last executing test programs: 9.399047767s ago: executing program 4 (id=2176): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x2, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x6044841}, 0x8080) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00110001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 8.870725984s ago: executing program 4 (id=2181): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x28980) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x1000, 0x1, 0x3c3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280"], 0x88}}, 0x4040803) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) 8.608072809s ago: executing program 1 (id=2184): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioperm(0x1, 0x8, 0x9000000000004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f00000005c0)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb9w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4o4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xdap\xe9D\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O\xac\xce\x84-c\xc9d7\xa8&\xc1\'\xcc\xe0\xc2\xe3\xc0\xc4\x96\xd0\xb4\xf7*Qt\x06%\xaf\xe1\xe1\x91\xb2\xddx\x13:\x8b\xf8\x86\x0f}\xd0\a!{\xd9\x93\xb2\xd5\v\xef\x8ey\xf6\x19\xca\xbd\xb4@\xe9\xc1;\x1ed\x9b\xbb{x\xc1\x8f\xeb\x91!\xca\xf7L\x9b-F\x05\xe6\x83\xf1/\x19\xa9Y\xb3\xfcl<\xe4Id|\"e\\\'\x80\x97\xde%\xc2\xac?8\xc6\xd6>S\x1a/0\xf7\xb2\xb9\xd3\x1a\xef%;[1[\xe6\xae~C\xaf\xd2\xef\fh\xe7(\x84\xaf\x83s\xf8\v\xc2\x13_t\xcc\xe5\\/Q\xba\xde\xb7M\x84\x8a\xd5\x9b\x9dv\xe5\xb3\xe5\xd8\xc7\xfa\xa2\xe7\xeb\x18\xfa-*Z\xf7\xbc3\\\xb2', 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'veth0_to_team\x00', {0x2, 0x0, @private}}) userfaultfd(0x80001) add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000080), 0x0, 0xfffffffffffffffd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) semop(0x0, &(0x7f00000001c0)=[{0x2, 0x0, 0x1800}, {0x0, 0x8001}], 0x2) semop(0x0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) semop(0x0, &(0x7f0000000140)=[{0x4, 0x4, 0x1000}], 0x1) syz_pidfd_open(0x0, 0x0) fsopen(&(0x7f0000000180)='hfs\x00', 0x1) 6.578949468s ago: executing program 2 (id=2191): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x81000, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x4a}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0xf, 0x0, &(0x7f0000000640)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.403791202s ago: executing program 3 (id=2194): getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)=@delqdisc={0x274, 0x25, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x9, 0xfff2}, {0x7, 0xc}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x0, 0xa, 0x0, 0x1, 0x7, 0xffffffff, 0x8}}, {0x14, 0x2, [0x8, 0x3, 0x3ccc, 0x0, 0x50d, 0x0, 0xbca5, 0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_RATE={0x6, 0x5, {0x63, 0x4}}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x108, 0x2, {{0xc, [0x7, 0xc, 0xe, 0x9, 0x2, 0x1, 0xc, 0xf, 0x9, 0xf, 0x10, 0xf, 0x7, 0x4, 0x6, 0x9], 0x1, [0x2, 0x7ff, 0x1, 0xffff, 0xe9e, 0x401, 0xf09, 0x8, 0x7, 0xfff, 0xd2, 0x2, 0x7, 0xc8ce, 0xb], [0x7, 0x9, 0x4, 0x5d9, 0x800, 0xf, 0x9, 0x3, 0x0, 0x0, 0x5, 0x9, 0x6, 0x3ff, 0x9, 0xe8db]}, [@TCA_MQPRIO_MAX_RATE64={0x34, 0x4, 0x0, 0x1, [{0xc, 0x4, 0xf}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0xefbe}, {0xc, 0x4, 0x80000000}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MAX_RATE64={0x4c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x80}, {0xc, 0x4, 0x8}]}]}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0xe4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x9, 0x1, 0x2, 0x6, 0xc26, 0xa}}, {0x18, 0x2, [0x10, 0x3, 0x40, 0x6, 0x6, 0x3, 0x8, 0x5, 0x2, 0x0]}}, {{0x1c, 0x1, {0x10, 0x1, 0x1, 0x46, 0x1, 0x4, 0x8, 0x5}}, {0xe, 0x2, [0x3ff, 0x5, 0x80, 0x7, 0x1]}}, {{0x1c, 0x1, {0xfd, 0xf6, 0xfb, 0x0, 0x0, 0x5, 0x8, 0x2}}, {0x8, 0x2, [0x9, 0x8]}}, {{0x1c, 0x1, {0x81, 0x7, 0x4, 0x8, 0x1, 0x8, 0x0, 0x5}}, {0xe, 0x2, [0x4, 0x9, 0xc67e, 0x7fff, 0x4]}}, {{0x1c, 0x1, {0x9, 0x98, 0xa, 0x5, 0x0, 0xa7b, 0x9, 0x8}}, {0x14, 0x2, [0x1ff, 0x8000, 0xff, 0x2, 0x0, 0x5, 0x1, 0x1]}}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03318944268cb89914f00800", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x24, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x24000}, [@IFLA_XDP={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xd8}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x34, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x14, r8, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1f0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x6, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1873b67a73da9394523e28fe0000000500000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x2}) ptrace$pokeuser(0x6, r1, 