last executing test programs: 1m6.481307714s ago: executing program 2 (id=793): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) iopl(0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0xfff2, 0xfff1}}}, 0x2b}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x87) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x0, 0x103, 0x0) ptrace(0x10, 0x0) ptrace$getregs(0xe, 0x0, 0x4, &(0x7f0000002080)=""/4096) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = syz_io_uring_setup(0x4651, &(0x7f00000000c0)={0x0, 0x211a, 0x800, 0x4, 0x205}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r11, 0x3516, 0xc2de, 0x8, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 1m3.282554097s ago: executing program 2 (id=820): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6e}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x8}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = memfd_secret(0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x6, 0x2, {0x1, 0x2, 0x7, 0x2, 0x9}, 0x1}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000200)={0x8, 0x7, 0x1, 0x81, 0x1, [0xfffffff7, 0xfffffff9, 0xffffff6b, 0x81]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$phonet_pipe(r2, &(0x7f00000002c0)={0x23, 0x8, 0x7, 0x1}, 0x10) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000300)={0x9, 0xffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000340)={0x7, 0x1, 0x1}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000380)=0x8, 0x4) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) getpeername$netlink(r0, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r5 = syz_open_dev$radio(&(0x7f0000000940), 0x3, 0x2) r6 = gettid() statx(r1, &(0x7f0000000980)='./file0\x00', 0x2000, 0x800, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000ac0)=[0x0, 0xee00, 0xffffffffffffffff, 0x0, 0xee00, 0xee00]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000b00)={0x0, 0x0}) getresuid(&(0x7f0000000b80), &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0, 0x0}, &(0x7f0000000c80)=0xc) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000cc0)=0x0) r13 = getgid() r14 = fcntl$getown(r2, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000d00)={0x1, 0x924, {0xffffffffffffffff}, {0xee00}, 0x7, 0x2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$unix(r1, &(0x7f0000000f40)={&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000004c0)="d402447f64cf686cefb9a69cb9192b5f1c82239e0e2a9586f742c28b411e7d48b4a8b17dfd3e8f634104832cb1d48b8b2f8d69e010fb4dd5d42f9abc73f9b77a2cf3128cf4fe45d4c85d43bad6a66774c42e9d750a4fb860769b023c773ac06db47686ed43955ecc51307697289cc25161", 0x71}, {&(0x7f0000000540)="ae3f3a81433cfdb39b8f12373649f509cc5bec4df21956433edaf5942d379e74fb0da79eca5bed52e41d8aef8cb85e19b58873f52496922829806d534f7dba3e0b10dd0f53bed6fc0793a186f1a6ee7f60950453321511a5920c22141b8c00109c9793f85b3f5ba66ef9e3a93185a8ff573f675cb3d76504a551f66b01b315c16c2dc52da0fc35b085976c31fdfc", 0x8e}, {&(0x7f0000000600)="e39f205e7219d24e098e8cc1d2036e58f8a621381256e4260c4f65d13070b6654f94920234425402529c13bd55bc3f0c87dd", 0x32}, {&(0x7f0000000640)="3f9a8bf1b744ab5cf9818183aa004ddf7ed74785daed713fef8a62423b8ff8b0bd3c92b2898f01e7991ba32c76a433f17b4046e008fb56ed87d16ad600175f9016c35e6de8e1c48b89c0f7d4ce5cca2ffa76b07b973b697b9c469b37d207a13f3109d22f09c2c6889449c32df42e23fe728b33d586357c1c20b1ae1c87efeded5ff6c47b8ba8298f50d868add182bac313e9f56af217527368ee26c7c9e1267160b3a6a5d01edd300a4b", 0xaa}, {&(0x7f0000000700)="306ecbddded8e3906d2cd7", 0xb}, {&(0x7f0000000740)="5feeebb24ff25deaaba7e6a12166b20909e1cda16e685b8acfaf80b70b7d8c0e806c605f7c8f00824cdbab154381b4cc1a5d6b1b1168d08a", 0x38}, {&(0x7f0000000780)="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", 0xff}], 0x7, &(0x7f0000000e00)=[@rights={{0x2c, 0x1, 0x1, [r3, r2, r1, 0xffffffffffffffff, r2, r3, r3]}}, @rights={{0x30, 0x1, 0x1, [r2, r4, r0, r2, r5, r3, r3, r2]}}, @rights={{0x18, 0x1, 0x1, [r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x138, 0x881}, 0x44) 1m3.113528368s ago: executing program 2 (id=821): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv6_newrule={0x44, 0x20, 0x1, 0x8002002, 0x25dfdbfc, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004880}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697070f48a54c011ca36746e6c00002c0002801400030020010000000000000000e4665d4765000000000001140002000c0000000000000000"], 0x5c}}, 0x0) 1m2.146028192s ago: executing program 2 (id=824): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x8101c, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r3 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000431000/0x4000)=nil, 0x4000, 0xb635773f07ebbee2, 0x4000010, r2, 0x0) syz_clone(0x2111480, 0x0, 0x200, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1m1.731453672s ago: executing program 2 (id=826): prctl$PR_GET_TSC(0x19, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0}) 1m0.543590361s ago: executing program 2 (id=830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000014020000f8ffffffb703000000000000b70400000000001fb50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m0.221296715s ago: executing program 32 (id=830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000014020000f8ffffffb703000000000000b70400000000001fb50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.619547866s ago: executing program 4 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a00000005600050a00000000fddbdf250a0000008b000200256223c3f17fd8d6b41f52c9beb5ba49156e72b6ec6d9fa27f0b2a62eada4ece27b16dc74fa06c4926ff40adb88bcab94006d1f9e84c23345095ed185c12cb0131b3d9653b16ab4ec808580f6aa4f23be37184f11b75cc49c6e29338433dc085c33d886679017d7f22f6452e04317684528686b8ad9f88cc029c9aa03fe31dd18c07668f12075f00"], 0xa0}, 0x1, 0x0, 0x0, 0x884}, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="9e4aa4c07d192c34f0ab28f8dc69582227b99a06a74bede44e623b5f0e09bc13ff7292a6f773766ad22ae8cb1923ebb34a178002c68646ae1806883e6312b9fc5e88185d3c3f06efecfeaac0", 0x4c, 0x51, &(0x7f0000000180)={0xa, 0x4e23, 0x8001, @private1, 0xe}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r2, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) r4 = openat$urandom(0xffffffffffffff9c, 0x0, 0x482, 0x0) io_submit(0x0, 0x1, &(0x7f00000013c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8aa0, r4, 0x0, 0x0, 0x400, 0x0, 0x1}]) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) write$P9_RSTAT(r6, &(0x7f00000000c0)={0xa0, 0x7d, 0x5, {0x0, 0xe1, 0xff, 0x3, {0x20, 0x1, 0x5}, 0x4000000, 0x3, 0x6, 0x5, 0x2, ']$', 0x2, '${', 0x62, '\a\x86!\xdc#]\x1e\xcfU\xf7\xae\x04\xfc\xa7\xc2h\xd0\xa7\xb6\xe3\x01\xf4\xbb\xa67\x00&]\x91\xf0\xad\xb2\xef?\xfd\x8fN\xe0\xe1\x91Dn\xe5x\xfd4\xe6\xf1j\xc89G%e9\xb0\xfbr\xde\r!g,\xd4?\xd8\x17\x8f\xbfgw\xfdx%j\xc7^y\xb3\xf8s\x11\x94\xaa\xbc\xab\xeb\x11(\a\xae\xe7Px\xd2,W\xa7'}}, 0xa0) syz_usb_control_io(r5, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0xfd9b, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="94", 0x1}], 0x1, 0x0, 0x0, 0x5c656f613d3ffcde}}], 0x2, 0x4000045) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) close(0xffffffffffffffff) r7 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0xffffffff, 0x7fffffff, 0x84e1, 0x2f, 0x2007, 0x7, 0x5, 0xffe, 0x20000001, 0x1, 0x8500, 0x1003, 0x4, 0xffff, 0x10002, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0xf, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x4, 0x4, 0x8049]}) 8.177524382s ago: executing program 4 (id=1076): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x640001, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, 0x1d, 0x20, 0x70bd27, 0x25dfdbfc, {0x1a}, [@generic="e0ba04a156ab0aa1562ff4f63c68542cfd452c8f97173c09c1c548755bf0aaa40b71e149ea7c0d759e891ecb80a2bc1c2e51e7257e27b6934db050f0b6f1810057e108efff5926479ebdd77c2e94dbdd17c0b40100df265ca216b7913ea24062b52129ce1c888c0dae0cb16bf2b584439ba0d9763c3dd54180287b572cb22d307cac20754387d7dac03c8a9ed3c46b1d758eadba4600415ec706b868fa834e9762057fd1973215c26d35433a96c75ee8"]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001b00)=0x0) read$FUSE(r2, &(0x7f0000001b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000003b80)=0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000003bc0)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000003c00)='./file0\x00', &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r8 = getpgrp(0x0) fstat(r1, &(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgrp(0x0) statx(r1, &(0x7f0000004200)='./file0\x00', 0x100, 0x100, &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000004440)=0xe8) read$FUSE(r1, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006500)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000002c0)="ab235885a6019031ec42dd1b4e79ef1b00cdffbc0570b4d112b964c137a51d4064617ed4f2efe421fc27e5f9066da8ad5831271093c12032201526f63993a5e075f4550104543f8c846b5c53143e", 0x4e}, {&(0x7f0000000340)="2b2bc2eaefcec89fbe763d30c9acda95f3feef88ee89d8eb97214452300226615e52cb3cb29bf11e18921651d57f315ce06c03ba68d09550843f625d818cc4d5f410b03220db026054078f7b075d45fee8588ef2a673d166e58e382d282ee3741b34f6d72044262882a202", 0x6b}, {&(0x7f00000003c0)="6159035c8714cdb8da671ca6fe1333c973afc63c3ef3d6a6e6eae45c7ccd104c5ccdf552277dc659af768b9ed85587fa3517534220282bf8f7195f80dde0de694213d210a43721dc15067b529e440819ddca7850cd4c3d9dfd5f217cc6b906658536d51e8d5bd4618495ecf12199d20b1a17f7eeb7470aee1a06b9240fbe19327b2a7dbbd3d6412876cc31580476175b4ae235e69c884da2dfe8a6b80c33cf43e10e1735cd181ae3c5050712a33b75f53c72ad3007b14d37fe33db41c550c3124c10dd6bc86ac5d16772c1d4af44a2bda5", 0xd1}, {&(0x7f00000004c0)="ff516bb8c14c42053fb93f8a7bc32e1b584ff0f75730f52fe4a63cbb5e46de0fb430095e050f0825f1ed4e51fc00fca742a4e4d1af19dd06e59eff12489e96d89e083c4910061a49d77ac0543fb6379d17ff306045b9ae507af15cbe06a3cd37b0ee847ec2a9fada363b5b07cbcc4969048e5d6f328ee0be685ca51155434f9e2c5d77be691c0fe1abf8ca2ca831ece44c93501458d826", 0x97}], 0x4, 0x0, 0x0, 0x10}}, {{&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)="9c4a1cbb4ef59ef0998270e028290ced07f98a5761321e90edb7b265066d3bba8c9e", 0x22}, {&(0x7f0000000680)="21c5c1068623eb43ae0dd33b3dccebf67e69c94a4858b65a9df08122f7956e332619d54833f8706b7d38eefe898bf8f17d98b70e42ea82329a06859b5391f73d2ca8961a7ef9f7f6a6eff005481eb99716a7325fae5216515244cd97a2bae1499c304d7722ef75b35b53c7e4f540d5f0c7abf358ba1e316e280a9a9306d9d29a94457da75807852934c7e8cf37da", 0x8e}], 0x2, 0x0, 0x0, 0x4008805}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000000800)="2586c30ef5dfc23ddb6e6e2ad8223a36fe3d34a2532992b35a30f91adb45ba8058e2533ef2645bdaad95d1bf4ac84214d5ad757bd178ebb2f3fb39b02528d6a05ddc85bcd5f6d18f307fbe0807ca3c15de", 0x51}, {&(0x7f0000000880)="7b0ceba82219cc9b2f109e5181e3708b621c5372ce518ca7c82ce6af75ec4a28936265749be8390bc540b201c423d59d2e259d35646880a20de8f670dfe3e5b5cae9c1da050ddcbc081f2ce3be9f294a6ed5a48f88fe824c7ee4dab81525def69d3b343c8691c71b31a9c6a847b19c5b38fa78c3e1f2bf09ebfebf9a1edc9a8536e6e38249574f2037c02f32", 0x8c}, {&(0x7f0000000940)="a6e3073cade79afeb08c34b66764eecd292055b0663f788e44e424f6829d74bb15821eb376a500313edfef43265840cf9a89b53301f4130b852a088380f0ac8dae94afe799572768aa0960c47d2a53bc89794d6c27a7f6fed64ea83774a3b56cded7768941f64299660e9ce63fbc6dbd30b59f2279c11c630a9c57de95ee0436b7d1d299265014774bfc00f1f505e6804cec08b395026d7429f1e5e834a513dde4ab03428e9da7d641054f971334e2b3c254e08ba4a3a0220d4126678592a5a4eb3bedd5058912e117", 0xc9}, {&(0x7f0000000a40)="236228687493c68cfe2d79", 0xb}, {&(0x7f0000000a80)="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", 0x1000}], 0x5, &(0x7f0000003d40)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r1, r2, r2, 0xffffffffffffffff, r0, r1, r1, r0]}}], 0x90, 0x4000}}, {{&(0x7f0000003e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004180)=[{&(0x7f0000003e80)="9744b160c341097f5df1b104ffc7413f0985e5c7e0c9ac5fdc66e8b262cff45eb241b027dcbe8c95ddbcd3191e9755a0788a6150a1853f30e5d21690193dd02faf634d9705f1134b11189baedb9e5b17a5e9d24929623554e87a38258b48b36c8627e4f106f782939b4412b7e2e8e4105b60b8fc", 0x74}, {&(0x7f0000003f00)="b507a83ab78212954e9c9a5ba5c623e2824de8649dbabc7241c09a360090b4d9e10c4bd128b05510064f10762fde8b50edd47106e22272e258963878d95479635d4452f8298cb48682cdbb2ec8992ce94c6bb893e15eec171f403827c1db5720", 0x60}, {&(0x7f0000003f80)="f70ff2d1e89d103af153d64b433d054cf9c8cbd6d2de46f20b5be9300089531d84fb4842444e199ab55362d41cd36fe378372ef08b0fe4982071338b2bd5f3afe38cde8db78eb42aa3da0d633ecde0c40f3c8cc904a9dc24e924f7667cff00391bae910f4da084459561bd4cbca0283b067f1630f98896f42bfa269b74f6959e3786398e19ee2b5ef9d4f4bc7aec500c77d0fe5a9bf455ad2128894b4fa312dc7c5628adc3cb737726be03373551368ad3e12e3934869ba8", 0xb8}, {&(0x7f0000004040)="f34019025d89544af940d49c34e2d1b9a28c83960ce9392d192643ab217afee31e4be5f826d20323f439c23922172a4aa915df90fb1d72eca87241835b2dc34fb192834a5c9624024b6949fdded7b191c1324773693e611eac54492ab7b1c93315ef6e93fc640a55832df1c282c4f334420bc3e916aba0ab629610ef81bc191a27dd57663a8aa8526499eb2bb9f102749c150d16d24cddd5d2ed31267ce6b86a3c47fc8268cb6deda56f916985ac0c239859c55a0a000776e888e19fa54cd497667996c5a8afcedb2ba491cd4755ef3b301ad2e847a2364d7acd22731025da9ea01b575338bed99ff2b94e3505d4", 0xee}, {&(0x7f0000004140)="e12c5fe6f69aed7d4e3b56d4c8c84443681a234c1aec", 0x16}], 0x5, &(0x7f00000064c0)=[@cred={{0x1c, 0x1, 0x2, {r10, r11, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}], 0x40, 0x8081}}], 0x4, 0x81) r15 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r15, 0x2) close(r15) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000006640)={&(0x7f0000006600)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(r16, 0x0, 0x60, &(0x7f00000066c0)={'filter\x00', 0x7, 0x4, 0x3a8, 0x1d0, 0x1d0, 0x1d0, 0x2c0, 0x2c0, 0x2c0, 0x4, &(0x7f0000006680), {[{{@arp={@remote, @empty, 0x0, 0x0, 0x1, 0xd, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x0, 0x2, 0x7, 0x86, 0x1, 0x875, 'ip_vti0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x8808, 0x3}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x40, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0xe183, 0x5}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) mount$9p_tcp(&(0x7f0000006ac0), &(0x7f0000006b00)='./file0\x00', &(0x7f0000006b40), 0x100804, &(0x7f0000006b80)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@debug={'debug', 0x3d, 0x2}}, {@uname={'uname', 0x3d, 'NFQUEUE\x00'}}, {@noextend}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_eq={'fowner', 0x3d, r9}}]}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$nl_xfrm(r16, &(0x7f0000006e40)={&(0x7f0000006c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006e00)={&(0x7f0000006c40)=@polexpire={0x188, 0x1b, 0x300, 0x70bd28, 0x25dfdbfd, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x4e23, 0x6c79, 0x4e20, 0x59, 0xa, 0x0, 0x80, 0x11, r12, r6}, {0x3a4, 0x2, 0x6, 0xe837, 0x5, 0x6, 0xae}, {0x0, 0xada4, 0x2, 0xffffffff}, 0x8, 0x6e6bb8, 0x2, 0x0, 0x2, 0x1}, 0x7f}, [@algo_auth_trunc={0xb5, 0x14, {{'hmac(hmac(sha384))\x00'}, 0x348, 0x80, "73866c0d4ef3afccc5a7d49713717c6980277711e719e3b80e964ad443ffb580869d939cadf0146476c8427c1d389ed1bf81df2291f58cf2e3c01fdd2b0bfaf005c990d8e53f40ea89a3846c14835b27f54a67164aaef363e4664175095f5ee0dbebfd6ae8f78d4e04"}}, @proto={0x5, 0x19, 0x2b}, @etimer_thresh={0x8}]}, 0x188}, 0x1, 0x0, 0x0, 0x4040040}, 0x44) io_uring_register$IORING_REGISTER_PBUF_RING(r16, 0x16, &(0x7f0000007e80)={&(0x7f0000008000)={[{&(0x7f0000006e80)="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", 0x1000}]}, 0x1, 0x1}, 0x1) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000007ec0)=""/179, &(0x7f0000007f80)=0xb3) ioctl$KVM_GET_MSR_INDEX_LIST(r16, 0xc004ae02, &(0x7f0000007fc0)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 7.254963743s ago: executing program 4 (id=1079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000014020000f8ffffffb703000000000000b704000000000000b500001f8200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.800140505s ago: executing program 0 (id=1081): r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344}, 0x1, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xca, &(0x7f00000006c0)={@local, @empty, @val, {@ipv6={0x86dd, @tcp={0xe, 0x6, "802dba", 0x8c, 0x6, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, {[@hopopts={0x6c, 0x1, '\x00', [@jumbo, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x3}]}, @hopopts={0x3a, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}]}, @fragment={0x2f, 0x0, 0x7, 0x0, 0x0, 0x2, 0x67}], {{0x4e21, 0x4e24, r2, r5, 0x0, 0x0, 0x15, 0x10, 0x7, 0x0, 0x0, {[@generic={0x2, 0x11, "18b10022a3b7194da1c4fb07424d57"}, @exp_fastopen={0xfe, 0x8, 0xf989, "489c5aab"}, @sack={0x5, 0x16, [0x3, 0x8, 0x5, 0x9, 0x2]}, @exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x3}, @exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}]}}, {"958aaac51b188000"}}}}}}}, 0x0) ptrace(0x4207, r1) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x20058004) (async) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="680000000000000017010000020000004d0000007e083fddf121858766f8aeb061f94bef1818a2a7c5b361f17ca2e90d85bc89ed1a02ac7ac650528a766171403fd7da7aefeae55fa0645e207d6cd6c9ba3faab2631e8aebb720a9197eb062376a000000000000008800000000000000170100000200000071000000ec442c341ff379652e72413f737a6c80b214a7f5d902fa5969a22a7f27b6f25d03b1f3208c3b5981255be2989f663ca77845dbf33416bee9319838fa64d279e9c9411f08ef1ab6032879ae43361783ac9dd7a5c2777443b0e76d7eaa7b955e48579475cd76172a1505ce8e4fb9d982b23400000018000000000000001701000003000000010000000000000018000000000000001701000004000000010000000000000018000000000000001701000003000000000000000000000018000000000000001701000004000000f9ffffff00000000"], 0x150, 0x80}, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x800) (async) r8 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) (async) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x80}], 0x18}], 0x1, 0x40800) (async) recvmmsg$unix(r7, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}], 0x1}}], 0x1, 0x41, 0x0) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0040}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r9, 0x4, 0x80000}) 6.710463712s ago: executing program 4 (id=1083): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) readlink(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0x9}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x60, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0x8}}, @TCA_ROUTE4_ACT={0x4c, 0x6, [@m_gact={0x48, 0x10, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x9, 0x7, 0x3, 0xa43d}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r7}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8848}, 0x4004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x4e22, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) close_range(r4, 0xffffffffffffffff, 0x0) 6.65973836s ago: executing program 0 (id=1084): socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x29, 0xfffffffffffffffe) (async) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x29, 0xfffffffffffffffe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xb, 0x80c, 0x24) futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000100)=0x2, 0x2000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f00000000c0)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0xc45f5000) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0xc45f5000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) memfd_create(0x0, 0xe) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) shutdown(r4, 0x1) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f00000005c0)='//\xf2/\x06\b/\x18\x17I\x97\xa0!