last executing test programs: 14.77802738s ago: executing program 1 (id=680): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="78000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01180200030100004c0012800b00010067656e65766500003c00028014000700000000000000fffffffeffffac1414bb050008000000000014000700fc01000000000000000000000000000008000100030000000a000100e2"], 0x78}, 0x1, 0x0, 0x0, 0x410c0}, 0x4044884) 14.704736419s ago: executing program 1 (id=681): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170049bb48bfc529d508c682450e0000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff1eee07ac2c87d9fcd97e24590a66d843b7020000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8040, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb", 0x2}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8041, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000040)=0x2fff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xf, 0x0, &(0x7f00000001c0)="38e6944e741c8aaf56e0fae0bc92a2", 0x0, 0x9, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 13.620770757s ago: executing program 1 (id=686): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) 13.547831265s ago: executing program 1 (id=687): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106d0413c50000000000010902240001000000000904eeff010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x78, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x1, 0xb0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "b71a933c1b41"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4}, {0x6, 0x24, 0x1a, 0x795, 0x9}, [@acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xc, 0x9, 0x59}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x6, 0xa}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x0, 0x3c, 0x8, 0x6}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0xff, 0x8}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}, {0x35, &(0x7f00000001c0)=@string={0x35, 0x3, "a653249b103330ee12812486a253122c721c0020c4ad32ee785aef51552881401a17ec8b7cdca7b4bb9489f4ceca96e4283627"}}]}) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106d0413c50000000000010902240001000000000904eeff010300000009210500000122050009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x78, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x1, 0xb0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "b71a933c1b41"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4}, {0x6, 0x24, 0x1a, 0x795, 0x9}, [@acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xc, 0x9, 0x59}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x6, 0xa}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x0, 0x3c, 0x8, 0x6}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0xff, 0x8}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}, {0x35, &(0x7f00000001c0)=@string={0x35, 0x3, "a653249b103330ee12812486a253122c721c0020c4ad32ee785aef51552881401a17ec8b7cdca7b4bb9489f4ceca96e4283627"}}]}) (async) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 11.381503177s ago: executing program 1 (id=695): r0 = userfaultfd(0x801) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, 0x0, 0x0, 0x1020, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2010}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f041}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') syz_clone(0x40240400, 0x0, 0x0, 0x0, 0x0, 0x0) 9.525528556s ago: executing program 4 (id=704): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="23f39ae02bb698c572486a6fb99a4b726cb4f9adf093d85f033e4186350c2d48a0ee60504567dc51c86148f1fcc456b403c2db1f57d37e5eff0dd69667e2602dae4a73149fceeccb6ab5041adfbe5b36fe881fc03938a40233d6cc05773040208d5c1ed3ad6a49851a717747898b19a25c4ddf27e73e4c", &(0x7f0000000080)=""/60, &(0x7f00000003c0)="008b91c7f250f9bc716eb772258cf33c7e1002e6321e63e591fd17b5cdb0381a76770e5652d0cc0341e3fa46e981d03c75d08840b9aa05e311e8fdde48f8922bb98886e0d73eca465ccf99682b9baa2ef0b59dfd320bbb22cd1ab7e59a4430c3218938f6e7839fd0975dce8498e341216d27b067461045", &(0x7f0000000440)="0785ec4418780e0b2dbcbf8378c4f9db13b0c6ac11d0647742b5e3e0cb61b08afa2e2122fd0d35ce806ab3b794c93092c0fff5efa37eef91734c7cf1efd07e6b57317aece06d0c0fc06fcf3a4203e69e1a56a167f913fdbaba4936492da3e8bf9f2d73a3a19ab1b6cb353db59a20db6082a1abb444f981f67a8be8364027fec737f5823d368a152fa4b50e2745f7979d476d66484e5798b4b5e83a5b7d994b19374171563110d980cea6c9617e37b33c3fec5014a1975b88535884a3334b313d752e6b4a60de9122747ee1030cd8b2e845902c47d25c745e74c46d251617dc87ef63685b1d0bc31f2176ab2c32a1eb8ff003788e3e36e8", 0x5, r2, 0x4}, 0x38) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, &(0x7f0000000300)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000}, 0x38) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r7], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r8], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0xb, 0x3, 0x6, 0x7ffffffe, 0x7, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11c7, 0x101, 0x9, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) 9.116625203s ago: executing program 4 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000012e, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000197c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000019580)={0x20c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdc, 0x3, "20c4dc24cd0ccb35cef86420d812b431ebeab5f06588c9fa8531c7b5328e37d61e3b40bb0c0c9eacd64cbbc59454a638092ee1a353f274ece9948a26204a0428dd95a308c263c7f16f301686417e9d62930bfc60749c33351cdb8ce588611a895cb28d81750babc2eae39cab404c6a81b6fd0a129d902e155ccdbba89cf109f2472e00a1bf9b292bfca1bb29f349b52e7c9f50eb3c14b152d555eda116e450a5be61357fdf31e6f0622cddef5f92f6fa3972f2324de462ca3398afb5081795258ae545c816c1b0b887c0f084bbabbbdf2f04d47a2424e5f2"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe0000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9ac}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9f3}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x16e2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4008000}, 0x200080c5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000004c0)={r6, @in={{0x2, 0x1, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90) r7 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r7, &(0x7f0000000580)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff07, &(0x7f0000000300)=0x7fffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 7.570293421s ago: executing program 4 (id=708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x220000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="db46", 0x2}], 0x1) readv(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) r6 = socket(0x8000000010, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r8}, 0x10) write(r6, &(0x7f00000002c0)="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", 0xfc) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 6.008757315s ago: executing program 4 (id=710): socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x3a) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790030000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002240)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000240)={0x10800, 0x7fffffff, 0x0, 0x8, 0x230, 0x8}) timer_settime(0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0xc8902, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, 0x0) sched_setattr(0x0, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ptrace(0x10, 0x1) 5.861337794s ago: executing program 3 (id=712): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="23f39ae02bb698c572486a6fb99a4b726cb4f9adf093d85f033e4186350c2d48a0ee60504567dc51c86148f1fcc456b403c2db1f57d37e5eff0dd69667e2602dae4a73149fceeccb6ab5041adfbe5b36fe881fc03938a40233d6cc05773040208d5c1ed3ad6a49851a717747898b19a25c4ddf27e73e4c", &(0x7f0000000080)=""/60, &(0x7f00000003c0)="008b91c7f250f9bc716eb772258cf33c7e1002e6321e63e591fd17b5cdb0381a76770e5652d0cc0341e3fa46e981d03c75d08840b9aa05e311e8fdde48f8922bb98886e0d73eca465ccf99682b9baa2ef0b59dfd320bbb22cd1ab7e59a4430c3218938f6e7839fd0975dce8498e341216d27b067461045", &(0x7f0000000440)="0785ec4418780e0b2dbcbf8378c4f9db13b0c6ac11d0647742b5e3e0cb61b08afa2e2122fd0d35ce806ab3b794c93092c0fff5efa37eef91734c7cf1efd07e6b57317aece06d0c0fc06fcf3a4203e69e1a56a167f913fdbaba4936492da3e8bf9f2d73a3a19ab1b6cb353db59a20db6082a1abb444f981f67a8be8364027fec737f5823d368a152fa4b50e2745f7979d476d66484e5798b4b5e83a5b7d994b19374171563110d980cea6c9617e37b33c3fec5014a1975b88535884a3334b313d752e6b4a60de9122747ee1030cd8b2e845902c47d25c745e74c46d251617dc87ef63685b1d0bc31f2176ab2c32a1eb8ff003788e3e36e8", 0x5, r2, 0x4}, 0x38) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, &(0x7f0000000300)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r6}, 0x38) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r7], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r8], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0xb, 0x3, 0x6, 0x7ffffffe, 0x7, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11c7, 0x101, 0x9, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) 5.685723158s ago: executing program 3 (id=714): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00002ec000/0x4000)=nil, 0x4000, 0x200000c, 0x100010, 0xffffffffffffffff, 0xffffe000) timerfd_create(0x0, 0x80000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000001400)=""/4088, 0xff8) 5.640335267s ago: executing program 2 (id=715): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) poll(0x0, 0x0, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x30, 0x0, &(0x7f0000000040)=0x90) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x700000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c445}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="4018000000000000240012800b0001006272696467650000140002800500160003000000080004000000"], 0x44}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r8, 0x400, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r9, 0x0, 0x0, 0x41) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000380)={0x5, 0xfffffffd, 0x0, 0x3, 0x12, "3e04000000000000000600000000000400"}) socket$inet6(0xa, 0x1, 0x80000000) 5.452278836s ago: executing program 3 (id=716): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}, 0x1, 0xff000000}, 0x0) 5.36438106s ago: executing program 2 (id=717): r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x400) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000280)={0x0, 0x8, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000001080)=""/4096) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r8 = syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) syz_usb_ep_read(r8, 0x2, 0x24, &(0x7f0000000000)=""/36) 5.000280907s ago: executing program 3 (id=718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r7, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10) 4.146156727s ago: executing program 0 (id=719): write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x78, 0x0, 0x0, {0x9, 0xffff, 0x0, {0x2, 0x4, 0x7ff, 0x8e, 0xd5b6, 0x867, 0x2, 0x2df, 0x6, 0x1000, 0x4c, 0x0, 0x0, 0x7fff, 0x7}}}, 0x78) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200000000000000000008004500005c00000000007390787f000001ffffffff0000000000489078030000000100000047cdc596931a26b62ed738961e9eb698832b87e13bccc68ca2f25261f6c07db949464363ae6d525485e4387f41d58144239afe0a96"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x42003, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000340)="7ae0c6d4ea38398e", 0x8}], 0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300001900000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002640)=ANY=[@ANYBLOB='P'], 0x150) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000514010028bd7000fedbdf2508000100010000000800030004000000ecc293a6859d56fc062b866498a20d7ce111e4bfca9664dee25263b0a9289ea8e46c5114913e7fead2087b3ad88f78a9308beb8678d659162e817ef90d4f1e5d5144f9d261643f4187abfa40c06564da1a15c9b8ea919c1e02238dc37901548932996befe07b4b3d8bc2433697eceb2a4a98c8f9e86b9ae70c852ccd0c4cfd2b0cbb8a38649b3a0ee0cb7f80546680d8ecc04f2da6a84728228512e65b3f140b4a5a2e279a0da70f9efd1bb2fc70b9386d6d89386916ac4b"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10000045) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRESHEX], 0x268}, 0x1, 0x0, 0x0, 0x4815}, 0x4000800) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2rw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) 4.027819385s ago: executing program 3 (id=720): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x17, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES64=r0, @ANYRES8=r1, @ANYRES32=r1, @ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x5, 0x9, &(0x7f00000002c0)="b800000500000000", &(0x7f00000008c0)=""/9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe66) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) pwrite64(r6, &(0x7f0000000540)="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", 0x134, 0x9) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x8800) 3.999141004s ago: executing program 1 (id=721): socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r2, 0x0, 0x3}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001e00010026bd7000fedbdf250700", @ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x93, 0x3ff}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, 0x0, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000e3ff0000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r6], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) 3.773409897s ago: executing program 0 (id=722): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) dup(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x4000}, 0x4000000) 3.508099779s ago: executing program 0 (id=723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_elf64(r5, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x5, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x100000000, 0x40000000200d, 0xffffffff00000000, 0xe2, 0x4, 0x2}]}, 0x78) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="07000000040000000001000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000010000000850000001b000000b700000000000000850000002300000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.805754436s ago: executing program 2 (id=724): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) timerfd_create(0x0, 0x80000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000001400)=""/4088, 0xff8) 2.704630366s ago: executing program 2 (id=725): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.620720874s ago: executing program 0 (id=726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x0, 0xe000, 0x8}) r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000300)="7d32f67f3eb2159415e8a993639058af6265e734568ff030f4e122de1a92066f314219cc3511a06adb25c3fee02211f2dab1b1ab12af688db46be07cb178de5f93d7c0b23b576d8e92101088ec88ba08638b2216d294a12df570d8ac42f8", 0x5e}, {&(0x7f00000003c0)="8e52451464cae89011beb9683966887888f4f147a140b346a4ce3b5bae21a10d53e50b4d98c31de12c5a716dee4e6885feb08d3c06822aefa7c1031aa1e5c89b38462e6dc0391bf2eb96d4e89f7ddfcb9622ee2e5fc854e062f0c8504abd3e9124e4bb", 0x63}, {&(0x7f0000000440)="40934b41492cb136a96a097198755dca7979e318a4c7a47382615f1a905fb74120ae37b73ce729cef2b00e8d02da5790f8476f5ec7ccbf2b46", 0x39}, {&(0x7f0000000480)="6afc17b06199218599bfcb67e93bc063a58621fcd46980b1c59ce18f82b6dcc2bf13bb1240a3a88e19a827454d15c7c26574788baf90133d03dfad482927d32b18f97aa83ef5b3b6f84e731d37bd29", 0x4f}], 0x4, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}, 0x40000c5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000300)=0xfff, 0x4) r5 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb}, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2, &(0x7f0000000140)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRESHEX=r5, @ANYBLOB="ddda13e6bdde1c5741e1797b3a204d1c1000ca78ef452275fad1b1c1647142507e3dba23ea9ee73772b0017318b787d47f46fa2a9779cbe45c6de09d413008ec867de5d7272375"], &(0x7f00000000c0)='syzkaller\x00', 0x20000002, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r6}, 0x10) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x20000054) 2.080515463s ago: executing program 2 (id=727): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00002ec000/0x4000)=nil, 0x4000, 0x200000c, 0x100010, 0xffffffffffffffff, 0xffffe000) timerfd_create(0x0, 0x80000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000001400)=""/4088, 0xff8) 2.028371332s ago: executing program 4 (id=728): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1000, 