: 0 UID: 0 PID: 11774 Comm: syz.6.1451 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 441.637880][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.637886][T11774] Call Trace: [ 441.637890][T11774] [ 441.637894][T11774] dump_stack_lvl+0x16c/0x1f0 [ 441.637912][T11774] should_fail_ex+0x512/0x640 [ 441.637925][T11774] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 441.637945][T11774] should_failslab+0xc2/0x120 [ 441.637956][T11774] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 441.637973][T11774] ? __alloc_skb+0x2b2/0x380 [ 441.637988][T11774] __alloc_skb+0x2b2/0x380 [ 441.638000][T11774] ? __pfx___alloc_skb+0x10/0x10 [ 441.638011][T11774] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 441.638028][T11774] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 441.638050][T11774] netlink_alloc_large_skb+0x69/0x130 [ 441.638071][T11774] netlink_sendmsg+0x6a1/0xdd0 [ 441.638089][T11774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.638109][T11774] ____sys_sendmsg+0xa95/0xc70 [ 441.638125][T11774] ? copy_msghdr_from_user+0x10a/0x160 [ 441.638138][T11774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.638160][T11774] ___sys_sendmsg+0x134/0x1d0 [ 441.638173][T11774] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.638185][T11774] ? __lock_acquire+0x622/0x1c90 [ 441.638212][T11774] __sys_sendmsg+0x16d/0x220 [ 441.638224][T11774] ? __pfx___sys_sendmsg+0x10/0x10 [ 441.638246][T11774] do_syscall_64+0xcd/0x4c0 [ 441.638260][T11774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.638270][T11774] RIP: 0033:0x7f663838e9a9 [ 441.638279][T11774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.638290][T11774] RSP: 002b:00007f6639248038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.638300][T11774] RAX: ffffffffffffffda RBX: 00007f66385b5fa0 RCX: 00007f663838e9a9 [ 441.638307][T11774] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 441.638313][T11774] RBP: 00007f6639248090 R08: 0000000000000000 R09: 0000000000000000 [ 441.638318][T11774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.638324][T11774] R13: 0000000000000000 R14: 00007f66385b5fa0 R15: 00007ffde28c3e68 [ 441.638337][T11774] [ 441.942248][ T5936] usb 6-1: USB disconnect, device number 48 [ 441.977025][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.995710][ T9] usb 3-1: USB disconnect, device number 51 [ 442.254713][T11783] loop6: detected capacity change from 0 to 2560 [ 442.272924][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 442.272940][ T30] audit: type=1400 audit(1753836138.484:968): avc: denied { read } for pid=11782 comm="syz.5.1454" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 442.304992][ T7018] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.315735][T11788] netlink: 'syz.4.1455': attribute type 1 has an invalid length. [ 442.325516][T11790] netlink: 'syz.4.1455': attribute type 49 has an invalid length. [ 442.335312][ T7018] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.338993][ T30] audit: type=1400 audit(1753836138.484:969): avc: denied { open } for pid=11782 comm="syz.5.1454" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 442.373653][ T30] audit: type=1400 audit(1753836138.559:970): avc: denied { write } for pid=11786 comm="syz.4.1455" path="socket:[29274]" dev="sockfs" ino=29274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 442.399488][T11788] overlayfs: failed to resolve './bus': -2 [ 442.409643][ T7018] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.419896][ T7018] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.431161][ T7018] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.432383][ T5983] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 442.448765][ T7018] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.456841][ T7018] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.466484][ T7018] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.474451][ T7018] ldm_validate_partition_table(): Disk read failed. [ 442.580558][ T7018] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.589478][ T7018] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.597609][ T7018] Dev loop6: unable to read RDB block 0 [ 442.604659][ T7018] loop6: unable to read partition table [ 443.251059][ T5983] usb 7-1: Using ep0 maxpacket: 16 [ 443.257963][ T5983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 443.277572][ T5983] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 443.290503][ T5983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.452703][ T5983] usb 7-1: Product: syz [ 443.483780][ T5983] usb 7-1: Manufacturer: syz [ 443.595622][ T5983] usb 7-1: SerialNumber: syz [ 443.608394][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'. [ 443.622249][ T5983] usb 7-1: config 0 descriptor?? [ 443.631092][ T5983] hub 7-1:0.0: bad descriptor, ignoring hub [ 443.638322][ T5983] hub 7-1:0.0: probe with driver hub failed with error -5 [ 443.650973][ T5983] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input38 [ 443.739415][ T30] audit: type=1326 audit(1753836139.859:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64b8b2ab89 code=0x7ffc0000 [ 443.784925][ T30] audit: type=1326 audit(1753836139.859:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b8b8e9a9 code=0x7ffc0000 [ 444.344886][ T30] audit: type=1326 audit(1753836139.859:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64b8b2ab89 code=0x7ffc0000 [ 444.362957][ T974] page_pool_release_retry() stalled pool shutdown: id 39, 35 inflight 244 sec [ 445.351651][ T30] audit: type=1326 audit(1753836139.859:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b8b8e9a9 code=0x7ffc0000 [ 445.484303][ T54] usb 7-1: USB disconnect, device number 28 [ 445.570787][ T30] audit: type=1326 audit(1753836139.859:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b8b8e9a9 code=0x7ffc0000 [ 445.593560][T11819] netlink: 'syz.3.1462': attribute type 1 has an invalid length. [ 445.603803][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 445.828678][ T30] audit: type=1326 audit(1753836139.859:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64b8b2ab89 code=0x7ffc0000 [ 445.852133][ T30] audit: type=1326 audit(1753836139.859:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b8b8e9a9 code=0x7ffc0000 [ 446.351178][ T54] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 446.563620][ T54] usb 7-1: Using ep0 maxpacket: 8 [ 446.614967][ T54] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.750763][ T54] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 446.775433][T11827] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11827 comm=syz.5.1465 [ 446.969663][T11827] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1465'. [ 447.221097][ T54] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 447.230344][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.242548][ T54] usb 7-1: Product: syz [ 447.246839][ T54] usb 7-1: Manufacturer: syz [ 447.251854][ T54] usb 7-1: SerialNumber: syz [ 447.258428][ T54] usb 7-1: config 0 descriptor?? [ 447.268593][ T54] powermate 7-1:0.0: probe with driver powermate failed with error -22 [ 447.405190][T11833] loop6: detected capacity change from 0 to 524287999 [ 447.894957][ T30] kauditd_printk_skb: 506 callbacks suppressed [ 447.894974][ T30] audit: type=1400 audit(1753836143.741:1484): avc: denied { shutdown } for pid=11834 comm="syz.4.1468" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 448.468001][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 448.715710][ T24] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 448.737497][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.758353][ T24] usb 3-1: config 0 descriptor?? [ 449.230344][T11842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.256367][T11842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.273491][ T24] usb 3-1: Cannot read MAC address [ 449.288812][ T24] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 449.290435][ T974] usb 7-1: USB disconnect, device number 29 [ 449.312293][ T24] usb 3-1: USB disconnect, device number 52 [ 449.524396][ T30] audit: type=1400 audit(1753836145.265:1485): avc: denied { setopt } for pid=11853 comm="syz.3.