0x358, 0xffffffff8df3dda0) 6.139578347s ago: executing program 2 (id=2196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.110085001s ago: executing program 2 (id=2198): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, 0x0, 0x0) 4.956912479s ago: executing program 3 (id=2201): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) creat(0x0, 0x2d8) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000162000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000001"], 0x48) r7 = socket(0x1, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000340)=@add_del={0x2, &(0x7f0000000240)='veth1_vlan\x00'}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYRES16=r3, @ANYRES32=r8], 0x54}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r11 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r12, @ANYBLOB="01"], 0x20}}, 0x0) socket(0x1, 0x803, 0x0) 4.897410656s ago: executing program 0 (id=2202): syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x0, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x188, &(0x7f00000006c0)=0x2, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff7fffb70200000800000018230000", @ANYRES32=r1], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ustat(0xe, &(0x7f00000005c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0xee00, 0x0) keyctl$chown(0x4, r4, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$dsp(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) 4.896759924s ago: executing program 4 (id=2203): socket$nl_route(0x10, 0x3, 0x0) (async) syz_usbip_server_init(0x5) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0xa0, 0x6, 0x0, 0x1, 0x0, 0x2000, 0x0}) (async) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x189840, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_open_dev$usbmon(&(0x7f0000000200), 0x6, 0x200001) preadv(r3, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) (async) ioctl$MON_IOCX_GETX(r3, 0x80089203, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) fsopen(0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) (async) prlimit64(r2, 0xb, &(0x7f00000001c0)={0xb, 0xb30}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', '', [{0x20, '#'}, {0x20, '\x96:'}, {0x20, '/dev/sequencer2\x00'}, {0x20, '/dev/bus/usb/00#/00#\x00'}, {0x20, '(\x00'}, {}, {0x20, '/dev/kvm\x00'}, {0x20, '^}[\'.&,]('}], 0xa, "56e4036d0f2d741e71bad92f299140d43fac7558cd05bccc4a45495ce17ecb81f1a7a15ba1a2ea8c3b036b91124952e8e9f127b184c7be6d1437924207b6c3bcf460e377e0f2816cd93ced9e1822ed6a8385396da6aa"}, 0x9e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) cachestat(r6, &(0x7f0000000040), &(0x7f0000000080), 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r8, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xfffffffffffffffe, 0x29c042) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) (async) ioctl$KVM_RESET_DIRTY_RINGS(r8, 0xaec7) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRES16=r9, @ANYRES32=r3, @ANYBLOB="60551e5f640904c7b3b2afc701aa0c6f4e307155f94de565383017100b50ab90051bb58e82090b793dd554f86292eb7047ffded0ea53e0a154bad08ae26ba3307803cb0b0b6993d3a45e1d2d2253146cf6c2b884d440eb784ddcd76a7be03d57533000ae5e3127354a20f31201e59a87603b6bf493fb56eb0c8f377339b28c710e4b4f4afb007141b08fdfaf4784f0f6ea3f8a1bf283390537d58305375d1b209d775f6077d6e089e03975fa881433f26377d612ab89b872bb2afaf92ccdaa01a9a9bc692bac120b35f89b5c08c6717e7c6aca84f8ac9bca7665201e4e1452350fcfe9ffd6ab"], 0x30}, 0x1, 0x0, 0x0, 0x4085}, 0x0) 4.69211s ago: executing program 0 (id=2204): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x9, 0x6, 0x6}) sendmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="b5", 0x1}], 0x1}}], 0x1, 0xd4) 4.657830129s ago: executing program 2 (id=2205): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x2, 0x6, 0x1657}}}}]}, 0x48}}, 0x4000) sendmmsg$inet(r0, &(0x7f0000006300)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}], 0x20}, 0x300}], 0x1, 0x0) 4.626924791s ago: executing program 4 (id=2206): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x0, 0x23013, r0, 0x83000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptp0(0xffffffffffffff9c, 0x0, 