last executing test programs: 22.638803668s ago: executing program 3 (id=392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYBLOB="ed5f619ac2814024adfe90639387f0aed1b8ddea1f825d567534c74d20e9da37f9622d31bb1cec617126711fa252c3dc07c8dc4c20fde720832e9f721872502e683231de97cf325a98174070e7597fb410d098199e7099ada52e473442e912946649cf788ddeb34d23ca65f49fec7bc3f58e8dc9642c2c55a6512a193c583c7b7eb92bfccc625b607733afa7605369cd592e388f3ccabdccb33667b817e2c76b0d7f695dd614c90eadd74a27e304b90079b8a52ef9a63543079b8d4678f402a3de18d84c05eb5b48fdc3d86f078d813666fb5930fd1df78f05028805dae687ba299fcce5aef7498fe5e9", @ANYRESHEX=r0], 0x150}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 22.488145262s ago: executing program 3 (id=394): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="71fdbcdc59e5cb533766f3eb2d1a962d5e988e3e5101d0eb21825e9a8d1d112d048bb699a67f720396cacaf0a3efb1f5640b12fc150ad28ec024062096f1b126ba78db82f213def686423f0c8f07c00408743ab5fd53f8435caecb4e8932178ac5837fcc52ad1a98a8825e", 0x6b}, {&(0x7f00000001c0)="659fd7163dea5b1d75d2d485fe0ae9c97a66e12e330c90876a94c30e9242e038a537bff7cb9cdedd5400a9df9243c6bf221e9c851c2be6060c80bf93767f6ef3501b4d8432e958754de87175d2b8e8d34482f902e07466f2f7f64c75adbdf67a5305842f", 0x64}], 0x2) sendfile(r2, r2, 0x0, 0x9) r4 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000000)={0x48}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) 21.885565578s ago: executing program 3 (id=401): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) socket$netlink(0x10, 0x3, 0x12) (async) r2 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x7}, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @empty, 0x7}], 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 20.191968714s ago: executing program 3 (id=404): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = inotify_init1(0x80000) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xebf) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'netdevsim0\x00'}) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000400), 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x37bd1c0339759431, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xb6a6, 0x0, 0x4, 0x0, 0x1}) 19.349304412s ago: executing program 3 (id=408): pipe2(&(0x7f00000006c0), 0x0) (async) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) (async) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r2, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0xa, 0xd0e0000, 0x138, 0x100, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0xffffff00, 0xff, 'wlan1\x00', 'veth1_to_team\x00', {}, {0xff}, 0x1, 0x3, 0x10}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x7, {0xb}}}, @common=@icmp={{0x28}, {0x8, '\x00', 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x36, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x5}}}}, {{@uncond, 0x3202, 0xd8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x1, 0x2, 0x4, 0x0, 0x6, 0xc], 0x5, 0x7a19653e03c56032}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x10, 0x4, {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) (async, rerun: 64) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) (rerun: 32) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)={0x12b4, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x1297, 0x3, 0x0, 0x1, [@generic="8292fbb2914e1790e2cee09e79fdbaa8058ca7f477222a781d272c0f24c7c134277506bfa0d60bd16ea19749946f68af229145f182ea89edf834e0e0359232b909b1ee6be532daf06b0f229f5fbf1bba44bbe6c949f87b973ee99e81ed2d90bb55d27cb2cd3f4b19de132ae9d02f081c915d92e1c5c794c82dc3590599a48711b425380a4168714e4e51ef98ba1380073454acb7207b9b022a988442e3f9b66208ac947678375b1576158f5223d25fa9059b2b66e3806ff7cd86c2d9c0892832fb33b047ecba01f2b09a40e2b8c43032639772e7c4414512a64bb683f3bbdb37f6adf985241a332d1432fb49f43ee6", @generic="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", @nested={0x184, 0x57, 0x0, 0x1, [@generic="18c26949851aab0ce8788ea515e24122d1617a1afdf6571f525d2e3791c3430462ad005c0d3cd3c2722129c7afeeb75ab02bd435c8e2634e26cb4104b270de7b076322ac027cbcc6b31b1f765c098901454f6c921821f307a92dcdfffa280437929e42ca121147e7d1cf8f20990aa17231cdf4faad60107b9cfc53170540f3128e47c802a468de74b3fb35c3741160a6930cbe99aecc0c294192bcb172d75613096488eac2d82828c6091ff7a79196a93f06f0ebe696d79b47360d93f961e87ebe2f82f190c86f3be2", @generic="266e70f6fb3ca2e311f233ed644c2818dc1f4a651cc7671fe123f8b454ee132373568b330ff47eb3e28107d08b7de48f2f6d6080a7b975f382c1fea8f606e27ee8f610c47125dc19094d5efda2e3510f63b3663ed0b4753717273f4b31", @nested={0x8, 0x3a, 0x0, 0x1, [@nested={0x4, 0x1b}]}, @generic="4d874132b5ff2bbd78070b48f1bfe987fc5f0dc9f6998261c1b5937996e9c489e200128f13457d4077187751228032586de80166944cd0fa0329371c5496034652a80f841efb981b4331", @typed={0x8, 0xed, 0x0, 0x0, @fd=r6}]}, @typed={0x20, 0x11c, 0x0, 0x0, @binary="6e6bfbdee5efb971fce80f2a72c990359c918c1681dac158b3ef6149"}]}]}, 0x12b4}}, 0x2000c004) (async) r8 = fsmount(r0, 0x1, 0x80) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', r9, 0x4000, r8}, 0x18) (async, rerun: 32) r10 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) (async, rerun: 32) syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0x0, 0x284}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd=r10, 0x0, 0x0}) (async, rerun: 64) syz_io_uring_submit(r11, 0x0, &(0x7f0000000c80)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2000, @fd_index=0x4, 0x3ff, 0x0, 0x0, 0x0, 0x0, {0x2}}) (async) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000c00)={@loopback}, &(0x7f0000000c40)=0x14) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000cc0)={0x4, 0x0, '\x00', {0x0, @reserved}}) (async) r13 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc082, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x800, 0x6, 0x1, {0x22, 0xbe}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0xf6, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0x7}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x2, 0xff, 0x40, 0x20, 0xf8}, 0x2f, &(0x7f0000000100)={0x5, 0xf, 0x2f, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0x9, 0x7}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0xd, 0xf00f, 0x7, [0x0, 0x0, 0xff00c0, 0xffff3f, 0xff003f]}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x860}}, {0x7, &(0x7f0000000180)=@string={0x7, 0x3, "db7b578b36"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43f}}, {0x9f, &(0x7f0000000240)=@string={0x9f, 0x3, "c23c92059ae9a6fc0193a3882ab9ceb07efee53ff3612e44b1aad7fb59b07ffe4ccfb140afd76650d5f24baf569b403af1bf4566ef0f17547f6e11f70e0a31ddc0b2844b8c12f88217d162bab19d045dfeae29a7be810b397e7e11762eddc5a4cf0771d780d66046165d283fec8b64bae1fda2429852d7b11aed02c88c357a7c30d5cb6dd34fb9338d901cff89e4c867725521111b0f7a714a776634ea"}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3c0a}}]}) syz_usb_control_io(r13, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x20, 0x9, 0x39, {0x39, 0xb, "466d450740d0254fa90dfe0a1c3bd4a4e4a34c70da79c7f933468fcea0dcd21642e98cb7617b5452c8ac31c3c259f5355cdd3cd81fa23f"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f00000004c0)={0x0, 0xf, 0xe4, {0x5, 0xf, 0xe4, 0x4, [@ptm_cap={0x3}, @generic={0xc1, 0x10, 0xa, "afffb2d55c827106d03b922341aae852d9f2c7dde5a55e90a9d986df418352b607faac71c63fd218b8e11d1fceee40d17d9ba1f5453f820b1cd6104263a5dacd5820645e5b5d1b36685c68032021390ed7bfe1b8e3bb9fc583986ff5e50312b1f8fa02aa9f9354b01fc99103e0317fe63a468ea65b21fea4feb9958c32db7c3a0e5a7e666e642a3b71f82b656ca6d17d5da9909133ce3fa2c9bb25c8d5b88e0ca83bbd21cda144b799e9fef49c3b2e9aa7085278605ace3941d6bf8b4ab1"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x6, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "1f2d31244b6a3addacafd78f8c8dd499"}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x80, 0x2, 0xf, "746b846a", "7148bd1b"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x3, 0x1, 0xe, 0xc, 0x1d4}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x40, 0x11, 0x85, "1c2cf23c357f30415182c6205ab72549df4f2f6f90381dcebbb3e87bfca3390a7091717fbc40b94eef2a57f0011e8290c36e28e06f43625b21f74a67642648dc0f7a331a0a1503fb464152e764e4f66a3cd7e7b3e1ea950007decc7a1fa03362995c3374599a4195c4dbd6354346030672dd25a63acb1e8aa2ad23271d3be7da76e4dfee93"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xd8}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x10, 0x20, [0xf0f0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000008c0)={0x40, 0x9, 0x1}, &(0x7f0000000900)={0x40, 0xb, 0x2, "c429"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5ef}, &(0x7f0000000980)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "a9bf"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0xff}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xe8}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x6}}) syz_usb_connect(0x5, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="12010000a4229440b40a140009c101020301090212fec550257f87c2bf00010000002009"], 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (rerun: 64) 19.215702466s ago: executing program 2 (id=409): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x7db3f0680181fdf8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}], {0x14, 0x10}}, 0x98}}, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) 18.834445476s ago: executing program 2 (id=411): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000005c0)={'bond0\x00', &(0x7f0000000400)=@ethtool_sfeatures={0x3b, 0x3, [{0x80000000, 0x1820}, {0x1366ed0c, 0x40006}, {0x90, 0x95}]}}) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000000c0)=""/96, 0x60}, {&(0x7f0000000140)=""/163, 0xa3}, {&(0x7f0000000200)=""/230, 0xf3}, {&(0x7f0000000300)=""/74, 0x4a}], 0x5, 0xffffffc0, 0x10003) prctl$PR_SET_MM(0x35, 0x6, &(0x7f0000f77000/0x4000)=nil) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000540)={0x1, &(0x7f0000000480)=[{@none}]}) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x10249000, 0x0, 0xfe76, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa000000000000095000000000000001f495ff727520cccddfad6fab92a770b445d050000006edc1b5613c5e35079725d19e88b662c2596b2f0b40aa9de45cf931a7ddaae7bdd97a9787684a5a6bbe879d6561715a194eb15d509b1837f6d317d12dd2c98f05e43aa14b3655a78009367bac65148a671b0ffd1c946b31202b7c73e0f1c5df29d57ed708602599a04fde318753c358d42ba7c52b4e20bc5c0e91fbc96da558c38891cd5bc38b6db9863a1273811976d15ba39fe"], 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) r2 = syz_io_uring_setup(0x12f, &(0x7f0000000340)={0x0, 0x6c93, 0x2, 0x2, 0x312}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000440)={0x8, 'virt_wifi0\x00', {}, 0x8}) setsockopt(0xffffffffffffffff, 0x84, 0x7869, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x403, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x2000c841, &(0x7f0000000140)={0xa, 0x4e23, 0x68a614f6, @loopback, 0xffffffff}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 17.930682098s ago: executing program 2 (id=416): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) 17.532108602s ago: executing program 3 (id=418): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) r0 = socket$key(0xf, 0x3, 0x2) sendto(r0, 0x0, 0x0, 0x20004800, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x33, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xff, 0x6, 0x2, 0x4, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x0, 0x1, 0x6, 0xa, 0x7, 0xffffffffffffffc0, 0xffffffffffffffff}, @tail_call, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @ringbuf_query, @tail_call, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x8, 0x63, &(0x7f00000004c0)=""/99, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0x6, 0x7, 0xdc0a}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000780)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f00000007c0)=[{0x0, 0x5, 0xe, 0xc}, {0x0, 0x3, 0x4, 0x3}, {0x0, 0x5}, {0x1, 0x4, 0x8, 0x5}], 0x10, 0x6}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r1}, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/asound/seq/clients\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x38d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000037c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@link_local, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f51c93", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x2c, 0x0, 0x0, @private1, @loopback, [@hopopts={0x6}], "ba6d395246bf356c"}}}}}}}, 0x0) sendmmsg$inet6(r5, &(0x7f00000065c0)=[{{&(0x7f00000009c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x22}}], 0x1, 0x20000044) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=@newqdisc={0xa4, 0x24, 0x0, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x54, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x33d3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x3}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5e2, 0x9}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x6, 0x6, 0x3, 0x1, 0x401, 0x7}}, {0x4}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8d0}, 0x4000000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000}) r6 = creat(&(0x7f0000000580)='./file1\x00', 0x0) mq_timedreceive(r6, &(0x7f0000000400)=""/67, 0x43, 0x7fffffffffffffff, &(0x7f00000000c0)={0x77359400}) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x80001) userfaultfd(0x80000) r9 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\//\xff\xea\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@link_local, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f51c93", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x2c, 0x0, 0x0, @private1, @loopback, [@hopopts={0x6}], "ba6d395246bf356c"}}}}}}}, 0x0) sendmmsg$inet6(r5, &(0x7f00000065c0)=[{{&(0x7f00000009c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x22}}], 0x1, 0x20000044) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=@newqdisc={0xa4, 0x24, 0x0, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x54, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x33d3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x3}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5e2, 0x9}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x6, 0x6, 0x3, 0x1, 0x401, 0x7}}, {0x4}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8d0}, 0x4000000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000}) r6 = creat(&(0x7f0000000580)='./file1\x00', 0x0) mq_timedreceive(r6, &(0x7f0000000400)=""/67, 0x43, 0x7fffffffffffffff, &(0x7f00000000c0)={0x77359400}) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x80001) userfaultfd(0x80000) r9 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\//\xff\xea\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000340)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(r4, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) unshare(0x8000000) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000280)={0x4}) 4.733459387s ago: executing program 4 (id=449): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2}, 0x94) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x8001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x10000, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) r5 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_triestat\x00') read$FUSE(r2, &(0x7f000001d740)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='xen_mmu_alloc_ptpage\x00', r1, 0x0, 0xffff000000000001}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x88}, 0x0) 4.663649942s ago: executing program 0 (id=450): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port1\x00', 0x62, 0x151cfc, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7, 0xee}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0xc4, 0x0, 0x9, 0x3e}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x8010000, 0x0, 0x9}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0xc, 0x7, 0xffffffff, 0x0, "4d6b5ccb00"}) readv(r2, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/192, 0xc0}], 0x1) readv(r5, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000a40)=0x42) close(r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2000000, 0x0, 0xfffffffffffffde7, 0x0, 0x0, 0xffffffffffffffff) 4.663195148s ago: executing program 1 (id=451): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x180) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_raw(0x1d, 0x3, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, &(0x7f0000000380)}, 0x2) modify_ldt$write(0x1, &(0x7f0000000040)={0xc, 0x100000, 0xffffffffffffbbff, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000f40)={0xa, 0x0, 0x0, @local}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r4, 0x960, 0x22265}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 3.660324262s ago: executing program 4 (id=452): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x2b06, 0x0, 0x0, &(0x7f0000ffe000)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r7, 0x0, 0x40008) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000500), &(0x7f0000000680)={[&(0x7f0000000540)='geneve1\x00', &(0x7f0000000580)='syz', &(0x7f00000005c0)='/-:\x93H^\'\x00', 0x0]}, 0x1000) r8 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r8, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 3.407677238s ago: executing program 0 (id=453): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x28000, 0x54, 0x1}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10) utimensat(r0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000093212919fd55af8c3a4d0000008000"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f00000024c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x4}, 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b0008140000001100010000000000000000000700000a"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000440)='io.