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x162) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x6000000}, 0x0) 1.977808062s ago: executing program 2 (id=729): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pread64(r1, 0x0, 0x20, 0x78f2a36b) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r3, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x3, 0xff) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40011) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r7, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x4810}, 0xc010) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) fcntl$setlease(r0, 0x400, 0x1) 1.960840407s ago: executing program 0 (id=730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x700}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x20, 0x0, 0x0, 0x41fa}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') setpgid(0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f00000005c0)={0x2000a210}) 76.061499ms ago: executing program 4 (id=731): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d78"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) 28.833292ms ago: executing program 0 (id=732): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000980), 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40080d0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x1, 0x0, 0x2000, 0x0}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETA(r8, 0x5406, &(0x7f00000001c0)={0x8, 0x2, 0x101, 0xffff, 0xe, "f81a776bba9a5bad"}) 0s ago: executing program 3 (id=733): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r2, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00002ec000/0x4000)=nil, 0x4000, 0x200000c, 0x100010, 0xffffffffffffffff, 0xffffe000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x111, 0x2}}, 0x20) timerfd_create(0x0, 0x80000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000001400)=""/4088, 0xff8) kernel console output (not intermixed with test programs): it: type=1400 audit(1766515359.886:314): avc: denied { watch watch_reads } for pid=6872 comm="syz.1.218" path="/57" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 136.611439][ T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.628798][ T791] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 136.647615][ T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.682067][ T30] audit: type=1400 audit(1766515359.946:315): avc: denied { create } for pid=6872 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.709653][ T791] usb 1-1: config 0 descriptor?? [ 136.717203][ T6865] ip6_vti0: entered promiscuous mode [ 136.721873][ T30] audit: type=1400 audit(1766515359.946:316): avc: denied { connect } for pid=6872 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.736044][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 136.743207][ T30] audit: type=1400 audit(1766515359.946:317): avc: denied { bind } for pid=6872 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.774158][ T30] audit: type=1400 audit(1766515359.956:318): avc: denied { write } for pid=6872 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.795948][ T30] audit: type=1400 audit(1766515359.976:319): avc: denied { sqpoll } for pid=6872 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 136.815184][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 136.830814][ T6055] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 136.950268][ T10] usb 3-1: device descriptor read/64, error -71 [ 137.024950][ T30] audit: type=1326 audit(1766515360.326:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c598f749 code=0x7ffc0000 [ 137.052996][ T30] audit: type=1326 audit(1766515360.326:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c598f749 code=0x7ffc0000 [ 137.078075][ T30] audit: type=1326 audit(1766515360.386:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa8c598f749 code=0x7ffc0000 [ 137.102308][ T30] audit: type=1326 audit(1766515360.386:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c598f749 code=0x7ffc0000 [ 137.210221][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 137.220888][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 137.235647][ T6884] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 137.996100][ T791] input: HID 28bd:0933 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.000D/input/input16 [ 138.072775][ T791] uclogic 0003:28BD:0933.000D: input,hidraw1: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0 [ 138.130233][ T10] usb 3-1: device descriptor read/64, error -71 [ 138.243186][ T10] usb usb3-port1: attempt power cycle [ 138.590186][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 138.642993][ T10] usb 3-1: device descriptor read/8, error -71 [ 138.731278][ T791] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.816444][ T6055] usb 4-1: USB disconnect, device number 6 [ 138.912734][ T791] usb 5-1: device descriptor read/64, error -71 [ 138.963991][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 139.027597][ T10] usb 3-1: device descriptor read/8, error -71 [ 139.150445][ T10] usb usb3-port1: unable to enumerate USB device [ 139.202807][ T791] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 139.256325][ T5922] usb 1-1: USB disconnect, device number 13 [ 139.371105][ T791] usb 5-1: device descriptor read/64, error -71 [ 139.486802][ T791] usb usb5-port1: attempt power cycle [ 140.187644][ T791] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 140.830731][ T791] usb 5-1: device descriptor read/8, error -71 [ 143.040107][ T6937] mmap: syz.2.233 (6937) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.088619][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 143.088634][ T30] audit: type=1400 audit(1766515366.386:351): avc: denied { accept } for pid=6933 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.656030][ T6946] JFS: discard option not supported on device [ 143.663608][ T6946] Mount JFS Failure: -22 [ 143.667870][ T6946] jfs_mount failed w/return code = -22 [ 144.390416][ T30] audit: type=1400 audit(1766515367.556:352): avc: denied { name_connect } for pid=6949 comm="syz.0.238" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 144.471324][ T30] audit: type=1400 audit(1766515367.556:353): avc: denied { listen } for pid=6949 comm="syz.0.238" lport=44603 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.497385][ T6948] netlink: 'syz.3.237': attribute type 13 has an invalid length. [ 144.580494][ T30] audit: type=1400 audit(1766515367.556:354): avc: denied { accept } for pid=6949 comm="syz.0.238" lport=44603 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.608280][ T30] audit: type=1400 audit(1766515367.556:355): avc: denied { write } for pid=6949 comm="syz.0.238" lport=44603 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 144.644436][ T30] audit: type=1400 audit(1766515367.746:356): avc: denied { bind } for pid=6949 comm="syz.0.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.778992][ T30] audit: type=1400 audit(1766515368.026:357): avc: denied { setopt } for pid=6961 comm="syz.2.240" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.253416][ T30] audit: type=1400 audit(1766515368.546:358): avc: denied { accept } for pid=6978 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.351446][ T6963] syz_tun: entered allmulticast mode [ 145.580964][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 145.700162][ T6987] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 146.053472][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.079830][ T10] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 146.115817][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.162371][ T10] usb 2-1: Product: syz [ 146.166570][ T10] usb 2-1: Manufacturer: syz [ 146.168185][ T30] audit: type=1400 audit(1766515369.466:359): avc: denied { getopt } for pid=6997 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.313529][ T10] usb 2-1: SerialNumber: syz [ 146.328089][ T10] usb 2-1: config 0 descriptor?? [ 146.761954][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 146.772320][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 146.778575][ T7000] ceph: No mds server is up or the cluster is laggy [ 146.831455][ T6999] ip6_vti0: left promiscuous mode [ 146.844291][ T6999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.953391][ T30] audit: type=1400 audit(1766515370.256:360): avc: denied { append } for pid=6995 comm="syz.0.249" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.002254][ T10] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 147.055563][ T7005] netlink: 112 bytes leftover after parsing attributes in process `syz.4.251'. [ 147.066136][ T7003] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 147.077310][ T7003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.087150][ T7003] batadv0: entered promiscuous mode [ 147.092883][ T7003] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 147.102886][ T7003] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 147.110611][ T7003] netlink: 40 bytes leftover after parsing attributes in process `syz.0.249'. [ 147.119570][ T7003] batadv0: entered allmulticast mode [ 147.133915][ T7003] bond0: (slave batadv0): Releasing backup interface [ 147.142240][ T7003] bridge0: port 3(batadv0) entered blocking state [ 147.148695][ T7003] bridge0: port 3(batadv0) entered disabled state [ 147.209956][ T10] usb 2-1: USB disconnect, device number 4 [ 147.435982][ T3547] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 147.445667][ T3547] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 147.455322][ T791] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 148.082750][ T791] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 148.116432][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 148.116446][ T30] audit: type=1326 audit(1766515371.416:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5244d8f749 code=0x7ffc0000 [ 148.117509][ T791] usb 5-1: config 0 has no interface number 0 [ 148.125373][ T30] audit: type=1326 audit(1766515371.416:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5244d8f749 code=0x7ffc0000 [ 148.175624][ T791] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 148.187618][ T791] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 148.198927][ T791] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11 [ 148.210623][ T5888] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 148.219209][ T791] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024 [ 148.346265][ T30] audit: type=1326 audit(1766515371.456:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f5244d8f749 code=0x7ffc0000 [ 148.411957][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 148.582909][ T791] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 148.593877][ T5888] usb 3-1: config 0 has no interfaces? [ 148.602070][ T5888] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=6f.0b [ 148.620140][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.628187][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=110, SerialNumber=250 [ 148.630195][ T30] audit: type=1326 audit(1766515371.456:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5244d8f749 code=0x7ffc0000 [ 148.650740][ T791] usb 5-1: Product: syz [ 148.684277][ T30] audit: type=1326 audit(1766515371.456:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5244d8f749 code=0x7ffc0000 [ 148.707872][ T5888] usb 3-1: Product: syz [ 148.713181][ T5888] usb 3-1: Manufacturer: syz [ 148.717773][ T5888] usb 3-1: SerialNumber: syz [ 148.722400][ T791] usb 5-1: Manufacturer: syz [ 148.737251][ T791] usb 5-1: SerialNumber: syz [ 148.826716][ T30] audit: type=1326 audit(1766515371.536:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5244d8f749 code=0x7ffc0000 [ 148.870869][ T5888] r8152-cfgselector 3-1: Unknown version 0x0000 [ 148.878460][ T30] audit: type=1326 audit(1766515371.536:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5244d8f749 code=0x7ffc0000 [ 148.886170][ T5888] r8152-cfgselector 3-1: config 0 descriptor?? [ 148.933124][ T791] usb 5-1: config 0 descriptor?? [ 149.268602][ T30] audit: type=1326 audit(1766515371.536:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5244d8f749 code=0x7ffc0000 [ 149.291914][ T30] audit: type=1326 audit(1766515371.536:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5244d8f749 code=0x7ffc0000 [ 149.297592][ T7005] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.322380][ T30] audit: type=1326 audit(1766515371.536:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5244d8f749 code=0x7ffc0000 [ 149.868099][ T7043] JFS: discard option not supported on device [ 149.874403][ T7043] Mount JFS Failure: -22 [ 149.878661][ T7043] jfs_mount failed w/return code = -22 [ 150.478676][ T7018] netlink: 'syz.2.254': attribute type 10 has an invalid length. [ 150.585859][ T7018] syz_tun: entered promiscuous mode [ 150.633059][ T7018] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 150.680373][ T975] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 150.835957][ T5922] r8152-cfgselector 3-1: USB disconnect, device number 15 [ 150.915420][ T975] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 150.915447][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.917406][ T975] usb 1-1: config 0 descriptor?? [ 150.932253][ T975] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 151.135562][ T975] gp8psk: usb in 128 operation failed. [ 152.165617][ T7075] FAULT_INJECTION: forcing a failure. [ 152.165617][ T7075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.238630][ T7075] CPU: 1 UID: 0 PID: 7075 Comm: syz.2.271 Not tainted syzkaller #0 PREEMPT(full) [ 152.238657][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.238667][ T7075] Call Trace: [ 152.238674][ T7075] [ 152.238681][ T7075] dump_stack_lvl+0x16c/0x1f0 [ 152.238710][ T7075] should_fail_ex+0x512/0x640 [ 152.238744][ T7075] _copy_to_user+0x32/0xd0 [ 152.238773][ T7075] simple_read_from_buffer+0xcb/0x170 [ 152.238799][ T7075] proc_fail_nth_read+0x197/0x240 [ 152.238819][ T7075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.238840][ T7075] ? rw_verify_area+0xcf/0x6c0 [ 152.238859][ T7075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.238878][ T7075] vfs_read+0x1e4/0xcf0 [ 152.238901][ T7075] ? __pfx___mutex_lock+0x10/0x10 [ 152.238928][ T7075] ? __pfx_vfs_read+0x10/0x10 [ 152.238955][ T7075] ? __fget_files+0x20e/0x3c0 [ 152.238988][ T7075] ksys_read+0x12a/0x250 [ 152.239010][ T7075] ? __pfx_ksys_read+0x10/0x10 [ 152.239039][ T7075] do_syscall_64+0xcd/0xf80 [ 152.239064][ T7075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.239082][ T7075] RIP: 0033:0x7effd778e15c [ 152.239097][ T7075] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 152.239112][ T7075] RSP: 002b:00007effd85f3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.239130][ T7075] RAX: ffffffffffffffda RBX: 00007effd79e5fa0 RCX: 00007effd778e15c [ 152.239141][ T7075] RDX: 000000000000000f RSI: 00007effd85f30a0 RDI: 0000000000000003 [ 152.239152][ T7075] RBP: 00007effd85f3090 R08: 0000000000000000 R09: 0000000000000000 [ 152.239162][ T7075] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.239172][ T7075] R13: 00007effd79e6038 R14: 00007effd79e5fa0 R15: 00007ffda45b3b48 [ 152.239198][ T7075] [ 152.689374][ T975] gp8psk: usb in 137 operation failed. [ 152.713898][ T975] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 152.772315][ T975] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 152.843763][ T975] usb 1-1: USB disconnect, device number 14 [ 153.294067][ T6616] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.106432][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 154.123792][ T6616] usb 4-1: Using ep0 maxpacket: 16 [ 154.174830][ T6616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.286047][ T6616] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 154.299957][ T6616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.304770][ T10] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.310411][ T6616] usb 4-1: config 0 descriptor?? [ 154.325541][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 154.333030][ T10] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 154.345755][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.359096][ T10] usb 3-1: config 0 descriptor?? [ 154.571022][ T7104] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 155.609383][ T10] monterey 0003:0566:3004.000E: item fetching failed at offset 5/7 [ 155.619673][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 155.653459][ T10] monterey 0003:0566:3004.000E: probe with driver