\x90)\x11\xc0/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmDv\xcb2W\x00\x00\x00\x00\x00}\xf3\x9d\xe4_\x05\x9cqf4Y^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeasW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.667405346s ago: executing program 1 (id=1086): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES64], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8922, &(0x7f0000000280)={'dummy0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r3, 0x0, 0x0, 0x401, 0x0) semop(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000000)=[{0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 5.662385506s ago: executing program 4 (id=1087): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$loop(0x0, 0x7fffffffffffffff, 0x2400) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000800)=0x1) 5.572172755s ago: executing program 3 (id=1088): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c01000010000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffe, 0x70c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0xfe, 0x1000000000000192, 0x0, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0x9}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x40804) 4.740455413s ago: executing program 0 (id=1089): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=0x0) syz_open_procfs(r3, &(0x7f0000000080)='net/igmp\x00') r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x41, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa0, 0x84}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000001040)=@known='system.sockprotoname\x00', &(0x7f0000001080)=""/5, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r9, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \b\v\x00\x00\x00}'], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.630373069s ago: executing program 3 (id=1090): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f00007e4000/0x3000)=nil, 0x3000) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) mlock(&(0x7f0000143000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a0563000000000000010902"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) write$sysctl(r0, &(0x7f0000000100)='2\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x184) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x10, 0xffffffffffffffff, 'id1\x00'}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000380)={0x0, 0x20000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@initdev}, &(0x7f0000000140)=0x14) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) 4.522904862s ago: executing program 1 (id=1091): r0 = socket$netlink(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) setuid(0x0) (async) sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x4000034) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080), 0x4) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_vs\x00') (async) select(0x40, &(0x7f0000000080)={0x2, 0x2, 0x823, 0x1f, 0x5, 0x2, 0x4, 0x80000000}, &(0x7f00000000c0)={0xd, 0x3, 0x70, 0x7, 0x36d2, 0x9, 0x2, 0xfffffffffffffffd}, 0x0, 0x0) (async) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 2.939301794s ago: executing program 5 (id=1094): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000014020000f8ffffffb703000000000000b704000000000000b500003f8200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.846874804s ago: executing program 5 (id=1095): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000740)='softirq_noise\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x5}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000bc0)={0xbf, 0x0, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x4000094, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5, 0x2}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}, {&(0x7f0000000680)="077319c4befebea2af873c83efd66c6b6df518cb79af589755d6147868802fdbfa0f679d44820e64bef86edcf5e3af6885a4a83830aeecc2a9daa6e45abfc80dbdb4426d15f1a4be44fb", 0x4a}], 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x1000) r8 = creat(&(0x7f0000000040)='./file0/file0\x00', 0xecf86c37d530490c) close(r8) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r7, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y=yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 2.714271738s ago: executing program 1 (id=1096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x0, 0x4, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ldst={0x0, 0x1, 0x6, 0x2, 0x4, 0x2, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000680)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x7, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000400)=[{0x2, 0x1, 0x10, 0x4}, {0x4, 0x3, 0xf, 0x3}], 0x10, 0x9}, 0x94) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r2, &(0x7f0000019440)=""/101, 0x65, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x79}]}, &(0x7f0000000040)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0x9, '\x00', r3, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) setrlimit(0x7, &(0x7f00000001c0)={0x5, 0xd}) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_emit_ethernet(0x1c, &(0x7f0000000240)={@random="c92752ede134", @local, @val={@val={0x88a8, 0x6, 0x1, 0x2}, {0x8100, 0x7, 0x0, 0x44}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x29, 0x14, 0x68, 0x0, 0x40, 0x2f, 0x0, @empty, @broadcast}}}}}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r8 = accept4$alg(r7, 0x0, 0x0, 0x80800) (async) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x2}]) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmmsg(r8, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000ac0)="9a", 0x1}], 0x1}}], 0x1, 0x90) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001100), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r10, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24044080}, 0x8000) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f00000017c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001780)={&(0x7f0000001680)={0xd0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3137}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeee4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d3e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5c5}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x125ebd75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcaf6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61d7bc0e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x623d8507}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60ad7118}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x81}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) 2.594790979s ago: executing program 1 (id=1097): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffdfa}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket$inet6(0xa, 0x6, 0x71) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) mknod$loop(&(0x7f0000000080)='./file2\x00', 0x10, 0x0) (async) mknod$loop(0x0, 0x2000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r4, 0x303, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0440c0}, 0x810) (async) sendmmsg$inet6(r3, 0x0, 0x0, 0x10) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304106000000000000109022400010000000009040000"], 0x0) 2.580800411s ago: executing program 3 (id=1098): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x95) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff0200000000000000000000000000018900"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x122, 0x0) shutdown(r4, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f", 0x6c, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000800000000", @ANYRES32, @ANYRES16=r7, @ANYBLOB], 0x50) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) 2.309601774s ago: executing program 4 (id=1099): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0xf0, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x2, 0x1, 0xe, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x252f, 0x3, 0xb}, {0x6, 0x24, 0x1a, 0x7a6, 0x3}, [@country_functional={0xc, 0x24, 0x7, 0x0, 0x81, [0x2, 0x0, 0x3]}, @mdlm_detail={0x76, 0x24, 0x13, 0xe, "d3718a109d76a6f58832ff7870788293410dc015d86e2528f533ccd923f37c70349c97d847dd9dd6a7d2bc1edc586f448e32fcbbb2265bc0cbefe8e13adb484fb8f47f2fd9cf451eed51c58ec8f5997e12a9ea609a9344a2573f728e41306439d8a2da16a3a6e1d855ad1f9e2c27d784a279"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x82, 0xef, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x80, 0x9, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x1, 0x3}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xe, 0x3, 0xf2, 0x20, 0x1}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "cf86958327aff3a159db2620a45973b5"}]}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43e}}, {0xf6, &(0x7f0000000500)=@string={0xf6, 0x3, "ae9d7360e8891853f1382285c4c86d8e1c54a8876d2c7bc32baa057ec3e6ff086bd4578f7553fdd57f2a839e206040524aab90f5c0df34f16c09847d62ac8acebc1f16aa2cb18c96383822551b5f92754cd008265dc682236ae410f780f51388e1e7e15856ddeb5fd19f638c5a6a2a4f2b4527f17cfdb3554da5dcd4a1315864f9284f1ff0937062e7d7779aa065430c56790f76a4d9a94e93ebcdffe83f844de35b3c5efdcdc15a92c5bf0b8ba7ed67dff25afa2f6941f4eaf2d447134fab584fa980684aec2dfa85f05102429b152b1a366c717c2901b3f3a21928fa185bdfeb954d408d571a660df0233c9c15403669f7edb1"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0xb4, &(0x7f0000000400)=@string={0xb4, 0x3, "316ef350c554801605a6dc5a622ff4dc5ceec9a43a7a1af49d296037f05d349ccadee5d3c67959d3f69ce27f0370a275d1445e8b4aa1085b36ba20c69bf867613f3da191cd293372da7966f51cf1961b11d441bba16bab0e6385fd2148d599fc11e8c474c54181a8f10790e37fbd7f1da9ea4754ba0ad4d5c61287f6aae641293012fd0c4a218061c08ce5520958023061fd484cda622a673f4b65e117b046e0bf5294d2e442051022ec5339f48561448b97"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x100a}}, {0x3b, &(0x7f0000000680)=@string={0x3b, 0x3, "877d1e82d1b30cbb0ac01ba85acf169b87ce6d2adc618b24dbb77830e77b724ce62ca2a48f8f6d1a7ea3a662906d7d102a58fa7be5741de839"}}, {0x69, &(0x7f00000006c0)=@string={0x69, 0x3, "0af8de05d48b703ca7a923238a77d24084b5967a018b9f60276ae0b54087c5195146cffae283bf5272a0b3e00daec3c90fbe34f0f4d45acb1cbcc86c9758903fe84c132186708ff1b9e1d0b93d51438860e2fa04835a18e21a337c2669cd51a89f83de2f015335"}}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000095d0e9009500000000dd3e0db50eb0622c4da764434400000000000000000089a86eca14ad8725f9fc8975b6c34977d59708534fd5dbd1aa2cc6fe775e45a8313820a02be9fd4b47df966718865ed37f42546438a18c3b4fd20250e5f61cd97ea6f2f1979f1c72ebf8ec9f791c8cfbea3ab25e52cb82d8367f2c8e0e32"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) 1.582975362s ago: executing program 5 (id=1100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c01000010000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffe, 0x70c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0xfe, 0x1000000000000192, 0x0, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0x9}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x40804) 1.513995513s ago: executing program 0 (id=1101): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0xc0, 0x7f, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x99, 0x43, 0xb2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0xc, 0x6}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x1, 0x10, 0x3, 0xff, 0xec}, 0xe4, &(0x7f00000003c0)=ANY=[@ANYBLOB="050fe400050a1003020c00020600009f1004e1a9e31518a26f8ee59616700711e61e2e9f13b808033d70c7a5f03c6635ba3150ca89619df357ad604952955c799deb0448d6b92458ec058546d7638865b2c34a8c4d72442bd50624d408e6000316aaa64196c6f35759119e9f89dd84dd625e05a815160d33086933465f7938cc9c1e1a1e9f7ad99925d84c6986f12d5df4717169780ba993c2dcbbaaf7851c49a11543a07a464b986d5017e6b1c203100b03100b3010037bb507bb13ba1b9360a5701238789dabab92fbaf24d7096d6e9137100243b8e5a47950446f87d493d42add7252"], 0x1, [{0x29, &(0x7f0000000240)=@string={0x29, 0x3, "7c22b36c6593492f6b709def08eb09e176f5a4fba0fb2df28294782302547ee37b519b1d6b0af5"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000100)) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x8, 0xb3, 0x340266bd, 0x80000001}) 734.417846ms ago: executing program 0 (id=1102): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x610080, 0x41) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) linkat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x800) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0xff, 0x0, 0x3, 0x9, 0x104, 0x7ff, 0xfffd, 0xec, 0x3903, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 546.641756ms ago: executing program 5 (id=1103): mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x91040, &(0x7f0000000080)={[{@nofavordynmods}], [{@pcr={'pcr', 0x3d, 0x2f}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '(${\'('}}, {@seclabel}, {@dont_hash}, {@audit}, {@context={'context', 0x3d, 'staff_u'}}]}) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa064810}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0xa4, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x55, 0x7, 0x1, 0x0, "20a984d196ca3aef9e86e25ea2a0061fb45918f3f907d88fbadf2a89be8dde49dbee29ac64dc3476b5b9f1612dc6f6ee4c7c4274a9f2f1fd2f04535ad516502dda23f319ed361245fe39a2c935d36bf1e3"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x1cc, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0xa7, 0x6, "47fcf185de686c2248764ebafa85b63b2ab55f7a628397ebcaae23c797d4bec23ec967e2bf022773278118db6614d7aa05cc9fe0c57e812f9181484d68d62c657fde41da1a9ad047e370174ae1e554b20eda0bdab59c77d1e011e9b9e61d49498ab30e2b6c8133ba0bd4fb703d8c7a2b7122360c037d963e75efc9c8df0ddc770fa3c5748993f935bbc958aaa0e8d2fe1d862363a298e20e839aec7e7496618b80b745"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xe4, 0x6, "5797a52cabdc314d03d238da8b77caedac0777b58038c61cfe1dab800a29626efd22bc816bb5ae80f2cf32a9e5bd99211388bcf202102fb1dee7556cd5666e65d7b53c1f4cb73160b450eb388e166f0ab91bf598b189c12a5336090656c5613abceb1ddab4661be3c12bf4de57c05c4b12a64fb08c287514f9e38dac6a2ceb54316594d9a9b4e464b45171f164e0faaeb2c9e157053592ac1d02b410bdbd4271476b31e7df7ea662f56563f759db42ebb53d08a3e3ec5c9077fdfc555bd6e7a98b2a86308af849cc6861c48cb56145c9eab76c09536828d05cbbe0dfb0554882"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0xa4, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x8d, 0x6, "9e24cb346342566804fb4b3b4adf383f80ad7b85d4e74685f0bd32a8bb0291dea4de44b951a9e30fc9a7394f510a8c36cba01913b20988f7f02e3b96ea2b8a5f27a1fae9a8c059f986b524f32593ddcb36403f926a8c7de23203da9a47ff0b0084c8b9a095e65e9d87edee409255b5fffb5697414118d770d62020f5c954ba3e347fa850314a9ab843"}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x358}, 0x1, 0x0, 0x0, 0x4081}, 0x48080) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000580)=0x3, 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = semget$private(0x0, 0x0, 0x81) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000680)=""/115) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000700)) semctl$GETZCNT(r4, 0x1, 0xf, &(0x7f0000000740)=""/208) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000000880)={'system_u:object_r:hwclock_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x1000}, 0x49) semctl$SEM_STAT(r4, 0x3, 0x12, &(0x7f0000000900)=""/166) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040002}, 0x20010080) readlinkat(r0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)=""/92, 0x5c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r2) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, r6, 0x2, 0x70bd2a, 0x1, {{}, {@void, @val={0xc, 0x99, {0x97db, 0x61}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x20004044) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000d00)={0xa, 0x4e23, 0xff, @mcast1, 0x8000}, 0x1c) lseek(r1, 0x81, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xfffffffffffff65e, &(0x7f0000000d40)=0x1) r7 = open(&(0x7f0000000d80)='./file0\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), r1) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x90, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1dc}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22f4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x40800) ioctl$HIDIOCGPHYS(r2, 0x80404812, &(0x7f0000000f80)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000fc0), 0x2100, 0x0) 387.558731ms ago: executing program 5 (id=1104): fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000340)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1021, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r4, 0x4bfb, &(0x7f0000002f80)=""/61) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x0, 0x404c000) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x1, 0x0) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r7, 0x89ef, &(0x7f0000000000)=0x1) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r8 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x244601) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) 386.52622ms ago: executing program 3 (id=1105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000014020000f8ffffffb703000000000000b704000000000000b500001f8200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 323.445137ms ago: executing program 1 (id=1106): r0 = syz_io_uring_setup(0x49d, &(0x7f0000000400)={0x0, 0x79af, 0x10000, 0x5fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r3, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000180), 0x0, 0x4) close(r3) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r4}}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x108, &(0x7f0000000040)=0x80, 0x0, 0x4) io_uring_enter(r0, 0x625, 0x4c1, 0xc1, 0x0, 0x0) 312.057979ms ago: executing program 3 (id=1107): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12018b0130f56920ac05190272f0010203010902120001000010000904550700034902008693363e5064a45f05d74eecd66a8f66423b4691bbb0c960fbc985b31c"], 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000000)) 94.298549ms ago: executing program 5 (id=1108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6056040000140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200409078f05c"], 0x0) r1 = gettid() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r2, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@deltfilter={0xb8, 0x2d, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x5}, {0xd, 0x8}, {0xffff, 0x4}}, [@TCA_RATE={0xfe86, 0x5, {0xe, 0x3}}, @filter_kind_options=@f_u32={{0x8}, {0x64, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_DIVISOR={0x8, 0x4, 0x11}, @TCA_U32_LINK={0x8, 0x3, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x13}, @TCA_U32_INDEV={0x14, 0x8, 'macvlan0\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x54a}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0xdb7e}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20044040}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000000000080045980000000000000011907864010102000000004e221b5900089078"], 0x0) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, 0x0, 0x0) shmget(0x1, 0x3000, 0x200, &(0x7f0000326000/0x3000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000002593281a7d1615e000000000000003bc40d82363bdfde00010f0000000000000000000001640101010000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000101000000000000"], 0xb8}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 93.191518ms ago: executing program 0 (id=1109): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$loop(0x0, 0x7fffffffffffffff, 0x2400) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000800)=0x1) 0s ago: executing program 1 (id=1110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 32) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x40420d5}, 0x80) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x80, 0xcb, r7}, [@IFA_BROADCAST={0x8, 0x4, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, @IFA_FLAGS={0x8, 0x8, 0x23c}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): T30] audit: type=1400 audit(1766574159.452:515): avc: denied { bind } for pid=8191 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.867881][ T5866] greenasia 0003:0E8F:0012.000E: parse failed [ 196.874581][ T5866] greenasia 0003:0E8F:0012.000E: probe with driver greenasia failed with error -22 [ 196.889206][ T5866] usb 3-1: USB disconnect, device number 23 [ 197.177303][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 197.235622][ T5939] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 197.948672][ T10] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 197.958155][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.966572][ T10] usb 4-1: Product: syz [ 197.967249][ T8186] dummy0: left allmulticast mode [ 197.970941][ T10] usb 4-1: Manufacturer: syz [ 197.981170][ T10] usb 4-1: SerialNumber: syz [ 198.005263][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 198.017330][ T5939] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 198.030270][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.040169][ T5939] usb 2-1: Product: syz [ 198.044464][ T5939] usb 2-1: Manufacturer: syz [ 198.052146][ T5939] usb 2-1: SerialNumber: syz [ 198.143155][ T5939] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 198.289707][ T30] audit: type=1400 audit(1766574161.162:516): avc: denied { map } for pid=8205 comm="syz.3.525" path="socket:[18858]" dev="sockfs" ino=18858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.323502][ T30] audit: type=1400 audit(1766574161.162:517): avc: denied { read accept } for pid=8205 comm="syz.3.525" path="socket:[18858]" dev="sockfs" ino=18858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.369756][ T8220] overlayfs: failed to resolve './file1': -2 [ 198.407923][ T8222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.527'. [ 198.521299][ T30] audit: type=1400 audit(1766574161.392:518): avc: denied { getopt } for pid=8223 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.550856][ T8204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.560881][ T8204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.677779][ T30] audit: type=1400 audit(1766574162.542:519): avc: denied { getopt } for pid=8251 comm="syz.4.