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) 3.360133514s ago: executing program 1 (id=454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000e060300000000000000140007000002050001"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='ocfs2\x00', 0x200040, &(0x7f0000000100)='barrier') r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x9000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002240)=""/102400, 0x19000) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24084001}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x4040814) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000300)={'pcl816\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xa, 0x801, 0xe2df, 0x40000002, 0x0, 0x7, 0xb, 0x4, 0x5, 0x800]}) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$802154_dgram(r8, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14, &(0x7f0000000080)={&(0x7f0000000140)="1195f5164e3e91f5682a6e66631473fafb8a4f768f73693e66b60b54f78edc0e15c039853dac30041480b9fe125c9757015eac25c062edf9f61009627e901f89040a2c1cddde6119350ed6d7a06004cedb9e9f01dcf80e1a571829700c0523b5c9d1600f99c7b9e335d983a7e98701360d79083d616dd482467297597edf550fbe3a81e2aad51b6ad6612355", 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2.519669233s ago: executing program 4 (id=455): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r0, &(0x7f0000000140)=@qipcrtr, &(0x7f00000001c0)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x8, 0xfffffffc, 0x5, 0x80}, {0x0, 0x0, 0x40000000}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x101}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x4, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x10000000}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x8001, 0x0, 0x0, 0x2}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x200000}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0xfffffffc, 0x200}, {}, {0x0, 0x0, 0x0, 0x3}, {0x7}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xa}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x9, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {0x0, 0x0, 0x0, 0x0, 0xd}, {0x9}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffffffa}}, './file0\x00'}) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000100)={0x2, 0x102, 0x0, {0x3, 0x63, 0x36}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000040)={0x1, 0x0, {[0x3, 0x1, 0x4, 0x1, 0x2, 0x7, 0x80000000, 0x2]}}) 2.303291715s ago: executing program 4 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfffb}, {}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r1, 0x80) r3 = dup3(r2, r1, 0x80000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xe}}, './file0\x00'}) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) umount2(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000050000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.267798614s ago: executing program 0 (id=457): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f000001a000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.039060535s ago: executing program 1 (id=458): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, 0x94) close(0x4) 1.983691829s ago: executing program 0 (id=459): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0x2, 0x4e23, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x34}, 0x2}, 0x1c) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r2) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x3f, [], [0x2b8]}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) write(r5, &(0x7f0000000000)="2e000000010002", 0x7) mount(&(0x7f0000000100), 0x0, &(0x7f00000002c0)='9p\x00', 0x94, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) syz_open_procfs$namespace(r6, &(0x7f0000000140)='ns/time_for_children\x00') setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0xabf, 0x4) r7 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', 0x0}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r8, r8, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) 1.507072717s ago: executing program 1 (id=460): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) syz_emit_ethernet(0x10d, &(0x7f0000000000)={@multicast, @empty, @void, {@llc_tr={0x11, {@llc={0x7e, 0xe, 'W', "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"}}}}}, 0x0) 1.382976578s ago: executing program 0 (id=461): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async, rerun: 32) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8840) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xffffffffffffff2b, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000abe000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00008a7000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) (async) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1010040, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x8000, 0x1000}, 0x20) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) (rerun: 32) chdir(&(0x7f0000000140)='./file0\x00') syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000088000000000000000000000000000100000000001890780400000000008000"/102], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = fsmount(r1, 0x0, 0x0) openat$cgroup_pressure(r7, &(0x7f0000002500)='io.pressure\x00', 0x2, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) 1.256284284s ago: executing program 4 (id=462): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0xffeffffe}, {0x16}]}, 0x10) (async) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000040)=0x3ce, 0x4) (async) writev(r0, &(0x7f0000000180), 0x100000000000003c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x18, 0x0, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) 1.255852739s ago: executing program 1 (id=463): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg(0xffffffffffffffff, 0x0, 0x44004) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) (async) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f00000004c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r1, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r7, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r7, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10) 1.117728803s ago: executing program 4 (id=464): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x208300, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = syz_usbip_server_init(0x3) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="000000030000000100000000000000010000000800000fff000000"], 0x60) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = getpid() syz_pidfd_open(r7, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x28, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000e000000000000003a000000018df0ff0000000018190000", @ANYRES32, @ANYRES32, @ANYRES8=r6, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000070000007b8a96be10111fc261e2e6c40c2447f8ff00000000bfa200000000000000b70400000200"/68, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000018160000", @ANYRES32, @ANYRES16=r1], 0x0, 0x7f, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x5, 0x3, 0x3, 0x9}, 0x10, 0x6dfb, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[r8, r8, r8, r8, r8, r8, 0xffffffffffffffff, r8, r8]}, 0x94) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0x8, 0xd215) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) getpgid(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socket$alg(0x26, 0x5, 0x0) 694.724318ms ago: executing program 1 (id=465): r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0xfff, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x6, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1be, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7fff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0xfffffffffffffffd, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x7ffffffe) r3 = syz_open_procfs$pagemap(0x0, 0x0) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000110}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x40000c0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x4, 0x3, @vifc_lcl_addr=@private=0xa010100, @local}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ed6c4", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x1, {0x801}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r6, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000810000000500000000000c00000000000000"], 0x0, 0x200) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008"], 0x1c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 0s ago: executing program 0 (id=466): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="dabe36a474d2aa61cf9f59b912f3e5d9bb84ea1c6b05061cc43f1bd64aedb08ad30ec3390f8b0911d4e57de7cb9ebac054c9b08375ff194760137d077b7aa56ca0fb18363d0fa39a801bee11a5402baac08dc5314fc3f6d718d76e40bb513ddf3a16d3cfd0cbec23cd954340aa32bad80be382b5c68148855240e6894e6a7b547020ad6b7797a4dc313c06ce67e3c71334c370951124ac512c42d706f90547e6e197d600101253e273e9fe7880ec4d6f52579e415b4dcbbd1d06e0a5e6ce1b6a577d79a426574529aa905a1ce56e771a0d3f02bfb9beb63f75ecd1c092fdc44428b532e217bcb2036e0e86fc6fbf4def1601d7a2b887e1", @ANYRES8=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [0x7ff, 0xfe, 0x7, 0x5, 0x3, 0x80]}, 0x0) fcntl$setsig(r1, 0xa, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x2f8, 0x42, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x2cd, 0x1c2, 0x0, 0x1, [@generic="9d632e4264ed9646276ff1f12bf08f04f2b319059734f465659c993072aa80a044a1c6a8240023c3d5a400944cc37ca16bdf6a69983a928d8d095bf781f16a35544e4b48b3f4a2565776392f3a98a0ce7c32736709dd900d071363280272b50b5cd7c0c23baa782f0635aa4178efbf2a9129ae180f6154d67f16c287514c3e466591bdc78ec01ec70c961b19204d8226307c6939f6522a9c7b2e0dc55417bc9ef4b5e99e277b577fed97e2236e231e9855c1dda2176c3e721eb0e600a78b1136f136a4db515eba4bdfbfb957ea0ec01ebbc917e68409d52f3977450e8ef7908351902ec3256456162e41333a7cac254272", @typed={0x8, 0x111, 0x0, 0x0, @u32=0x8}, @typed={0xc, 0x9f, 0x0, 0x0, @u64=0x44}, @nested={0x1c4, 0xfe, 0x0, 0x1, [@nested={0x1be, 0xb7, 0x0, 0x1, [@generic="26239eed36e0b41fa1ebe2018ee34e6eed5bd748ba8d9dec6520b98a9254b901f64d32334f7016f481f63e7ce20aba554e4f21cb1998970516119f82aa6a60c7fb3e6ca5fe5017cb28f87d5d6d96b93916de87a1f6191b4712db8c78af977fbbc2df2851e5ecf485c773137639d72171a3658f1bf41d3f621565fe703e7bb5acaca4aad3239366fff0fb5a4fb2d1fd725dbca0e41b212b133237dd44452b4ad17707a6084aa6caff8e248c8c5c9343fffea56e495a3cd45dd713b772f7bdb796d103aa4c82c8ba34aaca90db49ba7be4db", @generic="16e89c563e4fb9a3fe404e6dfb54b4066056a5e0a9a5f0759e2113584c0823bdda0b648cf34ef69040d62af6720aa90dc57e4a68b8d60ad895509ee44ae4854aa6513d8abf69615ce9a6febfa60d9befdf651d8a6b4ade40121f5afab201f0ac5f410d7922c45b2c1229322a46407a115b1e8a4b1f1ca8d37610d0fc612bb116269e94b891d11c7d81306c5d3aaa2a4b1e9884fbb17b74c70a3d248917b9601abc1a4142d00f260719902e98aad3a028bcc39972d67d6fdc004b82c80fd5a61c892fef3dc0b23604c7e1d7321d9f3590a446b355c24a463f981bab6093ff58f246900b5cbd55b24cab"]}]}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xb, 0x10, 0x0, 0x1, [@generic="07000000772e8b"]}]}, @typed={0x4, 0x8}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4c090}, 0x4010) openat$kvm(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRESHEX=0x0, @ANYRES8=r2, @ANYRES8=r3, @ANYRES32=r7, @ANYBLOB="00000000e7ffffffffffffff0000327ef9c62ea3dad3ff656f0fa23c8199a19d49cfda96"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRESOCT], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() kernel console output (not intermixed with test programs): ewroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.733914][ T5826] veth1_macvtap: entered promiscuous mode [ 63.761137][ T1126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.768531][ T30] audit: type=1400 audit(1766231373.439:88): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 63.798988][ T5813] veth0_vlan: entered promiscuous mode [ 63.800950][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.825244][ T30] audit: type=1400 audit(1766231373.439:89): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.dSRhTc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 63.833420][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.859742][ T30] audit: type=1400 audit(1766231373.469:90): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.dSRhTc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 63.888345][ T30] audit: type=1400 audit(1766231373.469:91): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.909285][ T30] audit: type=1400 audit(1766231373.509:92): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 63.939948][ T30] audit: type=1400 audit(1766231373.509:93): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="gadgetfs" ino=7413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 63.997682][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.007234][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.066203][ T4657] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.079035][ T4657] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.099404][ T5813] veth1_vlan: entered promiscuous mode [ 64.112628][ T4657] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.124114][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.134109][ T4657] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.152751][ T4107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.167530][ T4107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.178008][ T3528] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.198439][ T3528] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.227645][ T3528] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.236382][ T3528] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.251767][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.261661][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.285709][ T5813] veth0_macvtap: entered promiscuous mode [ 64.314771][ T5813] veth1_macvtap: entered promiscuous mode [ 64.411538][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.447438][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.455616][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.481255][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.514952][ T3528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.539180][ T3528] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.597613][ T3528] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.608308][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.616143][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.649987][ T3528] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.678620][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.713004][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.810872][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.854358][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.974972][ T4107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.039916][ T4107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.178977][ T4657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.200454][ T4657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.296862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 65.306932][ T5819] Bluetooth: hci0: command tx timeout [ 65.377265][ T5140] Bluetooth: hci3: command tx timeout [ 65.377331][ T5824] Bluetooth: hci4: command tx timeout [ 65.382690][ T5825] Bluetooth: hci2: command tx timeout [ 65.393603][ T5819] Bluetooth: hci1: command tx timeout [ 65.537455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.770715][ T5928] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 65.873183][ T5958] overlay: Unknown parameter 'smackfsfloor' [ 65.959331][ T5928] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.024506][ T5928] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 66.131248][ T5928] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.166936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.175505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.267022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.296935][ T5928] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 