0x481, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r3, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0xf, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, &(0x7f0000000180)={0xfffffffd, 0xb}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x2, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000002400)={0x2, 0x100}, &(0x7f0000002440)) 4.591014469s ago: executing program 0 (id=2207): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x2000, 0x6, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000100)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prlimit64(r1, 0x4, 0x0, &(0x7f00000001c0)) epoll_create1(0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x2d, &(0x7f0000000000)=0x92d2, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES32], 0x58}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x1800848, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dc0e776df92a744de0460c42690f2f2770749d8c7824b149b2ea7af7357f19d85a21309b0b67191b00fd99ba8e60c9aa77f07a8d682ead5a4966f93839c7feefe634d", @ANYRESHEX=r6, @ANYRESHEX, @ANYBLOB=',cache=fscache,msize=0x00000000000007ff,fscache,cache=mmap,fscache,cache=none,cache=mmap,access=user,version=9p2000.u,\x00']) (async) msgget$private(0x0, 0x790) 4.543462849s ago: executing program 1 (id=2208): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/81, 0x51}], 0x1) sendmmsg$alg(r1, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x20000805}], 0x1, 0x24000004) 3.851786045s ago: executing program 3 (id=2209): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r2 = socket(0x15, 0x2, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r1}) connect$packet(r2, &(0x7f0000000080)={0x11, 0x10, r1, 0x1, 0x6}, 0x14) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) 3.671443181s ago: executing program 2 (id=2210): syz_usb_connect(0x0, 0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a000905eaeb"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fdc000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='G\x00\x00'}]}, 0x18}], 0x1}, 0x0) r3 = syz_usb_connect$uac1(0x6, 0xf8, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe6, 0x3, 0x1, 0xfc, 0x30, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf977, 0x7}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x5, 0x2, 0x4, 0x2, 0x4}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x2, 0x1, "f4c478f677"}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x13b, 0x2, "b643"}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x6, 0x4, "b348963c"}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x8, 0x2, "7069e2"}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x7f, "e3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x99, 0x80, 0x8d}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7, 0x0, "dca30f231ba6"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x2, 0x1, 0x0, "", "18"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x6, 0x3}, @as_header={0x7, 0x24, 0x1, 0x3, 0x50, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x1ff, 0xff, "14b6a902e0d077"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x8, 0x7, {0x7, 0x25, 0x1, 0x2, 0x9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x5, 0x8, '\a+', "b99515"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x1, 0x3, 0x6, {0x7, 0x25, 0x1, 0x83, 0x8, 0xe}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x7, 0x98, 0xd, 0x40, 0x1}, 0x4a, &(0x7f00000002c0)={0x5, 0xf, 0x4a, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x4, 0xf, 0x7, [0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x34, 0xcf, 0x2, 0x0, 0x7f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x48, 0x2, 0x3, 0x6124, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x79, "8a62d3841959251d67d1d4910f4a0a62"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x2c, 0x4, 0x4, 0x4}]}, 0xa, [{0xc1, &(0x7f0000000340)=@string={0xc1, 0x3, "7ffa24904a875130fc92fa46977a3b7d30dfd72fa82d1e580fd13d7fb0aab551c90123edf3707602ac300a3d53a1a81cabff5ea74fc2b3c9aff2e84abccfedaebd6ddac490170a956c30e120c1cf9307ac6072169401d5f3caa8ed4a3852b52b1de14dfa012b42462f5258cffa163f4febaeb0c8f7c7b4a529130a1bb3d8417deadcb0a35b796813a6f0457ba9c0f46d8363c9c1a3658d21c20310d43bb5b7ef529aa1f2f3906869e9f56e8df5aa76c26121d0c033934a6fbcff6c4d4ff145"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x409}}, {0x6b, &(0x7f0000000500)=@string={0x6b, 0x3, "09234129613b675439ddc23de1776be5db2f631b11d8f1ced3cc05a4010509d3d81e9e42730e85804700c1b6a2a47e3df1688ba45bbb279c8f05be286c9ae81bac271048a349774ab2983dfd574cdce1206f6b7ad12b8a40af163f1d685807fc8e93bd1d39ca63a0ff"}}, {0x54, &(0x7f0000000600)=@string={0x54, 