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 449.640310][ T30] audit: type=1400 audit(1753836145.378:1486): avc: denied { map } for pid=11856 comm="syz.6.1474" path="socket:[29801]" dev="sockfs" ino=29801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 450.796052][ T30] audit: type=1400 audit(1753836146.453:1487): avc: denied { ioctl } for pid=11869 comm="syz.2.1478" path="/dev/sg0" dev="devtmpfs" ino=773 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 451.023064][ T5983] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 452.112643][ T5983] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 452.122030][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.146705][ T5983] usb 6-1: config 0 descriptor?? [ 452.610605][T11889] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1484'. [ 452.625553][T11889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.636017][ T30] audit: type=1400 audit(1753836148.175:1488): avc: denied { audit_write } for pid=11895 comm="syz.4.1485" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 452.681418][ T30] audit: type=1107 audit(1753836148.193:1489): pid=11895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='gÕÖ\D„V~>ûqë [ 452.681418][ T30] MµÝHJ„i“»‰n·i§÷«ÀA¢=1¤“™62ð¶ìI•à“Õwä‘¥™•ÂÊíŽ]Þë¨>Ä1ì†ûO½ [ 452.681418][ T30] íãd “9ó,u-h3Ÿ¯À0e×Û»lL°Ê¬µ½ØGª\1 \‹´’¤Òe' [ 452.810033][ T5983] hackrf 6-1:0.0: Board ID: 00 [ 452.819101][ T5983] hackrf 6-1:0.0: Firmware version: [ 452.841815][ T5983] hackrf 6-1:0.0: Registered as swradio24 [ 452.862562][ T5983] videodev: could not get a free minor [ 452.934909][ T5983] hackrf 6-1:0.0: Failed to register as video device (-23) [ 452.944763][ T5983] hackrf 6-1:0.0: probe with driver hackrf failed with error -23 [ 453.441497][ T5983] usb 6-1: USB disconnect, device number 49 [ 453.488413][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'. [ 453.781182][ T30] audit: type=1400 audit(1753836148.998:1490): avc: denied { map } for pid=11905 comm="syz.2.1488" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 454.136838][T11920] loop6: detected capacity change from 0 to 524287999 [ 454.918521][T11930] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1496'. [ 454.928391][T11930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.049769][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1497'. [ 455.132947][ T30] audit: type=1400 audit(1753836150.513:1491): avc: denied { create } for pid=11922 comm="syz.3.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 456.603695][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1501'. [ 456.966725][T11950] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1501'. [ 457.666809][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'. [ 457.717258][T11968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.724892][T11968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.776584][T11969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1503'. [ 457.807242][T11968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.815065][T11968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.435639][ T30] audit: type=1400 audit(1753836154.535:1492): avc: denied { bind } for pid=11988 comm="syz.3.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 459.620980][ T30] audit: type=1400 audit(1753836154.591:1493): avc: denied { write } for pid=11988 comm="syz.3.1507" path="socket:[29580]" dev="sockfs" ino=29580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 459.757484][ T54] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 459.940424][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 459.952484][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.963600][ T54] usb 3-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 460.037163][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.053593][ T30] audit: type=1400 audit(1753836155.115:1494): avc: denied { getopt } for pid=11999 comm="syz.4.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 460.106010][ T54] usb 3-1: config 0 descriptor?? [ 460.380105][T12010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1512'. [ 460.471288][T12010] netlink: 'syz.3.1512': attribute type 7 has an invalid length. [ 460.688229][T12010] netlink: 'syz.3.1512': attribute type 8 has an invalid length. [ 460.830430][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'. [ 461.364863][T12010] batadv_slave_1: entered promiscuous mode [ 461.500222][T12010] erspan0: entered promiscuous mode [ 461.609644][T12010] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 461.679433][T12010] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.723065][T12010] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 461.793034][ T54] wacom 0003:056A:0217.0009: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 461.819734][ T54] usb 3-1: USB disconnect, device number 53 [ 461.952531][T12028] input: syz0 as /devices/virtual/input/input42 [ 461.969432][ T30] audit: type=1400 audit(1753836156.911:1495): avc: denied { ioctl } for pid=5191 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3168 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.009110][T12030] netlink: 'syz.6.1514': attribute type 10 has an invalid length. [ 462.021698][T12030] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1514'. [ 462.033140][T12030] dummy0: entered promiscuous mode [ 462.086687][T12030] bridge0: port 3(dummy0) entered blocking state [ 462.100427][T12030] bridge0: port 3(dummy0) entered disabled state [ 462.110708][T12030] dummy0: entered allmulticast mode [ 462.130055][T12030] bridge0: port 3(dummy0) entered blocking state [ 462.136667][T12030] bridge0: port 3(dummy0) entered forwarding state [ 462.193198][T12031] vxcan1: entered allmulticast mode [ 462.869149][T12043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12043 comm=syz.3.1520 [ 463.017868][ T24] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 463.335300][ T24] usb 6-1: config 0 has no interfaces? [ 463.384271][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 463.464438][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.530127][ T24] usb 6-1: config 0 descriptor?? [ 464.095689][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'. [ 464.105922][T12053] IPVS: Error joining to the multicast group [ 464.385523][T12058] sctp: [Deprecated]: syz.6.1523 (pid 12058) Use of int in max_burst socket option deprecated. [ 464.385523][T12058] Use struct sctp_assoc_value instead [ 464.982313][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1524'. [ 464.993497][T12067] IPVS: Error joining to the multicast group [ 465.705150][T12071] loop6: detected capacity change from 0 to 524287999 [ 466.137122][T12077] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1527'. [ 466.146531][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1527'. [ 467.019729][ T30] audit: type=1400 audit(1753836161.130:1496): avc: denied { getopt } for pid=12072 comm="syz.2.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 467.125355][T12089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1530'. [ 467.198034][ T30] audit: type=1400 audit(1753836161.308:1497): avc: denied { execute_no_trans } for pid=12081 comm="syz.4.1529" path="/375/file0" dev="tmpfs" ino=1995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 467.366624][ T24] usb 6-1: USB disconnect, device number 50 [ 467.598227][ T9] page_pool_release_retry() stalled pool shutdown: id 54, 9 inflight 182 sec [ 467.984802][T12101] mkiss: ax0: crc mode is auto. [ 468.017631][T12101] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1534'. [ 468.270531][T12106] ceph: No mds server is up or the cluster is laggy [ 468.622545][ T30] audit: type=1400 audit(1753836163.141:1498): avc: denied { accept } for pid=12126 comm="syz.3.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 468.750444][ T30] audit: type=1400 audit(1753836163.253:1499): avc: denied { listen } for pid=12126 comm="syz.3.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 468.932687][T12132] netlink: 'syz.2.1545': attribute type 10 has an invalid length. [ 468.946698][T12132] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.954120][T12132] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.152274][T12132] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.159586][T12132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.168235][T12132] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.175347][T12132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.669258][T12132] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 469.744696][T12139] FAULT_INJECTION: forcing a failure. [ 469.744696][T12139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.765858][T12139] CPU: 1 UID: 0 PID: 12139 Comm: syz.6.1546 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 469.765880][T12139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 469.765887][T12139] Call Trace: [ 469.765891][T12139] [ 469.765896][T12139] dump_stack_lvl+0x16c/0x1f0 [ 469.765916][T12139] should_fail_ex+0x512/0x640 [ 469.765935][T12139] _copy_from_user+0x2e/0xd0 [ 469.765955][T12139] copy_msghdr_from_user+0x98/0x160 [ 469.765972][T12139] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 469.765998][T12139] ___sys_sendmsg+0xfe/0x1d0 [ 469.766013][T12139] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.766027][T12139] ? __lock_acquire+0x622/0x1c90 [ 469.766059][T12139] __sys_sendmsg+0x16d/0x220 [ 469.766074][T12139] ? __pfx___sys_sendmsg+0x10/0x10 [ 469.766100][T12139] do_syscall_64+0xcd/0x4c0 [ 469.766116][T12139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.766129][T12139] RIP: 0033:0x7f663838e9a9 [ 469.766140][T12139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.766152][T12139] RSP: 002b:00007f6639248038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.766165][T12139] RAX: ffffffffffffffda RBX: 00007f66385b5fa0 RCX: 00007f663838e9a9 [ 469.766172][T12139] RDX: 0000000020000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 469.766179][T12139] RBP: 00007f6639248090 R08: 0000000000000000 R09: 0000000000000000 [ 469.766185][T12139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.766192][T12139] R13: 0000000000000000 R14: 00007f66385b5fa0 R15: 00007ffde28c3e68 [ 469.766207][T12139] [ 470.129930][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 470.271807][T12145] comedi comedi0: Minor 5 could not be opened [ 470.289186][ T30] audit: type=1400 audit(1753836164.525:1500): avc: denied { read write } for pid=12146 comm="syz.6.1549" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 470.324507][ T30] audit: type=1400 audit(1753836164.525:1501): avc: denied { open } for pid=12146 comm="syz.6.1549" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 470.848439][ T30] audit: type=1400 audit(1753836164.684:1502): avc: denied { create } for pid=12144 comm="syz.5.