66.347777][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.377468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 66.451627][ T5928] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 66.525580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.529509][ T5968] Bluetooth: MGMT ver 1.23 [ 66.731359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.757149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 66.790249][ T5928] usb 5-1: USB disconnect, device number 2 [ 66.827829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.377085][ T5819] Bluetooth: hci0: command tx timeout [ 67.457778][ T5825] Bluetooth: hci3: command tx timeout [ 67.458275][ T5824] Bluetooth: hci2: command tx timeout [ 67.463204][ T5140] Bluetooth: hci1: command tx timeout [ 67.463233][ T5819] Bluetooth: hci4: command tx timeout [ 68.780159][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 68.797247][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 68.806000][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 68.882197][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 68.987585][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 68.987601][ T30] audit: type=1400 audit(1766231378.729:149): avc: denied { create } for pid=5994 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.024678][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 69.054143][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 69.064203][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 69.073089][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 69.096814][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 69.097760][ T5999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17'. [ 69.115702][ T30] audit: type=1400 audit(1766231378.739:150): avc: denied { ioctl } for pid=5994 comm="syz.0.18" path="socket:[8613]" dev="sockfs" ino=8613 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.186833][ T30] audit: type=1400 audit(1766231378.929:151): avc: denied { read } for pid=5994 comm="syz.0.18" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.246800][ T5888] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.256814][ T30] audit: type=1400 audit(1766231378.929:152): avc: denied { open } for pid=5994 comm="syz.0.18" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.308201][ T5999] erspan0: entered promiscuous mode [ 69.332717][ T5999] gretap0: entered promiscuous mode [ 69.348119][ T30] audit: type=1400 audit(1766231378.929:153): avc: denied { map } for pid=5994 comm="syz.0.18" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.437603][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 69.449828][ T30] audit: type=1400 audit(1766231378.929:154): avc: denied { create } for pid=5994 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.455188][ T5888] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 69.492201][ T5888] usb 5-1: config 0 has no interface number 0 [ 69.504349][ T5888] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.518105][ T5888] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.518127][ T30] audit: type=1400 audit(1766231378.929:155): avc: denied { write } for pid=5994 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.675591][ T5888] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 69.679646][ T6015] Zero length message leads to an empty skb [ 69.716780][ T30] audit: type=1400 audit(1766231378.999:156): avc: denied { read write } for pid=5994 comm="syz.0.18" name="video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.718740][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.981210][ T5888] usb 5-1: config 0 descriptor?? [ 70.166831][ T30] audit: type=1400 audit(1766231378.999:157): avc: denied { open } for pid=5994 comm="syz.0.18" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 70.266807][ T30] audit: type=1400 audit(1766231379.409:158): avc: denied { ioctl } for pid=6014 comm="syz.0.21" path="socket:[9342]" dev="sockfs" ino=9342 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.377531][ T5993] netlink: 'syz.4.16': attribute type 10 has an invalid length. [ 70.392559][ T5993] team0: Port device dummy0 added [ 70.459267][ T5993] netlink: 'syz.4.16': attribute type 10 has an invalid length. [ 70.514350][ T6022] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.819335][ T6030] netlink: 'syz.3.24': attribute type 14 has an invalid length. [ 70.918690][ T79] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.065065][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.065940][ T6025] openvswitch: netlink: Key type 4127 is out of range max 32 [ 71.071621][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.121042][ T5888] uclogic 0003:28BD:0071.0001: pen parameters not found [ 71.140777][ T5888] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 71.469873][ T5993] team0: Port device dummy0 removed [ 71.480455][ T5993] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 71.486799][ T79] usb 2-1: Using ep0 maxpacket: 8 [ 71.530046][ T6030] vxlan0: entered promiscuous mode [ 71.531752][ T79] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 71.547120][ T79] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 71.582424][ T3547] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.591364][ T79] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 71.615589][ T3547] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.629695][ T79] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 71.694288][ T3547] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.708206][ T79] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.743429][ T5888] usb 5-1: USB disconnect, device number 3 [ 71.753258][ T3547] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.756276][ T79] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.188440][ T79] usbtmc 2-1:16.0: bulk endpoints not found [ 72.932258][ T6054] x_tables: duplicate underflow at hook 3 [ 73.459137][ T6072] gfs2: gfs2 mount does not exist [ 73.963443][ T6074] syzkaller0: entered allmulticast mode [ 74.076676][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 74.076686][ T30] audit: type=1400 audit(1766231383.819:182): avc: denied { mounton } for pid=6075 comm="syz.2.34" path="/5/file0" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 75.066431][ T30] audit: type=1400 audit(1766231384.269:183): avc: denied { getopt } for pid=6075 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.189558][ T6090] netlink: 'syz.2.36': attribute type 1 has an invalid length. [ 75.431690][ T30] audit: type=1400 audit(1766231384.269:184): avc: denied { lock } for pid=6075 comm="syz.2.34" path="socket:[8689]" dev="sockfs" ino=8689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.522805][ T30] audit: type=1400 audit(1766231384.809:185): avc: denied { create } for pid=6083 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.575597][ T5922] usb 2-1: USB disconnect, device number 2 [ 75.876930][ T5922] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.564008][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 76.591986][ T5922] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 76.644770][ T30] audit: type=1400 audit(1766231386.359:186): avc: denied { ioctl } for pid=6094 comm="syz.1.38" path="socket:[9649]" dev="sockfs" ino=9649 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.700886][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.719363][ T5922] usb 5-1: Product: syz [ 76.726812][ T5922] usb 5-1: Manufacturer: syz [ 76.746915][ T5922] usb 5-1: SerialNumber: syz [ 76.761543][ T5922] usb 5-1: config 0 descriptor?? [ 77.508062][ T30] audit: type=1400 audit(1766231387.249:187): avc: denied { mount } for pid=6114 comm="syz.1.43" name="/" dev="ramfs" ino=9704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 80.898621][ T5946] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 80.955569][ T5922] usb 5-1: USB disconnect, device number 4 [ 81.149557][ T5946] usb 3-1: Invalid ep0 maxpacket: 16 [ 81.296827][ T5946] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 81.557441][ T30] audit: type=1400 audit(1766231391.059:188): avc: denied { mounton } for pid=6135 comm="syz.1.48" path="/6/file0" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.582622][ T5830] udevd[5830]: setting mode of /dev/audio3 to 020660 failed: No such file or directory [ 81.585431][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.642456][ T976] cfg80211: failed to load regulatory.db [ 81.645548][ T30] audit: type=1400 audit(1766231391.059:189): avc: denied { mount } for pid=6135 comm="syz.1.48" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 81.702597][ T5830] udevd[5830]: setting owner of /dev/audio3 to uid=0, gid=29 failed: No such file or directory [ 81.778530][ T5946] usb 3-1: Invalid ep0 maxpacket: 16 [ 81.787538][ T5946] usb usb3-port1: attempt power cycle [ 81.966814][ T5922] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 81.982682][ T30] audit: type=1400 audit(1766231391.729:190): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 82.469872][ T30] audit: type=1400 audit(1766231391.759:191): avc: denied { watch watch_reads } for pid=6148 comm="syz.0.50" path="/15" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.497177][ T30] audit: type=1400 audit(1766231392.249:192): avc: denied { map } for pid=6153 comm="syz.1.52" path="socket:[8840]" dev="sockfs" ino=8840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 82.501886][ T5946] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 82.526128][ T6150] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 82.566816][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 82.572782][ T5946] usb 3-1: Invalid ep0 maxpacket: 16 [ 82.585512][ T5922] usb 5-1: config index 0 descriptor too short (expected 6683, got 27) [ 82.593736][ T30] audit: type=1400 audit(1766231392.249:193): avc: denied { accept } for pid=6153 comm="syz.1.52" path="socket:[8840]" dev="sockfs" ino=8840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 82.620755][ T5922] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 82.630126][ T5922] usb 5-1: config 0 has no interface number 0 [ 82.633012][ T30] audit: type=1400 audit(1766231392.269:194): avc: denied { read write } for pid=6148 comm="syz.0.50" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.638046][ T5922] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.664373][ T30] audit: type=1400 audit(1766231392.269:195): avc: denied { open } for pid=6148 comm="syz.0.50" path="/dev/sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.674282][ T5922] usb 5-1: config 0 interface 85 has no altsetting 0 [ 82.712286][ T5922] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 82.721822][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.730063][ T5922] usb 5-1: Product: syz [ 82.734410][ T5922] usb 5-1: Manufacturer: syz [ 82.739338][ T5922] usb 5-1: SerialNumber: syz [ 82.746331][ T5922] usb 5-1: config 0 descriptor?? [ 82.767555][ T5946] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 82.777275][ T30] audit: type=1400 audit(1766231392.269:196): avc: denied { ioctl } for pid=6148 comm="syz.0.50" path="/dev/sg0" dev="devtmpfs" ino=765 ioctlcmd=0x5319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.819215][ T30] audit: type=1400 audit(1766231392.289:197): avc: denied { ioctl } for pid=6148 comm="syz.0.50" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 82.857527][ T5946] usb 3-1: Invalid ep0 maxpacket: 16 [ 82.863815][ T5946] usb usb3-port1: unable to enumerate USB device [ 83.039587][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.063171][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.589804][ T6174] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 83.836438][ T6180] geneve2: entered promiscuous mode [ 84.124319][ T6189] tmpfs: Unknown parameter 'md4“šÚ×êÂrleave: †·' [ 84.283078][ T6191] tipc: Started in network mode [ 84.290030][ T6191] tipc: Node identity 8a5623ec233, cluster identity 4711 [ 84.298021][ T6191] tipc: Enabled bearer , priority 0 [ 84.305526][ T6191] syzkaller0: entered promiscuous mode [ 84.311226][ T6191] syzkaller0: entered allmulticast mode [ 84.365525][ T6191] tipc: Resetting bearer [ 84.396108][ T6178] overlayfs: statfs failed on './file0' [ 84.495383][ T6195] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.564423][ T6197] __nla_validate_parse: 53 callbacks suppressed [ 84.564449][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 84.580773][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 84.599629][ T6197] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 84.643537][ T5922] appletouch 5-1:0.85: Failed to read mode from device. [ 84.663491][ T6123] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.664609][ T5922] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 84.688249][ T5895] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.695516][ T5922] usb 5-1: USB disconnect, device number 5 [ 84.827201][ T6123] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 84.852669][ T6123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 84.865135][ T6123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 84.883956][ T5895] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 84.894270][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.945989][ T6123] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 84.994759][ T6123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.009128][ T5895] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 85.054847][ T5895] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 85.067918][ T6123] usb 2-1: Product: syz [ 85.076821][ T6123] usb 2-1: Manufacturer: syz [ 85.081739][ T6123] usb 2-1: SerialNumber: syz [ 85.086945][ T5895] usb 1-1: Manufacturer: syz [ 85.137890][ T6123] usb 2-1: config 0 descriptor?? [ 85.147413][ T5895] usb 1-1: config 0 descriptor?? [ 85.198073][ T5922] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 85.289763][ T5895] rc_core: IR keymap rc-hauppauge not found [ 85.295912][ T5895] Registered IR keymap rc-empty [ 85.303286][ T5895] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 85.317837][ T5895] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 85.346862][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 85.354793][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.368703][ T5895] tipc: Node number set to 2842043372 [ 85.382693][ T5922] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.385281][ T6123] powermate: unknown product id 0240 [ 85.404417][ T6123] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 85.435172][ T6123] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 85.444018][ T5922] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 85.447179][ T6190] tipc: Resetting bearer [ 85.465791][ T5922] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.466367][ T5895] usb 1-1: USB disconnect, device number 2 [ 85.498301][ T6190] tipc: Disabling bearer [ 85.532499][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 85.554660][ T6123] usb 2-1: USB disconnect, device number 3 [ 85.561508][ T5922] usb 5-1: SerialNumber: syz [ 85.604113][ T5922] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 85.898309][ T6201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.947660][ T6201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.013652][ T89] usb 5-1: USB disconnect, device number 6 [ 86.677652][ T5946] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.837702][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 86.846391][ T5946] usb 1-1: config 2 has an invalid interface number: 197 but max is 0 [ 86.855127][ T5946] usb 1-1: config 2 has no interface number 0 [ 86.860287][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 86.860300][ T30] audit: type=1400 audit(1766231396.609:252): avc: denied { name_bind } for pid=6233 comm="syz.2.76" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 86.882173][ T5946] usb 1-1: New USB device found, idVendor=0856, idProduct=bc02, bcdDevice=86.76 [ 86.909451][ T30] audit: type=1400 audit(1766231396.629:253): avc: denied { write } for pid=6231 comm="syz.1.75" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 86.932493][ T30] audit: type=1400 audit(1766231396.649:254): avc: denied { node_bind } for pid=6233 comm="syz.2.76" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 87.077251][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.147248][ T89] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 87.245769][ T6240] overlayfs: missing 'workdir' [ 87.395300][ T5946] usb 1-1: string descriptor 0 read error: -71 [ 87.419404][ T5946] mos7840 1-1:2.197: missing endpoints [ 87.426776][ T89] usb 3-1: Using ep0 maxpacket: 32 [ 87.438094][ T89] usb 3-1: config 0 has no interfaces? [ 87.442294][ T5946] usb 1-1: USB disconnect, device number 3 [ 87.455633][ T89] usb 3-1: New USB device