0x3, "f2e142551af805c6e151c221e76c857d0221c78b06209ec7c8e4cf6d65b38cf3bb2fba6a088ca382c589f6ea7df248087c405f7bda3d7e774459a15c99374cafcfdf5cc8a588dfa16cd0671aa16b92ec0cb6"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x810}}, {0xb6, &(0x7f00000007c0)=@string={0xb6, 0x3, "a3359f400dd2e8fcfcb3fff6ef298dce0fe3b50a78d22b8e764b13e57f5d273353249901eee1f96fa8d88c9f404b12bae59e05c3072a539b6ba4549df54aa8571572d3d5cf96a79a0e1a75289cb7e1625a5e39fe116bc95981dfb9b4c0989bab77ce91a4d8b5a5cf2cddeb2b2ad2117d0f29056ad738cf9a13f4939afa2711d54fd4530aba5eb04519cdeac76f726e0dc4aa62411c0bfccf055452c31e006735410362ff4c3de33420d988ca3b450b532d7adac0"}}]}) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x1000, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x5}}]}, 0x40}}, 0x0) syz_usb_disconnect(r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x1a031, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e22, 0x4, @local, 0xe}, 0x1c) openat$kvm(0xffffffffffffff9c, 0x0, 0x181040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f000001aa40)=""/102400, 0x19000) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x7f, 0x0, 0x7, 0x10, @mcast1, @mcast1, 0x7800, 0x1, 0xffffffff, 0x8}}) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000340)={@private2, @loopback, @mcast1, 0xe, 0x556, 0x1, 0x400, 0x1, 0x40000000, r12}) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x2, @empty}, 0x27) 3.639498673s ago: executing program 4 (id=2211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x6c, 0x0, &(0x7f0000000700)=[@increfs_done={0x40106308, 0x3}, @request_death={0x400c630e, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000680)={@ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/85, 0x55, 0x0, 0x1c}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/224, 0xe0, 0x0, 0x27}, @fda={0x66646185, 0x4, 0x1, 0x20}}, &(0x7f0000000400)={0x0, 0x28, 0x50}}}, @register_looper], 0x20, 0x0, &(0x7f0000000780)="562925f6c40fe2b740ca83d7de3e370c32e49b03e793b5ba0914dd2ba8a0cfd5"}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000e5c82b30fedc79180000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x78, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xffffffffffffffff}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x2a}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 3.543461622s ago: executing program 3 (id=2212): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x1e100}, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x28980) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x1000, 0x1, 0x3c3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) copy_file_range(r5, 0x0, r0, &(0x7f00000004c0)=0xdc, 0xfffffffffffffff8, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280"], 0x88}}, 0x4040803) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r6, 0x6430) 3.009931025s ago: executing program 1 (id=2213): socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = timerfd_create(0x7, 0x800) clock_gettime(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x11) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r6, 0x28543634fae43ad, 0x70bd2b, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0xffa6}, 0x0) 2.99984778s ago: executing program 3 (id=2214): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000600)={0x17}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r1, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0xf, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x3}}}, 0x118) 1.865433593s ago: executing program 3 (id=2215): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) select(0x40, &(0x7f0000000000)={0xe, 0x92f, 0x9, 0xf, 0xd82b, 0x882b, 0x6, 0x3}, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[]) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002780)=ANY=[@ANYBLOB="12010000aca25840ba0d0030ea260000000109021200010000000000a102aa002ea5cfccba3ef7ffaeb3395d9a696f11a147d92a07ce13ad663c0759b6bcabfb858ceed1fa5195145b5737085444b0c26bf0755ff5ca950ed279b3fefb0886d6df5306215582cd8a5e4d78ef190976daedabb379ddb60de81b2737acba9f5f0d8e1c1e797ea182d392d4b3f6cc737bbfb243313f40b60211d9947c224f18d80189e2e7ba3ae053d8a47ba983650174b9eb38e2a83548d465a455a3a15c77408628b66ce79a452470448c"], 0x0) sched_setattr(0x0, 0x0, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x15, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4819}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x674a, 