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.789478][ T5939] gspca_m5602: Failed to find a sensor [ 199.795587][ T5939] ALi m5602 2-1:8.0: ALi m5602 webcam failed [ 199.804443][ T5939] usb 2-1: USB disconnect, device number 28 [ 199.911289][ T10] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 199.926786][ T30] audit: type=1400 audit(1766574162.802:520): avc: denied { ioctl } for pid=8256 comm="syz.1.536" path="socket:[19005]" dev="sockfs" ino=19005 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.951835][ T10] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 199.978388][ T10] usb 4-1: USB disconnect, device number 19 [ 200.579491][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 201.445259][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 201.451887][ T10] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 201.460256][ T10] usb 4-1: config 0 has no interface number 0 [ 201.466687][ T10] usb 4-1: config 0 interface 196 has no altsetting 0 [ 201.476413][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 201.485626][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.493655][ T10] usb 4-1: Product: syz [ 201.503602][ T10] usb 4-1: Manufacturer: syz [ 201.517000][ T10] usb 4-1: SerialNumber: syz [ 201.530478][ T10] usb 4-1: config 0 descriptor?? [ 202.822419][ T8311] mkiss: ax0: crc mode is auto. [ 202.975024][ T10] ipheth 4-1:0.196: Unable to find endpoints [ 202.977948][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 202.977964][ T30] audit: type=1400 audit(1766574165.852:522): avc: denied { setattr } for pid=8313 comm="syz.2.551" name="SCTPv6" dev="sockfs" ino=19652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.994067][ T10] usb 4-1: USB disconnect, device number 20 [ 203.015514][ T30] audit: type=1400 audit(1766574165.892:523): avc: denied { open } for pid=8313 comm="syz.2.551" path="/dev/ttyq9" dev="devtmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 203.180379][ T8325] tipc: Enabled bearer , priority 0 [ 203.196670][ T8325] tipc: Disabling bearer [ 203.215269][ T5939] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 203.268670][ T30] audit: type=1400 audit(1766574166.142:524): avc: denied { append } for pid=8332 comm="syz.4.557" name="nbd4" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.361103][ T8332] block nbd4: shutting down sockets [ 203.395480][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 203.401870][ T5939] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 203.439534][ T5939] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 203.470320][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.478503][ T10] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 203.535691][ T5939] hub 2-1:32.0: bad descriptor, ignoring hub [ 203.548865][ T5939] hub 2-1:32.0: probe with driver hub failed with error -5 [ 203.724880][ T30] audit: type=1400 audit(1766574166.582:525): avc: denied { execute } for pid=8344 comm="syz.2.560" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 203.754166][ T10] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 203.768027][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.850460][ T10] usb 4-1: config 0 has no interface number 0 [ 203.861921][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 203.897711][ T6143] udevd[6143]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 204.182614][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.193727][ T30] audit: type=1400 audit(1766574167.062:526): avc: denied { getopt } for pid=8348 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 204.227697][ T5939] usb 2-1: reset high-speed USB device number 29 using dummy_hcd [ 204.245269][ T10] usb 4-1: Product: syz [ 204.261996][ T10] usb 4-1: Manufacturer: syz [ 204.279768][ T10] usb 4-1: SerialNumber: syz [ 204.304036][ T10] usb 4-1: config 0 descriptor?? [ 204.324471][ T10] hub 4-1:0.31: bad descriptor, ignoring hub [ 204.341211][ T10] hub 4-1:0.31: probe with driver hub failed with error -5 [ 204.360839][ T10] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 204.385990][ T10] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 204.448814][ T10] uvcvideo 4-1:0.31: Failed to create links for entity 6 [ 204.467997][ T10] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 204.500305][ T30] audit: type=1400 audit(1766574167.372:527): avc: denied { mounton } for pid=8360 comm="syz.4.565" path="/112/file0" dev="tmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 204.627781][ T8318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.638677][ T8318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.645812][ T8366] can: request_module (can-proto-0) failed. [ 204.705520][ T5866] usb 4-1: USB disconnect, device number 21 [ 204.931317][ T30] audit: type=1400 audit(1766574167.802:528): avc: denied { ioctl } for pid=8371 comm="syz.2.566" path="/dev/input/mouse0" dev="devtmpfs" ino=966 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 204.997785][ T30] audit: type=1800 audit(1766574167.872:529): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.566" name="bus" dev="ramfs" ino=19142 res=0 errno=0 [ 205.383538][ T5940] IPVS: starting estimator thread 0... [ 205.426523][ T5866] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 205.512133][ T10] usb 2-1: reset high-speed USB device number 29 using dummy_hcd [ 205.521140][ T10] usb 2-1: device reset changed ep0 maxpacket size! [ 205.530940][ T10] usb 2-1: USB disconnect, device number 29 [ 205.536972][ T8387] IPVS: using max 47 ests per chain, 112800 per kthread [ 205.592602][ T5866] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 205.605251][ T5866] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.618799][ T5866] usb 4-1: config 2 interface 0 has no altsetting 0 [ 205.626519][ T5866] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 205.636088][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.644094][ T5866] usb 4-1: SerialNumber: syz [ 205.857574][ T5866] ims_pcu 4-1:2.0: Missing CDC union descriptor [ 205.863965][ T5866] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22 [ 205.873878][ T5866] usb 4-1: USB disconnect, device number 22 [ 205.875641][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 205.945307][ T5939] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 206.056531][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 206.067909][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 206.081210][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 206.090369][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.099868][ T10] usb 2-1: config 0 descriptor?? [ 206.105391][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 206.112308][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.125022][ T5939] usb 3-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 206.134439][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.146271][ T5939] usb 3-1: config 0 descriptor?? [ 206.660169][ T10] magicmouse 0003:05AC:0269.000F: hidraw0: USB HID v11.da Device [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 206.767328][ T5939] usbhid 3-1:0.0: can't add hid device: -71 [ 206.796557][ T5939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 206.832951][ T5939] usb 3-1: USB disconnect, device number 24 [ 206.842893][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.577'. [ 206.964296][ T5897] usb 2-1: USB disconnect, device number 30 [ 207.626369][ T8420] bond1: entered promiscuous mode [ 207.647394][ T8420] input: syz0 as /devices/virtual/input/input25 [ 207.668440][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 207.710389][ T8420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.581'. [ 207.816522][ T8425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8425 comm=syz.3.582 [ 207.867467][ T8425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.582'. [ 208.128414][ T8444] sock: sock_set_timeout: `syz.4.586' (pid 8444) tries to set negative timeout [ 208.149245][ T5897] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 208.275296][ T5939] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 208.317399][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.327876][ T5897] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.341458][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.351688][ T5897] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 208.363654][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 208.372479][ T5897] usb 3-1: Product: syz [ 208.377236][ T5897] usb 3-1: Manufacturer: syz [ 208.381897][ T5897] usb 3-1: SerialNumber: syz [ 208.389281][ T5897] usb 3-1: config 0 descriptor?? [ 208.423460][ T5897] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 208.433263][ T5939] usb 4-1: Using ep0 maxpacket: 8 [ 208.442380][ T5939] usb 4-1: config 1 has an invalid interface number: 199 but max is 6 [ 208.460474][ T5939] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 208.484315][ T6143] udevd[6143]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.500621][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 208.508523][ T5939] usb 4-1: config 1 has no interface number 0 [ 208.514901][ T5939] usb 4-1: too many endpoints for config 1 interface 199 altsetting 193: 58, using maximum allowed: 30 [ 208.529242][ T5939] usb 4-1: config 1 interface 199 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 208.553745][ T5939] usb 4-1: config 1 interface 199 has no altsetting 0 [ 208.563189][ T5939] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 208.572653][ T5939] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 208.581816][ T5939] usb 4-1: Product: syz [ 208.586602][ T5939] usb 4-1: Manufacturer: syz [ 208.591256][ T5939] usb 4-1: SerialNumber: syz [ 208.685388][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 208.693859][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.713243][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.743037][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 208.769945][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 208.800447][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.263737][ T5939] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 209.285147][ T10] usb 5-1: config 0 descriptor?? [ 209.308331][ T5939] visor 4-1:1.199: probe with driver visor failed with error -71 [ 209.350431][ T5939] usb 4-1: USB disconnect, device number 23 [ 209.557589][ T8456] netlink: 64 bytes leftover after parsing attributes in process `syz.0.588'. [ 209.734490][ T10] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 209.767215][ T10] microsoft 0003:045E:07DA.0010: no inputs found [ 209.791122][ T10] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 210.230310][ T10] usb 5-1: USB disconnect, device number 28 [ 210.871375][ T8458] fido_id[8458]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 210.945573][ T5866] usb 3-1: USB disconnect, device number 25 [ 211.247989][ T8493] netlink: 'syz.2.591': attribute type 5 has an invalid length. [ 211.263625][ T30] audit: type=1400 audit(1766574174.132:530): avc: denied { mounton } for pid=8492 comm="syz.2.591" path="/syzcgroup/unified/syz2" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 211.305992][ T5963] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 211.536609][ T5963] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 211.557250][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.602363][ T5963] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 211.707733][ T5963] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 211.725381][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.735542][ T5963] usb 4-1: Product: syz [ 211.745442][ T5963] usb 4-1: Manufacturer: syz [ 211.763891][ T5963] usb 4-1: SerialNumber: syz [ 212.266616][ T5963] usb 4-1: config 0 descriptor?? [ 212.278866][ T8491] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 212.612002][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.632655][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.654218][ T5963] usb 4-1: USB disconnect, device number 24 [ 212.705279][ T5897] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 212.815602][ T5939] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 212.857196][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.868293][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.878410][ T5897] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 212.887801][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.897599][ T5897] usb 3-1: config 0 descriptor?? [ 212.975256][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 212.981731][ T5939] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 212.989804][ T5939] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 212.998739][ T5939] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 213.007572][ T5939] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 213.016391][ T5939] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 213.026868][ T5939] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 213.035895][ T5939] usb 5-1: config 1 has no interface number 1 [ 213.042036][ T5939] usb 5-1: config 1 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 213.055071][ T5939] usb 5-1: config 1 interface 5 has no altsetting 0 [ 213.063700][ T5939] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.072907][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.080952][ T5939] usb 5-1: Product: ᠊ [ 213.085122][ T5939] usb 5-1: Manufacturer: ы [ 213.090031][ T5939] usb 5-1: SerialNumber: 䠆 [ 213.095273][ T974] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 213.255347][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 213.275015][ T974] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 213.290806][ T974] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 213.362726][ T974] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 213.364450][ T5897] usbhid 3-1:0.0: can't add hid device: -32 [ 213.390168][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 213.401266][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 213.412742][ T5897] usb 3-1: USB disconnect, device number 26 [ 213.429201][ T974] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 213.459718][ T974] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 213.460082][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 213.475929][ T974] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 213.668923][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.729310][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.738184][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.757376][ T974] usb 2-1: config 0 descriptor?? [ 213.757516][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.792605][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.821958][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.843800][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.882070][ T30] audit: type=1400 audit(1766574176.752:531): avc: denied { map } for pid=8508 comm="syz.4.596" path="socket:[19934]" dev="sockfs" ino=19934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 213.953485][ T30] audit: type=1400 audit(1766574176.782:532): avc: denied { accept } for pid=8508 comm="syz.4.596" path="socket:[19934]" dev="sockfs" ino=19934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 213.998359][ T974] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 214.034337][ T5939] usb 5-1: 0:2 : does not exist [ 214.087203][ T5939] usb 5-1: USB disconnect, device number 29 [ 214.168470][ T6143] udevd[6143]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.074310][ T30] audit: type=1400 audit(1766574177.942:533): avc: denied { setopt } for pid=8531 comm="syz.3.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 215.138918][ T8540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.168630][ T8540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.405712][ T5897] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 215.475329][ T8546] netlink: 'syz.3.607': attribute type 7 has an invalid length. [ 215.555387][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 215.565429][ T5897] usb 5-1: config 3 has an invalid interface number: 64 but max is 3 [ 215.584386][ T5897] usb 5-1: config 3 has an invalid interface number: 161 but max is 3 [ 215.617779][ T5897] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 215.645924][ T5897] usb 5-1: config 3 has an invalid interface number: 79 but max is 3 [ 215.676280][ T5897] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 215.697891][ T5897] usb 5-1: config 3 has 3 interfaces, different from the descriptor's value: 4 [ 215.706011][ T30] audit: type=1400 audit(1766574178.572:534): avc: denied { write } for pid=8547 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.736693][ T5897] usb 5-1: config 3 has no interface number 0 [ 215.749396][ T5897] usb 5-1: config 3 has no interface number 1 [ 215.891173][ T5897] usb 5-1: config 3 has no interface number 2 [ 215.922615][ T5897] usb 5-1: config 3 interface 64 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 216.002050][ T8552] overlayfs: missing 'lowerdir' [ 216.077408][ T8553] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 216.885023][ T974] usb 2-1: USB disconnect, device number 31 [ 216.920639][ T5897] usb 5-1: config 3 interface 64 altsetting 0 endpoint 0x2 has an invalid bInterval 241, changing to 11 [ 216.921227][ T974] usblp0: removed [ 217.288658][ T5897] usb 5-1: config 3 interface 64 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 217.296565][ T8556] netlink: 'syz.1.611': attribute type 12 has an invalid length. [ 217.300377][ T5897] usb 5-1: config 3 interface 64 altsetting 0 has an endpoint descriptor with address 0x4D, changing to 0xD [ 217.318726][ T5897] usb 5-1: config 3 interface 64 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.331095][ T5897] usb 5-1: config 3 interface 64 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 217.341753][ T5897] usb 5-1: config 3 interface 64 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 217.357807][ T5897] usb 5-1: config 3 interface 64 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 217.386012][ T5897] usb 5-1: config 3 interface 64 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 217.397906][ T8558] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 217.630222][ T5897] usb 5-1: config 3 interface 64 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 217.795913][ T8562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.606'. [ 217.804983][ T8562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.606'. [ 218.057059][ T5897] usb 5-1: config 3 interface 161 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 218.067880][ T5897] usb 5-1: config 3 interface 161 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 218.079192][ T5897] usb 5-1: config 3 interface 161 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 218.089925][ T5897] usb 5-1: config 3 interface 161 altsetting 7 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 218.100917][ T5897] usb 5-1: config 3 interface 161 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 218.115241][ T5897] usb 5-1: config 3 interface 161 altsetting 7 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 218.126686][ T5897] usb 5-1: config 3 interface 79 altsetting 10 endpoint 0x3 has invalid maxpacket 50279, setting to 64 [ 218.139019][ T5897] usb 5-1: config 3 interface 79 altsetting 10 has an endpoint descriptor with address 0x1F, changing to 0xF [ 218.150986][ T5897] usb 5-1: config 3 interface 79 altsetting 10 has a duplicate endpoint with address 0xF, skipping [ 218.162589][ T5897] usb 5-1: config 3 interface 79 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.176085][ T5897] usb 5-1: config 3 interface 161 has no altsetting 0 [ 218.182872][ T5897] usb 5-1: config 3 interface 79 has no altsetting 0 [ 218.209733][ T5897] usb 5-1: string descriptor 0 read error: -71 [ 218.218280][ T5897] usb 5-1: New USB device found, idVendor=1410, idProduct=2420, bcdDevice=bb.8e [ 218.238385][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.293298][ T5897] usb 5-1: can't set config #3, error -71 [ 218.416632][ T8572] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8572 comm=syz.4.615 [ 218.475972][ T5897] usb 5-1: USB disconnect, device number 30 [ 218.556285][ T974] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 218.776808][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.801025][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.826811][ T974] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.857937][ T974] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.868176][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.920300][ T974] usb 3-1: config 0 descriptor?? [ 219.454862][ T974] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd [ 219.477585][ T974] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 219.678391][ T8588] netlink: 68 bytes leftover after parsing attributes in process `syz.4.617'. [ 220.342598][ T30] audit: type=1400 audit(1766574183.152:535): avc: denied { create } for pid=8592 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 220.368213][ T8598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.397976][ T30] audit: type=1400 audit(1766574183.162:536): avc: denied { bind } for pid=8592 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 220.426495][ T8598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.625112][ T30] audit: type=1400 audit(1766574183.492:537): avc: denied { ioctl } for pid=8594 comm="syz.0.619" path="socket:[20054]" dev="sockfs" ino=20054 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 220.680649][ T8595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8595 comm=syz.0.619 [ 220.702296][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 221.885835][ T5866] usb 3-1: reset high-speed USB device number 27 using dummy_hcd [ 221.923650][ T8625] comedi comedi3: comedi_config --init_data is deprecated [ 222.093103][ T30] audit: type=1400 audit(1766574184.962:538): avc: denied { read } for pid=8630 comm="syz.4.