monterey failed with error -22 [ 155.880740][ T7113] netlink: 32 bytes leftover after parsing attributes in process `syz.4.282'. [ 155.905840][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 155.905855][ T30] audit: type=1400 audit(1766515379.206:388): avc: denied { bind } for pid=7112 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 156.347363][ T7118] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.356296][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.593047][ T6616] input: HID 28bd:0933 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0933.000F/input/input18 [ 156.611991][ T6616] uclogic 0003:28BD:0933.000F: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.3-1/input0 [ 156.628723][ T5868] usb 3-1: USB disconnect, device number 16 [ 156.807843][ T30] audit: type=1400 audit(1766515380.106:389): avc: denied { getopt } for pid=7122 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.174843][ T7130] tipc: Started in network mode [ 157.536380][ T7130] tipc: Node identity 84e, cluster identity 4711 [ 157.658457][ T5888] usb 4-1: USB disconnect, device number 7 [ 157.699401][ T7130] tipc: Node number set to 2126 [ 157.901446][ T30] audit: type=1400 audit(1766515381.076:390): avc: denied { ioctl } for pid=7137 comm="syz.3.288" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 158.061063][ T7141] fuse: Unknown parameter 'g2' [ 158.997619][ T30] audit: type=1400 audit(1766515382.296:391): avc: denied { write } for pid=7153 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.027284][ T7151] netlink: 'syz.4.292': attribute type 3 has an invalid length. [ 159.048559][ T7151] xt_hashlimit: size too large, truncated to 1048576 [ 159.283013][ T6229] Bluetooth: Error in BCSP hdr checksum [ 159.315925][ T5927] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 159.553271][ T5927] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 159.579355][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.609346][ T5927] usb 4-1: config 0 descriptor?? [ 159.622868][ T5927] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 159.650144][ T5881] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 159.822696][ T30] audit: type=1400 audit(1766515383.126:392): avc: denied { connect } for pid=7146 comm="syz.3.290" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.874848][ T30] audit: type=1400 audit(1766515383.166:393): avc: denied { mounton } for pid=7160 comm="syz.0.294" path="/52/file0" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 159.878127][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 159.905107][ T5927] gp8psk: usb in 128 operation failed. [ 159.919691][ T5881] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 159.929482][ T5881] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 159.941351][ T5881] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.980817][ T5881] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 159.997996][ T5881] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.058660][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.081066][ T5881] usbtmc 3-1:16.0: bulk endpoints not found [ 160.265633][ T5927] gp8psk: FW Version = 56.76.16 (0x384c10) Build 2191/151/134 [ 160.461361][ T7172] Bluetooth: MGMT ver 1.23 [ 160.490026][ T30] audit: type=1400 audit(1766515383.756:394): avc: denied { bind } for pid=7169 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.556218][ T30] audit: type=1400 audit(1766515383.756:395): avc: denied { write } for pid=7169 comm="syz.4.296" path="socket:[13424]" dev="sockfs" ino=13424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.604991][ T5927] gp8psk: usb in 149 operation failed. [ 160.644169][ T5927] gp8psk: failed to get FPGA version [ 160.693337][ T5927] gp8psk: usb in 138 operation failed. [ 160.737019][ T5927] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 160.801389][ T5927] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 160.876321][ T5927] usb 4-1: USB disconnect, device number 8 [ 161.040634][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 161.049336][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 161.260302][ T30] audit: type=1400 audit(1766515384.556:396): avc: denied { setopt } for pid=7177 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.391069][ T5927] usb 3-1: USB disconnect, device number 17 [ 161.533920][ T30] audit: type=1400 audit(1766515384.836:397): avc: denied { read } for pid=7185 comm="syz.4.301" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 161.582261][ T7189] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.600961][ T7189] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.618436][ T7184] netlink: 32 bytes leftover after parsing attributes in process `syz.1.298'. [ 161.647528][ T7188] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.648665][ T7189] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.688010][ T7188] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 161.730639][ T7189] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.764973][ T7189] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.767320][ T7188] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.799891][ T7188] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 161.812226][ T7189] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.819797][ T7189] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.828138][ T7189] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.837194][ T7189] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.845630][ T7189] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 161.852309][ T7189] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 161.866523][ T7188] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.873166][ T7188] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 161.888557][ T7188] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.894632][ T7188] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 161.906495][ T7189] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 161.929972][ T7188] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 161.936376][ T7188] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 163.149801][ T7205] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 163.956731][ T30] audit: type=1400 audit(1766515387.256:398): avc: denied { create } for pid=7211 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 164.266461][ T30] audit: type=1400 audit(1766515387.566:399): avc: denied { mount } for pid=7219 comm="syz.2.309" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 164.350527][ T30] audit: type=1400 audit(1766515387.596:400): avc: denied { watch } for pid=7219 comm="syz.2.309" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 164.446376][ T30] audit: type=1400 audit(1766515387.596:401): avc: denied { watch_sb watch_reads } for pid=7219 comm="syz.2.309" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 165.064029][ T978] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 165.224966][ T978] usb 3-1: config 0 has an invalid interface number: 190 but max is 0 [ 165.258588][ T978] usb 3-1: config 0 has no interface number 0 [ 165.283141][ T978] usb 3-1: config 0 interface 190 has no altsetting 0 [ 165.393371][ T978] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice= 6.be [ 165.422848][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.434155][ T978] usb 3-1: Product: syz [ 165.438989][ T978] usb 3-1: Manufacturer: syz [ 165.459492][ T978] usb 3-1: SerialNumber: syz [ 165.493683][ T978] usb 3-1: config 0 descriptor?? [ 166.044182][ T978] hub 3-1:0.190: bad descriptor, ignoring hub [ 166.063785][ T978] hub 3-1:0.190: probe with driver hub failed with error -5 [ 166.087386][ T978] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 166.110294][ T978] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 166.158475][ T978] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 166.223123][ T978] usb 3-1: USB disconnect, device number 18 [ 166.611196][ T7243] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 168.012006][ T7261] Cannot find del_set index 4 as target [ 168.045714][ T30] audit: type=1400 audit(1766515391.346:402): avc: denied { getopt } for pid=7256 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.811947][ T7275] netlink: 32 bytes leftover after parsing attributes in process `syz.2.324'. [ 170.032339][ T5868] IPVS: starting estimator thread 0... [ 170.054459][ T49] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 170.082912][ T791] iguanair 5-1:0.255: failed to get version [ 170.097524][ C0] iguanair 5-1:0.255: failed to resubmit urb: -1 [ 170.107396][ T791] iguanair 5-1:0.255: probe with driver iguanair failed with error -110 [ 170.135052][ T791] usb 5-1: USB disconnect, device number 12 [ 170.151699][ T7277] IPVS: using max 42 ests per chain, 100800 per kthread [ 170.240288][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 170.247195][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.262240][ T49] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 170.271763][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.285114][ T49] usb 1-1: config 0 descriptor?? [ 170.529886][ T7284] team0 (unregistering): Port device team_slave_0 removed [ 170.553914][ T791] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 170.571208][ T7284] team0 (unregistering): Port device team_slave_1 removed [ 170.770299][ T791] usb 5-1: Using ep0 maxpacket: 16 [ 170.788240][ T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.847043][ T791] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 170.888607][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 170.917727][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.932219][ T791] usb 5-1: config 0 descriptor?? [ 171.074770][ T791] usbhid 5-1:0.0: can't add hid device: -71 [ 171.514469][ T49] input: HID 28bd:0933 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.0010/input/input19 [ 171.604889][ T791] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 171.622165][ T49] uclogic 0003:28BD:0933.0010: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0 [ 171.624504][ T791] usb 5-1: USB disconnect, device number 13 [ 172.629745][ T49] usb 1-1: USB disconnect, device number 15 [ 173.280136][ T978] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 174.451221][ T978] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 174.460367][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.487643][ T7326] netlink: 48 bytes leftover after parsing attributes in process `syz.3.339'. [ 174.501144][ T7326] netlink: 108 bytes leftover after parsing attributes in process `syz.3.339'. [ 174.521133][ T7326] vlan0: entered allmulticast mode [ 174.526289][ T7326] veth0_to_bond: entered allmulticast mode [ 174.533020][ T978] usb 5-1: config 0 descriptor?? [ 174.543358][ T978] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 174.617837][ T30] audit: type=1400 audit(1766515397.916:403): avc: denied { write } for pid=7325 comm="syz.3.339" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 174.762804][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'. [ 174.778996][ T978] gp8psk: usb in 128 operation failed. [ 174.796496][ T7337] 8021q: VLANs not supported on vcan0 [ 175.055770][ T978] gp8psk: FW Version = 56.76.16 (0x384c10) Build 2191/151/134 [ 175.220430][ T5868] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 175.258787][ T978] gp8psk: usb in 149 operation failed. [ 175.765497][ T978] gp8psk: failed to get FPGA version [ 175.776014][ T978] gp8psk: usb in 138 operation failed. [ 175.781615][ T978] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 175.795834][ T978] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 175.810161][ T5888] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.820182][ T5868] usb 1-1: device descriptor read/64, error -71 [ 175.821393][ T978] usb 5-1: USB disconnect, device number 14 [ 176.021133][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 176.156321][ T5868] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 176.200536][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.217449][ T5888] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 176.330366][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.350216][ T5868] usb 1-1: device descriptor read/64, error -71 [ 176.830013][ T5888] usb 4-1: config 0 descriptor?? [ 176.895326][ T7355] evm: overlay not supported [ 177.015125][ T5868] usb usb1-port1: attempt power cycle [ 177.038091][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 177.262067][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 177.392404][ T30] audit: type=1400 audit(1766515400.696:404): avc: denied { read write } for pid=7364 comm="syz.2.351" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 177.991125][ T30] audit: type=1400 audit(1766515400.696:405): avc: denied { open } for pid=7364 comm="syz.2.351" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 178.029796][ T30] audit: type=1400 audit(1766515400.696:406): avc: denied { open } for pid=7364 comm="syz.2.351" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 178.037452][ T5868] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 178.068838][ T5888] input: HID 28bd:0933 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0933.0011/input/input20 [ 178.099951][ T30] audit: type=1400 audit(1766515401.286:407): avc: denied { shutdown } for pid=7364 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.138577][ T30] audit: type=1400 audit(1766515401.286:408): avc: denied { connect } for pid=7364 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.204722][ T5888] uclogic 0003:28BD:0933.0011: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.3-1/input0 [ 178.220099][ T5868] usb 1-1: device descriptor read/8, error -71 [ 178.278263][ T7381] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 178.374632][ T30] audit: type=1326 audit(1766515401.396:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.4.350" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8c598f749 code=0x0 [ 178.380301][ T5888] usb 4-1: USB disconnect, device number 9 [ 178.577057][ T7384] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 178.583755][ T7384] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.666055][ T7383] fido_id[7383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 178.672325][ T7384] vhci_hcd vhci_hcd.0: Device attached [ 178.739550][ T7389] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 178.746171][ T7389] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 178.783107][ T7389] vhci_hcd vhci_hcd.0: Device attached [ 178.806130][ T7394] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 178.812748][ T7394] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 178.873932][ T7403] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 178.994142][ T7394] vhci_hcd vhci_hcd.0: Device attached [ 179.581442][ T9] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 179.588856][ T7405] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13) [ 179.595424][ T7405] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 179.608456][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 179.625866][ T7405] vhci_hcd vhci_hcd.0: Device attached [ 179.649985][ T30] audit: type=1800 audit(1766515402.946:410): pid=7388 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.355" name="/newroot/90/file0" dev="tmpfs" ino=506 res=0 errno=0 [ 180.200155][ T7384] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(10) [ 180.206756][ T7384] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 180.216743][ T7384] vhci_hcd vhci_hcd.0: Device attached [ 180.220123][ T30] audit: type=1400 audit(1766515403.496:411): avc: denied { mount } for pid=7416 comm="syz.1.360" name="/" dev="autofs" ino=15124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 180.417453][ T7394] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 180.683911][ T7384] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(18) [ 180.690539][ T7384] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.705017][ T7384] vhci_hcd vhci_hcd.0: Device attached [ 180.773486][ T30] audit: type=1400 audit(1766515404.076:412): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 180.852626][ T7394] vhci_hcd vhci_hcd.0: port 0 already used [ 180.904788][ T7389] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(21) [ 180.911409][ T7389] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 180.977231][ T7389] vhci_hcd vhci_hcd.0: Device attached [ 183.115388][ T7432] vhci_hcd: connection closed [ 183.118102][ T7428] vhci_hcd: connection closed [ 183.118254][ T7406] vhci_hcd: connection closed [ 183.122874][ T7423] vhci_hcd: connection closed [ 183.134025][ T7396] vhci_hcd: connection closed [ 183.139559][ T7390] vhci_hcd: connection closed [ 183.144419][ T7385] vhci_hcd: connection reset by peer [ 183.155279][ T3419] vhci_hcd vhci_hcd.0: stop threads [ 183.167682][ T3419] vhci_hcd vhci_hcd.0: release socket [ 183.183240][ T3419] vhci_hcd vhci_hcd.0: disconnect device [ 183.204247][ T3419] vhci_hcd vhci_hcd.0: stop threads [ 183.223677][ T3419] vhci_hcd vhci_hcd.0: release socket [ 183.237880][ T3419] vhci_hcd vhci_hcd.0: disconnect device [ 183.286192][ T3419] vhci_hcd vhci_hcd.0: stop threads [ 183.395630][ T5881] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 183.403937][ T3419] vhci_hcd vhci_hcd.0: release socket [ 183.429548][ T3419] vhci_hcd vhci_hcd.0: disconnect device [ 183.438683][ T3419] vhci_hcd vhci_hcd.0: stop threads [ 183.450686][ T3419] vhci_hcd vhci_hcd.0: release socket [ 183.458533][ T3419] vhci_hcd vhci_hcd.0: disconnect device [ 183.472052][ T3419] vhci_hcd vhci_hcd.0: stop threads [ 183.478752][ T3419] vhci_hcd vhci_hcd.0: release socket [ 183.921320][ T3419] vhci_hcd vhci_hcd.0: disconnect device [ 183.937547][ T3419] vhci_hcd vhci_hcd.0: stop threads [ 183.949509][ T3419] vhci_hcd vhci_hcd.0: release socket [ 183.960136][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 183.963118][ T3419] vhci_hcd vhci_hcd.0: disconnect device [ 183.970534][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.977404][ T3419] vhci_hcd vhci_hcd.0: stop threads [ 184.004031][ T5881] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 184.004714][ T3419] vhci_hcd vhci_hcd.0: release socket [ 184.027347][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.027887][ T3419] vhci_hcd vhci_hcd.0: disconnect device [ 184.055766][ T5881] usb 4-1: config 0 descriptor?? [ 184.659544][ T7466] JFS: discard option not supported on device [ 184.665828][ T7466] Mount JFS Failure: -22 [ 184.670094][ T7466] jfs_mount failed w/return code = -22 [ 184.741669][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 185.285864][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 185.345409][ T5881] input: HID 28bd:0933 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0933.0012/input/input21 [ 185.350516][ T978] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 185.456658][ T5881] uclogic 0003:28BD:0933.0012: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.3-1/input0 [ 185.850333][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 185.872937][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.901742][ T978] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 185.914395][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.971819][ T978] usb 2-1: config 0 descriptor?? [ 186.204755][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.374'. [ 186.250175][ T30] audit: type=1400 audit(1766515409.546:413): avc: denied { ioctl } for pid=7483 comm="syz.2.373" path="socket:[13866]" dev="sockfs" ino=13866 ioctlcmd=0x42c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.334948][ T7493] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 186.431260][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 186.434028][ T5956] usb 4-1: USB disconnect, device number 10 [ 186.600015][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.375'. [ 186.640293][ T7488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.374'. [ 186.773307][ T978] input: HID 28bd:0933 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.0013/input/input22 [ 186.872399][ T7488] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 187.146290][ T978] uclogic 0003:28BD:0933.0013: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 187.158252][ T7488] bond1 (unregistering): Released all slaves [ 187.268650][ T7495] vlan2: entered promiscuous mode [ 187.291912][ T7495] bond0: entered promiscuous mode [ 187.313764][ T7495] bond_slave_0: entered promiscuous mode [ 187.340043][ T7495] bond_slave_1: entered promiscuous mode [ 187.599840][ T7502] netlink: 'syz.0.377': attribute type 10 has an invalid length. [ 187.613089][ T7502] macvlan0: entered promiscuous mode [ 187.623426][ T7502] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 188.041180][ T7513] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 188.155018][ T978] usb 2-1: USB disconnect, device number 5 [ 189.182155][ T7528] xt_l2tp: v2 sid > 0xffff: 117440512 [ 189.192344][ T5956] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 189.377534][ T5956] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 189.634011][ T30] audit: type=1400 audit(1766515412.936:414): avc: denied { kexec_image_load } for pid=7508 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 189.664343][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.702163][ T5956] usb 3-1: config 0 descriptor?? [ 189.711568][ T5956] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 189.721847][ T30] audit: type=1400 audit(1766515412.986:415): avc: denied { mount } for pid=7508 comm="syz.3.379" name="/" dev="ramfs" ino=14009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 189.820183][ T30] audit: type=1400 audit(1766515412.986:416): avc: denied { execute } for pid=7508 comm="syz.3.379" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=14010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 189.921539][ T5956] gp8psk: usb in 128 operation failed. [ 189.961161][ T7536] sctp: [Deprecated]: syz.4.387 (pid 7536) Use of int in max_burst socket option. [ 189.961161][ T7536] Use struct sctp_assoc_value instead [ 190.079774][ T30] audit: type=1400 audit(1766515413.376:417): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 190.139102][ T5956] gp8psk: FW Version = 56.76.16 (0x384c10) Build 2191/151/134 [ 190.200177][ T30] audit: type=1400 audit(1766515413.426:418): avc: denied { write } for pid=7535 comm="syz.4.387" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 190.381974][ T5956] gp8psk: usb in 149 operation failed. [ 190.387456][ T5956] gp8psk: failed to get FPGA version [ 190.443659][ T5956] gp8psk: usb in 138 operation failed. [ 190.449315][ T5956] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 190.469925][ T5956] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 190.531884][ T5956] usb 3-1: USB disconnect, device number 20 [ 191.190163][ T978] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 191.287086][ T7553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'. [ 191.336940][ T30] audit: type=1400 audit(1766515414.636:419): avc: denied { create } for pid=7549 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 191.357603][ T5923] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 191.380144][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 191.389018][ T978] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.417447][ T978] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.455562][ T978] usb 4-1: config 0 interface 0 has no altsetting 0 [ 191.468418][ T978] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 191.478970][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.520243][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 191.550607][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 191.567263][ T978] usb 4-1: config 0 descriptor?? [ 191.568259][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.586137][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 191.642324][ T5923] usb 1-1: unable to get BOS descriptor or descriptor too short [ 191.738614][ T5923] usb 1-1: config 64 has an invalid interface number: 103 but max is 0 [ 191.749417][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.787991][ T5923] usb 1-1: config 64 has no interface number 0 [ 191.860266][ T5956] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 191.924420][ T5923] usb 1-1: config 64 interface 103 has no altsetting 0 [ 191.934775][ T5923] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=8d.88 [ 191.950903][ T9] usb 5-1: config 0 descriptor?? [ 191.956475][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.981514][ T5923] usb 1-1: Product: syz [ 191.985714][ T5923] usb 1-1: Manufacturer: syz [ 192.010659][ T30] audit: type=1400 audit(1766515415.306:420): avc: denied { mounton } for pid=7559 comm="syz.1.394" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 192.034742][ T5923] usb 1-1: SerialNumber: syz [ 192.090314][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 192.102801][ T5956] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 192.130178][ T5956] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 192.141060][ T5956] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.164202][ T5956] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.209435][ T5956] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.230412][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.280665][ T7545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.318079][ T7545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.361672][ T7545] fuse: Bad value for 'group_id' [ 192.366638][ T7545] fuse: Bad value for 'group_id' [ 192.382513][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 192.560580][ T5956] usb 3-1: GET_CAPABILITIES returned 0 [ 192.563269][ T7545] netlink: 54759 bytes leftover after parsing attributes in process `syz.0.390'. [ 192.566110][ T5956] usbtmc 3-1:16.0: can't read capabilities [ 192.690215][ T5868] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 192.728496][ T9] input: HID 28bd:0933 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0933.0014/input/input23 [ 193.100529][ T5923] snd-usb-audio 1-1:64.103: probe with driver snd-usb-audio failed with error -71 [ 193.113464][ T5868] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.113557][ T5923] usb 1-1: USB disconnect, device number 20 [ 193.152855][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 193.162403][ T7556] usbtmc 3-1:16.0: Unable to send data, error -71 [ 193.237002][ T7375] usb 3-1: USB disconnect, device number 21 [ 193.251956][ T5868] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.269453][ T9] uclogic 0003:28BD:0933.0014: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.4-1/input0 [ 193.317136][ T5868] usb 2-1: config 0 interface 0 has no altsetting 0 [ 193.344078][ T5868] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 193.373856][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.398125][ T5868] usb 2-1: config 0 descriptor?? [ 193.593553][ T978] zydacron 0003:13EC:0006.0015: unknown main item tag 0x0 [ 193.600821][ T978] zydacron 0003:13EC:0006.0015: unknown main item tag 0x0 [ 193.608029][ T978] zydacron 0003:13EC:0006.0015: unknown main item tag 0x0 [ 193.617900][ T978] zydacron 0003:13EC:0006.0015: hidraw1: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0 [ 193.762984][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.769366][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.824364][ T5868] lenovo 0003:17EF:60EE.0016: unknown main item tag 0x0 [ 193.840173][ T5868] lenovo 0003:17EF:60EE.0016: unknown main item tag 0x0 [ 193.848862][ T5868] lenovo 0003:17EF:60EE.0016: unknown main item tag 0x0 [ 193.855930][ T5868] lenovo 0003:17EF:60EE.0016: unknown main item tag 0x0 [ 193.863724][ T5868] lenovo 0003:17EF:60EE.0016: unknown main item tag 0x0 [ 193.873672][ T5868] lenovo 0003:17EF:60EE.0016: hidraw2: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 193.945437][ T7543] IPVS: set_ctl: invalid protocol: 189 172.20.20.15:20004 [ 194.028526][ T30] audit: type=1400 audit(1766515417.326:421): avc: denied { listen } for pid=7562 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.062822][ T30] audit: type=1400 audit(1766515417.356:422): avc: denied { accept } for pid=7562 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.088953][ T30] audit: type=1400 audit(1766515417.386:423): avc: denied { bind } for pid=7577 comm="syz.2.398" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 194.114552][ T30] audit: type=1400 audit(1766515417.386:424): avc: denied { name_bind } for pid=7577 comm="syz.2.398" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 194.136897][ T30] audit: type=1400 audit(1766515417.386:425): avc: denied { node_bind } for pid=7577 comm="syz.2.398" saddr=100.1.1.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 194.186776][ T30] audit: type=1400 audit(1766515417.386:426): avc: denied { read } for pid=7577 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 194.243636][ T7375] usb 5-1: USB disconnect, device number 15 [ 194.299510][ T30] audit: type=1400 audit(1766515417.596:427): avc: denied { map } for pid=7583 comm="syz.4.399" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 194.399548][ T7594] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 194.452046][ T5923] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 194.531121][ T7597] futex_wake_op: syz.0.403 tries to shift op by -1; fix this program [ 194.605413][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 194.612175][ T5923] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.697722][ T7599] team1: entered promiscuous mode [ 194.703041][ T7599] team1: entered allmulticast mode [ 194.703977][ T5923] usb 3-1: config 4 has an invalid interface number: 109 but max is 0 [ 194.711184][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 194.762139][ T5923] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 194.853414][ T5923] usb 3-1: config 4 has no interface number 0 [ 194.854566][ T7599] team2: entered promiscuous mode [ 194.864751][ T5923] usb 3-1: too many endpoints for config 4 interface 109 altsetting 2: 64, using maximum allowed: 30 [ 194.864759][ T7599] team2: entered allmulticast mode [ 194.883471][ T5923] usb 3-1: config 4 interface 109 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 194.928494][ T5923] usb 3-1: config 4 interface 109 has no altsetting 0 [ 195.009843][ T5923] usb 3-1: New USB device found, idVendor=0421, idProduct=042d, bcdDevice=da.49 [ 195.019179][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.065889][ T7375] usb 4-1: USB disconnect, device number 11 [ 195.068217][ T5923] usb 3-1: Product: syz [ 195.089204][ T5923] usb 3-1: Manufacturer: syz [ 195.098767][ T5923] usb 3-1: SerialNumber: syz [ 195.946233][ T5868] lenovo 0003:17EF:60EE.0016: Failed to switch middle button: -71 [ 195.983448][ T5868] lenovo 0003:17EF:60EE.0016: Fn-lock setting failed: -71 [ 196.036119][ T5868] lenovo 0003:17EF:60EE.0016: Sensitivity setting failed: -71 [ 196.080305][ T5868] usb 2-1: USB disconnect, device number 6 [ 196.208469][ T30] audit: type=1400 audit(1766515419.506:428): avc: denied { create } for pid=7612 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 196.513329][ T7375] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 196.626375][ T5956] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 196.670232][ T7375] usb 1-1: Using ep0 maxpacket: 16 [ 196.901772][ T7375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.931814][ T7375] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 196.948636][ T7375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.960173][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 196.969822][ T5956] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 196.988348][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.996701][ T5956] usb 4-1: Product: syz [ 197.004468][ T7375] usb 1-1: config 0 descriptor?? [ 197.006403][ T5956] usb 4-1: Manufacturer: syz [ 197.033007][ T5956] usb 4-1: SerialNumber: syz [ 197.058196][ T5956] usb 4-1: config 0 descriptor?? [ 197.066868][ T5956] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 197.074477][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 197.074491][ T30] audit: type=1400 audit(1766515420.376:431): avc: denied { mount } for pid=7627 comm="syz.1.413" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 197.117223][ T30] audit: type=1400 audit(1766515420.406:432): avc: denied { mounton } for pid=7627 comm="syz.1.413" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 197.149378][ T30] audit: type=1400 audit(1766515420.446:433): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 197.529092][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 197.540437][ T5923] usb 3-1: bad CDC descriptors [ 197.570335][ T5923] usb 3-1: USB disconnect, device number 22 [ 197.596804][ T5956] gspca_vc032x: reg_w err -110 [ 