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 470.906857][ T30] audit: type=1400 audit(1753836164.684:1503): avc: denied { ioctl } for pid=12144 comm="syz.5.1548" path="socket:[30863]" dev="sockfs" ino=30863 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 471.296784][ T9] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 471.783408][ T30] audit: type=1400 audit(1753836166.087:1504): avc: denied { create } for pid=12146 comm="syz.6.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 471.807329][ T30] audit: type=1400 audit(1753836166.115:1505): avc: denied { getopt } for pid=12146 comm="syz.6.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 471.966050][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 472.277968][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 472.306031][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 472.375702][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.393747][ T9] usb 3-1: Product: syz [ 472.402328][ T9] usb 3-1: Manufacturer: syz [ 472.407599][ T9] usb 3-1: SerialNumber: syz [ 472.423430][ T9] usb 3-1: config 0 descriptor?? [ 472.539909][ T9] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 473.587173][ T9] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 473.595130][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 473.595141][ T30] audit: type=1400 audit(1753836166.985:1507): avc: denied { set_context_mgr } for pid=12176 comm="syz.5.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 475.888347][T12218] lo speed is unknown, defaulting to 1000 [ 475.894527][T12218] lo speed is unknown, defaulting to 1000 [ 475.902113][T12218] lo speed is unknown, defaulting to 1000 [ 475.920579][T12218] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 475.954417][T12218] lo speed is unknown, defaulting to 1000 [ 475.963953][T12218] lo speed is unknown, defaulting to 1000 [ 475.974046][T12218] lo speed is unknown, defaulting to 1000 [ 475.995619][T12218] lo speed is unknown, defaulting to 1000 [ 476.021259][T12218] lo speed is unknown, defaulting to 1000 [ 476.028073][T12218] lo speed is unknown, defaulting to 1000 [ 476.162205][ T30] audit: type=1400 audit(1753836170.184:1508): avc: denied { setopt } for pid=12221 comm="syz.3.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 476.289325][T12222] netlink: 'syz.3.1571': attribute type 5 has an invalid length. [ 476.317598][ T30] audit: type=1400 audit(1753836170.184:1509): avc: denied { read } for pid=12221 comm="syz.3.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 476.928820][T12238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1575'. [ 476.943525][T12238] x_tables: ip_tables: udp match: only valid for protocol 17 [ 477.066638][ T5936] usb 3-1: USB disconnect, device number 54 [ 477.089172][ T5983] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 477.781567][ T5983] usb 7-1: Using ep0 maxpacket: 8 [ 477.796283][ T5983] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.806971][ T5983] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 477.839262][ T5983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 477.868085][ T5983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 477.894188][T12251] random: crng reseeded on system resumption [ 477.900365][ T30] audit: type=1400 audit(1753836171.803:1510): avc: denied { read write } for pid=12250 comm="syz.2.1579" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 477.944832][ T5983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 477.966900][ T30] audit: type=1400 audit(1753836171.803:1511): avc: denied { ioctl open } for pid=12250 comm="syz.2.1579" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 477.998955][ T5983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 478.012290][ T5983] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.029137][ T5983] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 478.120270][ T5983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.150080][ T30] audit: type=1400 audit(1753836172.046:1512): avc: denied { bind } for pid=12252 comm="syz.2.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 478.150881][ T5983] usb 7-1: Product: syz [ 478.175438][ T5983] usb 7-1: Manufacturer: syz [ 478.180972][ T5983] usb 7-1: SerialNumber: syz [ 478.287241][ T30] audit: type=1400 audit(1753836172.177:1513): avc: denied { ioctl } for pid=12252 comm="syz.2.1580" path="socket:[30364]" dev="sockfs" ino=30364 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 478.738327][ T5983] usb 7-1: config 0 descriptor?? [ 478.744989][T12236] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 478.757594][ T5983] ati_remote 7-1:0.0: Initializing ati_remote hardware failed. [ 478.765772][ T5983] ati_remote 7-1:0.0: probe with driver ati_remote failed with error -5 [ 479.583995][T12268] lo speed is unknown, defaulting to 1000 [ 479.595689][T12268] lo speed is unknown, defaulting to 1000 [ 480.376061][T12276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12276 comm=syz.3.1586 [ 481.046641][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 481.113292][T12284] loop6: detected capacity change from 0 to 524287999 [ 481.909643][ T5983] usb 7-1: USB disconnect, device number 30 [ 484.859085][ T54] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 485.059821][ T54] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.071445][ T54] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 485.127406][ T54] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 485.136952][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 485.145051][ T54] usb 3-1: SerialNumber: syz [ 485.480131][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1596'. [ 485.547556][T12330] Bluetooth: MGMT ver 1.23 [ 485.751936][ T54] usb 3-1: 0:2 : does not exist [ 485.829132][ T54] usb 3-1: USB disconnect, device number 55 [ 485.863671][ T9] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 486.043273][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 486.060355][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.071073][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 486.084488][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1602'. [ 486.105987][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.122160][ T9] usb 6-1: config 0 descriptor?? [ 486.262725][T12341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 486.269989][T12341] IPv6: NLM_F_CREATE should be set when creating new route [ 486.562882][T12347] x_tables: duplicate underflow at hook 1 [ 486.569012][T12347] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1607'. [ 486.613629][ T9] wacom 0003:056A:0217.000B: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 486.916652][T12328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.059226][ T30] audit: type=1400 audit(1753836180.380:1514): avc: denied { append } for pid=12355 comm="syz.6.1608" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 487.087921][T12328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.192051][ T30] audit: type=1400 audit(1753836180.511:1515): avc: denied { unmount } for pid=8586 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 487.271411][ T9] usb 6-1: USB disconnect, device number 51 [ 488.731104][ T974] IPVS: starting estimator thread 0... [ 488.857100][T12376] IPVS: using max 76 ests per chain, 182400 per kthread [ 489.432764][T12392] loop6: detected capacity change from 0 to 524287999 [ 490.010998][ T30] audit: type=1400 audit(1753836183.121:1516): avc: denied { ioctl } for pid=12399 comm="syz.3.1621" path="socket:[30624]" dev="sockfs" ino=30624 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 490.402450][T12408] netlink: 'syz.5.1623': attribute type 10 has an invalid length. [ 490.689424][T12408] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.696694][T12408] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.754375][T12408] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.761596][T12408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.769075][T12408] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.776284][T12408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.868114][T12408] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 490.906192][T12413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12413 comm=syz.4.1625 [ 490.973858][ T24] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 491.180182][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 491.199935][ T24] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 491.209545][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.226399][ T24] usb 7-1: Product: syz [ 491.236549][ T24] usb 7-1: Manufacturer: syz [ 491.241503][ T24] usb 7-1: SerialNumber: syz [ 491.257795][ T24] usb 7-1: config 0 descriptor?? [ 491.318652][T12419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1627'. [ 493.326154][ T24] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 493.372471][ T24] peak_usb 7-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 493.555702][ T24] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 493.619085][ T24] usb 7-1: USB disconnect, device number 31 [ 493.654339][T12430] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1628'. [ 494.704955][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1632'. [ 494.880159][T12440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1632'. [ 494.969430][ T30] audit: type=1400 audit(1753836187.779:1517): avc: denied { append } for pid=12459 comm="syz.6.1635" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 496.468754][ T30] audit: type=1400 audit(1753836187.966:1518): avc: denied { setopt } for pid=12459 comm="syz.6.