0x8b, &(0x7f0000000600)=""/139, 0x40f00, 0x2c, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0xfffffff3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0xfffefffd}, 0x8, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) open(&(0x7f0000000340)='./file1\x00', 0x80242, 0x1df2a23c5997fb5f) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) 1.719950099s ago: executing program 1 (id=2216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="420f01c80f01f8440f320f20c035040000000f22c0410f015f6965640fc73e66b8ef008ec80f20d835200000000f22d82ef30f09676566420f38829b51eb1ebc", 0x40}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x20050800) 1.604657036s ago: executing program 0 (id=2217): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d61637674617000", @ANYRES32, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) 1.504246144s ago: executing program 1 (id=2218): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) (async) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, 0x0) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(0x0, 0x0, 0x0) (async, rerun: 32) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20000480) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r7, 0x1, &(0x7f0000000480)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, r6, 0x0, 0x0, 0x7}]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2a0, 0x178, 0x178, 0x2a0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x62666fe4d74687b2, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.455892532s ago: executing program 2 (id=2219): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040100"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0), &(0x7f0000000140)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000140)=@udp=r1, 0x1}, 0x20) syz_open_dev$evdev(0x0, 0x5, 0x440100) socket$netlink(0x10, 0x3, 0x8000000004) memfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x0, 0x0, 0x0, 0x70000000000}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r7, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0) accept4(r5, 0x0, 0x0, 0x0) 1.455624096s ago: executing program 0 (id=2220): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x18, 0x14, 0x1, 0x70bd29, 0x0, "", [@typed={0x8, 0xae, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) 1.406415879s ago: executing program 4 (id=2221): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x9) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace(0x10, r4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x41, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) ptrace$pokeuser(0x6, r4, 0x358, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000ac0)={0xfffffffc, 0x0, 0x0, 'queue1\x00', 0xfffffbfc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r5, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x23b) (async) sendfile(r6, r5, 0x0, 0x23b) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x1) (async) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.391985742s ago: executing program 0 (id=2222): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000027c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB="bc0b18aae66f404a46b9baca90aa181fb7c1caa4167513b60756e444882926e4925add2473fcb986b927b0f90f3b085d4b700e10e4c4eb2eadc97171ab8251275480f0001fa37b732515d606b629f0080205f1788c0e481bc89af88b", @ANYBLOB="24d43fa422ad874bd6bc32f4eadd23aa2a7ae5fcd86f417df2586b976817b9eaf4726c08e7ad7afe0b5d0f3600669f7e9517e7874fa1cdd7273f952e09cb7ebb75dfe00688b7fbdbb6c8ad2ac5e38f3fdf507d3010ef9f7389435658539e4eaf1c3247560149cc7fe5d39929db77dadf688e97b5fcb4baedc4cc1b69ceafd605d0e03a7da79743e38bdb835908dfcae745b4840a5393a10da69b4ae9faa8a3e4699711a7063c657126f8cfff8473df85d634afbdadea86ebfe442c37a88c42ecb08ac2b991fcc2c04bb8f4bf895515d24a387303d14d53ec846a385a2d153b2e6a1503cfb9c48709983bacdb31396b8f07c0a47929cb39c6d73e8fe114ee8bcf90e6909fddba4a1eee17fcf3efe1e87d5b6881418b5d3c8fcc2b69a0f52aa2e9725705c1193d171f519d4ce811181eccde2a4b52e6812f0f833d9b424ed514a8d99c5eb2c2265e924440b517e5c7f2fd39f8b2bc504ec8e2f3886b979bc9d49e1094199f9d16b95ad7e5d23af25d57026b4a4bc3ac0ae3999d7e75498c81aa83b5619d763034c6cbd10378acf4e2fb12d2ac9286e5ab4e5fa3b553852dc18b32f3d0e1ebd102458939acb1d301655dc2beeff2177d12f5c3e7dce3ed927d8ccaf65a7a1035f3b1af9158c95e20501d225b483c7e746e707aac697166665d744b83183904a7562090ca6dba4decdefbea52cff3d07b7a7aa8443480e2a0b305f1128ee884ffdb7eca990074bb0b75675f439a6677e48199291266db4111ea79a676fea1628e73733c7f71824aa6e02f9804902468379a4a03b39dccaa2ef21c3e266f