found, idVendor=045e, idProduct=d357, bcdDevice=a7.7c [ 87.475056][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.560899][ T89] usb 3-1: Product: syz [ 87.717890][ T89] usb 3-1: Manufacturer: syz [ 87.728499][ T89] usb 3-1: SerialNumber: syz [ 87.754320][ T89] usb 3-1: config 0 descriptor?? [ 87.807238][ T30] audit: type=1400 audit(1766231397.559:255): avc: denied { read write } for pid=6243 comm="syz.3.77" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.854538][ T30] audit: type=1400 audit(1766231397.579:256): avc: denied { open } for pid=6243 comm="syz.3.77" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.879829][ T6244] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 87.889535][ T6244] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 87.906945][ T30] audit: type=1400 audit(1766231397.579:257): avc: denied { ioctl } for pid=6243 comm="syz.3.77" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.986800][ T89] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.017692][ T6123] usb 3-1: USB disconnect, device number 6 [ 88.062136][ T30] audit: type=1400 audit(1766231397.809:258): avc: denied { create } for pid=6243 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.115808][ T30] audit: type=1400 audit(1766231397.849:259): avc: denied { sqpoll } for pid=6243 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.156975][ T89] usb 2-1: Using ep0 maxpacket: 16 [ 88.172147][ T89] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.183141][ T89] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.203836][ T89] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.213801][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 88.223246][ T89] usb 2-1: SerialNumber: syz [ 88.300459][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 88.334694][ T6250] veth0_macvtap: left promiscuous mode [ 88.940859][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.949101][ T6257] batadv_slave_0: entered promiscuous mode [ 88.955688][ T6257] batadv_slave_0: entered allmulticast mode [ 90.141040][ T30] audit: type=1400 audit(1766231399.889:260): avc: denied { mounton } for pid=6272 comm="syz.3.84" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 90.141080][ T6273] tmpfs: Bad value for 'mpol' [ 90.178598][ T89] usb 2-1: USB disconnect, device number 4 [ 90.190077][ T6275] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.428354][ T6123] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 90.591065][ T30] audit: type=1400 audit(1766231400.339:261): avc: denied { read } for pid=6274 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.077478][ T6123] usb 3-1: Using ep0 maxpacket: 8 [ 91.115253][ T6123] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 91.139602][ T6123] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 91.149566][ T6123] usb 3-1: Product: syz [ 91.155935][ T6123] usb 3-1: Manufacturer: syz [ 91.160894][ T6123] usb 3-1: SerialNumber: syz [ 91.171437][ T6123] usb 3-1: config 0 descriptor?? [ 91.188886][ T6289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=6289 comm=syz.3.88 [ 91.191903][ T6123] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 91.277845][ T6289] netlink: 'syz.3.88': attribute type 29 has an invalid length. [ 91.396518][ T6299] netlink: 32 bytes leftover after parsing attributes in process `syz.1.87'. [ 91.442280][ T6293] i2c i2c-0: Invalid block write size 255 [ 91.976909][ T6123] gspca_zc3xx: reg_r err -110 [ 91.981648][ T6123] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 92.605740][ T6312] nvme_fabrics: missing parameter 'transport=%s' [ 92.646824][ T6312] nvme_fabrics: missing parameter 'nqn=%s' [ 92.917166][ T5946] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 93.022052][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 93.032908][ T30] audit: type=1400 audit(1766231402.679:265): avc: denied { ioctl } for pid=6269 comm="syz.2.83" path="socket:[10131]" dev="sockfs" ino=10131 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.076842][ T30] audit: type=1400 audit(1766231402.679:266): avc: denied { connect } for pid=6269 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.153341][ T30] audit: type=1400 audit(1766231402.679:267): avc: denied { write } for pid=6269 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.206819][ T5946] usb 5-1: device descriptor read/64, error -71 [ 93.217614][ T30] audit: type=1400 audit(1766231402.729:268): avc: denied { bind } for pid=6269 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.285563][ T30] audit: type=1400 audit(1766231402.729:269): avc: denied { name_bind } for pid=6269 comm="syz.2.83" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 93.332054][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.94'. [ 93.358241][ T30] audit: type=1400 audit(1766231402.729:270): avc: denied { node_bind } for pid=6269 comm="syz.2.83" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 93.457483][ T5946] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 93.462119][ T30] audit: type=1400 audit(1766231402.899:271): avc: denied { create } for pid=6269 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.527064][ T30] audit: type=1400 audit(1766231402.939:272): avc: denied { write } for pid=6269 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.576842][ T30] audit: type=1400 audit(1766231403.079:273): avc: denied { bind } for pid=6311 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.606899][ T5946] usb 5-1: device descriptor read/64, error -71 [ 93.737023][ T5946] usb usb5-port1: attempt power cycle [ 93.903082][ T6327] syz.3.96 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.914838][ T30] audit: type=1400 audit(1766231403.659:274): avc: denied { create } for pid=6326 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.036800][ T790] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.076913][ T5946] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 94.097799][ T5946] usb 5-1: device descriptor read/8, error -71 [ 94.187356][ T790] usb 1-1: too many configurations: 164, using maximum allowed: 8 [ 94.205153][ T790] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 94.214926][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.225991][ T790] usb 1-1: config 0 descriptor?? [ 94.233186][ T790] usb 1-1: bad CDC descriptors [ 94.309319][ T6291] usb 3-1: USB disconnect, device number 7 [ 94.346823][ T5946] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 94.387270][ T5946] usb 5-1: device descriptor read/8, error -71 [ 94.617214][ T5946] usb usb5-port1: unable to enumerate USB device [ 94.717598][ T5946] usb 1-1: USB disconnect, device number 4 [ 95.844455][ T6356] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6356 comm=syz.4.104 [ 96.662855][ T5946] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 97.917838][ T5946] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 97.928013][ T790] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 97.941047][ T5946] usb 1-1: config 0 has no interface number 0 [ 97.950438][ T5946] usb 1-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 97.969803][ T5946] usb 1-1: config 0 interface 128 has no altsetting 0 [ 97.976351][ T6382] trusted_key: syz.1.109 sent an empty control message without MSG_MORE. [ 98.100677][ T5946] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 98.116842][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.124850][ T5946] usb 1-1: Product: syz [ 98.158417][ T790] usb 5-1: device descriptor read/64, error -71 [ 98.171554][ T5946] usb 1-1: Manufacturer: syz [ 98.186812][ T5946] usb 1-1: SerialNumber: syz [ 98.218362][ T5946] usb 1-1: config 0 descriptor?? [ 98.248296][ T5946] radio-si470x 1-1:0.128: could not find interrupt in endpoint [ 98.255889][ T5946] radio-si470x 1-1:0.128: probe with driver radio-si470x failed with error -5 [ 98.307190][ T5946] usbhid 1-1:0.128: couldn't find an input interrupt endpoint [ 98.427638][ T790] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 98.677940][ T790] usb 5-1: device descriptor read/64, error -71 [ 98.691925][ T6386] fuse: Bad value for 'user_id' [ 98.710049][ T6386] fuse: Bad value for 'user_id' [ 98.800743][ T6387] netlink: 36 bytes leftover after parsing attributes in process `syz.2.111'. [ 98.826957][ T790] usb usb5-port1: attempt power cycle [ 99.260404][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 99.260415][ T30] audit: type=1400 audit(1766231409.009:291): avc: denied { write } for pid=6389 comm="syz.3.112" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.413546][ T30] audit: type=1400 audit(1766231409.009:292): avc: denied { name_connect } for pid=6389 comm="syz.3.112" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 99.927719][ T30] audit: type=1400 audit(1766231409.299:293): avc: denied { connect } for pid=6392 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.306127][ T30] audit: type=1400 audit(1766231409.929:294): avc: denied { create } for pid=6400 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.372132][ T30] audit: type=1400 audit(1766231409.929:295): avc: denied { ioctl } for pid=6400 comm="syz.2.115" path="socket:[11559]" dev="sockfs" ino=11559 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.689176][ T6291] usb 1-1: USB disconnect, device number 5 [ 101.227446][ T6431] atomic_op ffff888053595998 conn xmit_atomic 0000000000000000 [ 101.421981][ T30] audit: type=1400 audit(1766231410.969:296): avc: denied { create } for pid=6420 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.422147][ T30] audit: type=1400 audit(1766231410.969:297): avc: denied { bind } for pid=6420 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.422258][ T30] audit: type=1400 audit(1766231410.969:298): avc: denied { write } for pid=6420 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.529123][ T6428] netlink: 32 bytes leftover after parsing attributes in process `syz.1.118'. [ 101.571392][ T30] audit: type=1400 audit(1766231411.319:299): avc: denied { create } for pid=6417 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.672343][ T5923] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 101.866181][ T30] audit: type=1400 audit(1766231411.609:300): avc: denied { setopt } for pid=6443 comm="syz.2.123" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.928396][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 101.986816][ T5923] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 102.036557][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.055013][ T5923] usb 5-1: config 0 descriptor?? [ 102.078809][ T6424] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 102.286885][ T6123] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 102.458037][ T6123] usb 4-1: no configurations [ 102.466905][ T6123] usb 4-1: can't read configurations, error -22 [ 102.626856][ T6123] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 102.977369][ T6123] usb 4-1: no configurations [ 102.982426][ T6123] usb 4-1: can't read configurations, error -22 [ 102.989861][ T6123] usb usb4-port1: attempt power cycle [ 102.997437][ T5923] usbhid 5-1:0.0: can't add hid device: -71 [ 103.003451][ T5923] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 103.064036][ T5923] usb 5-1: USB disconnect, device number 14 [ 103.274754][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.130'. [ 103.346860][ T6123] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 103.368474][ T6123] usb 4-1: no configurations [ 103.373104][ T6123] usb 4-1: can't read configurations, error -22 [ 103.521602][ T6123] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 103.571410][ T6123] usb 4-1: no configurations [ 103.576041][ T6123] usb 4-1: can't read configurations, error -22 [ 103.588668][ T6463] overlayfs: failed to resolve './file1': -2 [ 103.603143][ T6123] usb usb4-port1: unable to enumerate USB device [ 104.202440][ T6487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.131'. [ 104.369251][ T6492] tmpfs: Bad value for 'mpol' [ 104.376767][ T6491] tmpfs: Bad value for 'mpol' [ 104.523058][ T5922] hid-generic 000C:0007:0800.0002: unknown main item tag 0x0 [ 104.660453][ T5922] hid-generic 000C:0007:0800.0002: unknown main item tag 0x0 [ 104.698833][ T5922] hid-generic 000C:0007:0800.0002: unknown main item tag 0x0 [ 104.709620][ T5922] hid-generic 000C:0007:0800.0002: unknown main item tag 0x0 [ 104.717494][ T5922] hid-generic 000C:0007:0800.0002: unknown main item tag 0x0 [ 104.727446][ T5922] hid-generic 000C:0007:0800.0002: unknown main item tag 0x0 [ 104.734905][ T5922] hid-generic 000C:0007:0800.0002: unknown main item tag 0x0 [ 104.742902][ T5922] hid-generic 000C:0007:0800.0002: unknown main item tag 0x0 [ 104.751263][ T5922] hid-generic 000C:0007:0800.0002: unknown main item tag 0x0 [ 104.759489][ T5922] hid-generic 000C:0007:0800.0002: unknown main item tag 0x0 [ 104.777349][ T5922] hid-generic 000C:0007:0800.0002: hidraw0: HID v100000.00 Device [syz1] on syz0 [ 104.892398][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 104.892414][ T30] audit: type=1400 audit(1766231414.629:305): avc: denied { ioctl } for pid=6504 comm="syz.2.136" path="socket:[10716]" dev="sockfs" ino=10716 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.502149][ T6517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.138'. [ 105.515707][ T6498] fido_id[6498]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.711906][ T6521] syz.1.140 uses obsolete (PF_INET,SOCK_PACKET) [ 105.720869][ T30] audit: type=1400 audit(1766231415.459:306): avc: denied { create } for pid=6520 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.947283][ T6524] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.141'. [ 106.016884][ T790] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 106.206828][ T5888] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 106.245962][ T790] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 106.262106][ T790] usb 3-1: config 0 has no interface number 0 [ 106.268812][ T790] usb 3-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 106.279295][ T790] usb 3-1: config 0 interface 99 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 106.289307][ T790] usb 3-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 106.301701][ T790] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 106.431255][ T5888] usb 2-1: config 0 has no interfaces? [ 106.729167][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.738033][ T790] usb 3-1: Product: syz [ 106.740934][ T5888] usb 2-1: New USB device found, idVendor=045e, idProduct=d357, bcdDevice=a7.7c [ 106.742236][ T790] usb 3-1: Manufacturer: syz [ 106.756430][ T790] usb 3-1: SerialNumber: syz [ 106.770213][ T790] usb 3-1: config 0 descriptor?? [ 106.777093][ T6519] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.787608][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.788447][ T790] ftdi_sio 3-1:0.99: FTDI USB Serial Device converter detected [ 106.816128][ T790] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 106.816738][ T5888] usb 2-1: Product: syz [ 106.846810][ T5888] usb 2-1: Manufacturer: syz [ 106.854603][ T5888] usb 2-1: SerialNumber: syz [ 106.872954][ T30] audit: type=1400 audit(1766231416.619:307): avc: denied { read } for pid=6534 comm="syz.4.145" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 106.901937][ T5888] usb 2-1: config 0 descriptor?? [ 106.923104][ T30] audit: type=1400 audit(1766231416.619:308): avc: denied { open } for pid=6534 comm="syz.4.145" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 106.972397][ T30] audit: type=1400 audit(1766231416.619:309): avc: denied { ioctl } for pid=6534 comm="syz.4.145" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 107.129930][ T30] audit: type=1400 audit(1766231416.879:310): avc: denied { bind } for pid=6523 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.173925][ T5888] usb 2-1: USB disconnect, device number 5 [ 107.185974][ T30] audit: type=1400 audit(1766231416.879:311): avc: denied { setopt } for pid=6523 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.207302][ T6544] tmpfs: Bad value for 'mpol' [ 107.329862][ T6549] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 107.359250][ T30] audit: type=1400 audit(1766231417.109:312): avc: denied { listen } for pid=6548 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.421026][ T30] audit: type=1400 audit(1766231417.109:313): avc: denied { accept } for pid=6548 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.445864][ T5888] usb 3-1: USB disconnect, device number 8 [ 107.455565][ T5888] ftdi_sio 3-1:0.99: device disconnected [ 107.464302][ T30] audit: type=1400 audit(1766231417.169:314): avc: denied { connect } for pid=6551 comm="syz.3.149" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.676838][ T790] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.836798][ T790] usb 4-1: device descriptor