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 222.444758][ T5866] usb 3-1: device descriptor read/64, error -71 [ 222.799608][ T5940] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 223.205702][ T5940] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 223.214807][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.228610][ T5940] usb 4-1: config 0 descriptor?? [ 223.235978][ T5940] cp210x 4-1:0.0: cp210x converter detected [ 223.255268][ T5866] usb 3-1: reset high-speed USB device number 27 using dummy_hcd [ 223.267863][ T5866] usb 3-1: device reset changed ep0 maxpacket size! [ 223.277078][ T974] usb 3-1: USB disconnect, device number 27 [ 223.428061][ T974] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 223.435813][ T5866] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 223.444721][ T5940] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 223.465067][ T5940] cp210x 4-1:0.0: querying part number failed [ 223.480756][ T8659] netlink: 'syz.0.634': attribute type 13 has an invalid length. [ 223.488550][ T30] audit: type=1400 audit(1766574186.352:539): avc: denied { relabelfrom } for pid=8656 comm="syz.0.634" name="" dev="pipefs" ino=20118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 223.512816][ T5940] usb 4-1: cp210x converter now attached to ttyUSB0 [ 223.520728][ T5940] usb 4-1: USB disconnect, device number 25 [ 223.531598][ T5940] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 223.539715][ T5940] cp210x 4-1:0.0: device disconnected [ 223.605350][ T974] usb 3-1: Using ep0 maxpacket: 32 [ 223.616901][ T5866] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 223.626443][ T974] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.648980][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.687994][ T974] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 223.718106][ T5866] usb 2-1: config 0 descriptor?? [ 223.844251][ T974] usb 3-1: config 0 interface 0 has no altsetting 0 [ 223.879088][ T5866] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 223.889766][ T974] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c06, bcdDevice= 0.00 [ 223.899231][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.007149][ T974] usb 3-1: config 0 descriptor?? [ 224.119827][ T30] audit: type=1400 audit(1766574186.992:540): avc: denied { write } for pid=8662 comm="syz.4.635" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 224.283068][ T5866] cpia1 2-1:0.0: unexpected state after lo power cmd: 95 [ 224.469927][ T8670] lo speed is unknown, defaulting to 1000 [ 224.490868][ T974] corsair-psu 0003:1B1C:1C06.0012: unknown main item tag 0x2 [ 224.522372][ T974] corsair-psu 0003:1B1C:1C06.0012: hidraw0: USB HID v4.00 Device [HID 1b1c:1c06] on usb-dummy_hcd.2-1/input0 [ 224.595283][ T974] corsair-psu 0003:1B1C:1C06.0012: unable to initialize device (-38) [ 224.605624][ T974] corsair-psu 0003:1B1C:1C06.0012: probe with driver corsair-psu failed with error -38 [ 224.681976][ T5866] cpia1 2-1:0.0: only firmware version 1 is supported (got: 149) [ 224.743448][ T8625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.780282][ T8625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.843198][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.625'. [ 224.900289][ T8649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.915980][ T8649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.934347][ T5897] usb 2-1: USB disconnect, device number 32 [ 225.017573][ T5866] usb 3-1: USB disconnect, device number 28 [ 225.848082][ T8696] netlink: 'syz.2.640': attribute type 11 has an invalid length. [ 227.279375][ T8710] veth0: entered promiscuous mode [ 227.331156][ T8699] veth0: left promiscuous mode [ 227.405818][ T5897] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 227.495960][ T30] audit: type=1400 audit(1766574190.372:541): avc: denied { cmd } for pid=8711 comm="syz.1.646" path="socket:[21023]" dev="sockfs" ino=21023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 227.575489][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 227.623380][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 227.664890][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 227.686028][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 228.057279][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 228.077279][ T5897] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 228.103291][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.111572][ T5897] usb 5-1: Product: syz [ 228.142561][ T5897] usb 5-1: Manufacturer: syz [ 228.159581][ T30] audit: type=1400 audit(1766574191.022:542): avc: denied { append } for pid=8717 comm="syz.3.648" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 228.195803][ T8726] netlink: 188 bytes leftover after parsing attributes in process `syz.1.650'. [ 228.205468][ T5897] usb 5-1: SerialNumber: syz [ 228.217094][ T8726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.650'. [ 228.228284][ T5897] usb 5-1: config 0 descriptor?? [ 228.229689][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 228.242041][ T5897] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 228.262847][ T5168] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 228.298360][ C0] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 228.365697][ T6146] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 228.414505][ T5168] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 228.442760][ T5168] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 228.518332][ T8729] 9p: Bad value for 'rfdno' [ 228.654548][ T5168] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 228.866685][ T5168] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 228.989213][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 229.380203][ T5168] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 230.458219][ T5940] usb 5-1: USB disconnect, device number 31 [ 230.658370][ T8751] 9pnet_fd: Insufficient options for proto=fd [ 230.793607][ T30] audit: type=1400 audit(1766574193.662:543): avc: denied { connect } for pid=8750 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.841802][ T30] audit: type=1800 audit(1766574193.682:544): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.657" name="bus" dev="ramfs" ino=21539 res=0 errno=0 [ 231.064236][ T8766] SELinux: Context system_u:object_r:dpkg_var_lib_t:s0 is not valid (left unmapped). [ 231.098622][ T30] audit: type=1400 audit(1766574193.972:545): avc: denied { relabelto } for pid=8765 comm="syz.0.659" name="file0" dev="tmpfs" ino=787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dpkg_var_lib_t:s0" [ 231.152131][ T30] audit: type=1400 audit(1766574193.972:546): avc: denied { associate } for pid=8765 comm="syz.0.659" name="file0" dev="tmpfs" ino=787 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dpkg_var_lib_t:s0" [ 231.865286][ T5940] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 231.905339][ T5880] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 232.015248][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 232.034919][ T5940] usb 3-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 232.055406][ T5940] usb 3-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 232.075614][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 232.082487][ T5940] usb 3-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 232.095449][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.106672][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.140188][ T5940] usb 3-1: config 0 descriptor?? [ 232.145285][ T5880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.155630][ T5880] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 232.168828][ T5880] usb 4-1: config 1 interface 1 has no altsetting 1 [ 232.177196][ T5940] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 232.187804][ T5880] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.196992][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.208343][ T5880] usb 4-1: Product: syz [ 232.212572][ T5880] usb 4-1: Manufacturer: syz [ 232.218478][ T5880] usb 4-1: SerialNumber: syz [ 232.328211][ T8788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.666'. [ 232.437751][ T5880] usb 4-1: selecting invalid altsetting 1 [ 232.453149][ T5880] cdc_ncm 4-1:1.0: bind() failure [ 232.468328][ T5880] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 232.475160][ T5880] cdc_ncm 4-1:1.1: bind() failure [ 232.503441][ T5880] usb 4-1: USB disconnect, device number 26 [ 232.632297][ T30] audit: type=1400 audit(1766574195.502:547): avc: denied { wake_alarm } for pid=8792 comm="syz.0.668" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 232.795562][ T8798] syz.1.669 uses obsolete (PF_INET,SOCK_PACKET) [ 232.932654][ T8794] overlayfs: failed to resolve './file2': -2 [ 233.117496][ T30] audit: type=1400 audit(1766574195.992:548): avc: denied { ioctl } for pid=8805 comm="syz.3.671" path="socket:[21587]" dev="sockfs" ino=21587 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 233.825278][ T5897] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 234.081887][ T5897] usb 4-1: device descriptor read/64, error -71 [ 235.130649][ T5880] usb 3-1: USB disconnect, device number 29 [ 235.225443][ T5897] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 235.425381][ T5897] usb 4-1: device descriptor read/64, error -71 [ 235.527396][ T8828] bond0: entered promiscuous mode [ 235.532528][ T8828] bond_slave_0: entered promiscuous mode [ 235.539158][ T8828] bond_slave_1: entered promiscuous mode [ 235.560331][ T8828] dummy0: entered promiscuous mode [ 235.570652][ T8828] hsr1: entered promiscuous mode [ 235.575753][ T8828] hsr1: entered allmulticast mode [ 235.580839][ T8828] bond0: entered allmulticast mode [ 235.586083][ T8828] bond_slave_0: entered allmulticast mode [ 235.591908][ T8828] bond_slave_1: entered allmulticast mode [ 235.597760][ T8828] dummy0: entered allmulticast mode [ 235.665451][ T5880] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 235.791920][ T5897] usb usb4-port1: attempt power cycle [ 235.925302][ T5940] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 235.988339][ T5880] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 236.004013][ T5880] usb 3-1: config 220 has an invalid descriptor of length 251, skipping remainder of the config [ 236.026053][ T5880] usb 3-1: config 220 has no interface number 2 [ 236.032379][ T5880] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 236.062857][ T5880] usb 3-1: config 220 interface 0 has no altsetting 0 [ 236.071217][ T5880] usb 3-1: config 220 interface 76 has no altsetting 0 [ 236.079535][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 236.089720][ T5880] usb 3-1: config 220 interface 1 has no altsetting 0 [ 236.090667][ T5940] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 236.128291][ T8833] xt_ecn: cannot match TCP bits for non-tcp packets [ 236.468148][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.481921][ T5880] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 236.491825][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.496501][ T5897] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 236.500722][ T5940] usb 5-1: config 0 descriptor?? [ 236.517327][ T5880] usb 3-1: Product: syz [ 236.521775][ T5880] usb 3-1: Manufacturer: syz [ 236.530371][ T5880] usb 3-1: SerialNumber: syz [ 236.577995][ T5897] usb 4-1: device descriptor read/8, error -71 [ 236.823778][ T5880] usb 3-1: selecting invalid altsetting 0 [ 236.863760][ T5880] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 236.871338][ T5880] uvcvideo 3-1:220.0: No valid video chain found. [ 236.883542][ T5880] usb 3-1: selecting invalid altsetting 0 [ 236.907371][ T5880] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 236.954389][ T5880] usb 3-1: USB disconnect, device number 30 [ 237.092622][ T30] audit: type=1400 audit(1766574199.962:549): avc: denied { shutdown } for pid=8841 comm="syz.1.680" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.325693][ T5897] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 237.372411][ T5897] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 237.467791][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.485770][ T5897] usb 4-1: Product: syz [ 237.490205][ T5897] usb 4-1: Manufacturer: syz [ 237.494862][ T5897] usb 4-1: SerialNumber: syz [ 237.504400][ T8847] netlink: 72 bytes leftover after parsing attributes in process `syz.1.680'. [ 237.508603][ T5897] usb 4-1: config 0 descriptor?? [ 237.730381][ T5897] int51x1 4-1:0.0: probe with driver int51x1 failed with error -71 [ 237.813961][ T5897] usb 4-1: USB disconnect, device number 30 [ 238.537241][ T30] audit: type=1400 audit(1766574201.402:550): avc: denied { mount } for pid=8855 comm="syz.0.684" name="/" dev="autofs" ino=21651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 238.649273][ T10] usb 5-1: USB disconnect, device number 32 [ 239.187318][ T30] audit: type=1400 audit(1766574202.062:551): avc: denied { bind } for pid=8869 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 239.923705][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 239.948587][ T8888] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 239.971393][ T8889] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 239.989026][ T30] audit: type=1400 audit(1766574202.862:552): avc: denied { create } for pid=8887 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 240.074455][ T30] audit: type=1400 audit(1766574202.862:553): avc: denied { write } for pid=8887 comm="syz.0.686" path="socket:[21257]" dev="sockfs" ino=21257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 240.112061][ T30] audit: type=1400 audit(1766574202.972:554): avc: denied { ioctl } for pid=8887 comm="syz.0.686" path="socket:[21257]" dev="sockfs" ino=21257 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 240.295307][ T5940] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 240.305514][ T30] audit: type=1400 audit(1766574203.172:555): avc: denied { write } for pid=8899 comm="syz.2.696" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 240.306308][ T8900] netlink: 40 bytes leftover after parsing attributes in process `syz.2.696'. [ 240.344949][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 240.354376][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 240.495231][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 240.505665][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 240.529986][ T5940] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 240.539547][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.551304][ T5940] usb 5-1: config 0 descriptor?? [ 240.560349][ T5940] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input28 [ 240.572260][ T8918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8918 comm=syz.3.698 [ 240.584814][ T8917] vivid-007: disconnect [ 240.589913][ T8916] vivid-007: reconnect [ 240.601834][ T8918] netlink: 108 bytes leftover after parsing attributes in process `syz.3.698'. [ 240.763343][ T5168] bcm5974 5-1:0.0: could not read from device [ 240.778140][ T5940] bcm5974 5-1:0.0: could not read from device [ 240.794198][ T5168] bcm5974 5-1:0.0: could not read from device [ 240.807917][ T5940] input: failed to attach handler mousedev to device input28, error: -5 [ 240.821232][ T5168] bcm5974 5-1:0.0: could not read from device [ 240.833976][ T5940] usb 5-1: USB disconnect, device number 33 [ 240.968615][ T8928] netlink: 'syz.0.704': attribute type 10 has an invalid length. [ 240.994663][ T8928] team0: Port device dummy0 added [ 241.009266][ T8928] netlink: 'syz.0.704': attribute type 10 has an invalid length. [ 241.034997][ T8928] team0: Port device dummy0 removed [ 241.055606][ T8928] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 241.070447][ T8928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.704'. [ 241.094617][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'. [ 241.108150][ T8929] netlink: 'syz.0.704': attribute type 10 has an invalid length. [ 241.134407][ T8928] netlink: 'syz.0.704': attribute type 10 has an invalid length. [ 241.142670][ T8929] bond0: (slave dummy0): Releasing backup interface [ 241.174225][ T8929] team0: Port device dummy0 added [ 241.183513][ T8928] team0: Port device dummy0 removed [ 241.199529][ T8928] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 241.587806][ T30] audit: type=1400 audit(1766574204.462:556): avc: denied { execute } for pid=8949 comm="syz.4.709" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.045311][ T6592] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 242.217389][ T6592] usb 4-1: unable to get BOS descriptor or descriptor too short [ 242.228924][ T6592] usb 4-1: config 64 has an invalid interface number: 227 but max is 0 [ 242.254062][ T6592] usb 4-1: config 64 has no interface number 0 [ 242.268710][ T6592] usb 4-1: config 64 interface 227 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 242.280748][ T6592] usb 4-1: config 64 interface 227 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 242.294540][ T6592] usb 4-1: config 64 interface 227 has no altsetting 0 [ 242.317057][ T6592] usb 4-1: string descriptor 0 read error: -22 [ 242.323357][ T6592] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=cc.bf [ 242.332808][ T6592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.342613][ T8975] fuse: Unknown parameter '0x0000000000000009' [ 242.363313][ T6592] imon_raw 4-1:64.227: IR endpoint missing [ 242.560492][ T6592] usb 4-1: USB disconnect, device number 31 [ 243.079838][ T8982] ptrace attach of "./syz-executor exec"[5806] was attempted by " [ 243.818875][ T30] audit: type=1400 audit(1766574206.692:557): avc: denied { read } for pid=8990 comm="syz.2.723" name="file2" dev="tmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.251219][ T8996] bond0: Caught tx_queue_len zero misconfig [ 244.665280][ T6592] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 245.127681][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'. [ 245.235351][ T6592] usb 3-1: device descriptor read/64, error -71 [ 245.458555][ T9008] trusted_key: syz.1.727 sent an empty control message without MSG_MORE. [ 245.495256][ T6592] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 245.535291][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 245.645557][ T6592] usb 3-1: device descriptor read/64, error -71 [ 245.697699][ T10] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 245.712017][ T10] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 245.722657][ T10] usb 5-1: config 171 has no interface number 0 [ 245.730030][ T10] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 245.740721][ T10] usb 5-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 245.769686][ T9007] netlink: 72 bytes leftover after parsing attributes in process `syz.1.727'. [ 245.781643][ T6592] usb usb3-port1: attempt power cycle [ 245.789496][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 246.043396][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.106729][ T10] usb 5-1: Product: syz [ 246.111008][ T10] usb 5-1: Manufacturer: syz [ 246.121117][ T10] usb 5-1: SerialNumber: syz [ 246.193185][ T6592] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 246.218148][ T6592] usb 3-1: device descriptor read/8, error -71 [ 246.230199][ T9004] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 246.439575][ T10] ath6kl: Failed to submit usb control message: -71 [ 246.452245][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 246.459446][ T6592] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 246.467357][ T10] ath6kl: Unable to send get target info: -71 [ 246.480802][ T10] ath6kl: Failed to init ath6kl core: -71 [ 246.487933][ T10] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 246.498563][ T6592] usb 3-1: device descriptor read/8, error -71 [ 246.517593][ T10] usb 5-1: USB disconnect, device number 34 [ 246.625556][ T6592] usb usb3-port1: unable to enumerate USB device [ 246.864624][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 247.131529][ T9033] netlink: 14 bytes leftover after parsing attributes in process `syz.0.734'. [ 247.149672][ T9033] netlink: 14 bytes leftover after parsing attributes in process `syz.0.734'. [ 247.256088][ T9033] netlink: 14 bytes leftover after parsing attributes in process `syz.0.734'. [ 247.995299][ T6592] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 248.179935][ T9068] xt_socket: unknown flags 0x4 [ 248.251381][ T6592] usb 3-1: config 6 has an invalid interface number: 187 but max is 0 [ 248.269912][ T6592] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 248.322271][ T6592] usb 3-1: config 6 has no interface number 0 [ 248.338585][ T6592] usb 3-1: config 6 interface 187 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 248.361202][ T6592] usb 3-1: config 6 interface 187 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 248.394639][ T6592] usb 3-1: config 6 interface 187 has no altsetting 0 [ 248.410755][ T6592] usb 3-1: New USB device found, idVendor=0499, idProduct=103d, bcdDevice=ab.94 [ 248.426192][ T6592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.444393][ T6592] usb 3-1: Product: syz [ 248.453077][ T6592] usb 3-1: Manufacturer: syz [ 248.464143][ T6592] usb 3-1: SerialNumber: syz [ 249.416394][ T9083] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 249.573716][ T30] audit: type=1400 audit(1766574212.412:558): avc: denied { watch watch_reads } for pid=9087 comm="syz.3.747" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 249.639326][ T9055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.655667][ T5897] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 249.668471][ T9055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.727597][ T6592] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.762779][ T6592] snd-usb-audio 3-1:6.187: probe with driver snd-usb-audio failed with error -2 [ 249.784235][ T6592] usb 3-1: USB disconnect, device number 35 [ 249.785280][ T5897] usb 5-1: device descriptor read/64, error -71 [ 249.802361][ T6143] udevd[6143]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.187/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.975246][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 250.459635][ T5897] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 250.548784][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.560014][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.570401][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 250.580586][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.589671][ T10] usb 4-1: SerialNumber: syz [ 250.595548][ T5897] usb 5-1: device descriptor read/64, error -71 [ 250.731845][ T5897] usb usb5-port1: attempt power cycle [ 250.817935][ T10] usb 4-1: invalid UAC_HEADER (v1) [ 250.882594][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 250.893918][ T9108] fuse: Bad value for 'group_id' [ 250.899138][ T9108] fuse: Bad value for 'group_id' [ 250.911464][ T10] usb 4-1: USB disconnect, device number 32 [ 250.964387][ T6143] udevd[6143]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.965746][ T9108] netlink: 'syz.1.753': attribute type 1 has an invalid length. [ 251.058035][ T9108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.595910][ T5897] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 251.648457][ T5897] usb 5-1: device descriptor read/8, error -71 [ 252.051159][ T30] audit: type=1400 audit(1766574214.902:559): avc: denied { create } for pid=9119 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 252.503232][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 252.513173][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.758'. [ 252.521793][ T9133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.548574][ T9136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.562959][ T9136] bond1: (slave bond0): making interface the new active one [ 252.571906][ T9136] bond1: (slave bond0): Enslaving as an active interface with an up link [ 253.158155][ T30] audit: type=1400 audit(1766574216.032:560): avc: denied { connect } for pid=9152 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 253.201430][ T5940] IPVS: starting estimator thread 0... [ 253.308304][ T9155] IPVS: using max 44 ests per chain, 105600 per kthread [ 254.440073][ T5940] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 255.127760][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.155444][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 255.158547][ T9178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9178 comm=syz.1.769 [ 255.208629][ T5940] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 255.256375][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.280815][ T5940] usb 5-1: config 0 descriptor?? [ 255.320021][ T5940] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 255.408607][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.415485][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.489670][ T30] audit: type=1400 audit(1766574218.362:561): avc: denied { write } for pid=9197 comm="syz.2.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 255.518854][ T9200] netlink: 3 bytes leftover after parsing attributes in process `syz.0.775'. [ 255.528594][ T6592] usb 5-1: USB disconnect, device number 39 [ 255.615426][ T5940] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 255.668501][ T30] audit: type=1400 audit(1766574218.542:562): avc: denied { connect } for pid=9206 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 255.745285][ T5940] usb 4-1: device descriptor read/64, error -71 [ 256.008479][ T5940] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 256.525611][ T6592] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 256.605861][ T5940] usb 4-1: device descriptor read/64, error -71 [ 257.635574][ T5940] usb usb4-port1: attempt power cycle [ 257.641090][ T6592] usb 5-1: Using ep0 maxpacket: 32 [ 257.662618][ T6592] usb 5-1: device descriptor read/all, error -71 [ 257.841699][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'. [ 257.855907][ T9228] netlink: 'syz.0.784': attribute type 11 has an invalid length. [ 257.863818][ T9228] netlink: 'syz.0.784': attribute type 4 has an invalid length. [ 257.894399][ T9228] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.784'. [ 258.075808][ T5940] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 258.098088][ T5940] usb 4-1: device descriptor read/8, error -71 [ 258.115811][ T974] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 258.325269][ T974] usb 3-1: Using ep0 maxpacket: 32 [ 258.331958][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 258.343496][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 258.353461][ T974] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 258.383375][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 258.458494][ T974] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 258.494464][ T9237] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 258.549740][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.557963][ T974] usb 3-1: Product: syz [ 258.562206][ T974] usb 3-1: Manufacturer: syz [ 258.566926][ T974] usb 3-1: SerialNumber: syz [ 258.575068][ T974] usb 3-1: config 0 descriptor?? [ 258.587664][ T974] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input29 [ 258.608337][ T5168] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 258.648775][ T5168] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 258.749335][ T5168] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 258.759417][ T5940] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 258.810846][ T6146] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 258.812967][ T5168] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 258.846458][ T5168] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 258.863935][ T30] audit: type=1400 audit(1766574221.732:563): avc: denied { create } for pid=9223 comm="syz.2.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 258.967349][ T5168] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 258.967915][ T5168] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 258.995514][ T5940] usb 4-1: device not accepting address 36, error -71 [ 258.995752][ T5940] usb usb4-port1: unable to enumerate USB device [ 259.080844][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 260.875990][ T5897] usb 3-1: USB disconnect, device number 36 [ 316.859016][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.865380][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.288124][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.294487][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.727939][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.734246][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.167425][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.173741][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.112929][ T30] audit: type=1400 audit(1766574476.972:564): avc: denied { create } for pid=9291 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 514.138798][ T30] audit: type=1400 audit(1766574476.972:565): avc: denied { setopt } for pid=9291 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 514.225640][ T5963] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 514.652559][ T30] audit: type=1400 audit(1766574477.522:566): avc: denied { write } for pid=9302 comm="syz.1.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 514.725308][ T5963] usb 3-1: Using ep0 maxpacket: 32 [ 514.732838][ T5963] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 514.755216][ T5963] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 514.770058][ T5963] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 514.781291][ T5963] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 514.804662][ T5963] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 514.814034][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.822164][ T5963] usb 3-1: Product: syz [ 514.826436][ T5963] usb 3-1: Manufacturer: syz [ 514.831129][ T5963] usb 3-1: SerialNumber: syz [ 514.845022][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 514.857257][ T5963] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input30 [ 515.055532][ T5963] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 515.076754][ T5963] (id 0x00) [ 515.157324][ T5963] rc_core: IR keymap rc-imon-pad not found [ 515.168705][ T5963] Registered IR keymap rc-empty [ 515.174080][ T5963] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 515.185507][ T5963] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 515.203345][ T9325] fuse: Unknown parameter '00000000000000000000003' [ 515.250732][ T30] audit: type=1400 audit(1766574478.122:567): avc: denied { setopt } for pid=9322 comm="syz.0.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 515.273068][ T5963] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 515.286864][ T5963] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input31 [ 515.343590][ T30] audit: type=1400 audit(1766574478.172:568): avc: denied { shutdown } for pid=9329 comm="syz.4.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 515.391724][ T5963] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:37> initialized [ 515.430378][ T30] audit: type=1400 audit(1766574478.302:569): avc: denied { bind } for pid=9334 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 515.492995][ T30] audit: type=1400 audit(1766574478.332:570): avc: denied { name_bind } for pid=9334 comm="syz.4.811" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 515.557845][ T30] audit: type=1400 audit(1766574478.332:571): avc: denied { node_bind } for pid=9334 comm="syz.4.811" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 515.931669][ T9342] xt_l2tp: v2 sid > 0xffff: 117440512 [ 515.966254][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 516.085330][ T30] audit: type=1400 audit(1766574478.962:572): avc: denied { getopt } for pid=9344 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 516.308773][ T9345] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=63508 sclass=netlink_tcpdiag_socket pid=9345 comm=syz.3.814 [ 516.322431][ T9345] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1025 sclass=netlink_tcpdiag_socket pid=9345 comm=syz.3.814 [ 516.705390][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 516.846357][ T9357] overlayfs: failed to clone upperpath [ 516.905144][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 516.926313][ T10] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 516.943949][ T10] usb 5-1: config 0 has no interface number 0 [ 516.961142][ T10] usb 5-1: config 0 interface 29 has no altsetting 0 [ 517.027420][ T5963] usb 3-1: USB disconnect, device number 37 [ 517.040286][ T10] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 517.083613][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.112396][ T10] usb 5-1: Product: syz [ 517.126289][ T10] usb 5-1: Manufacturer: syz [ 517.135415][ T10] usb 5-1: SerialNumber: syz [ 517.229092][ T10] usb 5-1: config 0 descriptor?? [ 517.809487][ T9368] lo speed is unknown, defaulting to 1000 [ 517.856181][ T10] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v245 fw v48.251.12 (2 channels) [ 517.866884][ T9372] netlink: 44 bytes leftover after parsing attributes in process `syz.2.821'. [ 518.059632][ T10] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 518.076320][ T10] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 518.115169][ T10] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 518.241000][ T10] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -22 [ 519.049344][ T9396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.827'. [ 519.161409][ T30] audit: type=1400 audit(1766574482.032:573): avc: denied { connect } for pid=9395 comm="syz.0.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 519.531507][ T30] audit: type=1400 audit(1766574482.402:574): avc: denied { ioctl } for pid=9401 comm="syz.3.829" path="socket:[23254]" dev="sockfs" ino=23254 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 519.958185][ T5963] usb 5-1: USB disconnect, device number 42 [ 520.843387][ T9427] comedi comedi4: bad chanlist[0]=0x00000fff chan=4095 range length=2 [ 520.877026][ T9427] netlink: 'syz.3.834': attribute type 12 has an invalid length. [ 520.913692][ T9281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 520.923520][ T9281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 520.932933][ T9281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 520.943740][ T9281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 520.953570][ T9281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 520.970670][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 520.978866][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 520.993718][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 521.017938][ T9281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 521.033017][ T9281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 521.175179][ T5963] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 521.261222][ T9440] can: request_module (can-proto-4) failed. [ 521.335152][ T5963] usb 5-1: Using ep0 maxpacket: 32 [ 521.360446][ T5963] usb 5-1: config 1 interface 0 altsetting 16 bulk endpoint 0x3 has invalid maxpacket 8 [ 521.375142][ T5963] usb 5-1: config 1 interface 0 has no altsetting 0 [ 521.396940][ T5963] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 521.435269][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.443370][ T5963] usb 5-1: Product: syz [ 521.485162][ T5963] usb 5-1: Manufacturer: syz [ 521.489820][ T5963] usb 5-1: SerialNumber: syz [ 521.516882][ T9437] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 521.530287][ T9435] lo speed is unknown, defaulting to 1000 [ 521.553421][ T9447] tipc: Started in network mode [ 521.569667][ T9447] tipc: Node identity aa24348baa7e, cluster identity 4711 [ 521.587164][ T9447] tipc: Enabled bearer , priority 0 [ 521.617884][ T9447] syzkaller0: entered promiscuous mode [ 521.623448][ T9447] syzkaller0: entered allmulticast mode [ 521.631693][ T30] audit: type=1400 audit(1766574484.502:575): avc: denied { setopt } for pid=9448 comm="syz.0.