484e3452013ed3bb510707a0950dd334aed215c15ca5e22cdc523f6a5917d2799dd469d8999e9e257c5674bf73fe19f590f20fde93acb3427d3a51ab484c75d75333702708eef7adb475af2b00409b9de9ed17fe0cee0a66328278729d70f1b3b21b3ee187042851df1969bd006a837101f1da7076cfcd8f0404724f1479f40645f3614992da968106be646c5cf4588d0f76c5f0e0767cadc1980df755ed0296c5e315b751fb5530c27a453144ba0008228c974863c72c1456b5f690c264826477fa0ce0eca0a0143305567f39dc26c24c966e86c77d0fc5381d474e6217e90653f874a642e5e10726659626bdc3dee90172afe15ff7a7b8cbb05fe10f9aad085fdd2dbfa4e23e5f78fde39a8224fecae8711a6e18d87c629c66f6937025f463d38c8d5fe04abcde1fcc3327e7b48053ba2832a66766c908c5728117a8e6561eb7aa2f26fee549ff2b8e5270782777c12a39b4a0368b2b93ef034bc4d4dadcfa50ac137690512ebf7d174a6b70d769a36f036906c37a8d93e87be23d5c11fe9c119e0894cb4db59fcaf762c9527fc440c9f2fd44e330590bca92400ff01255f60440ab8cbbb17af459b67a08092899951dab8f6317f4b1a9b6f03bd163388be1f4f38fddd29d73dde8571a53528054747cf40d02a3d37d8402c682e24a3036a0d38189203559d5d924596d6470be602584c766e420ef4e536e8dc20b7241db17eea9c8cf7229646205b88f5acc6169a1d8db58a768e917bf4218b1e98b94b3e74ee84d9839b1d9f01da8dc5df2b4c05bdbb70e2788f3b1981f30b6accd5eb221b5499ba5e2e7d74c526c53b1afac777a87ee457929b18216aa5a816fae9e96c00f5e8bb5de0a467d9af7a4e0d2a70e8bcd666d701b727d0a12bd81a38342500678d9db02a562a009ea5d3a563c75078f8e207c9c407e9032da1ca2aa16c8571773391a0632dbdd0e817abd414f8cb03ee41c3eb77ac518ac77d2291879fadc4cb05b8c17683f4591c21fad3c3ce6a98cd3cf6305aca02d77e25aa72ecd47869968dd3ea0dd3a5483436633ded6a3be461799716997b20697713250c35173552609997fb7e0761f10ceb4be06c67249fea386f12c969e3dbb17fc4951bf4fc6e09ce5bb444709fd4bc59997ebc6b257ff7dbd6e15154877120e65f63e75dcba14544f5d500c6afad8fdb6567370ab48b494642afa9d8a9fa3fdb24d624b5db5d758b4ade95c6811fa148ef40393ac697f3129cda38e5a6ce3e3918b1506c60ae1175ac64ebbd8519dd745e4695803960b2eaa7f43696f6a657c6b74e33d9393be39be477b818a7ebbc02c8c1bd28d89815027da50915e6ecd11cc3e911b2c8600eaf892ce09a88596c4c23d9af0e29e4c4f19625091f5d32e0da55d094d3a83ba2bdb632f526140f76e4424f9ae92874f8c662122d036461f16847623f02c99c286c3252d1b11a6604eeb3b59ecea0872d199fc96ac921fd5010985213f51533ef13363c4c90a7c251332509bd214c342d5a9e75f18c58dff11477be21bfc532a8106dea46feb219b6b7bc967fcd5023fdbba347e405bbe6865c0c2c8b44cc2365d5c349d2402eda55c8c0d1ac4b5fe8db2b05b16d274285412c57780974694b7677fc20754674b8a8bbfef7ec9c622e69925814e416d7071cd8df2b2c70a254b55c94f622b40bbbcd1cf1d2390b50e1bac7e38712c04a02815419b3bba684d98dfdcdcb95bd8db09c5b6ad10392ab753675868ae4186b397544666c0dc40e816252b1c08b232ffbd8b47fc9a7e54ca11dba877a4aee2941a1311ef3ac205aafb89a66c54fdad45c799d4c5c5afa06a7edec57b9ff234bd1e327803b454c837b9ce5eb065d6f223e2f5ae46c107e8de260d55381064f6825e80ba601de358ad2c1f1349c49a6d48d16644265285da436bc3f3707556768292cebb3f1bdb51fb0cd85b7215f45f6c8c1c23c7883afe4a66bc4f88cb3b61be05a1a5ddcc698a959a736ef5a31fd0bfededaab13e32ef461175d595d74fcc7a59ef82fd645b84db7635f7768eb93c456e282401625d10beb9b07fc4ededcbe4b86f1f326881458c66cf5a6895d93dfeb4b70a452fe823e87fc2ad7f6b13c7bbbf9a50cbb3d7430cceae2da7238693248adc38afbec4734c17c1a56f85771c977b29ff2b3a2d121304d02223f92f2c9e5547a02dc1c84b86fa2364f7feb26b7b5793d866e1f136a155767093844778cb81e17012f397f31586d331ae425aa920308752b893fc8aa3090271848b71a4eef1a2a5b40eb06ba83a92413519fbe08d5f56dc68177e1f9cca2ee8208b87fdd6d17e09152b06e4c4cda6d5f21fa714356d96a24406da8e3d3b9a1f1352d6b887d137f140afe02dcc6b445bcd0e68adcfd134688dcd3a861ac718547a04c27167e5d5b9eafa3a5dc3b6306a75b6ea77a5aa2eeaedb6ae20461c16e51ce8efda7040447c3af61d7fd33e162b713a090191117a2f8adc767cdb4fff84b4d4d35f52477e89cf947af929a5f4307ce990f604f118cfea77c8e9bea1e110079ac633d9694b4623bbef3b2dc08209934ffdcf55b497e3dbe72a16e466d7001d52d68e74400d41e99f0ca88a09aede1fd50bfb0f1fc74730ef34800a3bb2ef3960745967ac7883ec37e8c69c7fb17a16326e06bf010292e077135a6632e0ff9633c741a727331ca218b8e99d7a8fa98813c0441b094981be69f43d9d922b563ac812cbf72a1cdc644ceeb8b54b90d22f78485816088c980f23088e59ec7e8d1f687cb17f36155bbb12a77ef1ddba88c9d07a450436a115d4c54b366a9c12a3806a155603c2cdf57328b5f987036b9eb1584aaddf12e52248a380b31a46ac0ccf900ac8ef7fbc2c6dbdccbc8d5025945b04a04db941ca7cee2a19566f5f9d6abf3525d5642d161931488787a36f21a5fef465aaeb48897eafa4007ba1fd1aeb9e6d8dfc840cbedc12c30a1295a713566b311a924d0e91d8f5c0e2187739365502a5682f85ec577705f4628197cbe02275b07d0cd590aca3be194afbcb6da1d573455f0d5b06a23053a8c29a558996d7fd499e42983bff99fd934e5a3e13eb232dd08b8bc5fd795c75555c0ac470c3d999947132fb7e7cd47060d792c2b7bc155ea11d3649b9ad41a7c08eb1c8ec2eb4a71b480910d5137e723931434820