read/64, error -71 [ 108.076824][ T790] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.218258][ T790] usb 4-1: device descriptor read/64, error -71 [ 108.296834][ T5946] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 108.517452][ T790] usb usb4-port1: attempt power cycle [ 108.586776][ T5946] usb 1-1: device descriptor read/64, error -71 [ 108.638971][ T6572] netlink: 32 bytes leftover after parsing attributes in process `syz.4.154'. [ 108.856788][ T5946] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 108.876800][ T790] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 108.897360][ T790] usb 4-1: device descriptor read/8, error -71 [ 108.944986][ T6576] 9p: Bad value for 'rfdno' [ 108.996787][ T5946] usb 1-1: device descriptor read/64, error -71 [ 109.109173][ T5946] usb usb1-port1: attempt power cycle [ 109.169737][ T790] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 109.239906][ T790] usb 4-1: device descriptor read/8, error -71 [ 109.365993][ T790] usb usb4-port1: unable to enumerate USB device [ 109.457304][ T5946] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 109.494346][ T5946] usb 1-1: device descriptor read/8, error -71 [ 109.757634][ T5946] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 109.779817][ T5946] usb 1-1: device descriptor read/8, error -71 [ 109.907434][ T5946] usb usb1-port1: unable to enumerate USB device [ 109.954602][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 109.954617][ T30] audit: type=1400 audit(1766231419.699:319): avc: denied { bind } for pid=6598 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.675188][ T30] audit: type=1400 audit(1766231420.219:320): avc: denied { ioctl } for pid=6598 comm="syz.1.163" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 111.055277][ T30] audit: type=1326 audit(1766231420.799:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bbad8f749 code=0x7ffc0000 [ 111.148262][ T30] audit: type=1326 audit(1766231420.849:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3bbad8f749 code=0x7ffc0000 [ 111.342962][ T30] audit: type=1326 audit(1766231420.849:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bbad8f749 code=0x7ffc0000 [ 111.369823][ T30] audit: type=1326 audit(1766231420.849:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bbad8f749 code=0x7ffc0000 [ 111.495706][ T30] audit: type=1326 audit(1766231420.849:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3bbad8f749 code=0x7ffc0000 [ 111.636776][ T30] audit: type=1326 audit(1766231420.849:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.3.164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bbad8f749 code=0x0 [ 111.781254][ T30] audit: type=1400 audit(1766231420.949:327): avc: denied { read append } for pid=6602 comm="syz.3.164" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 111.885597][ T30] audit: type=1400 audit(1766231420.949:328): avc: denied { open } for pid=6602 comm="syz.3.164" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 111.912206][ T6618] netlink: 32 bytes leftover after parsing attributes in process `syz.4.166'. [ 112.239542][ T6631] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.295407][ T6631] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 113.624267][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 113.655689][ T6643] netlink: 'syz.2.173': attribute type 30 has an invalid length. [ 113.733365][ T2961] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.783012][ T2961] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.823431][ T2961] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.853756][ T2961] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.786202][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 114.833434][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'. [ 114.863732][ T6668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.179'. [ 115.026872][ T6668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.179'. [ 115.057105][ T6668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.179'. [ 115.200204][ T6673] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 115.223572][ T6675] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 115.239203][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 115.239218][ T30] audit: type=1400 audit(1766231424.989:336): avc: denied { append } for pid=6672 comm="syz.1.181" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.273161][ T6673] loop4: detected capacity change from 0 to 2560 [ 115.318523][ T6673] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 115.348120][ T6673] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 115.379645][ T6673] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 115.396924][ T6673] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 115.405936][ T6673] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 115.416027][ T6673] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 115.712316][ T30] audit: type=1400 audit(1766231425.259:337): avc: denied { ioctl } for pid=6676 comm="syz.4.183" path="socket:[11246]" dev="sockfs" ino=11246 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 115.748962][ T6673] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 115.757896][ T6673] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 115.766304][ T30] audit: type=1400 audit(1766231425.269:338): avc: denied { listen } for pid=6676 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 115.803085][ T6673] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 115.820070][ T6673] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 116.826098][ T6699] netlink: 32 bytes leftover after parsing attributes in process `syz.1.189'. [ 118.028775][ T5888] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.199176][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 118.205845][ T5888] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 118.249005][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.265667][ T5888] usb 2-1: config 0 descriptor?? [ 119.137853][ T5888] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 119.179089][ T5888] usb 2-1: USB disconnect, device number 6 [ 119.238322][ T6726] fido_id[6726]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 119.348719][ T30] audit: type=1400 audit(1766231429.069:339): avc: denied { nlmsg_read } for pid=6729 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.583251][ T6736] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 119.916923][ T5946] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 119.921525][ T30] audit: type=1400 audit(1766231429.499:340): avc: denied { shutdown } for pid=6733 comm="syz.4.198" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.150515][ T5946] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 120.178802][ T30] audit: type=1400 audit(1766231429.929:341): avc: denied { bind } for pid=6746 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.186782][ T5946] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 120.237315][ T6749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.201'. [ 120.365757][ T30] audit: type=1400 audit(1766231430.019:342): avc: denied { listen } for pid=6746 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.463741][ T5946] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.476171][ T5946] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.487001][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.496151][ T5946] usb 1-1: Product: syz [ 120.508301][ T5946] usb 1-1: Manufacturer: syz [ 120.508411][ T30] audit: type=1400 audit(1766231430.019:343): avc: denied { accept } for pid=6746 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.543010][ T5946] usb 1-1: SerialNumber: syz [ 120.607853][ T6757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.203'. [ 121.141434][ T30] audit: type=1400 audit(1766231430.889:344): avc: denied { map } for pid=6760 comm="syz.1.205" path="socket:[13584]" dev="sockfs" ino=13584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 122.553720][ T5946] usb 1-1: 0:2 : does not exist [ 122.599323][ T5946] usb 1-1: USB disconnect, device number 10 [ 124.035485][ T6797] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 124.047030][ T30] audit: type=1400 audit(1766231433.789:345): avc: denied { bind } for pid=6795 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.106819][ T30] audit: type=1400 audit(1766231433.789:346): avc: denied { node_bind } for pid=6795 comm="syz.2.214" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 124.234222][ T30] audit: type=1400 audit(1766231433.979:347): avc: denied { create } for pid=6804 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.235601][ T30] audit: type=1400 audit(1766231433.979:348): avc: denied { write } for pid=6804 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.238441][ T30] audit: type=1400 audit(1766231433.989:349): avc: denied { ioctl } for pid=6804 comm="syz.4.216" path="socket:[13638]" dev="sockfs" ino=13638 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.239622][ T6805] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 124.584509][ T6809] mmap: syz.1.217 (6809) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.310546][ T30] audit: type=1400 audit(1766231435.049:350): avc: denied { read } for pid=6815 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.658400][ T30] audit: type=1400 audit(1766231435.409:351): avc: denied { setopt } for pid=6822 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.897879][ T6826] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 125.954055][ T6827] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 126.054527][ T6826] team0: Port device netdevsim0 added [ 126.072199][ T30] audit: type=1400 audit(1766231435.759:352): avc: denied { connect } for pid=6822 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.695885][ T6827] team0: Port device netdevsim0 removed [ 126.828807][ T6848] netlink: 32 bytes leftover after parsing attributes in process `syz.4.224'. [ 127.069927][ T6827] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 128.107219][ T30] audit: type=1400 audit(1766231437.859:353): avc: denied { read } for pid=6871 comm="syz.0.230" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.177250][ T30] audit: type=1400 audit(1766231437.859:354): avc: denied { open } for pid=6871 comm="syz.0.230" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.230817][ T30] audit: type=1400 audit(1766231437.889:355): avc: denied { connect } for pid=6866 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.251648][ T30] audit: type=1400 audit(1766231437.949:356): avc: denied { shutdown } for pid=6866 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.767276][ T30] audit: type=1400 audit(1766231438.519:357): avc: denied { create } for pid=6881 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 128.816979][ T6882] syz_tun: entered allmulticast mode [ 128.832548][ T6882] dvmrp8: entered allmulticast mode [ 128.840847][ T30] audit: type=1400 audit(1766231438.549:358): avc: denied { write } for pid=6881 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 128.911564][ T6881] syz_tun: left allmulticast mode [ 128.963516][ T30] audit: type=1400 audit(1766231438.709:359): avc: denied { mount } for pid=6885 comm="syz.4.233" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 129.057937][ T30] audit: type=1400 audit(1766231438.739:360): avc: denied { remount } for pid=6885 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 129.115837][ T6888] vlan2: entered promiscuous mode [ 129.126789][ T6888] hsr0: entered promiscuous mode [ 129.206481][ T6894] evm: overlay not supported [ 129.357491][ T5888] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 129.592114][ T5888] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 129.610008][ T5888] usb 2-1: config 0 has no interface number 0 [ 129.618570][ T5888] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 129.635187][ T5888] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.651440][ T5888] usb 2-1: config 0 interface 113 has no altsetting 0 [ 129.672710][ T5888] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 129.682943][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.693947][ T5888] usb 2-1: Product: syz [ 129.700399][ T5888] usb 2-1: Manufacturer: syz [ 129.705600][ T5888] usb 2-1: SerialNumber: syz [ 129.722673][ T976] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 129.775137][ T5888] usb 2-1: config 0 descriptor?? [ 129.860437][ C1] usb 2-1: NFC: Urb failure (status -71) [ 129.878427][ T5888] usb 2-1: NFC: Unable to get FW version [ 129.890643][ T5888] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90 [ 129.900703][ T976] usb 1-1: Using ep0 maxpacket: 8 [ 129.913314][ T976] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.932683][ T976] usb 1-1: config 179 has no interface number 0 [ 129.945821][ T976] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 129.958499][ T976] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 129.971655][ T976] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 129.991173][ T976] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 130.006480][ T976] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 130.020520][ T976] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 130.030017][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.031155][ T5946] usb 2-1: USB disconnect, device number 7 [ 130.048981][ T6907] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 130.176824][ T5819] Bluetooth: hci4: command 0x0405 tx timeout [ 130.241774][ T6919] netlink: 32 bytes leftover after parsing attributes in process `syz.2.243'. [ 130.304188][ T5888] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input9 [ 130.512049][ T5888] usb 1-1: USB disconnect, device number 11 [ 130.518013][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 130.518042][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 130.974852][ T6930] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 131.747149][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 131.747167][ T30] audit: type=1400 audit(1766231441.469:368): avc: denied { create } for pid=6946 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 132.220101][ T6948] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 132.235718][ T30] audit: type=1400 audit(1766231441.839:369): avc: denied { append } for pid=6946 comm="syz.1.250" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 132.319521][ T30] audit: type=1400 audit(1766231442.039:370): avc: denied { connect } for pid=6950 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 132.419518][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.425837][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.490197][ T30] audit: type=1400 audit(1766231442.049:371): avc: denied { write } for pid=6950 comm="syz.3.251" path="socket:[14154]" dev="sockfs" ino=14154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 132.532320][ T30] audit: type=1400 audit(1766231442.099:372): avc: denied { getopt } for pid=6946 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 132.552387][ T30] audit: type=1400 audit(1766231442.239:373): avc: denied { append } for pid=6955 comm="syz.1.254" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.621233][ T30] audit: type=1400 audit(1766231442.279:374): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 133.352643][ T30] audit: type=1400 audit(1766231442.629:375): avc: denied { create } for pid=6961 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 133.456862][ T30] audit: type=1400 audit(1766231442.649:376): avc: denied { mounton } for pid=6961 comm="syz.0.256" path="/52/file0" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.565836][ T30] audit: type=1400 audit(1766231443.189:377): avc: denied { ioctl } for pid=6975 comm="syz.2.258" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 133.937799][ T5946] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 134.205782][ T6994] 9p: Bad value for 'wfdno' [ 134.448958][ T7000] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 134.621032][ T7005] process 'syz.3.264' launched './file0' with NULL argv: empty string added [ 134.780887][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 134.804395][ T5946] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 134.866813][ T5946] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 134.885853][ T5946] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.897435][ T5946] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 134.913761][ T5946] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 135.141924][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.166356][ T5946] usb 3-1: Product: syz [ 135.173596][ T5946] usb 3-1: Manufacturer: syz [ 135.178687][ T5946] usb 3-1: SerialNumber: syz [ 135.242073][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 