197.850963][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.865370][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.875429][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.885736][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.900116][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.905405][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.910697][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.921595][ T7375] input: HID 28bd:0933 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.0017/input/input24 [ 197.924499][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.954907][ T30] audit: type=1400 audit(1766515421.246:434): avc: denied { mount } for pid=7641 comm="syz.2.417" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 197.979426][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.000080][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.005405][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.028420][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.037842][ T30] audit: type=1400 audit(1766515421.276:435): avc: denied { read } for pid=5174 comm="acpid" name="mouse1" dev="devtmpfs" ino=3085 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.064431][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.069984][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.082386][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.087942][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.088285][ T7375] uclogic 0003:28BD:0933.0017: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0 [ 198.142644][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.147954][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.172128][ T30] audit: type=1400 audit(1766515421.276:436): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3085 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.199678][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.220093][ T5956] gspca_vc032x: Unknown sensor... [ 198.225215][ T5956] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 198.247042][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 198.286720][ T30] audit: type=1400 audit(1766515421.336:437): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3085 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.312594][ T5956] usb 4-1: USB disconnect, device number 12 [ 198.326123][ T30] audit: type=1400 audit(1766515421.436:438): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 198.458614][ T7650] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 198.465138][ T7650] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 198.483986][ T7650] vhci_hcd vhci_hcd.0: Device attached [ 198.708915][ T30] audit: type=1400 audit(1766515422.006:439): avc: denied { create } for pid=7636 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.925569][ T7658] netlink: 96 bytes leftover after parsing attributes in process `syz.4.421'. [ 198.973334][ T7651] vhci_hcd: connection closed [ 198.973536][ T4172] vhci_hcd vhci_hcd.1: stop threads [ 199.019615][ T4172] vhci_hcd vhci_hcd.1: release socket [ 199.020346][ T9] usb 36-1: SetAddress Request (2) to port 0 [ 199.038947][ T30] audit: type=1400 audit(1766515422.026:440): avc: denied { bind } for pid=7636 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 199.070521][ T4172] vhci_hcd vhci_hcd.1: disconnect device [ 199.117247][ T9] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 199.422046][ T9] usb 36-1: enqueue for inactive port 0 [ 199.494226][ T7375] usb 1-1: USB disconnect, device number 21 [ 199.901305][ T9] usb usb36-port1: attempt power cycle [ 200.130285][ T7375] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 200.290665][ T7375] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 200.308100][ T7375] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 200.323635][ T7375] usb 1-1: can't read configurations, error -61 [ 200.470133][ T7375] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 200.602568][ T9] usb usb36-port1: unable to enumerate USB device [ 200.988608][ T7375] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 201.001362][ T7375] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 201.026478][ T7375] usb 1-1: can't read configurations, error -61 [ 201.039858][ T7375] usb usb1-port1: attempt power cycle [ 201.441450][ T7375] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 201.914925][ T7375] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 201.955016][ T7375] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 201.984666][ T7375] usb 1-1: can't read configurations, error -61 [ 202.200482][ T7375] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 202.314311][ T7375] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 202.431545][ T7375] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 202.479527][ T7375] usb 1-1: can't read configurations, error -61 [ 202.493654][ T7375] usb usb1-port1: unable to enumerate USB device [ 202.750281][ T7375] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 203.021109][ T7375] usb 5-1: Using ep0 maxpacket: 16 [ 203.034018][ T7375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.060184][ T7375] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 203.094560][ T7375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.111029][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 203.111044][ T30] audit: type=1400 audit(1766515426.416:444): avc: denied { listen } for pid=7708 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 203.141275][ T7375] usb 5-1: config 0 descriptor?? [ 203.675655][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.434'. [ 204.281819][ T7375] input: HID 28bd:0933 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0933.0018/input/input25 [ 204.306803][ T30] audit: type=1400 audit(1766515427.606:445): avc: denied { map } for pid=7708 comm="syz.3.438" path="socket:[15787]" dev="sockfs" ino=15787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.421016][ T30] audit: type=1400 audit(1766515427.606:446): avc: denied { read accept } for pid=7708 comm="syz.3.438" path="socket:[15787]" dev="sockfs" ino=15787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.502373][ T7375] uclogic 0003:28BD:0933.0018: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.4-1/input0 [ 205.529870][ T5923] usb 5-1: USB disconnect, device number 16 [ 205.782471][ T6503] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 205.954903][ T7734] JFS: discard option not supported on device [ 205.962609][ T7734] Mount JFS Failure: -22 [ 205.966879][ T7734] jfs_mount failed w/return code = -22 [ 206.872095][ T6503] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.886454][ T6503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.920329][ T6503] usb 3-1: Product: syz [ 206.932749][ T6503] usb 3-1: Manufacturer: syz [ 206.940148][ T6503] usb 3-1: SerialNumber: syz [ 207.160422][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.204426][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.614633][ T7750] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 207.640202][ T30] audit: type=1400 audit(1766515430.586:447): avc: denied { read } for pid=7742 comm="syz.0.447" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 207.827918][ T30] audit: type=1400 audit(1766515430.586:448): avc: denied { open } for pid=7742 comm="syz.0.447" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 207.829218][ T6503] cdc_ncm 3-1:1.0: bind() failure [ 207.910264][ T5923] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 207.937705][ T6503] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 207.956988][ T6503] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 207.976877][ T6503] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 208.024475][ T6503] usb 3-1: USB disconnect, device number 23 [ 208.122068][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 208.155179][ T5923] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.159078][ T7762] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 208.182897][ T5923] usb 1-1: config 0 interface 0 has no altsetting 0 [ 208.672860][ T5923] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 208.683685][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.707584][ T5923] usb 1-1: config 0 descriptor?? [ 208.989695][ T7375] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 209.121021][ T30] audit: type=1400 audit(1766515432.406:449): avc: denied { name_bind } for pid=7770 comm="syz.1.454" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 209.457951][ T5923] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 209.560147][ T7375] usb 5-1: Using ep0 maxpacket: 16 [ 209.569139][ T7375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.689622][ T7375] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 209.828416][ T7375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.943006][ T30] audit: type=1400 audit(1766515433.226:450): avc: denied { map } for pid=7774 comm="syz.2.455" path="socket:[15914]" dev="sockfs" ino=15914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 209.967811][ T7375] usb 5-1: config 0 descriptor?? [ 210.312860][ T7783] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 210.617204][ T7721] usb 1-1: USB disconnect, device number 26 [ 210.969260][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 211.156004][ T7375] input: HID 28bd:0933 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0933.001A/input/input26 [ 211.640187][ T6503] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 211.804602][ T7375] uclogic 0003:28BD:0933.001A: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.4-1/input0 [ 211.829419][ T7375] usb 5-1: USB disconnect, device number 17 [ 211.899489][ T7797] fido_id[7797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 211.958070][ T7796] warning: `syz.2.460' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 211.972047][ T6503] usb 1-1: Using ep0 maxpacket: 32 [ 211.998200][ T6503] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 212.009893][ T7800] netlink: 'syz.2.460': attribute type 10 has an invalid length. [ 212.059805][ T7801] netlink: 'syz.2.460': attribute type 10 has an invalid length. [ 212.110464][ T6503] usb 1-1: config 0 has no interface number 0 [ 212.116579][ T6503] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 212.220421][ T7801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.460'. [ 212.248196][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 212.262061][ T7800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.342465][ T7805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.461'. [ 212.774761][ T6503] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 212.783949][ T6503] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.792288][ T6503] usb 1-1: Product: syz [ 212.797408][ T6503] usb 1-1: Manufacturer: syz [ 212.802047][ T6503] usb 1-1: SerialNumber: syz [ 212.808774][ T6503] usb 1-1: config 0 descriptor?? [ 212.815155][ T7792] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 212.871121][ T7800] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 212.882462][ T7801] batadv0: entered promiscuous mode [ 212.887851][ T7801] batadv0: entered allmulticast mode [ 212.927638][ T7801] bond0: (slave batadv0): Releasing backup interface [ 212.997652][ T7810] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 213.207365][ T7792] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 213.237442][ T7801] bridge0: port 3(batadv0) entered blocking state [ 213.246056][ T7801] bridge0: port 3(batadv0) entered disabled state [ 213.595393][ T30] audit: type=1400 audit(1766515436.896:451): avc: denied { bind } for pid=7819 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.893576][ T30] audit: type=1400 audit(1766515436.916:452): avc: denied { connect } for pid=7819 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.943491][ T30] audit: type=1400 audit(1766515437.046:453): avc: denied { shutdown } for pid=7819 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.963755][ T6061] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 213.973039][ T6061] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 213.993380][ T30] audit: type=1400 audit(1766515437.296:454): avc: denied { wake_alarm } for pid=7821 comm="syz.2.467" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 214.281807][ T6503] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 214.305947][ T6503] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 214.336001][ T30] audit: type=1400 audit(1766515437.626:455): avc: denied { read } for pid=7821 comm="syz.2.467" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 214.363624][ T6503] asix 1-1:0.188: probe with driver asix failed with error -61 [ 214.487358][ T6503] usb 1-1: USB disconnect, device number 27 [ 214.495653][ T30] audit: type=1400 audit(1766515437.626:456): avc: denied { open } for pid=7821 comm="syz.2.467" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 214.547646][ T30] audit: type=1400 audit(1766515437.766:457): avc: denied { write } for pid=7821 comm="syz.2.467" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 214.591704][ T30] audit: type=1400 audit(1766515437.896:458): avc: denied { ioctl } for pid=7821 comm="syz.2.467" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 214.698338][ T7838] netlink: 'syz.2.471': attribute type 1 has an invalid length. [ 214.764966][ T7838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.835743][ T7842] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.871091][ T7842] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 214.912501][ T7842] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 215.115401][ T7838] ip6erspan0: entered promiscuous mode [ 215.125870][ T7838] bond2: (slave ip6erspan0): making interface the new active one [ 215.134689][ T7838] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 216.226189][ T7862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.475'. [ 216.250388][ T7862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.475'. [ 216.312978][ T7862] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 216.365602][ T30] audit: type=1400 audit(1766515439.666:459): avc: denied { load_policy } for pid=7861 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 216.387584][ T7862] SELinux: failed to load policy [ 216.400265][ T5923] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 216.557941][ T49] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 216.634430][ T7868] Failed to get privilege flags for destination (handle=0x2:0x0) [ 216.642606][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 216.649684][ T30] audit: type=1400 audit(1766515439.946:460): avc: denied { firmware_load } for pid=7870 comm="syz.0.479" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 216.651169][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.983528][ T5923] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 216.993689][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.002908][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.020171][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.043869][ T5923] usb 4-1: config 0 descriptor?? [ 217.049171][ T49] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 217.058750][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.069598][ T49] usb 3-1: Product: syz [ 217.073896][ T49] usb 3-1: Manufacturer: syz [ 217.078489][ T49] usb 3-1: SerialNumber: syz [ 217.091839][ T30] audit: type=1400 audit(1766515440.386:461): avc: denied { setopt } for pid=7870 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 217.100718][ T49] usb 3-1: config 0 descriptor?? [ 217.120892][ T7721] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 217.125414][ T49] usb 3-1: ucan: probing device on interface #0 [ 217.134865][ T49] usb 3-1: ucan: invalid EP count (0) [ 217.141225][ T49] usb 3-1: ucan: probe failed; try to update the device firmware [ 217.302728][ T7721] usb 5-1: Using ep0 maxpacket: 32 [ 217.309477][ T7721] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 217.322134][ T7721] usb 5-1: config 0 has no interface number 0 [ 217.451277][ T7883] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.476'. [ 217.640631][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 217.753772][ T7721] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 217.773734][ T7721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.790839][ T9] usb 3-1: USB disconnect, device number 24 [ 218.260960][ T7871] syz.0.479 (7871) used greatest stack depth: 18984 bytes left [ 218.270405][ T5923] input: HID 28bd:0933 