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 498.222927][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1642'. [ 498.254282][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1642'. [ 498.436980][T12488] Bluetooth: MGMT ver 1.23 [ 499.216242][ T974] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 499.269802][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 499.346486][T12519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12519 comm=syz.3.1654 [ 499.452504][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 499.462496][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 499.480896][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.494878][ T24] usb 3-1: Product: syz [ 499.500037][ T24] usb 3-1: Manufacturer: syz [ 499.518663][ T974] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 499.528038][ T974] usb 6-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 499.532312][ T24] usb 3-1: SerialNumber: syz [ 499.544725][ T974] usb 6-1: Product: syz [ 499.549040][ T974] usb 6-1: Manufacturer: syz [ 499.553640][ T974] usb 6-1: SerialNumber: syz [ 499.560802][T12524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1653'. [ 499.571417][ T974] usb 6-1: config 0 descriptor?? [ 499.575972][ T24] usb 3-1: config 0 descriptor?? [ 499.593400][T12524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1653'. [ 499.596527][ T24] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 500.071489][ T30] audit: type=1400 audit(1753836192.550:1519): avc: denied { sqpoll } for pid=12528 comm="syz.6.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 500.094917][ T30] audit: type=1400 audit(1753836192.569:1520): avc: denied { create } for pid=12528 comm="syz.6.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 500.157385][ T30] audit: type=1400 audit(1753836192.578:1521): avc: denied { ioctl } for pid=12528 comm="syz.6.1655" path="socket:[31789]" dev="sockfs" ino=31789 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 500.182151][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.634875][ T24] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 500.968632][ T30] audit: type=1400 audit(1753836193.392:1522): avc: denied { ioctl } for pid=12538 comm="syz.3.1656" path="socket:[31793]" dev="sockfs" ino=31793 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 501.032339][ T30] audit: type=1400 audit(1753836193.448:1523): avc: denied { mounton } for pid=12541 comm="syz.6.1657" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 501.055470][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.123803][ T30] audit: type=1400 audit(1753836193.448:1524): avc: denied { write } for pid=12538 comm="syz.3.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 501.143202][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.158412][ T30] audit: type=1400 audit(1753836193.513:1525): avc: denied { mounton } for pid=12541 comm="syz.6.1657" path="/163/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 501.180858][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.251007][T12554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1660'. [ 501.260579][ T30] audit: type=1400 audit(1753836193.654:1526): avc: denied { nlmsg_write } for pid=12553 comm="syz.4.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 501.336630][T12557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12557 comm=syz.4.1663 [ 502.122834][T12565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12565 comm=syz.6.1664 [ 502.776029][ T974] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 502.787144][ T974] asix 6-1:0.0: probe with driver asix failed with error -71 [ 502.799420][ T974] usb 6-1: USB disconnect, device number 52 [ 503.582718][ T24] usb 3-1: USB disconnect, device number 56 [ 503.605687][T12570] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1665'. [ 503.614901][T12570] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 503.957662][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1668'. [ 504.233492][T12579] delete_channel: no stack [ 504.925668][ T30] audit: type=1400 audit(1753836197.087:1527): avc: denied { open } for pid=12608 comm="syz.5.1675" path="/dev/ptyqf" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 505.043308][ T30] audit: type=1400 audit(1753836197.087:1528): avc: denied { ioctl } for pid=12608 comm="syz.5.1675" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 507.041093][T12634] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1680'. [ 507.265669][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1682'. [ 507.657167][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.099726][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'. [ 508.434067][T12661] 9pnet_fd: Insufficient options for proto=fd [ 509.027807][T12679] netlink: 'syz.3.1691': attribute type 10 has an invalid length. [ 509.104929][T12679] bridge0: left allmulticast mode [ 509.347175][T12681] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[12681] [ 510.041470][ T30] audit: type=1400 audit(1753836201.876:1529): avc: denied { bind } for pid=12693 comm="syz.4.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 510.045687][ T5983] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 510.131650][ T974] page_pool_release_retry() stalled pool shutdown: id 39, 35 inflight 306 sec [ 510.247765][ T30] audit: type=1400 audit(1753836202.054:1530): avc: denied { read } for pid=12692 comm="syz.6.1696" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 510.274059][ T5983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 79, changing to 10 [ 510.288753][ T5983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25397, setting to 1024 [ 510.300367][ T5983] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 510.315087][ T5983] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 510.375603][ T30] audit: type=1400 audit(1753836202.054:1531): avc: denied { open } for pid=12692 comm="syz.6.1696" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 510.402557][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.428493][ T30] audit: type=1400 audit(1753836202.110:1532): avc: denied { ioctl } for pid=12692 comm="syz.6.1696" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 510.454760][ T30] audit: type=1400 audit(1753836202.110:1533): avc: denied { write } for pid=12692 comm="syz.6.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 510.484722][ T5983] usb 6-1: config 0 descriptor?? [ 510.538234][ T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 510.676568][ T5936] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 510.698796][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 510.706561][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 510.714667][ T24] usb 7-1: can't read configurations, error -61 [ 510.821068][ T5936] usb 3-1: device descriptor read/64, error -71 [ 510.858305][ T24] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 510.974468][ T5983] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 511.136271][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 511.160491][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 511.168071][ T24] usb 7-1: can't read configurations, error -61 [ 511.174655][ T24] usb usb7-port1: attempt power cycle [ 511.180119][ T5936] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 511.334581][ T5936] usb 3-1: device descriptor read/64, error -71 [ 511.788744][ T5936] usb usb3-port1: attempt power cycle [ 511.980933][ T24] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 512.026018][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 512.033323][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 512.043173][ T24] usb 7-1: can't read configurations, error -61 [ 512.068588][ T30] audit: type=1326 audit(1753836203.756:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12726 comm="syz.4.1705" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64b8b8e9a9 code=0x0 [ 512.106966][ T30] audit: type=1400 audit(1753836203.803:1535): avc: denied { ioctl } for pid=12734 comm="syz.3.1709" path="socket:[32043]" dev="sockfs" ino=32043 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 512.156611][ C1] plantronics 0003:047F:FFFF.000C: hid_field_extract() called with n (132) > 32! (syz.4.1705) [ 512.196885][ T5936] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 512.239197][ T5936] usb 3-1: device descriptor read/8, error -71 [ 512.248107][ T24] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 512.258636][T12740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1710'. [ 512.270036][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 512.278245][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 512.286663][ T24] usb 7-1: can't read configurations, error -61 [ 512.295885][ T24] usb usb7-port1: unable to enumerate USB device [ 512.385338][ T24] usb 6-1: USB disconnect, device number 53 [ 512.494058][ T5936] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 512.515861][ T5936] usb 3-1: device descriptor read/8, error -71 [ 512.654446][ T5936] usb usb3-port1: unable to enumerate USB device [ 513.532182][ T30] audit: type=1400 audit(1753836205.150:1536): avc: denied { read } for pid=12754 comm="syz.6.1715" path="socket:[32068]" dev="sockfs" ino=32068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 513.989501][ T30] audit: type=1400 audit(1753836205.571:1537): avc: denied { unmount } for pid=11590 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 513.999375][T12765] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1716'. [ 514.053591][T12765] netem: invalid attributes len -4 [ 514.058928][T12765] netem: change failed [ 514.077344][T12762] sock: sock_set_timeout: `syz.3.1717' (pid 12762) tries to set negative timeout [ 514.141475][ T30] audit: type=1400 audit(1753836205.664:1538): avc: denied { connect } for pid=12761 comm="syz.3.