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 521.685888][ T9447] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 521.698527][ T9446] tipc: Resetting bearer [ 521.714621][ T30] audit: type=1400 audit(1766574484.572:576): avc: denied { read } for pid=9446 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 521.872813][ T9446] tipc: Disabling bearer [ 521.900265][ T5963] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 522.373358][ T5963] usb 5-1: USB disconnect, device number 43 [ 522.551785][ T30] audit: type=1400 audit(1766574485.422:577): avc: denied { ioctl } for pid=9464 comm="syz.3.844" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 522.620565][ T9435] chnl_net:caif_netlink_parms(): no params data found [ 522.642790][ T9467] capability: warning: `syz.3.844' uses deprecated v2 capabilities in a way that may be insecure [ 522.716913][ T9475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.797898][ T9480] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 522.803927][ T9480] syzkaller1: linktype set to 786 [ 522.826676][ T5963] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 522.837887][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.846773][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.853988][ T9435] bridge_slave_0: entered allmulticast mode [ 522.861699][ T9435] bridge_slave_0: entered promiscuous mode [ 522.876221][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.883530][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.891151][ T9435] bridge_slave_1: entered allmulticast mode [ 522.910624][ T9435] bridge_slave_1: entered promiscuous mode [ 522.921858][ T9480] sp0: Synchronizing with TNC [ 522.931597][ T9480] sp0: Found TNC [ 522.972112][ T9488] overlayfs: failed to clone upperpath [ 523.053402][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.103276][ T9281] Bluetooth: hci1: command tx timeout [ 523.113396][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.135068][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.155488][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.338332][ T5963] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 523.355777][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.470757][ T5963] usb 5-1: config 0 descriptor?? [ 523.477309][ T9435] team0: Port device team_slave_0 added [ 523.489642][ T9435] team0: Port device team_slave_1 added [ 524.653055][ T9506] xt_socket: unknown flags 0x4c [ 524.670666][ T5963] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 524.680553][ T5963] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 524.687687][ T5963] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 524.695632][ T5963] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 524.704205][ T5963] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 524.706407][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.718553][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.745210][ T9435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.836813][ T5963] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 524.843852][ T5963] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 524.862290][ T5963] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 524.896613][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.909154][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.935709][ T9435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.994991][ T5963] cp2112 0003:10C4:EA90.0013: Part Number: 0x82 Device Version: 0xFE [ 525.042036][ T9511] netlink: 64 bytes leftover after parsing attributes in process `syz.3.852'. [ 525.096415][ T9435] hsr_slave_0: entered promiscuous mode [ 525.103109][ T9435] hsr_slave_1: entered promiscuous mode [ 525.109545][ T9435] debugfs: 'hsr0' already exists in 'hsr' [ 525.115438][ T9435] Cannot create hsr debugfs directory [ 525.166629][ T9281] Bluetooth: hci1: command tx timeout [ 525.385379][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 525.571745][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 525.770673][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 525.787794][ T5963] cp2112 0003:10C4:EA90.0013: error reading lock byte: -32 [ 525.796772][ T9461] cp2112 0003:10C4:EA90.0013: Multi-message I2C transactions not supported [ 525.813590][ T10] usb 4-1: config 1 has an invalid interface number: 35 but max is 0 [ 525.847481][ T9461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.851083][ T10] usb 4-1: config 1 has no interface number 0 [ 525.876249][ T9461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.877979][ T10] usb 4-1: config 1 interface 35 has no altsetting 0 [ 525.896751][ T9461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.910853][ T10] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=fd.15 [ 525.918800][ T9435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.926235][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.926959][ T9461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.934654][ T10] usb 4-1: Product: syz [ 525.950914][ T10] usb 4-1: Manufacturer: syz [ 525.956082][ T9435] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.957455][ T10] usb 4-1: SerialNumber: syz [ 525.974741][ T5963] usb 5-1: USB disconnect, device number 44 [ 525.994232][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.001426][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.157790][ T30] audit: type=1400 audit(1766574489.022:578): avc: denied { setopt } for pid=9524 comm="syz.1.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 526.209667][ T10] usb 4-1: USB disconnect, device number 37 [ 526.216425][ T30] audit: type=1400 audit(1766574489.062:579): avc: denied { read write } for pid=9510 comm="syz.3.852" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 526.291963][ T30] audit: type=1400 audit(1766574489.062:580): avc: denied { open } for pid=9510 comm="syz.3.852" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 526.328537][ T30] audit: type=1400 audit(1766574489.192:581): avc: denied { watch_mount } for pid=9529 comm="syz.0.856" path="/198" dev="tmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 526.335065][ T9527] : entered promiscuous mode [ 526.378488][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.385653][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.007805][ T9435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.580979][ T9281] Bluetooth: hci1: command tx timeout [ 527.581073][ T5963] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 527.589970][ T30] audit: type=1400 audit(1766574490.342:582): avc: denied { write } for pid=9545 comm="syz.4.859" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 528.012080][ T5963] usb 4-1: unable to get BOS descriptor or descriptor too short [ 528.021621][ T5963] usb 4-1: config 255 has an invalid interface number: 78 but max is 0 [ 528.031466][ T5963] usb 4-1: config 255 has no interface number 0 [ 528.037852][ T5963] usb 4-1: config 255 interface 78 has no altsetting 0 [ 528.047938][ T5963] usb 4-1: New USB device found, idVendor=be19, idProduct=67ae, bcdDevice=cc.f8 [ 528.096674][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.104766][ T5963] usb 4-1: Product: syz [ 528.140774][ T5963] usb 4-1: Manufacturer: syz [ 528.506416][ T5963] usb 4-1: SerialNumber: syz [ 528.553930][ T9555] mmap: syz.1.861 (9555): VmData 21221376 exceed data ulimit 8199. Update limits or use boot option ignore_rlimit_data. [ 528.738547][ T5963] usb 4-1: USB disconnect, device number 38 [ 528.893075][ T9435] veth0_vlan: entered promiscuous mode [ 528.918211][ T9435] veth1_vlan: entered promiscuous mode [ 528.978951][ T9435] veth0_macvtap: entered promiscuous mode [ 528.998356][ T30] audit: type=1800 audit(1766574491.862:583): pid=9584 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.864" name="nullb0" dev="tmpfs" ino=807 res=0 errno=0 [ 528.998944][ T9435] veth1_macvtap: entered promiscuous mode [ 529.077239][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.093505][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.286742][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.300692][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.695173][ T9281] Bluetooth: hci1: command tx timeout [ 529.805574][ T6014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.822932][ T6014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.911273][ T9591] lo speed is unknown, defaulting to 1000 [ 529.940050][ T30] audit: type=1400 audit(1766574492.812:584): avc: denied { mounton } for pid=9435 comm="syz-executor" path="/root/syzkaller.X1kZjO/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 530.058545][ T30] audit: type=1400 audit(1766574492.862:585): avc: denied { mounton } for pid=9435 comm="syz-executor" path="/root/syzkaller.X1kZjO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 530.088658][ T30] audit: type=1400 audit(1766574492.862:586): avc: denied { mounton } for pid=9435 comm="syz-executor" path="/root/syzkaller.X1kZjO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 530.117659][ T30] audit: type=1400 audit(1766574492.872:587): avc: denied { mounton } for pid=9435 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 530.395578][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 531.190882][ T9621] overlayfs: failed to clone upperpath [ 531.390403][ T9614] lo speed is unknown, defaulting to 1000 [ 531.445679][ T10] usb 5-1: device descriptor read/64, error -71 [ 531.588442][ T30] audit: type=1400 audit(1766574494.462:588): avc: denied { setopt } for pid=9615 comm="syz.0.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 531.608646][ T30] audit: type=1400 audit(1766574494.462:589): avc: denied { connect } for pid=9615 comm="syz.0.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 531.705466][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 531.835465][ T10] usb 5-1: device descriptor read/64, error -71 [ 531.955227][ T5939] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 531.978294][ T10] usb usb5-port1: attempt power cycle [ 532.155401][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.155428][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 532.155442][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.179701][ T5939] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 532.179781][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.179818][ T5939] usb 4-1: Product: syz [ 532.179852][ T5939] usb 4-1: Manufacturer: syz [ 532.179884][ T5939] usb 4-1: SerialNumber: syz [ 532.231679][ T5939] usb 4-1: config 0 descriptor?? [ 532.236664][ T30] audit: type=1326 audit(1766574495.102:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9633 comm="syz.5.877" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b5ed8f749 code=0x0 [ 532.279817][ T5939] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 532.375064][ T5939] usb 4-1: Detected SIO [ 532.375191][ T5939] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 532.394158][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 532.600275][ T10] usb 5-1: device descriptor read/8, error -71 [ 532.618116][ T5939] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 532.806230][ T9646] IPVS: set_ctl: invalid protocol: 105 100.1.1.0:20001 [ 533.047810][ T9626] wireguard0: entered promiscuous mode [ 533.096048][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 533.129693][ T10] usb 5-1: device descriptor read/8, error -71 [ 533.224472][ T5939] usb 4-1: USB disconnect, device number 39 [ 533.236679][ T5939] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 533.245294][ T30] audit: type=1400 audit(1766574496.112:591): avc: denied { listen } for pid=9663 comm="syz.5.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 533.265615][ T5939] ftdi_sio 4-1:0.0: device disconnected [ 533.285366][ T30] audit: type=1400 audit(1766574496.112:592): avc: denied { accept } for pid=9663 comm="syz.5.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 533.289138][ T10] usb usb5-port1: unable to enumerate USB device [ 533.432870][ T30] audit: type=1400 audit(1766574496.302:593): avc: denied { create } for pid=9672 comm="syz.5.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 533.531354][ T9648] lo speed is unknown, defaulting to 1000 [ 533.831807][ T9681] erspan0: entered promiscuous mode [ 534.028311][ T30] audit: type=1400 audit(1766574496.822:594): avc: denied { connect } for pid=9678 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 534.587355][ T30] audit: type=1400 audit(1766574497.462:595): avc: denied { setopt } for pid=9685 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 534.616700][ T9687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.319312][ T9687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.525190][ T9587] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 535.682243][ T9715] netlink: 7920 bytes leftover after parsing attributes in process `syz.4.894'. [ 535.695724][ T9587] usb 4-1: Using ep0 maxpacket: 32 [ 535.715285][ T30] audit: type=1400 audit(1766574498.572:596): avc: denied { shutdown } for pid=9709 comm="syz.0.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 535.744687][ T9587] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 535.764385][ T9587] usb 4-1: config 0 has an invalid descriptor of length 229, skipping remainder of the config [ 535.785808][ T9715] veth1_macvtap: left promiscuous mode [ 535.804658][ T9587] usb 4-1: config 0 has no interface number 0 [ 535.812799][ T9587] usb 4-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice=c7.ec [ 535.823668][ T9720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37731 sclass=netlink_route_socket pid=9720 comm=syz.4.894 [ 535.837577][ T9587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.856121][ T9587] usb 4-1: Product: syz [ 535.868748][ T9587] usb 4-1: Manufacturer: syz [ 535.873386][ T9587] usb 4-1: SerialNumber: syz [ 535.918946][ T9587] usb 4-1: config 0 descriptor?? [ 535.997836][ T30] audit: type=1400 audit(1766574498.872:597): avc: denied { mount } for pid=9723 comm="syz.1.897" name="/" dev="configfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 536.621319][ T30] audit: type=1400 audit(1766574498.872:598): avc: denied { search } for pid=9723 comm="syz.1.897" name="/" dev="configfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 536.770124][ T30] audit: type=1400 audit(1766574498.902:599): avc: denied { search } for pid=9723 comm="syz.1.897" name="/" dev="configfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 536.843170][ T30] audit: type=1400 audit(1766574498.902:600): avc: denied { read open } for pid=9723 comm="syz.1.897" path="/" dev="configfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 536.894760][ T30] audit: type=1400 audit(1766574498.912:601): avc: denied { watch watch_reads } for pid=9723 comm="syz.1.897" path="/" dev="configfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 537.005450][ T5939] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 537.186914][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 537.198388][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.213806][ T5939] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 537.223889][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.241605][ T5939] usb 5-1: config 0 descriptor?? [ 537.310331][ T30] audit: type=1400 audit(1766574500.182:602): avc: denied { getopt } for pid=9730 comm="syz.0.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 537.565963][ T9587] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 537.596583][ T30] audit: type=1400 audit(1766574500.472:603): avc: denied { connect } for pid=9734 comm="syz.0.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 537.630473][ T9587] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 537.645572][ T9587] dib0700: firmware download failed at 7 with -22 [ 537.672664][ T9587] usb 4-1: USB disconnect, device number 40 [ 537.870031][ T5939] usbhid 5-1:0.0: can't add hid device: -71 [ 538.321518][ T5939] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 538.334934][ T5939] usb 5-1: USB disconnect, device number 49 [ 538.805248][ T5939] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 538.975420][ T5939] usb 5-1: Using ep0 maxpacket: 8 [ 538.983245][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 538.998538][ T5939] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 539.011616][ T10] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 539.019264][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.032107][ T5939] usb 5-1: config 0 descriptor?? [ 539.176911][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 539.187185][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 539.196763][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 539.206027][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 539.214439][ T10] usb 4-1: Product: syz [ 539.219228][ T10] usb 4-1: Manufacturer: syz [ 539.223841][ T10] usb 4-1: SerialNumber: syz [ 539.230208][ T10] usb 4-1: config 0 descriptor?? [ 539.241207][ T10] usb 4-1: selecting invalid altsetting 0 [ 539.287710][ T9336] udevd[9336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 539.443111][ T10] usb 4-1: USB disconnect, device number 41 [ 539.455647][ T5939] apple 0003:05AC:027D.0014: unknown main item tag 0x0 [ 539.462901][ T5939] apple 0003:05AC:027D.0014: unknown main item tag 0x0 [ 539.481649][ T5939] apple 0003:05AC:027D.0014: unknown main item tag 0x0 [ 539.491076][ T5939] apple 0003:05AC:027D.0014: unknown main item tag 0x0 [ 539.498760][ T5939] apple 0003:05AC:027D.0014: unknown main item tag 0x0 [ 539.510433][ T5939] apple 0003:05AC:027D.0014: hidraw0: USB HID v4.00 Device [HID 05ac:027d] on usb-dummy_hcd.4-1/input0 [ 539.652745][ T10] usb 5-1: USB disconnect, device number 50 [ 540.348530][ T9791] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 540.929939][ T9802] 9pnet_fd: Insufficient options for proto=fd [ 542.358614][ T9833] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.926'. [ 542.505199][ T5866] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 542.614614][ T9844] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 542.637070][ T9844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 542.655337][ T9844] bond3: (slave veth5): Enslaving as an active interface with a down link [ 542.669355][ T9844] bond0: (slave dummy0): Releasing backup interface [ 542.675177][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 542.683478][ T5866] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 542.684822][ T9844] bond3: (slave dummy0): making interface the new active one [ 542.703345][ T5866] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 542.704207][ T9844] dummy0: entered promiscuous mode [ 542.713035][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.719237][ T9844] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 542.726907][ T5866] usb 4-1: Product: syz [ 542.742244][ T5866] usb 4-1: Manufacturer: syz [ 542.747071][ T5866] usb 4-1: SerialNumber: syz [ 542.754089][ T5866] usb 4-1: config 0 descriptor?? [ 542.765234][ T5963] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 542.771494][ T9830] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 542.790565][ T5866] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input32 [ 542.802830][ T9844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9844 comm=syz.0.929 [ 543.021563][ T30] audit: type=1400 audit(1766574505.892:604): avc: denied { read write } for pid=9828 comm="syz.3.924" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 543.055201][ T5963] usb 5-1: Using ep0 maxpacket: 8 [ 543.064057][ T10] usb 4-1: USB disconnect, device number 42 [ 543.064114][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 543.080382][ T30] audit: type=1400 audit(1766574505.922:605): avc: denied { open } for pid=9828 comm="syz.3.924" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 543.516122][ T5963] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 543.524503][ T5963] usb 5-1: config 179 has no interface number 0 [ 543.531027][ T5963] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 543.542189][ T5963] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 543.553629][ T5963] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 543.564927][ T5963] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 543.577430][ T3541] wlan0: Trigger new scan to find an IBSS to join [ 543.584622][ T9846] bond3 (unregistering): (slave veth5): Releasing active interface [ 543.595534][ T5963] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 543.628305][ T5963] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 543.646734][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.648285][ T9846] bond3 (unregistering): (slave dummy0): Releasing active interface [ 543.681062][ T9842] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 543.707296][ T9846] bond3 (unregistering): Released all slaves [ 543.901187][ T9861] can0: slcan on ttyS3. [ 543.919534][ T9861] comedi comedi0: Minor 47 could not be opened [ 543.927880][ T9861] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 544.273195][ T9842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.335460][ T9842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.379897][ T5963] usb 5-1: USB disconnect, device number 51 [ 544.386199][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 544.386248][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 544.997582][ T9856] can0 (unregistered): slcan off ttyS3. [ 545.669036][ T9894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.940'. [ 546.453272][ T5940] IPVS: starting estimator thread 0... [ 546.545187][ T9910] IPVS: using max 38 ests per chain, 91200 per kthread [ 547.622258][ T9933] overlay: Unknown parameter '/' [ 547.638711][ T9371] wlan0: Trigger new scan to find an IBSS to join [ 548.668847][ T30] audit: type=1400 audit(1766574511.542:606): avc: denied { name_bind } for pid=9932 comm="syz.0.949" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 550.011838][ T9958] ptrace attach of "./syz-executor exec"[5807] was attempted by "./syz-executor exec"[9958] [ 550.039699][ T9957] wireguard0: entered promiscuous mode [ 550.048127][ T9957] wireguard0: entered allmulticast mode [ 550.254013][ T30] audit: type=1400 audit(1766574513.122:607): avc: denied { name_bind } for pid=9968 comm="syz.4.956" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 550.322771][ T9956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.354726][ T9974] fuse: Unknown parameter '^ށA R)E?bR9a!