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0933.001B/input/input27 [ 218.321789][ T7721] usb 5-1: Product: syz [ 218.330324][ T7721] usb 5-1: Manufacturer: syz [ 218.342070][ T7721] usb 5-1: SerialNumber: syz [ 218.351951][ T5923] uclogic 0003:28BD:0933.001B: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.3-1/input0 [ 218.409208][ T7721] usb 5-1: config 0 descriptor?? [ 218.435689][ T7721] smsc95xx v2.0.0 [ 218.450847][ T7721] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 218.462352][ T7889] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 218.500616][ T7721] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 218.600196][ T7375] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 218.669467][ T7875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.694422][ T7892] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 218.702845][ T7892] overlayfs: overlapping lowerdir path [ 218.726461][ T7875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.981647][ T7375] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.066198][ T30] audit: type=1400 audit(1766515442.366:462): avc: denied { append } for pid=7874 comm="syz.4.480" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 219.373049][ T7375] usb 2-1: config 0 interface 0 has no altsetting 0 [ 219.379708][ T7375] usb 2-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 219.395996][ T6503] usb 4-1: USB disconnect, device number 13 [ 219.416679][ T5868] usb 5-1: USB disconnect, device number 18 [ 219.447545][ T7375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.483430][ T7375] usb 2-1: config 0 descriptor?? [ 219.610143][ T5923] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 219.649990][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.485'. [ 219.681306][ T30] audit: type=1326 audit(1766515442.986:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7899 comm="syz.0.485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5244d8f749 code=0x0 [ 219.790162][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 219.860345][ T5923] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 219.919167][ T5923] usb 3-1: config 0 has no interface number 0 [ 220.081590][ T5923] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 220.094423][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.096420][ T7375] hid (null): usage index exceeded [ 220.119026][ T5923] usb 3-1: Product: syz [ 220.125943][ T5923] usb 3-1: Manufacturer: syz [ 220.138109][ T7375] wacom 0003:056A:0335.001C: ignoring exceeding usage max [ 220.160462][ T7375] wacom 0003:056A:0335.001C: ignoring exceeding usage max [ 220.177894][ T5923] usb 3-1: SerialNumber: syz [ 220.195904][ T7375] wacom 0003:056A:0335.001C: usage index exceeded [ 220.220187][ T7375] wacom 0003:056A:0335.001C: item 0 0 2 2 parsing failed [ 220.241536][ T7375] wacom 0003:056A:0335.001C: parse failed [ 220.259111][ T7375] wacom 0003:056A:0335.001C: probe with driver wacom failed with error -22 [ 220.273269][ T49] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 220.293025][ T5923] usb 3-1: config 0 descriptor?? [ 220.323864][ T7375] usb 2-1: USB disconnect, device number 7 [ 220.329414][ T5923] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 220.339864][ T5923] uvcvideo 3-1:0.105: No valid video chain found. [ 220.452125][ T49] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.465066][ T49] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.490641][ T49] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.499758][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.508909][ T49] usb 5-1: Product: syz [ 220.529478][ T5868] usb 3-1: USB disconnect, device number 25 [ 220.553936][ T49] usb 5-1: Manufacturer: syz [ 220.570107][ T49] usb 5-1: SerialNumber: syz [ 221.108563][ T49] usb 5-1: cannot find UAC_HEADER [ 221.132870][ T7916] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 221.164225][ T7916] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 221.182626][ T30] audit: type=1400 audit(1766515444.466:464): avc: denied { firmware_load } for pid=7914 comm="syz.3.490" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 221.196011][ T7923] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 221.211588][ T7923] overlayfs: overlapping lowerdir path [ 221.503075][ T49] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 221.669587][ T7932] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 221.819024][ T6676] udevd[6676]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.835090][ T49] usb 5-1: USB disconnect, device number 19 [ 222.609687][ T7940] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 222.619242][ T7940] overlayfs: overlapping lowerdir path [ 223.969411][ T7962] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 225.252160][ T30] audit: type=1400 audit(1766515448.546:465): avc: denied { getopt } for pid=7968 comm="syz.4.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 225.830670][ T7958] SELinux: failed to load policy [ 226.034741][ T30] audit: type=1400 audit(1766515449.336:466): avc: denied { create } for pid=7976 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 226.067506][ T30] audit: type=1400 audit(1766515449.366:467): avc: denied { write } for pid=7976 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 226.236196][ T7984] can0: slcan on ttyS3. [ 226.322474][ T7985] futex_wake_op: syz.2.505 tries to shift op by -1; fix this program [ 226.331808][ T7986] futex_wake_op: syz.3.508 tries to shift op by -1; fix this program [ 226.396376][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.508'. [ 226.508823][ T7991] capability: warning: `syz.0.506' uses 32-bit capabilities (legacy support in use) [ 226.577187][ T7990] team1: entered promiscuous mode [ 226.582359][ T7990] team1: entered allmulticast mode [ 226.787688][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'. [ 226.803941][ T7985] team1: entered promiscuous mode [ 226.808991][ T7985] team1: entered allmulticast mode [ 227.019894][ T30] audit: type=1400 audit(1766515450.276:468): avc: denied { create } for pid=7992 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 227.241130][ T7981] can0 (unregistered): slcan off ttyS3. [ 227.265888][ T30] audit: type=1400 audit(1766515450.316:469): avc: denied { ioctl } for pid=7992 comm="syz.1.509" path="socket:[16314]" dev="sockfs" ino=16314 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 227.517672][ T30] audit: type=1400 audit(1766515450.816:470): avc: denied { setopt } for pid=7994 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.677622][ T30] audit: type=1400 audit(1766515450.886:471): avc: denied { write } for pid=7999 comm="syz.0.512" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 227.752446][ T30] audit: type=1400 audit(1766515451.006:472): avc: denied { read } for pid=7994 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 227.783397][ T8008] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 227.797509][ T8008] overlayfs: overlapping lowerdir path [ 227.828875][ T30] audit: type=1400 audit(1766515451.016:473): avc: denied { module_request } for pid=7995 comm="syz.1.510" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 228.434733][ T7721] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 228.688899][ T30] audit: type=1400 audit(1766515451.956:474): avc: denied { setattr } for pid=8018 comm="syz.3.516" name="NETLINK" dev="sockfs" ino=17116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 229.540110][ T7721] usb 3-1: Using ep0 maxpacket: 8 [ 229.648464][ T7721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.659378][ T7721] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 229.668434][ T7721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.730585][ T7721] usb 3-1: config 0 descriptor?? [ 229.973996][ T8030] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 230.099955][ T7721] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 230.510142][ T5868] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 230.692456][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 230.824903][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.873757][ T5868] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 230.900108][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 230.900123][ T30] audit: type=1400 audit(1766515454.186:477): avc: denied { setopt } for pid=8045 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.937172][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.961779][ T5868] usb 1-1: config 0 descriptor?? [ 230.972399][ T8050] veth1_to_hsr: entered promiscuous mode [ 230.987098][ T30] audit: type=1400 audit(1766515454.186:478): avc: denied { write } for pid=8045 comm="syz.4.522" path="socket:[17162]" dev="sockfs" ino=17162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 231.030027][ T30] audit: type=1400 audit(1766515454.266:479): avc: denied { bind } for pid=8049 comm="syz.4.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 231.061578][ T30] audit: type=1400 audit(1766515454.266:480): avc: denied { setopt } for pid=8049 comm="syz.4.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 231.185257][ T30] audit: type=1400 audit(1766515454.486:481): avc: denied { create } for pid=8013 comm="syz.2.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 231.747800][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 232.415004][ T5868] input: HID 28bd:0933 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.001D/input/input29 [ 232.442904][ T8068] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 232.462734][ T8068] overlayfs: overlapping lowerdir path [ 232.530371][ T5868] uclogic 0003:28BD:0933.001D: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0 [ 233.282745][ T30] audit: type=1400 audit(1766515456.586:482): avc: denied { listen } for pid=8082 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.283510][ T6616] usb 3-1: USB disconnect, device number 26 [ 233.562538][ T978] usb 1-1: USB disconnect, device number 28 [ 233.689379][ T8091] JFS: discard option not supported on device [ 233.697916][ T8091] Mount JFS Failure: -22 [ 233.702231][ T8091] jfs_mount failed w/return code = -22 [ 236.842616][ T8128] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 237.069665][ T8123] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 237.103044][ T8123] overlayfs: overlapping lowerdir path [ 237.140183][ T30] audit: type=1400 audit(1766515460.436:483): avc: denied { watch } for pid=8129 comm="syz.2.541" path="/92/file0" dev="tmpfs" ino=501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 237.303404][ T30] audit: type=1400 audit(1766515460.436:484): avc: denied { watch_sb watch_reads } for pid=8129 comm="syz.2.541" path="/92/file0" dev="tmpfs" ino=501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 238.800677][ T30] audit: type=1400 audit(1766515462.106:485): avc: denied { read } for pid=8139 comm="syz.0.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.196805][ T8153] JFS: discard option not supported on device [ 239.203823][ T8153] Mount JFS Failure: -22 [ 239.208092][ T8153] jfs_mount failed w/return code = -22 [ 240.971453][ T8174] JFS: discard option not supported on device [ 240.978397][ T8174] Mount JFS Failure: -22 [ 240.982832][ T8174] jfs_mount failed w/return code = -22 [ 241.026560][ T7375] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 241.370956][ T30] audit: type=1400 audit(1766515464.676:486): avc: denied { read } for pid=8162 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 241.508460][ T7375] usb 1-1: Using ep0 maxpacket: 16 [ 241.524635][ T7375] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 241.544092][ T7375] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.575786][ T7375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.585430][ T8179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.556'. [ 241.607065][ T7375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 241.617156][ T7375] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.631483][ T7375] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 241.640713][ T7375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.724814][ T7375] usb 1-1: config 0 descriptor?? [ 241.827347][ T7375] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input30 [ 241.849839][ T5174] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.203816][ T5174] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.214100][ T5174] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.285994][ T8190] JFS: discard option not supported on device [ 242.293052][ T8190] Mount JFS Failure: -22 [ 242.297323][ T8190] jfs_mount failed w/return code = -22 [ 242.626618][ T5830] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.701921][ T5174] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.831608][ T8163] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.865399][ T30] audit: type=1400 audit(1766515466.156:487): avc: denied { getopt } for pid=8195 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 242.904534][ T5174] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 242.923520][ T5174] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 243.027567][ T5174] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 243.301665][ T9] usb 1-1: USB disconnect, device number 29 [ 243.582983][ T49] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 243.741648][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.752810][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.763334][ T8213] futex_wake_op: syz.1.565 tries to shift op by -1; fix this program [ 243.771882][ T49] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 243.843822][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 243.844999][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.902051][ T8214] team0: entered promiscuous mode [ 243.907150][ T8214] team0: entered allmulticast mode [ 243.916426][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 243.973851][ T49] usb 4-1: config 0 descriptor?? [ 244.042874][ T8215] team1: entered promiscuous mode [ 244.048040][ T8215] team1: entered allmulticast mode [ 244.283649][ T8221] netlink: 52 bytes leftover after parsing attributes in process `syz.1.567'. [ 244.292689][ T8221] netlink: 52 bytes leftover after parsing attributes in process `syz.1.567'. [ 244.302400][ T8221] netlink: 52 bytes leftover after parsing attributes in process `syz.1.567'. [ 244.365897][ T8206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.562'. [ 244.383686][ T30] audit: type=1400 audit(1766515467.686:488): avc: denied { ioctl } for pid=8218 comm="syz.1.567" path="socket:[17815]" dev="sockfs" ino=17815 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 244.471040][ T8206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.562'. [ 244.762987][ T8221] netlink: 52 bytes leftover after parsing attributes in process `syz.1.567'. [ 244.775391][ T8221] netlink: 52 bytes leftover after parsing attributes in process `syz.1.567'. [ 244.863339][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.953614][ T8227] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 245.179747][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.283140][ T49] usbhid 4-1:0.0: can't add hid device: -71 [ 245.289529][ T49] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 245.363329][ T49] usb 4-1: USB disconnect, device number 14 [ 245.583043][ T8239] JFS: discard option not supported on device [ 245.589890][ T8239] Mount JFS Failure: -22 [ 245.594271][ T8239] jfs_mount failed w/return code = -22 [ 245.954294][ T8241] JFS: discard option not supported on device [ 245.961308][ T8241] Mount JFS Failure: -22 [ 245.965606][ T8241] jfs_mount failed w/return code = -22 [ 247.987366][ T8261] futex_wake_op: syz.0.576 tries to shift op by -1; fix this program [ 248.077379][ T8262] __nla_validate_parse: 4 callbacks suppressed [ 248.077428][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 248.169044][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 248.197334][ T30] audit: type=1400 audit(1766515471.496:489): avc: denied { getopt } for pid=8245 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 248.269489][ T8262] team3: entered promiscuous mode [ 248.348676][ T8262] team3: entered allmulticast mode [ 248.612524][ T8266] team4: entered promiscuous mode [ 248.617584][ T8266] team4: entered allmulticast mode [ 248.635739][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.580'. [ 248.665489][ T8276] vlan2: entered promiscuous mode [ 249.153311][ T30] audit: type=1400 audit(1766515472.456:490): avc: denied { set_context_mgr } for pid=8284 comm="syz.3.