135.265839][ T5946] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input10 [ 135.446783][ T5946] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 135.455190][ T5946] (id 0x00) [ 135.635466][ T5946] rc_core: IR keymap rc-imon-pad not found [ 135.641865][ T5946] Registered IR keymap rc-empty [ 135.649340][ T5946] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 135.666767][ T5946] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 135.680418][ T5946] imon:send_packet: packet tx failed (-71) [ 135.696909][ T5946] imon 3-1:155.0: remote input dev register failed [ 135.718844][ T5946] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 136.678196][ T5946] imon 3-1:155.0: unable to initialize intf0, err 0 [ 136.684834][ T5946] imon:imon_probe: failed to initialize context! [ 136.846953][ T5946] imon 3-1:155.0: unable to register, err -19 [ 136.885236][ T5946] usb 3-1: USB disconnect, device number 9 [ 136.924909][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 136.924919][ T30] audit: type=1400 audit(1766231446.669:381): avc: denied { bind } for pid=7061 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.090123][ T30] audit: type=1400 audit(1766231446.749:382): avc: denied { write } for pid=7061 comm="syz.3.272" path="socket:[14345]" dev="sockfs" ino=14345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.153410][ T30] audit: type=1400 audit(1766231446.759:383): avc: denied { ioctl } for pid=7068 comm="syz.0.274" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 137.300447][ T30] audit: type=1400 audit(1766231446.879:384): avc: denied { connect } for pid=7061 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.320699][ T30] audit: type=1400 audit(1766231446.889:385): avc: denied { create } for pid=7061 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 137.361273][ T30] audit: type=1400 audit(1766231446.889:386): avc: denied { connect } for pid=7061 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 138.126783][ T5946] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 138.218898][ T9] libceph: connect (1)[c::]:6789 error -101 [ 138.306127][ T7093] tmpfs: Bad value for 'mpol' [ 138.346874][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 138.880989][ T7096] capability: warning: `syz.0.280' uses deprecated v2 capabilities in a way that may be insecure [ 138.921167][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 138.949182][ T5946] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 138.958593][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.966600][ T5946] usb 5-1: Product: syz [ 138.978311][ T7087] ceph: No mds server is up or the cluster is laggy [ 138.985809][ T5946] usb 5-1: Manufacturer: syz [ 138.995965][ T5946] usb 5-1: SerialNumber: syz [ 139.056848][ T790] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 139.137491][ T5946] usb 5-1: config 0 descriptor?? [ 139.142535][ T30] audit: type=1400 audit(1766231448.869:387): avc: denied { checkpoint_restore } for pid=7085 comm="syz.0.280" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.197732][ T5946] gspca_main: se401-2.14.0 probing 047d:5003 [ 139.236803][ T790] usb 2-1: Using ep0 maxpacket: 16 [ 139.248926][ T790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.267285][ T790] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.279236][ T790] usb 2-1: config 1 has no interface number 1 [ 139.286793][ T30] audit: type=1400 audit(1766231449.029:388): avc: denied { setopt } for pid=7099 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 139.334487][ T790] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 139.361106][ T790] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.391212][ T790] usb 2-1: config 1 interface 2 has no altsetting 0 [ 139.391738][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.407595][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.429231][ T790] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.471887][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.482458][ T790] usb 2-1: Product: syz [ 139.493565][ T790] usb 2-1: Manufacturer: syz [ 139.507466][ T790] usb 2-1: SerialNumber: syz [ 139.611257][ T5946] gspca_se401: Wrong descriptor type [ 139.646776][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 139.963738][ T5868] usb 5-1: USB disconnect, device number 15 [ 140.017761][ T9] usb 1-1: device descriptor read/64, error -71 [ 140.094395][ T7115] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 140.257185][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 140.397080][ T9] usb 1-1: device descriptor read/64, error -71 [ 140.550398][ T9] usb usb1-port1: attempt power cycle [ 140.842915][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.285'. [ 141.218905][ T790] usb 2-1: selecting invalid altsetting 0 [ 141.224871][ T9] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 141.287434][ T9] usb 1-1: device descriptor read/8, error -71 [ 141.303586][ T790] usb 2-1: USB disconnect, device number 8 [ 141.356653][ T7124] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 108 [ 141.361260][ T6131] udevd[6131]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.587568][ T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 141.628268][ T9] usb 1-1: device descriptor read/8, error -71 [ 141.751843][ T9] usb usb1-port1: unable to enumerate USB device [ 141.857088][ T790] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 142.009369][ T790] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 142.027218][ T790] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.046525][ T790] usb 2-1: config 0 has no interface number 0 [ 142.067544][ T790] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 142.092977][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.133291][ T790] usb 2-1: Product: syz [ 142.140389][ T790] usb 2-1: Manufacturer: syz [ 142.148301][ T790] usb 2-1: SerialNumber: syz [ 142.158485][ T790] usb 2-1: config 0 descriptor?? [ 142.172962][ T790] hub 2-1:0.31: bad descriptor, ignoring hub [ 142.194249][ T790] hub 2-1:0.31: probe with driver hub failed with error -5 [ 142.215169][ T790] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 142.239842][ T790] uvcvideo 2-1:0.31: No valid video chain found. [ 142.491627][ T5888] usb 2-1: USB disconnect, device number 9 [ 142.527739][ T7151] netlink: 'syz.2.291': attribute type 33 has an invalid length. [ 142.595584][ T7151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.291'. [ 142.645578][ T7157] lo speed is unknown, defaulting to 1000 [ 142.661395][ T7157] lo speed is unknown, defaulting to 1000 [ 142.680583][ T7157] lo speed is unknown, defaulting to 1000 [ 142.717234][ T7157] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 142.797710][ T7157] lo speed is unknown, defaulting to 1000 [ 142.837490][ T7157] lo speed is unknown, defaulting to 1000 [ 142.844011][ T7157] lo speed is unknown, defaulting to 1000 [ 142.919241][ T7157] lo speed is unknown, defaulting to 1000 [ 142.935672][ T7157] lo speed is unknown, defaulting to 1000 [ 142.952317][ T7157] lo speed is unknown, defaulting to 1000 [ 143.089120][ T7164] ªªªªªª: renamed from lo (while UP) [ 143.254040][ T7167] !: renamed from dummy0 (while UP) [ 143.272194][ T30] audit: type=1400 audit(1766231453.019:389): avc: denied { write } for pid=7158 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 143.970318][ T7182] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 144.683576][ T7199] netlink: 277 bytes leftover after parsing attributes in process `syz.0.304'. [ 144.900510][ T7200] netlink: 'syz.0.304': attribute type 2 has an invalid length. [ 145.468294][ T5819] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 145.478946][ T5819] Bluetooth: hci0: Injecting HCI hardware error event [ 145.489363][ T5819] Bluetooth: hci0: hardware error 0x00 [ 146.044352][ T30] audit: type=1400 audit(1766231455.789:390): avc: denied { setopt } for pid=7222 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.216799][ T5868] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 146.406064][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 146.427050][ T6291] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 146.467273][ T5868] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 146.490148][ T5868] usb 5-1: config 252 has no interface number 0 [ 146.536231][ T5868] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.638525][ T5868] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 146.648253][ T6291] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.665236][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.668525][ T6291] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 146.715869][ T5868] usb 5-1: Product: syz [ 146.723265][ T6291] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 146.733113][ T5868] usb 5-1: Manufacturer: syz [ 146.733719][ T6291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.755754][ T5868] usb 5-1: SerialNumber: syz [ 146.762577][ T6291] usb 4-1: config 0 descriptor?? [ 146.803371][ T5868] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 147.076304][ T4165] usb 5-1: Failed to submit usb control message: -71 [ 147.078643][ T79] usb 5-1: USB disconnect, device number 16 [ 147.091177][ T4165] usb 5-1: unable to send the bmi data to the device: -71 [ 147.093016][ T6291] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 147.106276][ T4165] usb 5-1: unable to get target info from device [ 147.115968][ T4165] usb 5-1: could not get target info (-71) [ 147.122274][ T4165] usb 5-1: could not probe fw (-71) [ 147.269494][ T6291] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 147.301091][ T6291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.331260][ T6291] usb 2-1: config 0 descriptor?? [ 147.454640][ T6291] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 147.796826][ T5819] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 147.817868][ T6291] cpia1 2-1:0.0: unexpected state after lo power cmd: 80 [ 147.886824][ T79] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 148.038825][ T79] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.048029][ T79] usb 3-1: config 0 has no interface number 0 [ 148.056096][ T79] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 148.071950][ T79] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 148.077723][ T30] audit: type=1400 audit(1766231457.829:391): avc: denied { write } for pid=7256 comm="syz.0.319" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 148.083263][ T79] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.109240][ T7259] Cannot find add_set index 0 as target [ 148.115338][ T79] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.132606][ T79] usb 3-1: config 0 descriptor?? [ 148.140374][ T7248] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.156397][ T79] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 148.219548][ T6291] cpia1 2-1:0.0: only firmware version 1 is supported (got: 135) [ 148.437207][ T5868] usb 2-1: USB disconnect, device number 10 [ 149.247074][ T6291] usb 4-1: USB disconnect, device number 10 [ 149.490725][ T7272] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 150.393199][ T5868] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 150.718427][ T6291] usb 3-1: USB disconnect, device number 10 [ 150.764050][ T5868] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 150.835789][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 150.896446][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 150.963036][ T5868] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 151.085527][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.132028][ T5868] usb 5-1: config 0 descriptor?? [ 151.144497][ T7279] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 151.396903][ T790] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 151.609173][ T790] usb 4-1: Invalid ep0 maxpacket: 16 [ 151.733933][ T7279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.773931][ T7279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.806791][ T790] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 151.820533][ T5868] usbhid 5-1:0.0: can't add hid device: -71 [ 151.834051][ T5868] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 151.848225][ T5868] usb 5-1: USB disconnect, device number 17 [ 151.986765][ T790] usb 4-1: Invalid ep0 maxpacket: 16 [ 151.996667][ T790] usb usb4-port1: attempt power cycle [ 152.014632][ T30] audit: type=1400 audit(1766231461.759:392): avc: denied { create } for pid=7305 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 152.074574][ T7305] delete_channel: no stack [ 152.080224][ T7305] delete_channel: no stack [ 152.083541][ T30] audit: type=1400 audit(1766231461.819:393): avc: denied { setopt } for pid=7305 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 152.337724][ T790] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 152.376910][ T79] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 152.377906][ T790] usb 4-1: Invalid ep0 maxpacket: 16 [ 152.516840][ T790] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 152.528999][ T79] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.557571][ T790] usb 4-1: Invalid ep0 maxpacket: 16 [ 152.563400][ T790] usb usb4-port1: unable to enumerate USB device [ 152.660496][ T6291] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 152.666810][ T30] audit: type=1326 audit(1766231462.409:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0623d8f749 code=0x7ffc0000 [ 152.670053][ T7318] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 152.692637][ T30] audit: type=1326 audit(1766231462.409:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0623d8f749 code=0x7ffc0000 [ 152.693755][ T79] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.704543][ T30] audit: type=1326 audit(1766231462.409:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0623d8f749 code=0x7ffc0000 [ 152.790038][ T79] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 152.799308][ T79] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.855557][ T7326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.337'. [ 152.965592][ T6291] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.987277][ T6291] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.138653][ T79] usb 2-1: config 0 descriptor?? [ 153.184404][ T6291] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 153.194846][ T6291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.207859][ T6291] usb 5-1: config 0 descriptor?? [ 153.308440][ T30] audit: type=1400 audit(1766231463.029:397): avc: denied { setopt } for pid=7320 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.369906][ T7333] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 153.613346][ T7337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1027 sclass=netlink_route_socket pid=7337 comm=syz.2.340 [ 153.879066][ T79] hid-led 0003:1D34:000A.0004: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 153.950827][ T79] hid-led 0003:1D34:000A.0004: Dream Cheeky Webmail Notifier initialized [ 154.117794][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.130422][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.196795][ T79] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 154.236325][ T7353] input: syz1 as /devices/virtual/input/input12 [ 154.376934][ T79] usb 3-1: Using ep0 maxpacket: 32 [ 154.419880][ T79] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.432251][ T79] usb 3-1: config 0 has no interface number 0 [ 154.452668][ T79] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 154.463852][ T79] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.473913][ T79] usb 3-1: Product: syz [ 154.512386][ T79] usb 3-1: Manufacturer: syz [ 154.518385][ T79] usb 3-1: SerialNumber: syz [ 154.544183][ T79] usb 3-1: config 0 descriptor?? [ 154.569766][ T5868] usb 2-1: USB disconnect, device number 11 [ 154.602039][ T79] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 154.634288][ T79] usb 3-1: selecting invalid altsetting 1 [ 154.650096][ T79] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 154.666358][ T7360] loop6: detected capacity change from 0 to 2640 [ 154.709505][ T7360] buffer_io_error: 312 callbacks suppressed [ 154.709521][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.722138][ T79] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 154.744244][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.747480][ T79] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 154.761670][ T79] usb 3-1: media controller created [ 154.767895][ T30] audit: type=1400 audit(1766231464.519:398): avc: denied { mount } for pid=7340 comm="syz.2.341" name="/" dev="ramfs" ino=15686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 154.800034][ T7364] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 154.810094][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.818827][ T7364] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 154.827608][ T79] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.848618][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.848712][ T7364] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 154.870051][ T7364] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 154.886519][ T7364] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 154.905736][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.960740][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.975930][ T7364] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 154.988610][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.997038][ T7364] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 155.008521][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.017218][ T7360] ldm_validate_partition_table(): Disk read failed. [ 155.024255][ T7364] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 155.035919][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.044876][ T7360] Buffer I/O error on dev loop6, logical block 0, async page read [ 155.054946][ T7360] Dev loop6: unable to read RDB block 0 [ 155.065123][ T7360] loop6: unable to read partition table [ 155.074767][ T7360] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 155.522111][ T5868] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 155.675505][ T7375] vxlan0: left promiscuous mode [ 155.687079][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 155.692574][ T6291] usb 5-1: USB disconnect, device number 18 [ 155.693601][ T5868] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 155.710658][ T7375] vlan2: left promiscuous mode [ 155.717294][ T5868] usb 1-1: config 179 has no interface number 0 [ 155.723703][ T5868] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 155.735026][ T7375] hsr0: left promiscuous mode [ 155.741488][ T5868] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 155.779808][ T5868] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.791160][ T5868] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 155.802662][ T5868] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 155.816471][ T5868] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 155.874361][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.914487][ T7371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.953989][ T5868] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 156.287773][ T79] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 156.296360][ T79] zl10353_read_register: readreg error (reg=127, ret==-110) [ 156.368349][ T5868] usb 1-1: USB disconnect, device number 16 [ 156.626802][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 156.716017][ T5868] usb 3-1: USB disconnect, device number 11 [ 156.806760][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 156.834406][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.854271][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 156.868458][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.898755][ T9] usb 2-1: config 0 descriptor?? [ 157.402298][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.411088][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.182445][ T7403] 9p: Bad value for 'wfdno' [ 159.758852][ T30] audit: type=1400 audit(1766231469.049:399): avc: denied { bind } for pid=7408 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 159.838481][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 159.854309][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 159.866569][ T9] usb 2-1: USB disconnect, device number 12 [ 159.894905][ T7416] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 160.079785][ T7416] macsec1: entered promiscuous mode [ 160.085231][ T7416] macsec1: entered allmulticast mode [ 160.151827][ T7416] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 160.164071][ T30] audit: type=1326 audit(1766231469.909:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7417 comm="syz.1.361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6f8f749 code=0x0 [ 160.187610][ T7416] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 160.195080][ T7416] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 160.327050][ T5868] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 160.344915][ T30] audit: type=1400 audit(1766231470.089:401): avc: denied { getopt } for pid=7425 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 160.368706][ T30] audit: type=1400 audit(1766231470.109:402): avc: denied { read } for pid=7425 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.486967][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 160.496825][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 160.504635][ T5868] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 160.526927][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.550172][ T5868] usb 5-1: Product: syz [ 160.554653][ T5868] usb 5-1: Manufacturer: syz [ 160.560535][ T5868] usb 5-1: SerialNumber: syz [ 160.568145][ T5868] usb 5-1: config 0 descriptor?? [ 160.698929][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 160.705304][ T9] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 160.714347][ T9] usb 1-1: config 0 has no interface number 0 [ 160.722382][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 160.731721][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.740937][ T9] usb 1-1: Product: syz [ 160.745173][ T9] usb 1-1: Manufacturer: syz [ 160.749838][ T9] usb 1-1: SerialNumber: syz [ 160.756166][ T9] usb 1-1: config 0 descriptor?? [ 160.778273][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.788994][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.916827][ T5888] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 161.046791][ T5888] usb 4-1: device descriptor read/64, error -71 [ 161.164602][ T7423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.173435][ T7423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.199558][ T5868] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 161.268093][ T5868] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 161.279839][ T5868] usb 5-1: USB disconnect, device number 19 [ 161.286963][ T5888] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 161.366227][ T9] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 161.374492][ T9] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 161.388159][ T9] usb 1-1: USB disconnect, device number 17 [ 161.431118][ T5888] usb 4-1: device descriptor read/64, error -71 [ 161.492678][ T7447] netlink: 'syz.2.368': attribute type 12 has an invalid length. [ 161.504407][ T7446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.369'. [ 161.570390][ T5888] usb usb4-port1: attempt power cycle [ 162.196950][ T5888] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 162.243832][ T5888] usb 4-1: device descriptor read/8, error -71 [ 162.476795][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 162.536791][ T5888] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 162.561399][ T5888] usb 4-1: device descriptor read/8, error -71 [ 162.666755][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 162.697015][ T5888] usb usb4-port1: unable to enumerate USB device [ 162.773113][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.924034][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.935123][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 163.388540][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.402377][ T9] usb 5-1: config 0 descriptor?? [ 163.414533][ T9] hub 5-1:0.0: USB hub found [ 163.686958][ T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 164.357343][ T30] audit: type=1400 audit(1766231473.709:403): avc: denied { mount } for pid=7476 comm="syz.2.377" name="/" dev="autofs" ino=15259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 164.380872][ T30] audit: type=1400 audit(1766231474.129:404): avc: denied { create } for pid=7456 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.433076][ T30] audit: type=1400 audit(1766231474.149:405): avc: denied { write } for pid=7456 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.656892][ T30] audit: type=1400 audit(1766231474.409:406): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 164.760242][ T7485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.842175][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 164.857907][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 164.877136][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 164.890742][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 164.928891][ T7493] mkiss: ax0: crc mode is auto. [ 164.938391][ T30] audit: type=1400 audit(1766231474.689:407): avc: denied { search } for pid=5484 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.031701][ T30] audit: type=1400 audit(1766231474.689:408): avc: denied { search } for pid=5484 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.084916][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 165.109613][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 165.126380][ T7502] ======================================================= [ 165.126380][ T7502] WARNING: The mand mount option has been deprecated and [ 165.126380][ T7502] and is ignored by this kernel. Remove the mand [ 165.126380][ T7502] option from the mount to silence this warning. [ 165.126380][ T7502] ======================================================= [ 165.163596][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 165.175214][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 165.182180][ T7502] ocfs2: Bad value for 'barrier' [ 165.184844][ T30] audit: type=1400 audit(1766231474.689:409): avc: denied { search } for pid=5484 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.232306][ T9] usb 5-1: USB disconnect, device number 20 [ 165.275464][ T30] audit: type=1400 audit(1766231474.689:410): avc: denied { read } for pid=5484 comm="dhcpcd" name="n101" dev="tmpfs" ino=3605 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.349727][ T30] audit: type=1400 audit(1766231474.689:411): avc: denied { open } for pid=5484 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3605 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.516424][ T30] audit: type=1400 audit(1766231474.689:412): avc: denied { getattr } for pid=5484 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3605 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.540293][ T30] audit: type=1400 audit(1766231474.859:413): avc: denied { bind } for pid=7488 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 165.569237][ T30] audit: type=1400 audit(1766231474.859:414): avc: denied { connect } for pid=7488 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 165.597317][ T30] audit: type=1400 audit(1766231475.149:415): avc: denied { listen } for pid=7505 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 165.638421][ T7489] ceph: No mds server is up or the cluster is laggy [ 165.793456][ T79] libceph: connect (1)[c::]:6789 error -101 [ 165.799924][ T79] libceph: mon0 (1)[c::]:6789 connect error [ 166.423600][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 166.668298][ T30] audit: type=1326 audit(1766231476.419:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7533 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc1d8f749 code=0x7ffc0000 [ 166.804318][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 166.854511][ T7539] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 166.927132][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 167.076773][ T9] usb 5-1: device descriptor read/64, error -71 [ 167.316793][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 167.348880][ T7553] SELinux: failed to load policy [ 167.488637][ T9] usb 5-1: device descriptor read/64, error -71 [ 167.617726][ T9] usb usb5-port1: attempt power cycle [ 167.651901][ T79] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 167.704266][ T7572] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 167.803272][ T7575] lo speed is unknown, defaulting to 1000 [ 167.826833][ T79] usb 2-1: Using ep0 maxpacket: 16 [ 167.841134][ T79] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.870730][ T79] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.888192][ T79] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 167.912576][ T79] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.942471][ T79] usb 2-1: config 0 descriptor?? [ 167.997239][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 168.029434][ T9] usb 5-1: device descriptor read/8, error -71 [ 168.276822][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 168.297487][ T9] usb 5-1: device descriptor read/8, error -71 [ 168.378790][ T79] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 168.408279][ T9] usb usb5-port1: unable to enumerate USB device [ 168.966833][ T6291] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 168.986985][ T7566] 9p: Bad value for 'rfdno' [ 169.085360][ T79] usb 2-1: USB disconnect, device number 13 [ 169.151230][ T6291] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 169.162958][ T6291] usb 3-1: config 0 has no interface number 0 [ 169.286305][ T6291] usb 3-1: config 0 interface 41 has no altsetting 0 [ 169.772615][ T6291] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 169.772646][ T6291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.772671][ T6291] usb 3-1: Product: syz [ 169.772686][ T6291] usb 3-1: Manufacturer: syz [ 169.772701][ T6291] usb 3-1: SerialNumber: syz [ 169.775871][ T6291] usb 3-1: config 0 descriptor?? [ 170.042318][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 170.042332][ T30] audit: type=1400 audit(1766231479.789:479): avc: denied { shutdown } for pid=7588 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 170.080558][ T7595] input: syz1 as /devices/virtual/input/input14 [ 170.142209][ T6291] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 170.229992][ T6291] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 170.266863][ T30] audit: type=1400 audit(1766231479.819:480): avc: denied { listen } for pid=7588 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 170.270997][ T6291] usb 3-1: USB disconnect, device number 12 [ 170.291980][ T7599] capability: warning: `syz.0.407' uses 32-bit capabilities (legacy support in use) [ 170.373647][ T30] audit: type=1400 audit(1766231480.119:481): avc: denied { kexec_image_load } for pid=7597 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 170.398905][ T7604] trusted_key: encrypted_key: insufficient parameters specified [ 170.419988][ T30] audit: type=1400 audit(1766231480.169:482): avc: denied { getopt } for pid=7602 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 170.618264][ T7612] fuse: Bad value for 'user_id' [ 170.636980][ T7612] fuse: Bad value for 'user_id' [ 171.169778][ T30] audit: type=1400 audit(1766231480.919:483): avc: denied { connect } for pid=7625 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.232367][ T30] audit: type=1400 audit(1766231480.949:484): avc: denied { write } for pid=7625 comm="syz.4.414" path="socket:[16728]" dev="sockfs" ino=16728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.281716][ T30] audit: type=1400 audit(1766231480.959:485): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 171.841359][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.873755][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.540273][ T30] audit: type=1400 audit(1766231482.289:486): avc: denied { write } for pid=7639 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.848905][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.878518][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.981605][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.006861][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.082858][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.091659][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.099814][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.137428][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.155274][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.198286][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.216982][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.364802][ T7649] lo speed is unknown, defaulting to 1000 [ 173.513732][ T7655] netlink: 32 bytes leftover after parsing attributes in process `syz.4.421'. [ 173.741150][ T7657] gfs2: not a GFS2 filesystem [ 174.314567][ T36] bridge_slave_1: left allmulticast mode [ 174.331060][ T36] bridge_slave_1: left promiscuous mode [ 174.349346][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.386773][ T7098] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 174.433379][ T36] bridge_slave_0: left allmulticast mode [ 174.453249][ T36] bridge_slave_0: left promiscuous mode [ 