|G!ruJA5E2xMވgۂ*VNi\pPtم-s;THbGmC' [ 550.396386][ T30] audit: type=1400 audit(1766574513.272:608): avc: denied { listen } for pid=9973 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 550.434590][ T30] audit: type=1400 audit(1766574513.292:609): avc: denied { accept } for pid=9973 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 550.519144][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 550.578151][ T995] bridge_slave_1: left allmulticast mode [ 550.585543][ T995] bridge_slave_1: left promiscuous mode [ 550.598783][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.639386][ T995] : left allmulticast mode [ 550.650275][ T995] : left promiscuous mode [ 550.668150][ T995] bridge0: port 1() entered disabled state [ 550.685842][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 550.692584][ T10] usb 5-1: config index 0 descriptor too short (expected 91, got 27) [ 550.702018][ T10] usb 5-1: config 0 has an invalid interface number: 9 but max is 1 [ 550.715547][ T10] usb 5-1: config 0 has an invalid interface number: 9 but max is 1 [ 550.726610][ T30] audit: type=1400 audit(1766574513.602:610): avc: denied { unmount } for pid=9975 comm="syz.5.959" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 550.748249][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 550.762697][ T10] usb 5-1: config 0 has no interface number 0 [ 550.769323][ T10] usb 5-1: config 0 interface 9 has no altsetting 0 [ 550.797272][ T10] usb 5-1: config 0 interface 9 has no altsetting 1 [ 550.814001][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice= 9.a0 [ 550.823646][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.862020][ T10] usb 5-1: Product: syz [ 550.867700][ T10] usb 5-1: Manufacturer: syz [ 550.882032][ T10] usb 5-1: SerialNumber: syz [ 550.907013][ T10] usb 5-1: config 0 descriptor?? [ 551.131049][ T10] usb 5-1: selecting invalid altsetting 1 [ 551.146867][ T10] sierra 5-1:0.9: Sierra USB modem converter detected [ 551.168413][ T10] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 551.205062][ T10] usb 5-1: USB disconnect, device number 52 [ 551.224538][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 551.236005][ T10] sierra 5-1:0.9: device disconnected [ 551.348823][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.361082][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.371792][ T995] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 551.384770][ T995] bond0 (unregistering): Released all slaves [ 551.402884][ T995] bond1 (unregistering): Released all slaves [ 551.454864][ T9988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.490321][ T9989] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 551.540067][ T9990] bond_slave_0: entered promiscuous mode [ 551.545998][ T9990] bond_slave_1: entered promiscuous mode [ 551.557664][ T9581] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 551.598837][ T9990] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 551.651416][ T9990] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 551.686467][ T2996] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 551.698176][ T995] tipc: Left network mode [ 551.840692][ T9998] fuse: Bad value for 'fd' [ 551.849940][ T30] audit: type=1400 audit(1766574514.712:611): avc: denied { map } for pid=9997 comm="syz.4.963" path="socket:[25519]" dev="sockfs" ino=25519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 551.906022][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.963'. [ 552.295284][ T5963] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 552.443976][T10030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.969'. [ 552.547696][ T30] audit: type=1326 audit(1766574515.412:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.3.967" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda1fb8f749 code=0x0 [ 552.575418][ T5963] usb 5-1: Using ep0 maxpacket: 8 [ 552.614152][ T5963] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 552.677515][ T5963] usb 5-1: config 0 has no interface number 0 [ 552.699004][ T5963] usb 5-1: New USB device found, idVendor=1e2d, idProduct=0055, bcdDevice=64.48 [ 552.717175][ T995] hsr_slave_0: left promiscuous mode [ 552.731358][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.767465][ T5963] usb 5-1: Product: syz [ 552.771759][ T995] hsr_slave_1: left promiscuous mode [ 552.777882][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.788181][ T5963] usb 5-1: Manufacturer: syz [ 552.800004][ T5963] usb 5-1: SerialNumber: syz [ 552.817167][ T5963] usb 5-1: config 0 descriptor?? [ 552.823298][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.925555][ T5939] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 553.089422][ T5939] usb 4-1: config 0 has an invalid interface number: 78 but max is 0 [ 553.095407][ T5963] option 5-1:0.2: GSM modem (1-port) converter detected [ 553.136989][ T5939] usb 4-1: config 0 has no interface number 0 [ 553.150184][ T5963] usb 5-1: USB disconnect, device number 53 [ 553.178790][ T5939] usb 4-1: New USB device found, idVendor=413c, idProduct=8138, bcdDevice=e1.2f [ 553.185155][ T5963] option 5-1:0.2: device disconnected [ 553.219838][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.247236][ T5939] usb 4-1: Product: syz [ 553.252300][ T5939] usb 4-1: Manufacturer: syz [ 553.260249][ T5939] usb 4-1: SerialNumber: syz [ 553.289761][ T5939] usb 4-1: config 0 descriptor?? [ 554.802901][T10057] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 554.810879][T10057] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 554.820347][T10057] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 554.828144][T10057] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 554.867803][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 555.150311][ T995] team0 (unregistering): Port device team_slave_1 removed [ 555.265605][ T995] team0 (unregistering): Port device team_slave_0 removed [ 555.595035][ T5939] usb 4-1: USB disconnect, device number 43 [ 556.801827][T10066] kthread_run failed with err -4 [ 557.017247][ T30] audit: type=1400 audit(1766574519.882:613): avc: denied { read } for pid=10077 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 557.263878][T10086] tmpfs: Unknown parameter 'grpquota_r ock_hardlimit' [ 557.302743][T10086] ipvlan2: entered allmulticast mode [ 557.308211][T10086] dummy0: entered allmulticast mode [ 557.364132][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'. [ 557.620049][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.976'. [ 557.620247][T10092] bridge_slave_0: default FDB implementation only supports local addresses [ 557.622399][ T30] audit: type=1400 audit(1766574520.412:614): avc: denied { bind } for pid=10088 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 557.878000][ T995] IPVS: stop unused estimator thread 0... [ 558.407476][ T30] audit: type=1400 audit(1766574521.282:615): avc: denied { mounton } for pid=10111 comm="syz.4.988" path="/187/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 558.435658][T10113] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 558.457178][T10113] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 558.480948][ T30] audit: type=1400 audit(1766574521.352:616): avc: denied { read } for pid=10111 comm="syz.4.988" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 558.539206][T10113] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 558.550553][ T30] audit: type=1400 audit(1766574521.352:617): avc: denied { read } for pid=10111 comm="syz.4.988" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 558.579049][T10113] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 558.590923][T10113] overlayfs: d_ino too big (187, ino=9223372036854776806, xinobits=3) [ 558.607215][T10113] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 558.616079][ T30] audit: type=1400 audit(1766574521.352:618): avc: denied { read } for pid=10111 comm="syz.4.988" name="/" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 558.641246][T10113] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 558.656433][T10113] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 558.665644][T10113] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 558.675502][ T30] audit: type=1400 audit(1766574521.382:619): avc: denied { open } for pid=10111 comm="syz.4.988" path="/187/file0" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 558.700229][T10113] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 558.710041][T10113] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 558.719118][ T30] audit: type=1400 audit(1766574521.382:620): avc: denied { read } for pid=10111 comm="syz.4.988" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 558.742471][T10113] overlayfs: d_ino too big (instances, ino=4611686018427388099, xinobits=3) [ 558.794138][ T30] audit: type=1400 audit(1766574521.382:621): avc: denied { read } for pid=10111 comm="syz.4.988" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 558.897091][ T30] audit: type=1400 audit(1766574521.382:622): avc: denied { read } for pid=10111 comm="syz.4.988" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 558.927282][ T9587] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 558.943439][T10126] netlink: 44 bytes leftover after parsing attributes in process `syz.5.993'. [ 558.970355][T10129] 9p: Bad value for 'rfdno' [ 559.145648][T10140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 559.185200][T10140] overlayfs: missing 'lowerdir' [ 559.191103][T10140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 559.200412][T10140] overlayfs: missing 'lowerdir' [ 559.208128][ T9587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.219314][ T9587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.229213][ T9587] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 559.245326][T10140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 559.255289][ T9587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.269301][T10140] overlayfs: missing 'lowerdir' [ 559.335725][T10140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 559.403063][ T9587] usb 4-1: config 0 descriptor?? [ 559.479221][T10140] overlayfs: missing 'lowerdir' [ 559.625432][T10140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 559.662389][T10140] overlayfs: missing 'lowerdir' [ 559.675035][T10140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 559.693375][T10140] overlayfs: missing 'lowerdir' [ 559.710295][T10140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 559.720339][T10140] overlayfs: missing 'lowerdir' [ 559.727352][T10140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 559.738403][T10140] overlayfs: missing 'lowerdir' [ 559.750036][T10140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 559.769462][T10140] overlayfs: missing 'lowerdir' [ 559.778182][T10140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 559.797784][T10140] overlayfs: missing 'lowerdir' [ 559.812392][T10140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 559.824662][T10140] overlayfs: missing 'lowerdir' [ 559.833499][T10140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 559.842603][T10140] overlayfs: missing 'lowerdir' [ 559.849411][T10140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 559.849488][T10156] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 559.858702][T10140] overlayfs: missing 'lowerdir' [ 559.964479][T10140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 560.018087][T10140] overlayfs: missing 'lowerdir' [ 560.076656][T10163] netlink: 'syz.5.1000': attribute type 1 has an invalid length. [ 560.076894][T10164] netlink: 'syz.5.1000': attribute type 1 has an invalid length. [ 560.084634][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1000'. [ 560.092604][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1000'. [ 560.230247][T10176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.289164][T10176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.545458][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 561.095183][ T9] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 561.902647][ T9] usb 5-1: config 4 has an invalid interface number: 9 but max is 0 [ 561.910713][ T9] usb 5-1: config 4 has no interface number 0 [ 561.918951][ T9] usb 5-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=d7.0c [ 561.929652][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.938351][ T9] usb 5-1: Product: syz [ 561.942526][ T9] usb 5-1: Manufacturer: syz [ 561.951818][ T9] usb 5-1: SerialNumber: syz [ 561.973147][ T9] gspca_main: spca505-2.14.0 probing 0733:0430 [ 562.104178][ T9587] usbhid 4-1:0.0: can't add hid device: -71 [ 562.123126][ T12] smc: removing ib device syz2 [ 562.137077][ T9587] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 562.151376][ T9587] usb 4-1: USB disconnect, device number 44 [ 562.365202][ T5827] Bluetooth: hci1: command 0x0405 tx timeout [ 562.373393][ T9] gspca_spca505: reg write: error -71 [ 562.392356][ T9] spca505 5-1:4.9: probe with driver spca505 failed with error -5 [ 562.403182][ T9] usb 5-1: USB disconnect, device number 55 [ 562.424682][T10218] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1009'. [ 562.615691][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.624424][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.962949][T10265] evm: overlay not supported [ 564.990090][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 564.990107][ T30] audit: type=1400 audit(1766574527.862:630): avc: denied { mount } for pid=10266 comm="syz.0.1021" name="/" dev="hugetlbfs" ino=27661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 565.154620][T10276] overlayfs: failed to resolve './file1/file0': -2 [ 565.514569][ T30] audit: type=1400 audit(1766574528.382:631): avc: denied { read } for pid=10296 comm="syz.4.1034" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 565.517583][T10295] Invalid source name [ 565.568089][T10299] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 565.602207][T10295] UBIFS error (pid: 10295): cannot open "./file0", error -22 [ 565.602463][T10299] overlayfs: failed to clone lowerpath [ 565.618362][ T30] audit: type=1400 audit(1766574528.382:632): avc: denied { open } for pid=10296 comm="syz.4.1034" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 565.949470][T10314] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1038'. [ 566.927855][ T30] audit: type=1400 audit(1766574529.392:633): avc: denied { link } for pid=10313 comm="syz.4.1041" name="#17" dev="tmpfs" ino=1089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 567.205995][ T30] audit: type=1400 audit(1766574529.392:634): avc: denied { rename } for pid=10313 comm="syz.4.1041" name="#18" dev="tmpfs" ino=1089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 567.499419][ T30] audit: type=1400 audit(1766574530.362:635): avc: denied { map } for pid=10321 comm="syz.5.1044" path="socket:[27725]" dev="sockfs" ino=27725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 567.860904][T10330] can: request_module (can-proto-0) failed. [ 567.870510][T10329] can: request_module (can-proto-0) failed. [ 567.898260][ T30] audit: type=1400 audit(1766574530.362:636): avc: denied { read } for pid=10321 comm="syz.5.1044" path="socket:[27725]" dev="sockfs" ino=27725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 567.985177][ T9587] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 568.190853][ T9587] usb 5-1: config 4 has an invalid interface number: 9 but max is 0 [ 568.207920][ T9587] usb 5-1: config 4 has no interface number 0 [ 568.226779][ T9587] usb 5-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=d7.0c [ 568.245118][ T9587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.253195][ T9587] usb 5-1: Product: syz [ 568.275350][ T9587] usb 5-1: Manufacturer: syz [ 568.280029][ T9587] usb 5-1: SerialNumber: syz [ 568.301269][ T9587] gspca_main: spca505-2.14.0 probing 0733:0430 [ 568.334818][T10351] Process accounting resumed [ 568.365442][T10339] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1048'. [ 568.607939][T10361] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1052'. [ 569.101671][ T9587] gspca_spca505: reg write: error -110 [ 569.111508][ T9587] spca505 5-1:4.9: probe with driver spca505 failed with error -5 [ 569.154097][ T9587] usb 5-1: USB disconnect, device number 56 [ 569.398883][T10366] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1055'. [ 569.405395][ T9652] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 569.567543][ T9652] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.578065][ T9652] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 569.591583][ T9652] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 569.601413][ T9652] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.611931][ T9652] usb 4-1: config 0 descriptor?? [ 569.620042][ T9652] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 569.708864][T10389] netlink: 'syz.4.1060': attribute type 4 has an invalid length. [ 569.734281][ T9652] lo speed is unknown, defaulting to 1000 [ 569.749454][ T9652] syz0: Port: 1 Link DOWN [ 569.772506][T10392] netlink: 'syz.5.1062': attribute type 1 has an invalid length. [ 569.791274][T10392] bond2: entered promiscuous mode [ 569.797637][T10392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 569.910148][ T30] audit: type=1800 audit(1766574532.782:637): pid=10396 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1063" name="/newroot/208/file0" dev="tmpfs" ino=1130 res=0 errno=0 [ 569.982596][ T30] audit: type=1400 audit(1766574532.852:638): avc: denied { read } for pid=10401 comm="syz.1.1065" path="socket:[27785]" dev="sockfs" ino=27785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 570.005213][ T9587] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 570.346715][ T9587] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.361260][ T9587] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 570.405172][ T9587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.420016][ T9587] usb 5-1: config 0 descriptor?? [ 571.068576][T10389] comedi comedi0: Minor -1 is invalid! [ 571.090969][ T9587] usbhid 5-1:0.0: can't add hid device: -71 [ 571.103433][ T9587] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 571.122041][ T9587] usb 5-1: USB disconnect, device number 57 [ 571.293357][T10443] lo speed is unknown, defaulting to 1000 [ 572.300822][ T9652] usb 4-1: USB disconnect, device number 45 [ 573.601375][ T30] audit: type=1400 audit(1766574536.472:639): avc: denied { getopt } for pid=10476 comm="syz.0.