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 514.261244][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'. [ 514.753538][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 515.094849][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1720'. [ 515.625856][T12774] delete_channel: no stack [ 515.805288][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'. [ 515.865311][T12795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1723'. [ 515.955902][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 515.955915][ T30] audit: type=1400 audit(1753836207.357:1540): avc: denied { mount } for pid=12794 comm="syz.3.1724" name="/" dev="autofs" ino=32901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 516.021928][ T974] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 516.220330][ T974] usb 7-1: unable to get BOS descriptor or descriptor too short [ 516.238952][ T974] usb 7-1: not running at top speed; connect to a high speed hub [ 516.362658][ T974] usb 7-1: config 1 interface 0 has no altsetting 0 [ 516.382650][ T974] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 516.397960][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.406898][ T974] usb 7-1: Product: syz [ 516.411252][ T974] usb 7-1: Manufacturer: syz [ 516.415911][ T974] usb 7-1: SerialNumber: syz [ 516.493391][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 517.208477][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 518.098192][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.109372][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.119173][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.152346][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 518.180414][ T9] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 519.075053][ T9] usb 3-1: Product: syz [ 519.079360][ T9] usb 3-1: Manufacturer: syz [ 519.083991][ T9] usb 3-1: SerialNumber: syz [ 519.233631][ T9] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input48 [ 519.347295][ T9] usb 3-1: USB disconnect, device number 61 [ 519.405356][ T9] appletouch 3-1:1.0: input: appletouch disconnected [ 519.436321][ T974] usb 7-1: USB disconnect, device number 36 [ 519.532135][T12828] input: syz1 as /devices/virtual/input/input49 [ 520.065879][T12843] syz.5.1736: attempt to access beyond end of device [ 520.065879][T12843] loop5: rw=0, sector=1, nr_sectors = 1 limit=0 [ 520.079503][T12843] qnx4: unable to read the superblock [ 520.451923][ T5834] Bluetooth: hci4: unexpected event 0x09 length: 6 > 3 [ 522.995628][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1745'. [ 523.017181][T12875] 9pnet_fd: p9_fd_create_tcp (12875): problem binding to privport [ 523.595876][ T24] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 523.623006][ T30] audit: type=1400 audit(1753836214.401:1541): avc: denied { write } for pid=12878 comm="syz.6.1746" path="socket:[33038]" dev="sockfs" ino=33038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 523.809678][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 523.821120][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.844021][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 523.853583][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.865672][ T24] usb 6-1: config 0 descriptor?? [ 523.899457][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 524.098597][T12893] 9pnet_fd: Insufficient options for proto=fd [ 524.153015][ T30] audit: type=1326 audit(1753836215.074:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12881 comm="syz.2.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f2b8e9a9 code=0x7fc00000 [ 524.228611][ T30] audit: type=1400 audit(1753836215.149:1543): avc: denied { connect } for pid=12892 comm="syz.6.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 524.339457][ T30] audit: type=1400 audit(1753836215.243:1544): avc: denied { read write } for pid=12892 comm="syz.6.1751" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 524.454450][ T24] wacom 0003:056A:0217.000D: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 524.520088][ T30] audit: type=1400 audit(1753836215.280:1545): avc: denied { open } for pid=12892 comm="syz.6.1751" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 524.545442][ T30] audit: type=1400 audit(1753836215.355:1546): avc: denied { ioctl } for pid=12892 comm="syz.6.1751" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 524.555802][T12876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.585904][T12876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.752781][T12911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12911 comm=syz.2.1756 [ 525.931455][ T24] usb 6-1: USB disconnect, device number 54 [ 526.425758][T12916] netlink: 'syz.4.1757': attribute type 10 has an invalid length. [ 526.452541][T12916] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.459809][T12916] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.548149][T12916] bridge0: left promiscuous mode [ 526.574310][T12916] bridge0: left allmulticast mode [ 526.950473][ T5910] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 527.427109][ T5910] usb 7-1: Using ep0 maxpacket: 32 [ 527.434112][ T5910] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.450309][ T5910] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.460197][ T5910] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 527.475764][ T5910] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 527.518132][ T30] audit: type=1400 audit(1753836218.208:1547): avc: denied { write } for pid=12926 comm="syz.5.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 527.541677][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 527.551295][ T5910] usb 7-1: Product: syz [ 527.557891][ T5910] usb 7-1: Manufacturer: syz [ 527.564456][ T5910] usb 7-1: SerialNumber: syz [ 527.605270][ T5910] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input53 [ 527.905139][ T30] audit: type=1400 audit(1753836218.591:1548): avc: denied { read } for pid=12921 comm="syz.6.1758" name="mouse1" dev="devtmpfs" ino=3225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 527.930477][ T974] usb 7-1: USB disconnect, device number 37 [ 527.952094][ T974] appletouch 7-1:1.0: input: appletouch disconnected [ 528.406416][ T30] audit: type=1400 audit(1753836218.591:1549): avc: denied { open } for pid=12921 comm="syz.6.1758" path="/dev/input/mouse1" dev="devtmpfs" ino=3225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 528.912822][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1764'. [ 528.970180][T12950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1764'. [ 529.147166][T12955] loop6: detected capacity change from 0 to 524287999 [ 529.827905][T12983] loop6: detected capacity change from 0 to 524287999 [ 531.940532][ T5910] page_pool_release_retry() stalled pool shutdown: id 54, 9 inflight 243 sec [ 535.219542][T13054] o2cb: This node has not been configured. [ 535.225843][T13054] o2cb: Cluster check failed. Fix errors before retrying. [ 535.233192][T13054] (syz.5.1788,13054,1):user_dlm_register:674 ERROR: status = -22 [ 535.240961][T13054] (syz.5.1788,13054,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 535.285425][T13054] bridge1: entered promiscuous mode [ 535.659846][ T30] audit: type=1400 audit(1753836225.429:1550): avc: denied { add_name } for pid=13045 comm="syz.5.1788" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 535.681184][ T30] audit: type=1400 audit(1753836225.429:1551): avc: denied { create } for pid=13045 comm="syz.5.1788" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 535.703643][ T30] audit: type=1400 audit(1753836225.429:1552): avc: denied { associate } for pid=13045 comm="syz.5.1788" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 535.948320][T13060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13060 comm=syz.2.1791 [ 536.769699][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1793'. [ 537.223109][ T30] audit: type=1400 audit(1753836227.291:1553): avc: denied { bind } for pid=13072 comm="syz.5.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 537.377260][T13085] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1795'. [ 537.393013][ T30] audit: type=1400 audit(1753836227.459:1554): avc: denied { setopt } for pid=13072 comm="syz.5.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 538.213980][T13091] overlayfs: failed to clone upperpath [ 538.381149][ T30] audit: type=1400 audit(1753836228.385:1555): avc: denied { append } for pid=13095 comm="syz.6.1802" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 538.533136][T13099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13099 comm=syz.5.1803 [ 538.662106][ T30] audit: type=1400 audit(1753836228.563:1556): avc: denied { write } for pid=13100 comm="syz.2.