c6da1450cd5117833fb641daa91004107104c2277f4ac4996412fb4db6f23421237ff08711d27f170426d229d04d1e5ea17a1a383dda9a24e74af9a743e683a6a49f991e7508338ffab4762988dd0ca0ca1321a9accb80931804d0e069cea4b9553e8eeecfd6ea30c4c374cd24d4bab8288c25a76f1f0eff3b49b9883fe561942bc72b3e906cd9cc98606d70ba0cbe6b69b23e939c6d219ebb42efcede212379dce8bd3ce3567521d7cf5fad5578bb4d7635257115b4c1f2e97d177dbea7002c89b429d4d71383a67de8380a3cd963ecf20af839cb9baa8d44a94baad566457760fc3a0eeed8df7402690c582774117431d348cca7dc384c4b8eb8ba1af5e4a9ebc4e86f5cf03044f1b5962b23cfbed7c94fedd495e95b6004fe1f351847a22f67acccd4f27675e176c85fea066c3dc5f453f739e027da0caf1449dab82a3a9decc1e296e9bc10b07fa35ca12635c33d2f6e7014647a3ed4a4cf7ac260f37a1f434a7d3700b08d4e888b2c85d9f1d20f580697d89cafe9cf530d66f5803e1b67c5f81c2f705e9ecb2ba8068544cd36872987cccb8b4aada449878b87c62a6c5bd629e76469019b37b8ed8b77558290451fdadc23e6cf9ffe9f86746029f775d63914a2b26e99c080cefc412290544e1383f4e543662522147e72a91b22b4129942f5b0616851870104499eae2b6d312599d5adb71ac3698b18c0835654f2e1b349a518a7da03e3db7c9f367b546f7e7a80e90e86b2f52b2fddef49e58561e3a9faf71f795f5be6d4bc7a537c3fdcb7660901413e07eef5f1b5e629377dc823fadb53f4157029e1884d56d4d88b8116695294dd2aa0fa91242ef2dd8ee46e558a1843bf3d667bfd7e8be5aa24d26404ec240671fd82c44af26083d9e3770e13f58e488ea8ab1bc6edf5253737439e9dbce1e0305a0a0a82861524504a6bc873db27c3a642d4bfd9a858bfb01364d3ca366ef8d2942fe994b33b88cef545fa3ce583adc8acf9d10063c113539834e3af9e625ebc12d17c98fbc987848007f1e979dbae3376b040f2ba74ebe26328e1207c4c81884ccf89ef4344f3177dcf4ee60d0d5612910e90e4415a786ed8ce0f4058e86e172e5c9bf5cc58941df523559c082faabde699359ba81816f986bee84ed5b4f330ea140ae82a7e082429e385541762430f2f17e663f85bc23e51ab8e3c55cd23209cf2a8762d160611eece6f2a012e3a033a1ad03e83dac51d005da3461ed906185527c1dc027cab1bc36b75936c98f0da6474f7a6c0bac06ee04fb4d3084886826ed0852776013f00ef617e3c897ec47719171aba022972c6767f2f05a34a97d70abc12937e78d3821007dff20e80ec2fd344bd371c3f680da7e6170994ec1b86645be2a154712809d4d74f4b75967e8e2d706f48c3a4d00cc94e3e791301a77abfc05ee43b410073a98d943cf6a533e5f14d6ac0a730d06a6d00609405e8ea79f861ad8e83c8cfd897cf43e5796d8b2185c71c1cc4c899b6ad4a71681ffd14ee240bbb491a1bc1311c3ad18191ca6455993b9b0ced741db6509614abeded10fb29f381717cb8de1892448d4286fae6cbfa9fd583f2cc4d82665e4deaaaeb3cc0b53046001c7223aaa262404c4016f87f78b00e95997ccf275b9f23db9d6dd92fe15369e95ba6e4f7eba973aeaf5b3d9bf297b10e75ccd5188c7078e78e1d5cef1714a93fe9f40600aae4d4ba1ee70ad43d85ba901f6423f755750bcb1614f2e9b1988faf98a0194b85b5fa0c98dd7ac3318021cf9779a8604c73750c2c55c6d99838f3f65de8f41a7891c2", @ANYBLOB="34c2710c5e0ab39ba1275082cc130600ce0c9eb584cad3e88c47d65b0c9e165331eb587bf622fa46b645692b1204812591ecc0ee4b2d65719ba1961e1801ab97ea96c0d2c4ddc4b597f56e73", @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20}, 0xc840) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) openat$random(0xffffffffffffff9c, &(0x7f00000014c0), 0x101202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x3) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)=@buf={0x0, &(0x7f0000000400)}) write$P9_RSTATu(r6, &(0x7f0000001180)={0x23d, 0x7d, 0x0, {{0x500, 0xfc, 0x0, 0xfffffffa, {}, 0x1bac0000, 0x0, 0x0, 0x0, 0x25, '\x04no\xc8f\xc9}`\x99\x06\x00\x00\x00\x00\x00\x00\x00\x90\x00\x00\x1d\xf6\xdb\x00\x00\x00\x00\x00\x00=\xd3\x00\x00\x00\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x17, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x0fX\x05\x02\xb6n\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x05\x00\x00\x00\x00\x00\x00\x00\xc2g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) 0s ago: executing program 1 (id=2223): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000200)="90") kernel console output (not intermixed with test programs): ]" dev="sockfs" ino=27417 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 458.246294][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.264565][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.275090][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.289860][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.301801][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.308329][ T880] hid-generic 00A0:0008:0004.001B: unknown main item tag 0x0 [ 458.351890][ T880] hid-generic 00A0:0008:0004.001B: unknown main item tag 0x0 [ 458.359432][ T880] hid-generic 00A0:0008:0004.001B: unknown main item tag 0x0 [ 458.367129][ T880] hid-generic 00A0:0008:0004.001B: unknown main item tag 0x0 [ 458.374636][ T880] hid-generic 00A0:0008:0004.001B: unknown main item tag 0x0 [ 458.382320][ T880] hid-generic 00A0:0008:0004.001B: unknown main item tag 0x0 [ 458.451223][ T880] hid-generic 00A0:0008:0004.001B: unknown main item tag 0x0 [ 458.498715][ T880] hid-generic 00A0:0008:0004.001B: unknown main item tag 0x0 [ 458.498989][ T24] usb 3-1: config 0 descriptor?? [ 458.523531][ T30] audit: type=1400 audit(1753001353.190:469): avc: denied { accept } for pid=11298 comm="syz.1.