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 574.935652][ T9652] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 574.968756][T10519] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1088'. [ 575.456884][ T9652] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.475047][ T9652] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 575.504690][ T9652] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.554569][ T9652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.576171][ T9652] usb 5-1: config 0 descriptor?? [ 575.610417][ T9652] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 576.557252][ T9652] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 576.717703][ T9652] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 576.727387][ T9652] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.740223][ T9652] usb 4-1: config 0 has no interfaces? [ 576.753885][ T9652] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 576.773839][ T9652] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.802702][ T9652] usb 4-1: config 0 descriptor?? [ 577.280552][T10551] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1093'. [ 577.310913][T10551] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 577.926499][ T9652] usb 5-1: USB disconnect, device number 58 [ 578.199873][ T30] audit: type=1400 audit(1766574541.032:640): avc: denied { name_bind } for pid=10560 comm="syz.5.1095" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 578.669233][ T9652] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 578.897388][ T9652] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 578.912885][ T9652] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 578.939141][ T9652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.026491][ T9652] usb 5-1: Product: syz [ 579.030679][ T9652] usb 5-1: Manufacturer: syz [ 579.074461][ T9652] usb 5-1: SerialNumber: syz [ 579.108167][T10598] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1100'. [ 579.577431][ T9652] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 579.774539][T10588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.796413][T10588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.969410][T10612] overlayfs: missing 'lowerdir' [ 580.029916][ T9652] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 580.059518][ T9652] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 580.077784][ T30] audit: type=1400 audit(1766574542.952:641): avc: denied { associate } for pid=10615 comm="syz.5.1104" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 580.108863][T10620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.120064][ T30] audit: type=1400 audit(1766574542.952:642): avc: denied { remount } for pid=10611 comm="syz.5.1104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 580.135197][ T9652] usb 5-1: media controller created [ 580.153984][ T9652] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 580.205471][T10620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.381689][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1108'. [ 580.422574][T10637] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1108'. [ 685.385031][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 685.391999][ C0] rcu: 1-...!: (1 GPs behind) idle=82a4/1/0x4000000000000000 softirq=47160/47173 fqs=3 [ 685.402608][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10629/1:b..l P10634/1:b..l [ 685.411830][ C0] rcu: (detected by 0, t=10502 jiffies, g=37193, q=1764 ncpus=2) [ 685.419622][ C0] Sending NMI from CPU 0 to CPUs 1: [ 685.419647][ C1] NMI backtrace for cpu 1 [ 685.419661][ C1] CPU: 1 UID: 0 PID: 10635 Comm: syz.1.1110 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.419681][ C1] Tainted: [L]=SOFTLOCKUP [ 685.419685][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 685.419693][ C1] RIP: 0010:__lock_acquire+0x6aa/0x2890 [ 685.419716][ C1] Code: 4c 8b 1c 24 8b 35 e6 14 ef 0e 85 f6 75 3d 85 ed 0f 85 1c 05 00 00 41 0f b7 46 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 b6 b5 1f 14 <0f> 83 a4 05 00 00 48 8d 04 80 48 8d 04 80 48 8d 04 c5 60 8a b9 95 [ 685.419729][ C1] RSP: 0018:ffffc90000a08ce8 EFLAGS: 00000007 [ 685.419740][ C1] RAX: 000000000000006f RBX: 0000000000000001 RCX: 00000000ffffffff [ 685.419749][ C1] RDX: 000000000000006f RSI: 0000000000000000 RDI: ffff88804e144980 [ 685.419758][ C1] RBP: 0000000000000001 R08: 00000000ffffffff R09: 00000000ffffffff [ 685.419767][ C1] R10: 0000000000000000 R11: ffff88804e1454b0 R12: ffff88804e144980 [ 685.419776][ C1] R13: 0000000000000002 R14: ffff88804e1454d8 R15: 04baeae17f23ea81 [ 685.419785][ C1] FS: 00007f85c5a476c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 685.419800][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 685.419809][ C1] CR2: 00007f85c5a46f98 CR3: 0000000031807000 CR4: 00000000003526f0 [ 685.419818][ C1] Call Trace: [ 685.419824][ C1] [ 685.419832][ C1] ? find_held_lock+0x2b/0x80 [ 685.419852][ C1] ? advance_sched+0x6ec/0xc80 [ 685.419873][ C1] lock_acquire+0x179/0x330 [ 685.419888][ C1] ? __hrtimer_run_queues+0x2bc/0xc40 [ 685.419912][ C1] _raw_spin_lock_irq+0x36/0x50 [ 685.419927][ C1] ? __hrtimer_run_queues+0x2bc/0xc40 [ 685.419947][ C1] __hrtimer_run_queues+0x2bc/0xc40 [ 685.419969][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 685.419989][ C1] ? read_tsc+0x9/0x20 [ 685.420011][ C1] hrtimer_interrupt+0x397/0x8e0 [ 685.420028][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 685.420046][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 685.420063][ C1] [ 685.420067][ C1] [ 685.420072][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 685.420087][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 685.420103][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 c6 0d 1f f6 48 89 df e8 7e 60 1f f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 63 0f f6 65 8b 05 2e c9 37 08 85 c0 74 16 5b [ 685.420128][ C1] RSP: 0018:ffffc9001da67c98 EFLAGS: 00000246 [ 685.420138][ C1] RAX: 0000000000000006 RBX: ffff8880b8428440 RCX: 0000000000000007 [ 685.420146][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 685.420155][ C1] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000001 [ 685.420163][ C1] R10: ffffffff9088b4d7 R11: ffff88804e1454b0 R12: 0000000000000000 [ 685.420172][ C1] R13: 1bc16ce02fcd3f97 R14: dffffc0000000000 R15: ffff8880b8428440 [ 685.420186][ C1] clock_was_set+0x599/0x870 [ 685.420201][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 685.420215][ C1] ? rcu_is_watching+0x12/0xc0 [ 685.420228][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 685.420245][ C1] do_settimeofday64+0x364/0x550 [ 685.420262][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 685.420278][ C1] ? bpf_lsm_capable+0x9/0x10 [ 685.420295][ C1] ? arch_find_n_match_cpu_physical_id+0x194/0x280 [ 685.420316][ C1] ? capable+0xd4/0x110 [ 685.420335][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 685.420353][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 685.420367][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 685.420383][ C1] do_syscall_64+0xcd/0xf80 [ 685.420400][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.420415][ C1] RIP: 0033:0x7f85c4b8f749 [ 685.420427][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.420439][ C1] RSP: 002b:00007f85c5a47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 685.420453][ C1] RAX: ffffffffffffffda RBX: 00007f85c4de6090 RCX: 00007f85c4b8f749 [ 685.420462][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 685.420471][ C1] RBP: 00007f85c4c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 685.420480][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.420488][ C1] R13: 00007f85c4de6128 R14: 00007f85c4de6090 R15: 00007ffd0bd31b68 [ 685.420502][ C1] [ 685.420641][ C0] task:syz.1.1110 state:R running task stack:27800 pid:10634 tgid:10633 ppid:5808 task_flags:0x400040 flags:0x00080000 [ 685.861139][ C0] Call Trace: [ 685.864411][ C0] [ 685.867336][ C0] ? __schedule+0x10b9/0x6150 [ 685.872030][ C0] __schedule+0x1139/0x6150 [ 685.876543][ C0] ? __pfx___schedule+0x10/0x10 [ 685.881394][ C0] ? mark_held_locks+0x49/0x80 [ 685.886157][ C0] preempt_schedule_irq+0x51/0x90 [ 685.891174][ C0] irqentry_exit+0x1d8/0x8c0 [ 685.895761][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 685.901732][ C0] RIP: 0010:kernel_text_address+0x5b/0x100 [ 685.907535][ C0] Code: fb de a5 ff 85 c0 75 e5 48 c7 c0 84 71 88 90 48 ba 00 00 00 00 00 fc ff df 48 89 c1 83 e0 07 48 c1 e9 03 83 c0 03 0f b6 14 11 <38> d0 7c 08 84 d2 0f 85 85 00 00 00 83 3d 16 4a 02 0f 01 76 2a e8 [ 685.927145][ C0] RSP: 0018:ffffc9001da57138 EFLAGS: 00000202 [ 685.933214][ C0] RAX: 0000000000000007 RBX: 00007f85c4b915dc RCX: 1ffffffff2110e30 [ 685.941175][ C0] RDX: 0000000000000000 RSI: ffffffff812c0688 RDI: 0000000000000007 [ 685.949134][ C0] RBP: ffffc9001da571c0 R08: 0000000000000007 R09: ffffffffff600000 [ 685.957096][ C0] R10: 00007f85c4b91000 R11: 0000000000000001 R12: ffffffff81a960b0 [ 685.965054][ C0] R13: ffffc9001da57238 R14: 0000000000000000 R15: ffff8880284b4980 [ 685.973018][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 685.979173][ C0] ? 0xffffffffff600000 [ 685.983316][ C0] ? in_gate_area_no_mm+0x58/0x70 [ 685.988346][ C0] ? kernel_text_address+0x35/0x100 [ 685.993543][ C0] __kernel_text_address+0xd/0x40 [ 685.998560][ C0] unwind_get_return_address+0x59/0xa0 [ 686.004014][ C0] arch_stack_walk+0xa6/0x100 [ 686.008694][ C0] stack_trace_save+0x8e/0xc0 [ 686.013365][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 686.018730][ C0] ? stack_trace_save+0x8e/0xc0 [ 686.023570][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 686.028932][ C0] kasan_save_stack+0x33/0x60 [ 686.033603][ C0] ? kasan_save_stack+0x33/0x60 [ 686.038444][ C0] ? kasan_save_track+0x14/0x30 [ 686.043285][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 686.048308][ C0] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 686.053951][ C0] ? skb_clone+0x190/0x3f0 [ 686.058375][ C0] ? netlink_deliver_tap+0xabd/0xd30 [ 686.063656][ C0] ? netlink_unicast+0x71f/0x870 [ 686.068587][ C0] ? ctrl_getfamily+0x40a/0x540 [ 686.073435][ C0] ? genl_family_rcv_msg_doit+0x209/0x2f0 [ 686.079151][ C0] ? genl_rcv_msg+0x55c/0x800 [ 686.083823][ C0] ? netlink_rcv_skb+0x158/0x420 [ 686.088754][ C0] ? genl_rcv+0x28/0x40 [ 686.092904][ C0] ? netlink_unicast+0x5aa/0x870 [ 686.097832][ C0] ? netlink_sendmsg+0x8c8/0xdd0 [ 686.102763][ C0] ? __sys_sendto+0x4a3/0x520 [ 686.107441][ C0] ? __x64_sys_sendto+0xe0/0x1c0 [ 686.112378][ C0] ? do_syscall_64+0xcd/0xf80 [ 686.117052][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.123141][ C0] kasan_save_track+0x14/0x30 [ 686.127814][ C0] __kasan_slab_alloc+0x89/0x90 [ 686.132661][ C0] kmem_cache_alloc_noprof+0x25e/0x770 [ 686.138110][ C0] ? skb_clone+0x190/0x3f0 [ 686.142521][ C0] ? skb_clone+0x190/0x3f0 [ 686.146932][ C0] skb_clone+0x190/0x3f0 [ 686.151169][ C0] netlink_deliver_tap+0xabd/0xd30 [ 686.156279][ C0] netlink_unicast+0x71f/0x870 [ 686.161039][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 686.166326][ C0] ? idr_get_next+0xec/0x150 [ 686.170921][ C0] ctrl_getfamily+0x40a/0x540 [ 686.175593][ C0] ? __pfx_ctrl_getfamily+0x10/0x10 [ 686.180789][ C0] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 686.188242][ C0] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 686.195615][ C0] genl_family_rcv_msg_doit+0x209/0x2f0 [ 686.201158][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 686.207220][ C0] ? genl_get_cmd+0x194/0x580 [ 686.211899][ C0] ? __radix_tree_lookup+0x21f/0x2c0 [ 686.217189][ C0] genl_rcv_msg+0x55c/0x800 [ 686.221698][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 686.226720][ C0] ? __pfx_ctrl_getfamily+0x10/0x10 [ 686.231924][ C0] netlink_rcv_skb+0x158/0x420 [ 686.236680][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 686.241701][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 686.246992][ C0] ? netlink_deliver_tap+0x1ae/0xd30 [ 686.252273][ C0] genl_rcv+0x28/0x40 [ 686.256255][ C0] netlink_unicast+0x5aa/0x870 [ 686.261017][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 686.266306][ C0] netlink_sendmsg+0x8c8/0xdd0 [ 686.271068][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.276352][ C0] __sys_sendto+0x4a3/0x520 [ 686.280860][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 686.285888][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 686.292295][ C0] ? count_memcg_events+0x122/0x290 [ 686.297506][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 686.302270][ C0] ? do_syscall_64+0x91/0xf80 [ 686.306969][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 686.312160][ C0] do_syscall_64+0xcd/0xf80 [ 686.316658][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.322537][ C0] RIP: 0033:0x7f85c4b915dc [ 686.326938][ C0] RSP: 002b:00007f85c5a66ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 686.335340][ C0] RAX: ffffffffffffffda RBX: 00007f85c5a66fc0 RCX: 00007f85c4b915dc [ 686.343302][ C0] RDX: 0000000000000020 RSI: 00007f85c5a67010 RDI: 0000000000000004 [ 686.351259][ C0] RBP: 0000000000000000 R08: 00007f85c5a66f14 R09: 000000000000000c [ 686.359218][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 686.367176][ C0] R13: 00007f85c5a66f68 R14: 00007f85c5a67010 R15: 0000000000000000 [ 686.375148][ C0] [ 686.378167][ C0] task:rm state:R running task stack:25032 pid:10629 tgid:10629 ppid:10600 task_flags:0x40000c flags:0x00080001 [ 686.391647][ C0] Call Trace: [ 686.394914][ C0] [ 686.397836][ C0] ? __schedule+0x10b9/0x6150 [ 686.402509][ C0] __schedule+0x1139/0x6150 [ 686.407028][ C0] ? __pfx___schedule+0x10/0x10 [ 686.411874][ C0] ? mark_held_locks+0x49/0x80 [ 686.416635][ C0] preempt_schedule_irq+0x51/0x90 [ 686.421650][ C0] irqentry_exit+0x1d8/0x8c0 [ 686.426238][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 686.432210][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 686.437409][ C0] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 72 b9 ee 0e 0f 82 74 02 00 00 8b 35 0a ea ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 686.457007][ C0] RSP: 0018:ffffc9001cc676c0 EFLAGS: 00000206 [ 686.463065][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 00000000ace16c1f [ 686.471028][ C0] RDX: 0000000000000000 RSI: ffffffff8daa7ea1 RDI: ffffffff8bf2b400 [ 686.478989][ C0] RBP: 0000000000000002 R08: 0000000027c185dd R09: 00000000d27c185d [ 686.486947][ C0] R10: 0000000000000002 R11: ffff88802a790b30 R12: 0000000000000000 [ 686.494907][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 686.502881][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 686.508092][ C0] unwind_next_frame+0xd1/0x20b0 [ 686.513022][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 686.518137][ C0] ? arch_stack_walk+0x73/0x100 [ 686.522989][ C0] __unwind_start+0x45f/0x7f0 [ 686.527661][ C0] ? unwind_get_return_address+0x59/0xa0 [ 686.533286][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 686.539432][ C0] arch_stack_walk+0x73/0x100 [ 686.544107][ C0] ? arch_stack_walk+0x73/0x100 [ 686.548954][ C0] stack_trace_save+0x8e/0xc0 [ 686.553620][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 686.559015][ C0] ? kasan_save_stack+0x42/0x60 [ 686.563856][ C0] ? kasan_save_stack+0x33/0x60 [ 686.568696][ C0] kasan_save_stack+0x33/0x60 [ 686.573404][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 686.578604][ C0] kmem_cache_free+0x15e/0x770 [ 686.583364][ C0] ? exit_mmap+0x507/0xb60 [ 686.587781][ C0] ? exit_mmap+0x507/0xb60 [ 686.592190][ C0] exit_mmap+0x507/0xb60 [ 686.596434][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 686.601201][ C0] ? __lock_acquire+0x436/0x2890 [ 686.606140][ C0] ? arch_uprobe_clear_state+0x16/0x150 [ 686.611688][ C0] __mmput+0x12a/0x410 [ 686.615756][ C0] mmput+0x62/0x70 [ 686.619481][ C0] do_exit+0x7d7/0x2bd0 [ 686.623632][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 686.628650][ C0] ? __pfx_do_exit+0x10/0x10 [ 686.633235][ C0] ? rcu_is_watching+0x12/0xc0 [ 686.637992][ C0] do_group_exit+0xd3/0x2a0 [ 686.642488][ C0] __x64_sys_exit_group+0x3e/0x50 [ 686.647503][ C0] x64_sys_call+0x151c/0x1740 [ 686.652173][ C0] do_syscall_64+0xcd/0xf80 [ 686.656671][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.662552][ C0] RIP: 0033:0x7fb8dd0fb6c5 [ 686.666956][ C0] RSP: 002b:00007fff611e9888 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 686.675362][ C0] RAX: ffffffffffffffda RBX: 00007fb8dd1fcfe8 RCX: 00007fb8dd0fb6c5 [ 686.683322][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 686.691295][ C0] RBP: 0000000000000001 R08: 00007fff611e9818 R09: 0000000000000000 [ 686.699274][ C0] R10: 00007fff611e96b0 R11: 0000000000000202 R12: 0000000000000000 [ 686.707234][ C0] R13: 0000000000000000 R14: 00007fb8dd1fb680 R15: 00007fb8dd1fd000 [ 686.715207][ C0] [ 686.718215][ C0] rcu: rcu_preempt kthread starved for 10495 jiffies! g37193 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 686.729393][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 686.739350][ C0] rcu: RCU grace-period kthread stack dump: [ 686.745219][ C0] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 686.758704][ C0] Call Trace: [ 686.761977][ C0] [ 686.764899][ C0] ? __schedule+0x10b9/0x6150 [ 686.769572][ C0] __schedule+0x1139/0x6150 [ 686.774069][ C0] ? __lock_acquire+0x436/0x2890 [ 686.779005][ C0] ? __mod_timer+0x8f2/0xd30 [ 686.783597][ C0] ? __pfx___schedule+0x10/0x10 [ 686.788439][ C0] ? find_held_lock+0x2b/0x80 [ 686.793115][ C0] ? schedule+0x2d7/0x3a0 [ 686.797442][ C0] schedule+0xe7/0x3a0 [ 686.801506][ C0] schedule_timeout+0x123/0x290 [ 686.806348][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 686.811710][ C0] ? __pfx_process_timeout+0x10/0x10 [ 686.816988][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 686.822785][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 686.828238][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 686.832999][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 686.838276][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 686.843471][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 686.848405][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 686.853252][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 686.859142][ C0] rcu_gp_kthread+0x26d/0x380 [ 686.863811][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 686.869000][ C0] ? rcu_is_watching+0x12/0xc0 [ 686.873752][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 686.878949][ C0] ? __kthread_parkme+0x19e/0x250 [ 686.883966][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 686.889158][ C0] kthread+0x3c5/0x780 [ 686.893221][ C0] ? __pfx_kthread+0x10/0x10 [ 686.897807][ C0] ? rcu_is_watching+0x12/0xc0 [ 686.902558][ C0] ? __pfx_kthread+0x10/0x10 [ 686.907145][ C0] ret_from_fork+0x983/0xb10 [ 686.911730][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 686.916834][ C0] ? __switch_to+0x7af/0x10d0 [ 686.921504][ C0] ? __pfx_kthread+0x10/0x10 [ 686.926090][ C0] ret_from_fork_asm+0x1a/0x30 [ 686.930864][ C0] [ 686.933876][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 686.940185][ C0] CPU: 0 UID: 0 PID: 7135 Comm: kworker/u8:20 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.951280][ C0] Tainted: [L]=SOFTLOCKUP [ 686.955589][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 686.965629][ C0] Workqueue: events_unbound toggle_allocation_gate [ 686.972128][ C0] RIP: 0010:smp_call_function_many_cond+0xe02/0x15e0 [ 686.978794][ C0] Code: 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 35 5b 0c 00 f3 90 41 0f b6 45 00 <40> 38 c5 7c 08 84 c0 0f 85 b6 05 00 00 8b 43 08 31 ff 83 e0 01 41 [ 686.998388][ C0] RSP: 0018:ffffc90003f1f808 EFLAGS: 00000293 [ 687.004448][ C0] RAX: 0000000000000000 RBX: ffff8880b8540cc0 RCX: ffffffff81b28b61 [ 687.012410][ C0] RDX: ffff88802c6ba4c0 RSI: ffffffff81b28b3b RDI: 0000000000000005 [ 687.020370][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 687.028331][ C0] R10: 0000000000000001 R11: ffff88802c6baff0 R12: dffffc0000000000 [ 687.036292][ C0] R13: ffffed10170a8199 R14: 0000000000000001 R15: 0000000000000001 [ 687.044250][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 687.053168][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 687.059743][ C0] CR2: 0000200000bbdffc CR3: 000000000e184000 CR4: 00000000003526f0 [ 687.067704][ C0] DR0: 0000000000800003 DR1: 00000000000001f5 DR2: 0000000000000483 [ 687.075684][ C0] DR3: 0000000000000007 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 687.083667][ C0] Call Trace: [ 687.086944][ C0] [ 687.089869][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 687.094898][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x3e/0x1b0 [ 687.101404][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 687.107723][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 687.113100][ C0] ? __pfx___text_poke+0x10/0x10 [ 687.118036][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 687.123315][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 687.128421][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x3e/0x1b0 [ 687.134911][ C0] smp_text_poke_batch_finish+0x27b/0xdb0 [ 687.140629][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 687.146867][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 687.153104][ C0] ? find_held_lock+0x2b/0x80 [ 687.157796][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 687.163787][ C0] jump_label_update+0x376/0x550 [ 687.168723][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 687.174607][ C0] static_key_enable+0x1a/0x20 [ 687.179364][ C0] toggle_allocation_gate+0xfa/0x280 [ 687.184640][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 687.190527][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 687.195895][ C0] process_one_work+0x9ba/0x1b20 [ 687.200835][ C0] ? __pfx_process_one_work+0x10/0x10 [ 687.206205][ C0] ? assign_work+0x1a0/0x250 [ 687.210797][ C0] worker_thread+0x6c8/0xf10 [ 687.215388][ C0] ? __kthread_parkme+0x19e/0x250 [ 687.220402][ C0] ? __pfx_worker_thread+0x10/0x10 [ 687.225509][ C0] kthread+0x3c5/0x780 [ 687.229567][ C0] ? __pfx_kthread+0x10/0x10 [ 687.234159][ C0] ? rcu_is_watching+0x12/0xc0 [ 687.238911][ C0] ? __pfx_kthread+0x10/0x10 [ 687.243494][ C0] ret_from_fork+0x983/0xb10 [ 687.248074][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 687.253184][ C0] ? __switch_to+0x7af/0x10d0 [ 687.257854][ C0] ? __pfx_kthread+0x10/0x10 [ 687.262437][ C0] ret_from_fork_asm+0x1a/0x30 [ 687.267206][ C0]