174.588349][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.664228][ T7098] usb 2-1: device descriptor read/64, error -71 [ 174.916889][ T7098] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 175.083268][ T7669] GUP no longer grows the stack in syz.4.425 (7669): 200000004000-20000000a000 (200000002000) [ 175.094083][ T7098] usb 2-1: device descriptor read/64, error -71 [ 175.100537][ T7669] CPU: 0 UID: 0 PID: 7669 Comm: syz.4.425 Not tainted syzkaller #0 PREEMPT(full) [ 175.100563][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.100576][ T7669] Call Trace: [ 175.100582][ T7669] [ 175.100594][ T7669] dump_stack_lvl+0x16c/0x1f0 [ 175.100620][ T7669] gup_vma_lookup+0x1d2/0x220 [ 175.100640][ T7669] __get_user_pages+0x241/0x3590 [ 175.100664][ T7669] ? __pfx___schedule+0x10/0x10 [ 175.100685][ T7669] ? __pfx___get_user_pages+0x10/0x10 [ 175.100710][ T7669] get_user_pages_remote+0x243/0xab0 [ 175.100734][ T7669] ? __pfx_get_user_pages_remote+0x10/0x10 [ 175.100751][ T7669] ? __access_remote_vm+0x502/0x850 [ 175.100766][ T7669] ? kasan_check_range+0xbe/0x1b0 [ 175.100791][ T7669] __access_remote_vm+0x24d/0x850 [ 175.100812][ T7669] ? __pfx___access_remote_vm+0x10/0x10 [ 175.100832][ T7669] proc_pid_cmdline_read+0x4de/0x8e0 [ 175.100849][ T7669] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 175.100864][ T7669] ? vfs_readv+0x51f/0x8b0 [ 175.100880][ T7669] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 175.100893][ T7669] vfs_readv+0x5c1/0x8b0 [ 175.100912][ T7669] ? __pfx_vfs_readv+0x10/0x10 [ 175.100941][ T7669] ? __fget_files+0x20e/0x3c0 [ 175.100964][ T7669] ? do_preadv+0x1a6/0x270 [ 175.100977][ T7669] do_preadv+0x1a6/0x270 [ 175.100992][ T7669] ? __pfx_do_preadv+0x10/0x10 [ 175.101012][ T7669] do_syscall_64+0xcd/0xf80 [ 175.101031][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.101045][ T7669] RIP: 0033:0x7fefc1d8f749 [ 175.101058][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.101070][ T7669] RSP: 002b:00007fefc2c1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 175.101084][ T7669] RAX: ffffffffffffffda RBX: 00007fefc1fe6090 RCX: 00007fefc1d8f749 [ 175.101093][ T7669] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000b [ 175.101100][ T7669] RBP: 00007fefc1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 175.101108][ T7669] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 175.101115][ T7669] R13: 00007fefc1fe6128 R14: 00007fefc1fe6090 R15: 00007fff5744b448 [ 175.101134][ T7669] [ 175.427113][ T7098] usb usb2-port1: attempt power cycle [ 175.449762][ T5819] Bluetooth: hci2: command tx timeout [ 175.827218][ T7098] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 175.848299][ T7098] usb 2-1: device descriptor read/8, error -71 [ 175.904122][ T36] dvmrp8 (unregistering): left allmulticast mode [ 176.086806][ T7098] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 176.118620][ T7098] usb 2-1: device descriptor read/8, error -71 [ 176.261515][ T7098] usb usb2-port1: unable to enumerate USB device [ 176.285057][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.300568][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.312877][ T36] bond0 (unregistering): Released all slaves [ 176.338134][ T7649] chnl_net:caif_netlink_parms(): no params data found [ 176.464917][ T30] audit: type=1400 audit(1766231486.209:487): avc: denied { listen } for pid=7676 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.649336][ T30] audit: type=1400 audit(1766231486.399:488): avc: denied { read open } for pid=7684 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.684307][ T30] audit: type=1400 audit(1766231486.429:489): avc: denied { getattr } for pid=7684 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.011967][ T30] audit: type=1400 audit(1766231486.759:490): avc: denied { add_name } for pid=7683 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.167287][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.606875][ T5819] Bluetooth: hci2: command tx timeout [ 177.636973][ T30] audit: type=1400 audit(1766231486.759:491): avc: denied { create } for pid=7683 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.665292][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.686238][ T7649] bridge_slave_0: entered allmulticast mode [ 177.706819][ T30] audit: type=1400 audit(1766231486.759:492): avc: denied { write } for pid=7683 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=3741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.737798][ T30] audit: type=1400 audit(1766231486.759:493): avc: denied { append } for pid=7683 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=3741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.781064][ T7687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.427'. [ 177.803383][ T7649] bridge_slave_0: entered promiscuous mode [ 177.953306][ T36] hsr_slave_0: left promiscuous mode [ 177.989567][ T36] hsr_slave_1: left promiscuous mode [ 177.998926][ T30] audit: type=1326 audit(1766231487.749:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6f8f749 code=0x7ffc0000 [ 177.999076][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.108598][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.109286][ T30] audit: type=1326 audit(1766231487.749:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6f8f749 code=0x7ffc0000 [ 178.145360][ T7707] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 178.191204][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.212148][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.427'. [ 178.239503][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.244276][ T30] audit: type=1326 audit(1766231487.789:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7708 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ef6f8f749 code=0x7ffc0000 [ 178.344502][ T36] veth1_macvtap: left promiscuous mode [ 178.356414][ T36] veth0_macvtap: left promiscuous mode [ 178.370142][ T36] veth1_vlan: left promiscuous mode [ 178.377040][ T36] veth0_vlan: left promiscuous mode [ 179.555371][ T36] team0 (unregistering): Port device team_slave_1 removed [ 179.602501][ T36] team0 (unregistering): Port device team_slave_0 removed [ 179.626805][ T5819] Bluetooth: hci2: command tx timeout [ 181.085967][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.095995][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.118530][ T7649] bridge_slave_1: entered allmulticast mode [ 181.129129][ T7649] bridge_slave_1: entered promiscuous mode [ 181.251136][ T7649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.311549][ T7649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.406412][ T7649] team0: Port device team_slave_0 added [ 181.491113][ T7649] team0: Port device team_slave_1 added [ 181.557472][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.564442][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.638756][ T7649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.660644][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 181.660659][ T30] audit: type=1400 audit(1766231491.409:505): avc: denied { setopt } for pid=7739 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 181.670629][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.706833][ T5819] Bluetooth: hci2: command tx timeout [ 181.736743][ T30] audit: type=1400 audit(1766231491.439:506): avc: denied { listen } for pid=7739 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 181.800625][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.914113][ T7649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.027043][ T6291] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 182.074034][ T7649] hsr_slave_0: entered promiscuous mode [ 182.090358][ T7649] hsr_slave_1: entered promiscuous mode [ 182.431568][ T6291] usb 1-1: Using ep0 maxpacket: 32 [ 182.440459][ T6291] usb 1-1: config 2 has an invalid interface number: 197 but max is 0 [ 182.458857][ T6291] usb 1-1: config 2 has no interface number 0 [ 182.467012][ T6291] usb 1-1: New USB device found, idVendor=0856, idProduct=bc02, bcdDevice=86.76 [ 182.484516][ T6291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.742060][ T6291] usb 1-1: string descriptor 0 read error: -71 [ 182.791371][ T6291] mos7840 1-1:2.197: missing endpoints [ 182.853972][ T6291] usb 1-1: USB disconnect, device number 18 [ 183.142642][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 183.474205][ T7649] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 183.499724][ T7649] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 183.506830][ T7784] lo speed is unknown, defaulting to 1000 [ 183.590188][ T7649] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 183.615159][ T7649] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 184.681296][ T7649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.809784][ T30] audit: type=1400 audit(1766231494.529:507): avc: denied { setopt } for pid=7822 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.988311][ T7649] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.090765][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.097980][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.709314][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 185.709834][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 185.715448][ T5140] Bluetooth: hci1: command 0x0406 tx timeout [ 185.750145][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.757368][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.889388][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.454'. [ 186.940502][ T30] audit: type=1400 audit(1766231496.689:508): avc: denied { mounton } for pid=7843 comm="syz.1.454" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 186.972852][ T7846] ocfs2: Bad value for 'barrier' [ 187.182285][ T7649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.986096][ T7889] syz_tun: entered allmulticast mode [ 188.005825][ T7887] syz_tun: left allmulticast mode [ 188.182420][ T30] audit: type=1400 audit(1766231497.929:509): avc: denied { setopt } for pid=7900 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.232474][ T7649] veth0_vlan: entered promiscuous mode [ 188.670701][ T7649] veth1_vlan: entered promiscuous mode [ 188.789910][ T7649] veth0_macvtap: entered promiscuous mode [ 188.796627][ T7912] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 188.803446][ T7912] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 188.831184][ T7649] veth1_macvtap: entered promiscuous mode [ 188.849493][ T7912] vhci_hcd vhci_hcd.0: Device attached [ 188.895847][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.935067][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.996370][ T3547] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.016267][ T3547] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.087897][ T5868] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 189.102378][ T3547] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.116836][ T10] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 189.149960][ T3547] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.250912][ T7921] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 189.300616][ T10] usb 5-1: config 0 has no interfaces? [ 189.311658][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.340783][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.366463][ T10] usb 5-1: config 0 descriptor?? [ 189.373950][ T4107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.395057][ T4107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.430419][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.439066][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.493082][ T30] audit: type=1400 audit(1766231499.239:510): avc: denied { mounton } for pid=7649 comm="syz-executor" path="/root/syzkaller.Ypmxse/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 189.541503][ T7926] netlink: 736 bytes leftover after parsing attributes in process `syz.0.466'. [ 189.555907][ T7649] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 189.567973][ T7649] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 189.576358][ T7649] CPU: 0 UID: 0 PID: 7649 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 189.585784][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.595817][ T7649] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 189.601531][ T7649] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 189.621114][ T7649] RSP: 0018:ffffc9001b7bfae0 EFLAGS: 00010202 [ 189.627157][ T7649] RAX: dffffc0000000000 RBX: ffff8880585055a0 RCX: ffffffff826a4395 [ 189.635105][ T7649] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038 [ 189.643048][ T7649] RBP: ffff888058505638 R08: 0000000000000005 R09: 0000000000000000 [ 189.650992][ T7649] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff920036f7f6b [ 189.658936][ T7649] R13: 0000000000000000 R14: ffff88802a7f53a0 R15: 0000000000000038 [ 189.666879][ T7649] FS: 0000555589b73500(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 189.675783][ T7649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.682356][ T7649] CR2: 00007eff10c65da0 CR3: 000000005caf0000 CR4: 00000000003526f0 [ 189.690302][ T7649] Call Trace: [ 189.693556][ T7649] [ 189.696462][ T7649] __kernfs_new_node+0x7b4/0x990 [ 189.701379][ T7649] ? __pfx___kernfs_new_node+0x10/0x10 [ 189.706812][ T7649] ? find_held_lock+0x2b/0x80 [ 189.711469][ T7649] ? kernfs_root+0xee/0x2a0 [ 189.715947][ T7649] kernfs_new_node+0x13c/0x1e0 [ 189.720688][ T7649] ? kasan_save_track+0x14/0x30 [ 189.725514][ T7649] kernfs_create_dir_ns+0x4c/0x1a0 [ 189.730601][ T7649] cgroup_mkdir+0x40f/0x12e0 [ 189.735165][ T7649] ? __pfx_cgroup_mkdir+0x10/0x10 [ 189.740172][ T7649] kernfs_iop_mkdir+0x111/0x190 [ 189.745000][ T7649] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 189.750003][ T7649] vfs_mkdir+0x731/0xb60 [ 189.754224][ T7649] do_mkdirat+0x442/0x5e0 [ 189.758533][ T7649] ? __pfx_do_mkdirat+0x10/0x10 [ 189.763358][ T7649] ? getname_flags.part.0+0x1c5/0x550 [ 189.768704][ T7649] __x64_sys_mkdirat+0x83/0xb0 [ 189.773455][ T7649] do_syscall_64+0xcd/0xf80 [ 189.777935][ T7649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.783801][ T7649] RIP: 0033:0x7eff10d8de97 [ 189.788201][ T7649] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.807786][ T7649] RSP: 002b:00007ffeaaffd898 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 189.816191][ T7649] RAX: ffffffffffffffda RBX: 00007ffeaaffd8f0 RCX: 00007eff10d8de97 [ 189.824136][ T7649] RDX: 00000000000001ff RSI: 00007ffeaaffd8f0 RDI: 00000000ffffff9c [ 189.832081][ T7649] RBP: 0000000000000001 R08: 0000000000000017 R09: 00007ffeaaffd5e7 [ 189.840028][ T7649] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 189.847971][ T7649] R13: 0000000000000003 R14: 00007ffeaaffdd68 R15: 0000000000000000 [ 189.855932][ T7649] [ 189.858929][ T7649] Modules linked in: [ 189.863585][ T7649] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 189.876769][ T30] audit: type=1400 audit(1766231499.289:511): avc: denied { mounton } for pid=7649 comm="syz-executor" path="/root/syzkaller.Ypmxse/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 189.955904][ T7914] usbip_core: unknown command [ 189.966815][ T7914] vhci_hcd: unknown pdu 0 [ 189.971171][ T7914] usbip_core: unknown command [ 189.980700][ T7649] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 189.986555][ T7649] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 190.085272][ T7649] RSP: 0018:ffffc9001b7bfae0 EFLAGS: 00010202 [ 190.093692][ T7649] RAX: dffffc0000000000 RBX: ffff8880585055a0 RCX: ffffffff826a4395 [ 190.106736][ T5868] usb 41-1: device descriptor read/64, error -71 [ 190.113252][ T13] vhci_hcd vhci_hcd.4: stop threads [ 190.118925][ T13] vhci_hcd vhci_hcd.4: release socket [ 190.135985][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 190.141832][ T7649] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038 [ 190.171796][ T7649] RBP: ffff888058505638 R08: 0000000000000005 R09: 0000000000000000 [ 190.196991][ T7649] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff920036f7f6b [ 190.204996][ T7649] R13: 0000000000000000 R14: ffff88802a7f53a0 R15: 0000000000000038 [ 190.227160][ T7649] FS: 0000555589b73500(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 190.236142][ T7649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.306843][ T30] audit: type=1400 audit(1766231499.289:512): avc: denied { mounton } for pid=7649 comm="syz-executor" path="/root/syzkaller.Ypmxse/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 190.335082][ T5868] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 190.346737][ T7649] CR2: 00007f143f625ff8 CR3: 000000005caf0000 CR4: 00000000003526f0 [ 190.354757][ T7649] Kernel panic - not syncing: Fatal exception [ 190.362689][ T7649] Kernel Offset: disabled [ 190.367005][ T7649] Rebooting in 86400 seconds..