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 539.678834][T13110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13110 comm=syz.5.1806 [ 541.269734][T13138] sctp: [Deprecated]: syz.4.1811 (pid 13138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 541.269734][T13138] Use struct sctp_sack_info instead [ 541.348141][ T24] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 541.666176][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 541.678795][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.693718][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 541.705287][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.716009][ T30] audit: type=1400 audit(1753836231.500:1557): avc: denied { ioctl } for pid=13139 comm="syz.6.1812" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 541.750457][ T24] usb 6-1: config 0 descriptor?? [ 541.780468][T13142] 9pnet_fd: Insufficient options for proto=fd [ 542.088069][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1813'. [ 542.124924][T13145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1813'. [ 542.279612][ T24] wacom 0003:056A:0217.000E: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 542.493186][T13126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.502030][T13126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.626848][T13153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1814'. [ 543.096871][ T30] audit: type=1400 audit(1753836232.361:1558): avc: denied { write } for pid=13150 comm="syz.3.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 543.131844][ T9] usb 6-1: USB disconnect, device number 55 [ 543.233365][T13157] netlink: 'syz.2.1816': attribute type 10 has an invalid length. [ 543.257495][T13159] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1817'. [ 543.268235][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1817'. [ 543.278426][T13159] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1817'. [ 543.281519][T13157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1816'. [ 543.414687][T13157] team0: entered promiscuous mode [ 543.420024][T13157] team_slave_0: entered promiscuous mode [ 543.477367][T13157] team_slave_1: entered promiscuous mode [ 543.534592][T13157] team0: entered allmulticast mode [ 543.540085][T13157] team_slave_0: entered allmulticast mode [ 543.548126][T13157] team_slave_1: entered allmulticast mode [ 543.638080][T13157] bridge0: port 3(team0) entered blocking state [ 543.656519][T13157] bridge0: port 3(team0) entered disabled state [ 543.733639][T13157] bridge0: port 3(team0) entered blocking state [ 543.740125][T13157] bridge0: port 3(team0) entered forwarding state [ 545.269025][T13185] ubi31: attaching mtd0 [ 545.305380][T13185] ubi31: scanning is finished [ 545.310148][T13185] ubi31: empty MTD device detected [ 545.874457][T13189] netlink: 'syz.5.1823': attribute type 10 has an invalid length. [ 545.885149][T13189] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.892421][T13189] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.200027][T13185] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 546.207692][T13185] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 546.218493][T13185] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 546.225721][T13185] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 546.233219][T13185] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 546.240376][T13185] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 546.248479][T13185] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 915172964 [ 546.258466][T13185] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 546.270505][T13192] ubi31: background thread "ubi_bgt31d" started, PID 13192 [ 548.079779][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1830'. [ 548.652673][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 548.912954][ T30] audit: type=1400 audit(1753836238.235:1559): avc: denied { write } for pid=13225 comm="syz.6.1835" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 549.193416][ T5936] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 549.316355][T13232] netlink: 'syz.3.1836': attribute type 33 has an invalid length. [ 549.400200][ T5936] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.416788][ T5936] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.485833][ T5936] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 549.509686][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 549.576306][ T5936] usb 7-1: SerialNumber: syz [ 550.047437][ T5936] usb 7-1: 0:2 : does not exist [ 550.069035][ T5936] usb 7-1: unit 5 not found! [ 550.111598][ T5936] usb 7-1: USB disconnect, device number 38 [ 550.160046][ T7018] udevd[7018]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.170536][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 550.236289][T13247] syz_tun: entered promiscuous mode [ 550.248551][T13248] loop6: detected capacity change from 0 to 524287999 [ 550.734114][ T30] audit: type=1400 audit(1753836239.890:1560): avc: denied { connect } for pid=13245 comm="syz.2.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 554.660484][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1850'. [ 554.672629][T13280] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1850'. [ 554.694818][T13288] tipc: Started in network mode [ 554.700120][T13288] tipc: Node identity fe80000000000000000000000000001, cluster identity 8 [ 554.709356][T13288] tipc: Enabling of bearer rejected, failed to enable media [ 555.369983][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'. [ 556.113522][T13309] team_slave_1 (unregistering): left promiscuous mode [ 556.202969][T13309] team0: Port device team_slave_1 removed [ 556.862436][ T30] audit: type=1400 audit(1753836245.671:1561): avc: denied { connect } for pid=13327 comm="syz.4.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 556.882954][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.924485][T13328] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 557.029294][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1863'. [ 557.548754][ T30] audit: type=1400 audit(1753836246.317:1562): avc: denied { create } for pid=13335 comm="syz.4.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 558.788998][T13352] overlayfs: failed to clone lowerpath [ 558.812541][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1870'. [ 558.823431][T13352] overlayfs: failed to clone lowerpath [ 558.836143][T13354] overlayfs: failed to clone upperpath [ 558.851553][T13352] overlayfs: failed to clone lowerpath [ 558.900002][T13352] overlayfs: failed to clone lowerpath [ 558.911159][T13352] overlayfs: failed to clone lowerpath [ 559.143924][T13352] overlayfs: failed to clone lowerpath [ 559.150479][T13352] overlayfs: failed to clone lowerpath [ 559.157021][T13352] overlayfs: failed to clone lowerpath [ 559.176399][T13352] overlayfs: failed to clone lowerpath [ 559.212479][T13352] overlayfs: failed to clone lowerpath [ 559.249088][T13352] overlayfs: failed to clone lowerpath [ 559.278127][T13352] overlayfs: failed to clone lowerpath [ 559.288571][T13352] overlayfs: failed to clone lowerpath [ 559.299661][T13352] overlayfs: failed to clone lowerpath [ 559.437478][T13352] overlayfs: failed to clone lowerpath [ 559.444105][T13352] overlayfs: failed to clone lowerpath [ 559.517489][T13352] overlayfs: failed to clone lowerpath [ 559.533649][T13352] overlayfs: failed to clone lowerpath [ 559.540088][T13352] overlayfs: failed to clone lowerpath [ 559.547886][T13352] overlayfs: failed to clone lowerpath [ 559.563492][T13352] overlayfs: failed to clone lowerpath [ 560.030418][T13372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1875'. [ 560.345011][T13378] overlayfs: failed to clone lowerpath [ 560.349401][ T30] audit: type=1400 audit(1753836248.926:1563): avc: denied { mount } for pid=13373 comm="syz.3.1876" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 560.537327][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1878'. [ 560.618908][ T30] audit: type=1400 audit(1753836249.188:1564): avc: denied { create } for pid=13383 comm="syz.5.