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 249.178988][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.582'. [ 249.513056][ T8292] JFS: discard option not supported on device [ 249.520003][ T8292] Mount JFS Failure: -22 [ 249.524348][ T8292] jfs_mount failed w/return code = -22 [ 249.983623][ T30] audit: type=1400 audit(1766515473.286:491): avc: denied { write } for pid=8294 comm="syz.4.586" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 250.038820][ T30] audit: type=1400 audit(1766515473.336:492): avc: denied { block_suspend } for pid=8294 comm="syz.4.586" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 250.063088][ T8297] futex_wake_op: syz.3.587 tries to shift op by -1; fix this program [ 250.136226][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 250.356582][ T8299] team2: entered promiscuous mode [ 250.361799][ T8299] team2: entered allmulticast mode [ 250.443002][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 250.458506][ T8297] team3: entered promiscuous mode [ 250.463579][ T8297] team3: entered allmulticast mode [ 250.881819][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 250.907862][ T8310] vlan2: entered promiscuous mode [ 250.930833][ T7375] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 251.170110][ T7375] usb 3-1: Using ep0 maxpacket: 16 [ 251.175368][ T30] audit: type=1400 audit(1766515474.456:493): avc: denied { setopt } for pid=8312 comm="syz.0.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 251.176886][ T7375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.263661][ T7375] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 252.566746][ T8325] loop5: detected capacity change from 0 to 7 [ 252.646235][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.655934][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.673992][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.683606][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.696052][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.705649][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.724564][ T7375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.734619][ T7375] usb 3-1: config 0 descriptor?? [ 252.734819][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.749162][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.757955][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.767512][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.777669][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.787309][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.797116][ T8331] tmpfs: Bad value for 'mpol' [ 252.802563][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.812170][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.840393][ T6676] ldm_validate_partition_table(): Disk read failed. [ 252.851483][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.861108][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.890630][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.900236][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.912035][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.921634][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.940229][ T6676] Dev loop5: unable to read RDB block 0 [ 252.973332][ T6676] loop5: unable to read partition table [ 252.979160][ T6676] loop5: partition table beyond EOD, truncated [ 253.160944][ T8325] ldm_validate_partition_table(): Disk read failed. [ 253.172617][ T8325] Dev loop5: unable to read RDB block 0 [ 253.181522][ T8325] loop5: unable to read partition table [ 253.191760][ T8325] loop5: partition table beyond EOD, truncated [ 253.199519][ T8325] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?%`ր{֐ȵ4FLQk݊5) failed (rc=-5) [ 253.341249][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 254.052957][ T8348] sctp: [Deprecated]: syz.1.602 (pid 8348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.052957][ T8348] Use struct sctp_sack_info instead [ 254.452948][ T30] audit: type=1400 audit(1766515477.746:494): avc: denied { write } for pid=8347 comm="syz.1.602" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 254.491878][ T30] audit: type=1400 audit(1766515477.786:495): avc: denied { open } for pid=8347 comm="syz.1.602" path="/140/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 254.556449][ T30] audit: type=1400 audit(1766515477.786:496): avc: denied { ioctl } for pid=8347 comm="syz.1.602" path="/140/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 254.914585][ T30] audit: type=1400 audit(1766515478.216:497): avc: denied { create } for pid=8358 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 254.936182][ T30] audit: type=1400 audit(1766515478.246:498): avc: denied { ioctl } for pid=8358 comm="syz.0.604" path="socket:[18098]" dev="sockfs" ino=18098 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 254.984722][ T7375] usbhid 3-1:0.0: can't add hid device: -71 [ 255.000768][ T7375] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 255.053612][ T7375] usb 3-1: USB disconnect, device number 27 [ 255.153226][ T30] audit: type=1400 audit(1766515478.456:499): avc: denied { setopt } for pid=8366 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 255.248892][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.255356][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.530971][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.606'. [ 256.264813][ T30] audit: type=1400 audit(1766515479.566:500): avc: denied { ioctl } for pid=8390 comm="syz.1.612" path="socket:[18150]" dev="sockfs" ino=18150 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 256.307331][ T8396] tmpfs: Unknown parameter 'usrQuota_inode_hardlimWt' [ 256.328588][ T8395] overlay: ./file0 is not a directory [ 256.447836][ T8389] futex_wake_op: syz.2.611 tries to shift op by -1; fix this program [ 256.527153][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'. [ 256.735001][ T8397] team2: entered promiscuous mode [ 256.740445][ T8397] team2: entered allmulticast mode [ 256.882541][ T8404] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 256.983201][ T8407] JFS: discard option not supported on device [ 256.990259][ T8407] Mount JFS Failure: -22 [ 256.994528][ T8407] jfs_mount failed w/return code = -22 [ 257.339758][ T8401] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 257.505133][ T30] audit: type=1400 audit(1766515480.796:501): avc: denied { write } for pid=8412 comm="syz.2.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 257.565809][ T30] audit: type=1400 audit(1766515480.866:502): avc: denied { read } for pid=8416 comm="syz.1.617" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 257.820220][ T6503] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 258.465072][ T975] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 258.469784][ T6503] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 258.482825][ T6503] usb 2-1: config 0 has no interface number 0 [ 258.498074][ T30] audit: type=1400 audit(1766515481.266:503): avc: denied { shutdown } for pid=8426 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.498989][ T6503] usb 2-1: New USB device found, idVendor=050d, idProduct=1003, bcdDevice=7c.7e [ 258.808277][ T6503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.817074][ T975] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 258.820077][ T6503] usb 2-1: Product: syz [ 258.838881][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 258.846232][ T6503] usb 2-1: Manufacturer: syz [ 258.857209][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 258.918811][ T975] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 258.920604][ T6503] usb 2-1: SerialNumber: syz [ 258.932488][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.932531][ T975] usb 3-1: Product: syz [ 258.932580][ T975] usb 3-1: Manufacturer: syz [ 259.017975][ T6503] usb 2-1: config 0 descriptor?? [ 259.194550][ T975] usb 3-1: SerialNumber: syz [ 259.259039][ T975] usb 3-1: config 0 descriptor?? [ 259.463282][ T6616] usb 2-1: USB disconnect, device number 8 [ 259.498617][ T8443] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 259.707686][ T30] audit: type=1326 audit(1766515483.006:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8421 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd778f749 code=0x7ffc0000 [ 259.744603][ T975] powermate: unknown product id 0240 [ 259.749893][ T975] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 259.773210][ T975] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 259.904975][ T30] audit: type=1326 audit(1766515483.006:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8421 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd778f749 code=0x7ffc0000 [ 259.987093][ T8448] atomic_op ffff888034890998 conn xmit_atomic 0000000000000000 [ 260.429536][ T975] usb 3-1: USB disconnect, device number 28 [ 260.469932][ T30] audit: type=1326 audit(1766515483.006:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8421 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effd778f749 code=0x7ffc0000 [ 260.524730][ T30] audit: type=1326 audit(1766515483.006:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8421 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd778f749 code=0x7ffc0000 [ 260.574899][ T30] audit: type=1326 audit(1766515483.006:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8421 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7effd778f749 code=0x7ffc0000 [ 260.633381][ T30] audit: type=1326 audit(1766515483.006:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8421 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd778f749 code=0x7ffc0000 [ 260.713908][ T30] audit: type=1326 audit(1766515483.016:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8421 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effd778f749 code=0x7ffc0000 [ 260.744619][ T30] audit: type=1326 audit(1766515483.016:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8421 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd778f749 code=0x7ffc0000 [ 260.824844][ T30] audit: type=1326 audit(1766515483.016:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8421 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effd778f749 code=0x7ffc0000 [ 261.023019][ T8463] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 261.196450][ T30] audit: type=1326 audit(1766515483.016:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8421 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd778f749 code=0x7ffc0000 [ 261.402765][ T8470] netlink: 52 bytes leftover after parsing attributes in process `syz.1.634'. [ 261.692893][ T8479] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.636'. [ 261.702102][ T8479] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.636'. [ 262.783232][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 262.819468][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 262.987495][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'. [ 262.999685][ T8491] vlan2: entered promiscuous mode [ 263.010182][ T8491] bond0: entered promiscuous mode [ 263.020108][ T8491] bond_slave_0: entered promiscuous mode [ 263.040309][ T8491] bond_slave_1: entered promiscuous mode [ 263.191780][ T8496] netlink: 72 bytes leftover after parsing attributes in process `syz.4.635'. [ 263.370512][ T975] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 263.510841][ T8498] netlink: 'syz.2.643': attribute type 3 has an invalid length. [ 263.520188][ T975] usb 4-1: device descriptor read/64, error -71 [ 263.762071][ T975] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 263.932764][ T975] usb 4-1: device descriptor read/64, error -71 [ 263.937616][ T8509] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 264.132517][ T975] usb usb4-port1: attempt power cycle [ 264.305075][ T8512] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 264.521605][ T975] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 264.686857][ T8515] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 264.873128][ T975] usb 4-1: device descriptor read/8, error -71 [ 264.995623][ T8519] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 265.409574][ T975] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 265.527650][ T975] usb 4-1: device descriptor read/8, error -71 [ 265.596756][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 265.596772][ T30] audit: type=1400 audit(1766515488.886:547): avc: denied { ioctl } for pid=8523 comm="syz.2.651" path="socket:[19127]" dev="sockfs" ino=19127 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 265.679708][ T975] usb usb4-port1: unable to enumerate USB device [ 266.028430][ T975] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 266.029199][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.654'. [ 266.192498][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.656'. [ 266.326092][ T975] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.347750][ T975] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 266.357945][ T975] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.813400][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.837204][ T8506] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 266.866470][ T8545] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 266.906144][ T975] usb 2-1: can't set config #27, error -71 [ 266.922001][ T975] usb 2-1: USB disconnect, device number 9 [ 268.747522][ T8567] netlink: 64 bytes leftover after parsing attributes in process `syz.2.664'. [ 269.721298][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'. [ 269.774245][ T8579] vlan0: entered promiscuous mode [ 270.260214][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 270.418100][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 270.429480][ T7375] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 270.439355][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.458060][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 270.474160][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 270.483640][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.493547][ T9] usb 4-1: config 0 descriptor?? [ 270.591426][ T7375] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 270.599710][ T7375] usb 1-1: config 8 has no interface number 0 [ 270.606135][ T7375] usb 1-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 270.618118][ T7375] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 270.629516][ T7375] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 270.644077][ T7375] usb 1-1: config 8 interface 177 has no altsetting 0 [ 270.652080][ T7375] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 270.661422][ T7375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.679876][ T8596] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 270.726052][ T5868] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 270.888460][ T5868] usb 5-1: device descriptor read/64, error -71 [ 270.896611][ T7375] usb 1-1: string descriptor 0 read error: -71 [ 270.904872][ T7375] ir_toy 1-1:8.177: required endpoints not found [ 270.916354][ T9] logitech 0003:046D:C50C.001E: item fetching failed at offset 5/7 [ 270.925701][ T7375] usb 1-1: USB disconnect, device number 30 [ 270.933972][ T9] logitech 0003:046D:C50C.001E: parse failed [ 270.956017][ T9] logitech 0003:046D:C50C.001E: probe with driver logitech failed with error -22 [ 271.007103][ T30] audit: type=1400 audit(1766515493.305:548): avc: denied { getopt } for pid=8612 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 271.180973][ T5868] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 271.268775][ T30] audit: type=1400 audit(1766515493.305:549): avc: denied { create } for pid=8612 comm="syz.2.679" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 271.480116][ T5868] usb 5-1: device descriptor read/64, error -71 [ 271.601541][ T5868] usb usb5-port1: attempt power cycle [ 272.004009][ T5868] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 272.031159][ T5868] usb 5-1: device descriptor read/8, error -71 [ 272.630398][ T5868] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 272.660566][ T5868] usb 5-1: device descriptor read/8, error -71 [ 272.812560][ T5868] usb usb5-port1: unable to enumerate USB device [ 272.961872][ T49] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 273.187516][ T5868] usb 4-1: USB disconnect, device number 19 [ 273.190109][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 273.208160][ T49] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 273.242710][ T49] usb 2-1: config 0 has no interface number 0 [ 273.257288][ T49] usb 2-1: config 0 interface 238 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.288931][ T49] usb 2-1: config 0 interface 238 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.562314][ T49] usb 2-1: config 0 interface 238 has no altsetting 0 [ 273.594820][ T49] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 273.623686][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.647252][ T49] usb 2-1: config 0 descriptor?? [ 273.816538][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'. [ 274.088158][ T8642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.101697][ T30] audit: type=1400 audit(1766515496.415:550): avc: denied { connect } for pid=8653 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 274.280454][ T8642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.281035][ T8642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.284311][ T8642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.285293][ T8667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.285514][ T8667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.286501][ T49] usbhid 2-1:0.238: can't add hid device: -71 [ 274.286552][ T49] usbhid 2-1:0.238: probe with driver usbhid failed with error -71 [ 274.288151][ T49] usb 2-1: USB disconnect, device number 10 [ 274.433815][ T30] audit: type=1400 audit(1766515496.745:551): avc: denied { ioctl } for pid=8659 comm="syz.0.693" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xaed5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 275.385455][ T8685] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 275.600652][ T8679] netlink: 32 bytes leftover after parsing attributes in process `syz.4.698'. [ 276.960558][ T49] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 277.016404][ T30] audit: type=1400 audit(1766515499.325:552): avc: denied { ioctl } for pid=8695 comm="syz.2.703" path="socket:[20787]" dev="sockfs" ino=20787 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.140720][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 277.147323][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.158893][ T49] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 277.168674][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.296722][ T49] usb 4-1: config 0 descriptor?? [ 278.605532][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 279.353567][ T30] audit: type=1400 audit(1766515501.665:553): avc: denied { read } for pid=8712 comm="syz.2.707" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 279.380139][ T30] audit: type=1400 audit(1766515501.665:554): avc: denied { open } for pid=8712 comm="syz.2.707" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 279.616599][ T8719] netlink: 'syz.4.708': attribute type 12 has an invalid length. [ 280.317021][ T49] usbhid 4-1:0.0: can't add hid device: -71 [ 280.391363][ T49] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 280.456858][ T49] usb 4-1: USB disconnect, device number 20 [ 280.601352][ T8729] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[8729] [ 280.707887][ T8738] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 280.731259][ T30] audit: type=1400 audit(1766515503.025:555): avc: denied { getattr } for pid=8737 comm="syz.3.714" name="saved_tgids" dev="tracefs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 280.889256][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 280.920284][ T8741] netlink: 'syz.3.716': attribute type 5 has an invalid length. [ 280.946490][ T30] audit: type=1400 audit(1766515503.255:556): avc: denied { map } for pid=8742 comm="syz.2.717" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.950456][ T8741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.716'. [ 281.067109][ T30] audit: type=1400 audit(1766515503.255:557): avc: denied { call } for pid=8742 comm="syz.2.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 281.103615][ T8741] geneve3: entered promiscuous mode [ 281.115025][ T8741] geneve3: entered allmulticast mode [ 281.143380][ T3547] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 281.166363][ T3547] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 281.210542][ T3547] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 281.240694][ T9] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 281.254446][ T3547] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 281.427658][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 282.004182][ T9] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 282.040175][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.051077][ T9] usb 3-1: Product: syz [ 282.056642][ T9] usb 3-1: Manufacturer: syz [ 282.061451][ T9] usb 3-1: SerialNumber: syz [ 282.439554][ T9] usb 3-1: selecting invalid altsetting 1 [ 282.460601][ T9] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 282.460685][ T9] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 282.526646][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.722'. [ 282.536373][ T9] usb 3-1: USB disconnect, device number 29 [ 282.565936][ T8758] vlan0: entered promiscuous mode [ 282.613480][ T8759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.721'. [ 282.847911][ T975] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 283.206726][ T975] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 283.397149][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.437979][ T975] usb 4-1: config 0 descriptor?? [ 283.528253][ T975] cp210x 4-1:0.0: cp210x converter detected [ 283.910364][ T975] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 283.918178][ T975] cp210x 4-1:0.0: querying part number failed [ 284.001315][ T30] audit: type=1400 audit(1766515506.315:558): avc: denied { audit_read } for pid=8770 comm="syz.0.726" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 284.059361][ T975] usb 4-1: cp210x converter now attached to ttyUSB0 [ 284.107754][ T8756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.127823][ T8756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.220989][ T8775] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 285.482359][ T975] usb 4-1: USB disconnect, device number 21 [ 285.492129][ T975] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 286.127626][ T8780] futex_wake_op: syz.2.729 tries to shift op by -1; fix this program [ 286.137314][ T975] cp210x 4-1:0.0: device disconnected [ 286.350421][ T8780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8780 comm=syz.2.729 [ 286.365200][ T8780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8780 comm=syz.2.729 [ 286.516126][ T8796] lo speed is unknown, defaulting to 1000 [ 286.522698][ T8796] lo speed is unknown, defaulting to 1000 [ 286.534081][ T8796] lo speed is unknown, defaulting to 1000 [ 286.556413][ T8796] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 286.599350][ T8796] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 286.705940][ T8796] lo speed is unknown, defaulting to 1000 [ 286.720216][ T8796] lo speed is unknown, defaulting to 1000 [ 286.732736][ T8796] lo speed is unknown, defaulting to 1000 [ 286.744760][ T8796] lo speed is unknown, defaulting to 1000 [ 286.756913][ T8796] lo speed is unknown, defaulting to 1000 [ 286.765075][ T8797] smc: removing ib device !yz! [ 287.201063][ T8797] ------------[ cut here ]------------ [ 287.206516][ T8797] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x41/0x60, CPU#1: syz.4.731/8797 [ 287.217729][ T8797] Modules linked in: [ 287.221760][ T8797] CPU: 1 UID: 0 PID: 8797 Comm: syz.4.731 Not tainted syzkaller #0 PREEMPT(full) [ 287.230950][ T8797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.240990][ T8797] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 287.246439][ T8797] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 95 ad 27 f9 e8 90 ad 27 f9 90 <0f> 0b 90 5b e9 86 ad 27 f9 e8 81 87 91 f9 eb da 66 66 2e 0f 1f 84 [ 287.266490][ T8797] RSP: 0018:ffffc900032a71b8 EFLAGS: 00010246 [ 287.272564][ T8797] RAX: 0000000000080000 RBX: ffff88807a8cd358 RCX: ffffc90015547000 [ 287.280530][ T8797] RDX: 0000000000080000 RSI: ffffffff889738e0 RDI: ffff88807a8cd3d8 [ 287.288474][ T8797] RBP: ffffffff88959a60 R08: 0000000000000005 R09: 0000000000000001 [ 287.296447][ T8797] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807a8cc698 [ 287.304403][ T8797] R13: ffff88807a8cbfe0 R14: ffff88807a8cbfe0 R15: ffff88807a8cd0b8 [ 287.312468][ T8797] FS: 00007fa8c33f26c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 287.321441][ T8797] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.327999][ T8797] CR2: 000000110c3c692f CR3: 00000000502bf000 CR4: 00000000003526f0 [ 287.335955][ T8797] Call Trace: [ 287.339208][ T8797] [ 287.342135][ T8797] rxe_dealloc+0x25/0xc0 [ 287.346393][ T8797] ib_dealloc_device+0x49/0x230 [ 287.351263][ T8797] __ib_unregister_device+0x396/0x480 [ 287.356614][ T8797] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 287.362510][ T8797] ib_unregister_device_and_put+0x5a/0x80 [ 287.368206][ T8797] nldev_dellink+0x21f/0x320 [ 287.372788][ T8797] ? __pfx_nldev_dellink+0x10/0x10 [ 287.377878][ T8797] ? trace_sched_exit_tp+0xd1/0x110 [ 287.383111][ T8797] ? rcu_is_watching+0x12/0xc0 [ 287.387844][ T8797] ? cap_capable+0x10d/0x3f0 [ 287.392424][ T8797] ? bpf_lsm_capable+0x9/0x10 [ 287.397074][ T8797] ? security_capable+0x7e/0x260 [ 287.402004][ T8797] ? ns_capable+0xd7/0x110 [ 287.406401][ T8797] ? __pfx_nldev_dellink+0x10/0x10 [ 287.411512][ T8797] rdma_nl_rcv_msg+0x38a/0x6e0 [ 287.416253][ T8797] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 287.421536][ T8797] ? __pfx___schedule+0x10/0x10 [ 287.426364][ T8797] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 287.432789][ T8797] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 287.439710][ T8797] ? irqentry_exit+0x1dd/0x8c0 [ 287.444476][ T8797] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 287.449388][ T8797] ? netlink_unicast+0x580/0x870 [ 287.454318][ T8797] netlink_unicast+0x5aa/0x870 [ 287.459058][ T8797] ? __pfx_netlink_unicast+0x10/0x10 [ 287.464332][ T8797] netlink_sendmsg+0x8c8/0xdd0 [ 287.469071][ T8797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.474345][ T8797] ____sys_sendmsg+0xa5d/0xc30 [ 287.479084][ T8797] ? copy_msghdr_from_user+0x10a/0x160 [ 287.484525][ T8797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.489786][ T8797] ? rcu_is_watching+0x12/0xc0 [ 287.494539][ T8797] ___sys_sendmsg+0x134/0x1d0 [ 287.499189][ T8797] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.504391][ T8797] ? __schedule+0x1090/0x6150 [ 287.509045][ T8797] __sys_sendmsg+0x16d/0x220 [ 287.515164][ T8797] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.520294][ T8797] do_syscall_64+0xcd/0xf80 [ 287.524777][ T8797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.530673][ T8797] RIP: 0033:0x7fa8c598f749 [ 287.535061][ T8797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.554655][ T8797] RSP: 002b:00007fa8c33f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.563071][ T8797] RAX: ffffffffffffffda RBX: 00007fa8c5be6360 RCX: 00007fa8c598f749 [ 287.571026][ T8797] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 287.578969][ T8797] RBP: 00007fa8c5a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 287.586930][ T8797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.594883][ T8797] R13: 00007fa8c5be63f8 R14: 00007fa8c5be6360 R15: 00007ffc5fae0788 [ 287.602851][ T8797] [ 287.605843][ T8797] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 287.613092][ T8797] CPU: 1 UID: 0 PID: 8797 Comm: syz.4.731 Not tainted syzkaller #0 PREEMPT(full) [ 287.622263][ T8797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.632287][ T8797] Call Trace: [ 287.635538][ T8797] [ 287.638438][ T8797] dump_stack_lvl+0x3d/0x1f0 [ 287.643005][ T8797] vpanic+0x640/0x6f0 [ 287.646960][ T8797] ? rxe_pool_cleanup+0x41/0x60 [ 287.651792][ T8797] panic+0xca/0xd0 [ 287.655494][ T8797] ? __pfx_panic+0x10/0x10 [ 287.659885][ T8797] check_panic_on_warn+0xab/0xb0 [ 287.664796][ T8797] __warn+0x108/0x3c0 [ 287.668753][ T8797] __report_bug+0x2a0/0x520 [ 287.673225][ T8797] ? rxe_pool_cleanup+0x41/0x60 [ 287.678051][ T8797] ? __pfx___report_bug+0x10/0x10 [ 287.683045][ T8797] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.688215][ T8797] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 287.693993][ T8797] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 287.699780][ T8797] ? __flush_workqueue+0x410/0x1230 [ 287.704952][ T8797] ? rxe_pool_cleanup+0x41/0x60 [ 287.709776][ T8797] report_bug+0xb2/0x220 [ 287.713988][ T8797] ? rxe_pool_cleanup+0x41/0x60 [ 287.718814][ T8797] handle_bug+0x127/0x260 [ 287.723121][ T8797] exc_invalid_op+0x17/0x50 [ 287.727599][ T8797] asm_exc_invalid_op+0x1a/0x20 [ 287.732425][ T8797] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 287.737859][ T8797] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 95 ad 27 f9 e8 90 ad 27 f9 90 <0f> 0b 90 5b e9 86 ad 27 f9 e8 81 87 91 f9 eb da 66 66 2e 0f 1f 84 [ 287.757436][ T8797] RSP: 0018:ffffc900032a71b8 EFLAGS: 00010246 [ 287.763478][ T8797] RAX: 0000000000080000 RBX: ffff88807a8cd358 RCX: ffffc90015547000 [ 287.771428][ T8797] RDX: 0000000000080000 RSI: ffffffff889738e0 RDI: ffff88807a8cd3d8 [ 287.779367][ T8797] RBP: ffffffff88959a60 R08: 0000000000000005 R09: 0000000000000001 [ 287.787308][ T8797] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807a8cc698 [ 287.795250][ T8797] R13: ffff88807a8cbfe0 R14: ffff88807a8cbfe0 R15: ffff88807a8cd0b8 [ 287.803194][ T8797] ? __pfx_rxe_dealloc+0x10/0x10 [ 287.808107][ T8797] ? rxe_pool_cleanup+0x40/0x60 [ 287.812931][ T8797] ? rxe_pool_cleanup+0x40/0x60 [ 287.817756][ T8797] rxe_dealloc+0x25/0xc0 [ 287.821979][ T8797] ib_dealloc_device+0x49/0x230 [ 287.826806][ T8797] __ib_unregister_device+0x396/0x480 [ 287.832151][ T8797] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 287.838014][ T8797] ib_unregister_device_and_put+0x5a/0x80 [ 287.843719][ T8797] nldev_dellink+0x21f/0x320 [ 287.848285][ T8797] ? __pfx_nldev_dellink+0x10/0x10 [ 287.853368][ T8797] ? trace_sched_exit_tp+0xd1/0x110 [ 287.858576][ T8797] ? rcu_is_watching+0x12/0xc0 [ 287.863308][ T8797] ? cap_capable+0x10d/0x3f0 [ 287.867871][ T8797] ? bpf_lsm_capable+0x9/0x10 [ 287.872521][ T8797] ? security_capable+0x7e/0x260 [ 287.877429][ T8797] ? ns_capable+0xd7/0x110 [ 287.881907][ T8797] ? __pfx_nldev_dellink+0x10/0x10 [ 287.886994][ T8797] rdma_nl_rcv_msg+0x38a/0x6e0 [ 287.891731][ T8797] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 287.896994][ T8797] ? __pfx___schedule+0x10/0x10 [ 287.901817][ T8797] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 287.908207][ T8797] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 287.915115][ T8797] ? irqentry_exit+0x1dd/0x8c0 [ 287.919857][ T8797] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 287.924767][ T8797] ? netlink_unicast+0x580/0x870 [ 287.929678][ T8797] netlink_unicast+0x5aa/0x870 [ 287.934414][ T8797] ? __pfx_netlink_unicast+0x10/0x10 [ 287.939674][ T8797] netlink_sendmsg+0x8c8/0xdd0 [ 287.944412][ T8797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.949675][ T8797] ____sys_sendmsg+0xa5d/0xc30 [ 287.954412][ T8797] ? copy_msghdr_from_user+0x10a/0x160 [ 287.959842][ T8797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.965102][ T8797] ? rcu_is_watching+0x12/0xc0 [ 287.969840][ T8797] ___sys_sendmsg+0x134/0x1d0 [ 287.974489][ T8797] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.979669][ T8797] ? __schedule+0x1090/0x6150 [ 287.984320][ T8797] __sys_sendmsg+0x16d/0x220 [ 287.988892][ T8797] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.993981][ T8797] do_syscall_64+0xcd/0xf80 [ 287.998458][ T8797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.004321][ T8797] RIP: 0033:0x7fa8c598f749 [ 288.008714][ T8797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.028290][ T8797] RSP: 002b:00007fa8c33f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.036677][ T8797] RAX: ffffffffffffffda RBX: 00007fa8c5be6360 RCX: 00007fa8c598f749 [ 288.044617][ T8797] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 288.052558][ T8797] RBP: 00007fa8c5a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 288.060501][ T8797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.068441][ T8797] R13: 00007fa8c5be63f8 R14: 00007fa8c5be6360 R15: 00007ffc5fae0788 [ 288.076389][ T8797] [ 288.079647][ T8797] Kernel Offset: disabled [ 288.083941][ T8797] Rebooting in 86400 seconds..