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 560.657911][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1881'. [ 560.901092][ T974] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 561.111354][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 561.157258][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.209004][ T974] usb 3-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 561.223364][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.270778][ T5936] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 561.281013][ T974] usb 3-1: config 0 descriptor?? [ 561.519989][T13407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1887'. [ 561.554732][ T5936] usb 7-1: Using ep0 maxpacket: 16 [ 561.563895][ T5936] usb 7-1: config index 0 descriptor too short (expected 1042, got 18) [ 561.572362][ T5936] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 561.580781][ T5936] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 561.597110][ T5936] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 561.608679][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.618476][ T5936] usb 7-1: Product: syz [ 561.726766][ T5936] usb 7-1: Manufacturer: syz [ 561.731971][ T5936] usb 7-1: SerialNumber: syz [ 561.746112][ T5936] usb 7-1: config 0 descriptor?? [ 561.752221][ T974] wacom 0003:056A:0217.000F: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 561.755803][ T5936] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 562.219672][ T5936] ssu100 7-1:0.0: probe with driver ssu100 failed with error -110 [ 562.220265][T13390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.265900][T13390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.402473][ T24] usb 3-1: USB disconnect, device number 62 [ 562.590362][ T5936] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 562.762767][ T5936] usb 6-1: unable to get BOS descriptor or descriptor too short [ 562.770596][ T5936] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 562.779204][ T5936] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 562.789465][ T5936] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 562.800148][ T5936] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 562.810306][ T5936] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 562.820382][ T5936] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 562.830528][ T5936] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 562.840841][ T5936] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 562.851356][ T5936] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 562.861285][ T5936] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 562.871446][ T5936] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 562.881296][ T5936] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 562.891518][ T5936] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 562.901541][ T5936] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 562.911981][ T5936] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 562.922265][ T5936] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 562.932382][ T5936] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 562.944095][ T5936] usb 6-1: string descriptor 0 read error: -22 [ 562.950418][ T5936] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 562.959599][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.202753][T13418] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 563.212616][T13418] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 563.267039][ T30] audit: type=1400 audit(1753836251.639:1565): avc: denied { firmware_load } for pid=13417 comm="syz.5.1891" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 563.311920][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1894'. [ 563.688155][T13418] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 563.910741][T13427] delete_channel: no stack [ 564.136959][ T5910] usb 7-1: USB disconnect, device number 39 [ 564.336044][T13445] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1899'. [ 564.349232][T13445] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1899'. [ 564.610883][T13419] Bluetooth: hci2: command 0x0406 tx timeout [ 565.809381][ T24] usb 6-1: USB disconnect, device number 56 [ 566.359056][T13467] input input60: cannot allocate more than FF_MAX_EFFECTS effects [ 566.373290][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1904'. [ 568.345178][T13485] netlink: 'syz.4.1910': attribute type 20 has an invalid length. [ 569.834410][ T30] audit: type=1400 audit(1753836257.803:1566): avc: denied { setopt } for pid=13497 comm="syz.2.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 570.072374][ T30] audit: type=1400 audit(1753836258.028:1567): avc: denied { getopt } for pid=13501 comm="syz.6.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 570.612750][ T30] audit: type=1400 audit(1753836258.028:1568): avc: denied { ioctl } for pid=13501 comm="syz.6.1916" path="socket:[34937]" dev="sockfs" ino=34937 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 570.640310][ T5936] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 570.789989][ T5936] usb 3-1: device descriptor read/64, error -71 [ 570.907505][ T54] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 571.046449][ T54] usb 7-1: device descriptor read/64, error -71 [ 571.121460][ T5936] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 571.306099][ T5936] usb 3-1: device descriptor read/64, error -71 [ 571.364431][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1920'. [ 571.384177][ T54] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 571.423295][ T5936] usb usb3-port1: attempt power cycle [ 571.869722][ T54] usb 7-1: device descriptor read/64, error -71 [ 571.970613][T13511] delete_channel: no stack [ 571.987441][ T54] usb usb7-port1: attempt power cycle [ 572.150992][ T5936] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 572.180848][ T5936] usb 3-1: device descriptor read/8, error -71 [ 572.361458][ T54] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 572.388983][ T54] usb 7-1: device descriptor read/8, error -71 [ 572.436191][ T5936] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 572.480063][ T5936] usb 3-1: device descriptor read/8, error -71 [ 572.608475][ T5936] usb usb3-port1: unable to enumerate USB device [ 572.662127][ T54] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 572.695367][ T54] usb 7-1: device descriptor read/8, error -71 [ 572.821194][ T54] usb usb7-port1: unable to enumerate USB device [ 573.361598][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.674859][T13545] overlay: Unknown parameter '/' [ 574.105919][ T30] audit: type=1400 audit(1753836261.760:1569): avc: denied { map } for pid=13547 comm="syz.6.1932" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 574.196477][ T30] audit: type=1400 audit(1753836261.760:1570): avc: denied { execute } for pid=13547 comm="syz.6.1932" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 574.435203][T13558] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1933'. [ 574.638528][ T5910] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 574.918726][ T5910] usb 7-1: Using ep0 maxpacket: 16 [ 574.921055][ T5910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.922874][ T5910] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 574.922900][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.922920][ T5910] usb 7-1: Product: syz [ 574.922934][ T5910] usb 7-1: Manufacturer: syz [ 574.922950][ T5910] usb 7-1: SerialNumber: syz [ 574.976038][ T5910] usb 7-1: config 0 descriptor?? [ 575.044952][ T5910] page_pool_release_retry() stalled pool shutdown: id 39, 35 inflight 366 sec [ 575.127777][T13562] ================================================================== [ 575.135892][T13562] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 575.144071][T13562] Read of size 1 at addr ffff888026315eb0 by task syz.5.1935/13562 [ 575.151969][T13562] [ 575.154291][T13562] CPU: 0 UID: 0 PID: 13562 Comm: syz.5.1935 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 575.154310][T13562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.154318][T13562] Call Trace: [ 575.154323][T13562] [ 575.154329][T13562] dump_stack_lvl+0x116/0x1f0 [ 575.154351][T13562] print_report+0xcd/0x630 [ 575.154366][T13562] ? __virt_addr_valid+0x81/0x610 [ 575.154386][T13562] ? __phys_addr+0xe8/0x180 [ 575.154406][T13562] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 575.154422][T13562] kasan_report+0xe0/0x110 [ 575.154436][T13562] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 575.154452][T13562] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 575.154468][T13562] __kasan_check_byte+0x36/0x50 [ 575.154483][T13562] lock_acquire+0xfc/0x350 [ 575.154498][T13562] ? find_held_lock+0x2b/0x80 [ 575.154516][T13562] _raw_spin_lock_irqsave+0x3a/0x60 [ 575.154530][T13562] ? remove_wait_queue+0x25/0x180 [ 575.154549][T13562] remove_wait_queue+0x25/0x180 [ 575.154570][T13562] poll_freewait+0xd5/0x250 [ 575.154593][T13562] do_select+0xe52/0x17e0 [ 575.154621][T13562] ? __pfx_do_select+0x10/0x10 [ 575.154641][T13562] ? __lock_acquire+0xb8a/0x1c90 [ 575.154657][T13562] ? __pfx_pollwake+0x10/0x10 [ 575.154677][T13562] ? __pfx_pollwake+0x10/0x10 [ 575.154698][T13562] ? __pfx_pollwake+0x10/0x10 [ 575.154719][T13562] ? __pfx_pollwake+0x10/0x10 [ 575.154739][T13562] ? __pfx_pollwake+0x10/0x10 [ 575.154760][T13562] ? __pfx_pollwake+0x10/0x10 [ 575.154781][T13562] ? __pfx_pollwake+0x10/0x10 [ 575.154802][T13562] ? __pfx_pollwake+0x10/0x10 [ 575.154823][T13562] ? __pfx_pollwake+0x10/0x10 [ 575.154843][T13562] ? find_held_lock+0x2b/0x80 [ 575.154861][T13562] ? __might_fault+0xe3/0x190 [ 575.154873][T13562] ? __might_fault+0xe3/0x190 [ 575.154884][T13562] ? __might_fault+0x13b/0x190 [ 575.154899][T13562] ? core_sys_select+0x453/0xc10 [ 575.154911][T13562] core_sys_select+0x453/0xc10 [ 575.154925][T13562] ? __pfx_core_sys_select+0x10/0x10 [ 575.154939][T13562] ? find_held_lock+0x2b/0x80 [ 575.154964][T13562] ? set_user_sigmask+0x21b/0x2b0 [ 575.154980][T13562] ? __pfx_set_user_sigmask+0x10/0x10 [ 575.154999][T13562] do_pselect.constprop.0+0x19f/0x1e0 [ 575.155012][T13562] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 575.155027][T13562] ? __x64_sys_futex+0x1e0/0x4c0 [ 575.155088][T13562] __x64_sys_pselect6+0x182/0x240 [ 575.155115][T13562] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 575.155133][T13562] do_syscall_64+0xcd/0x4c0 [ 575.155154][T13562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.155171][T13562] RIP: 0033:0x7f4d1538e9a9 [ 575.155185][T13562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.155200][T13562] RSP: 002b:00007f4d1613f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 575.155214][T13562] RAX: ffffffffffffffda RBX: 00007f4d155b6080 RCX: 00007f4d1538e9a9 [ 575.155223][T13562] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 575.155232][T13562] RBP: 00007f4d15410d69 R08: 0000000000000000 R09: 0000000000000000 [ 575.155241][T13562] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 575.155250][T13562] R13: 0000000000000000 R14: 00007f4d155b6080 R15: 00007ffc27244bb8 [ 575.155266][T13562] [ 575.155272][T13562] [ 575.474034][T13562] Allocated by task 9531: [ 575.478366][T13562] kasan_save_stack+0x33/0x60 [ 575.483032][T13562] kasan_save_track+0x14/0x30 [ 575.487690][T13562] __kasan_kmalloc+0xaa/0xb0 [ 575.492259][T13562] comedi_device_postconfig+0x2cb/0xc80 [ 575.497793][T13562] comedi_device_attach+0x3cf/0x900 [ 575.502981][T13562] do_devconfig_ioctl+0x1a7/0x580 [ 575.508026][T13562] comedi_unlocked_ioctl+0x165d/0x2f00 [ 575.513469][T13562] __x64_sys_ioctl+0x18b/0x210 [ 575.518221][T13562] do_syscall_64+0xcd/0x4c0 [ 575.522711][T13562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.528586][T13562] [ 575.530891][T13562] Freed by task 13563: [ 575.534937][T13562] kasan_save_stack+0x33/0x60 [ 575.539595][T13562] kasan_save_track+0x14/0x30 [ 575.544254][T13562] kasan_save_free_info+0x3b/0x60 [ 575.549266][T13562] __kasan_slab_free+0x51/0x70 [ 575.554011][T13562] kfree+0x2b4/0x4d0 [ 575.557893][T13562] comedi_device_detach+0x2a4/0x9e0 [ 575.563076][T13562] do_devconfig_ioctl+0x46c/0x580 [ 575.568089][T13562] comedi_unlocked_ioctl+0x165d/0x2f00 [ 575.573529][T13562] __x64_sys_ioctl+0x18b/0x210 [ 575.578308][T13562] do_syscall_64+0xcd/0x4c0 [ 575.582801][T13562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.588676][T13562] [ 575.591000][T13562] The buggy address belongs to the object at ffff888026315e00 [ 575.591000][T13562] which belongs to the cache kmalloc-256 of size 256 [ 575.605037][T13562] The buggy address is located 176 bytes inside of [ 575.605037][T13562] freed 256-byte region [ffff888026315e00, ffff888026315f00) [ 575.618817][T13562] [ 575.621122][T13562] The buggy address belongs to the physical page: [ 575.627512][T13562] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26314 [ 575.636253][T13562] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 575.644733][T13562] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 575.652625][T13562] page_type: f5(slab) [ 575.656591][T13562] raw: 00fff00000000040 ffff88801b841b40 ffffea0000cb4580 dead000000000003 [ 575.665159][T13562] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 575.673726][T13562] head: 00fff00000000040 ffff88801b841b40 ffffea0000cb4580 dead000000000003 [ 575.682379][T13562] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 575.691034][T13562] head: 00fff00000000001 ffffea000098c501 00000000ffffffff 00000000ffffffff [ 575.699689][T13562] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 575.708339][T13562] page dumped because: kasan: bad access detected [ 575.714729][T13562] page_owner tracks the page as allocated [ 575.720426][T13562] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5837, tgid 5837 (syz-executor), ts 63401332178, free_ts 63367511309 [ 575.741787][T13562] post_alloc_hook+0x1c0/0x230 [ 575.746542][T13562] get_page_from_freelist+0x1321/0x3890 [ 575.752076][T13562] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 575.757957][T13562] alloc_pages_mpol+0x1fb/0x550 [ 575.762791][T13562] new_slab+0x23b/0x330 [ 575.766937][T13562] ___slab_alloc+0xd9c/0x1940 [ 575.771602][T13562] __slab_alloc.constprop.0+0x56/0xb0 [ 575.776966][T13562] __kmalloc_cache_noprof+0xfb/0x3e0 [ 575.782242][T13562] devl_region_create+0x1b4/0x4e0 [ 575.787274][T13562] nsim_drv_probe+0x726/0x1490 [ 575.792020][T13562] really_probe+0x241/0xa90 [ 575.796507][T13562] __driver_probe_device+0x1de/0x440 [ 575.801786][T13562] driver_probe_device+0x4c/0x1b0 [ 575.806803][T13562] __device_attach_driver+0x1df/0x310 [ 575.812162][T13562] bus_for_each_drv+0x159/0x1e0 [ 575.816993][T13562] __device_attach+0x1e4/0x4b0 [ 575.821742][T13562] page last free pid 5842 tgid 5842 stack trace: [ 575.828047][T13562] __free_frozen_pages+0x7fe/0x1180 [ 575.833236][T13562] __put_partials+0x16d/0x1c0 [ 575.837915][T13562] qlist_free_all+0x4d/0x120 [ 575.842495][T13562] kasan_quarantine_reduce+0x195/0x1e0 [ 575.847944][T13562] __kasan_slab_alloc+0x69/0x90 [ 575.852789][T13562] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 575.858149][T13562] netdevice_event+0x365/0x9d0 [ 575.862903][T13562] notifier_call_chain+0xbc/0x410 [ 575.867917][T13562] call_netdevice_notifiers_info+0xbe/0x140 [ 575.873800][T13562] __dev_notify_flags+0x12c/0x2e0 [ 575.878824][T13562] netif_change_flags+0x108/0x160 [ 575.883844][T13562] do_setlink.constprop.0+0xb53/0x4380 [ 575.889294][T13562] rtnl_newlink+0x1446/0x2000 [ 575.893977][T13562] rtnetlink_rcv_msg+0x95b/0xe90 [ 575.898903][T13562] netlink_rcv_skb+0x155/0x420 [ 575.903658][T13562] netlink_unicast+0x58d/0x850 [ 575.908427][T13562] [ 575.910732][T13562] Memory state around the buggy address: [ 575.916344][T13562] ffff888026315d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 575.924388][T13562] ffff888026315e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 575.932433][T13562] >ffff888026315e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 575.940478][T13562] ^ [ 575.946105][T13562] ffff888026315f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 575.954148][T13562] ffff888026315f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 575.962196][T13562] ================================================================== [ 575.970239][T13562] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 575.977416][T13562] CPU: 0 UID: 0 PID: 13562 Comm: syz.5.1935 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 575.989138][T13562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.999184][T13562] Call Trace: [ 576.002452][T13562] [ 576.005367][T13562] dump_stack_lvl+0x3d/0x1f0 [ 576.009949][T13562] panic+0x71c/0x800 [ 576.013828][T13562] ? __pfx_panic+0x10/0x10 [ 576.018230][T13562] ? __pfx__printk+0x10/0x10 [ 576.022806][T13562] ? end_report+0x4c/0x170 [ 576.027210][T13562] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 576.032566][T13562] check_panic_on_warn+0xab/0xb0 [ 576.037488][T13562] end_report+0x107/0x170 [ 576.041804][T13562] kasan_report+0xee/0x110 [ 576.046215][T13562] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 576.051576][T13562] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 576.056934][T13562] __kasan_check_byte+0x36/0x50 [ 576.061771][T13562] lock_acquire+0xfc/0x350 [ 576.066187][T13562] ? find_held_lock+0x2b/0x80 [ 576.070852][T13562] _raw_spin_lock_irqsave+0x3a/0x60 [ 576.076037][T13562] ? remove_wait_queue+0x25/0x180 [ 576.081053][T13562] remove_wait_queue+0x25/0x180 [ 576.085895][T13562] poll_freewait+0xd5/0x250 [ 576.090392][T13562] do_select+0xe52/0x17e0 [ 576.094721][T13562] ? __pfx_do_select+0x10/0x10 [ 576.099483][T13562] ? __lock_acquire+0xb8a/0x1c90 [ 576.104406][T13562] ? __pfx_pollwake+0x10/0x10 [ 576.109075][T13562] ? __pfx_pollwake+0x10/0x10 [ 576.113742][T13562] ? __pfx_pollwake+0x10/0x10 [ 576.118409][T13562] ? __pfx_pollwake+0x10/0x10 [ 576.123085][T13562] ? __pfx_pollwake+0x10/0x10 [ 576.127770][T13562] ? __pfx_pollwake+0x10/0x10 [ 576.132437][T13562] ? __pfx_pollwake+0x10/0x10 [ 576.137105][T13562] ? __pfx_pollwake+0x10/0x10 [ 576.141772][T13562] ? __pfx_pollwake+0x10/0x10 [ 576.146440][T13562] ? find_held_lock+0x2b/0x80 [ 576.151102][T13562] ? __might_fault+0xe3/0x190 [ 576.155760][T13562] ? __might_fault+0xe3/0x190 [ 576.160420][T13562] ? __might_fault+0x13b/0x190 [ 576.165172][T13562] ? core_sys_select+0x453/0xc10 [ 576.170091][T13562] core_sys_select+0x453/0xc10 [ 576.174839][T13562] ? __pfx_core_sys_select+0x10/0x10 [ 576.180110][T13562] ? find_held_lock+0x2b/0x80 [ 576.184785][T13562] ? set_user_sigmask+0x21b/0x2b0 [ 576.189795][T13562] ? __pfx_set_user_sigmask+0x10/0x10 [ 576.195155][T13562] do_pselect.constprop.0+0x19f/0x1e0 [ 576.200510][T13562] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 576.206386][T13562] ? __x64_sys_futex+0x1e0/0x4c0 [ 576.211310][T13562] __x64_sys_pselect6+0x182/0x240 [ 576.216319][T13562] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 576.221852][T13562] do_syscall_64+0xcd/0x4c0 [ 576.226344][T13562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.232232][T13562] RIP: 0033:0x7f4d1538e9a9 [ 576.236632][T13562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.256267][T13562] RSP: 002b:00007f4d1613f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 576.264677][T13562] RAX: ffffffffffffffda RBX: 00007f4d155b6080 RCX: 00007f4d1538e9a9 [ 576.272654][T13562] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 576.280611][T13562] RBP: 00007f4d15410d69 R08: 0000000000000000 R09: 0000000000000000 [ 576.288566][T13562] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 576.296522][T13562] R13: 0000000000000000 R14: 00007f4d155b6080 R15: 00007ffc27244bb8 [ 576.304484][T13562] [ 576.307680][T13562] Kernel Offset: disabled [ 576.311983][T13562] Rebooting in 86400 seconds..