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 459.283952][ T880] hid-generic 00A0:0008:0004.001B: unknown main item tag 0x0 [ 459.314157][ T30] audit: type=1400 audit(1753001353.980:470): avc: denied { getopt } for pid=11298 comm="syz.1.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 459.325897][ T880] hid-generic 00A0:0008:0004.001B: unknown main item tag 0x0 [ 459.575575][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 459.584736][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 459.596189][ T24] usb 3-1: USB disconnect, device number 29 [ 459.747729][ T880] hid-generic 00A0:0008:0004.001B: unknown main item tag 0x0 [ 459.758204][ T880] hid-generic 00A0:0008:0004.001B: unknown main item tag 0x0 [ 459.775814][ T880] hid-generic 00A0:0008:0004.001B: hidraw0: HID v0.05 Device [syz1] on syz0 [ 462.457706][ T30] audit: type=1400 audit(1753001357.120:471): avc: denied { create } for pid=11360 comm="syz.2.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 462.591144][ T30] audit: type=1400 audit(1753001357.260:472): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 462.940025][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 463.179971][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 463.260687][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.400077][ T880] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 463.424972][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 463.475328][T11391] xt_SECMARK: invalid mode: 2 [ 463.496382][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.561345][ T9] usb 5-1: config 0 descriptor?? [ 463.636301][ T880] usb 2-1: Using ep0 maxpacket: 32 [ 463.644188][ T880] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 463.652690][ T880] usb 2-1: config 0 has no interface number 0 [ 463.663119][ T880] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 463.672372][ T880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.695854][ T880] usb 2-1: Product: syz [ 463.710828][ T880] usb 2-1: Manufacturer: syz [ 463.727517][ T880] usb 2-1: SerialNumber: syz [ 463.984552][ T880] usb 2-1: config 0 descriptor?? [ 464.027420][ T880] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 464.259306][ T880] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 464.270367][ T9] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 464.577931][ T880] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 464.679280][ T9] usb 5-1: USB disconnect, device number 29 [ 465.428503][T11449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1616'. [ 465.476623][T11449] 9pnet_fd: Insufficient options for proto=fd [ 465.859209][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 466.107434][T11466] tipc: New replicast peer: 255.255.255.255 [ 466.113952][T11466] tipc: Enabled bearer , priority 10 [ 466.560352][ T880] usb 2-1: USB disconnect, device number 24 [ 466.663126][ T880] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 466.709938][ T3091] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 467.021421][ T880] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 467.033309][ T880] quatech2 2-1:0.51: device disconnected [ 467.311429][ T3091] usb 4-1: Using ep0 maxpacket: 8 [ 467.322964][ T3091] usb 4-1: config 244 has an invalid interface number: 228 but max is 0 [ 467.347827][ T3091] usb 4-1: config 244 has an invalid interface association descriptor of length 2, skipping [ 467.375768][ T3091] usb 4-1: config 244 has no interface number 0 [ 467.407478][ T3091] usb 4-1: config 244 interface 228 altsetting 213 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 467.631981][ T3091] usb 4-1: config 244 interface 228 has no altsetting 0 [ 467.656340][ T3091] usb 4-1: New USB device found, idVendor=0a46, idProduct=9601, bcdDevice=94.68 [ 467.672447][ T3091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.682213][ T3091] usb 4-1: Product: syz [ 467.689273][ T3091] usb 4-1: Manufacturer: syz [ 467.696985][ T3091] usb 4-1: SerialNumber: syz [ 468.098276][ T3091] dm9601 4-1:244.228: probe with driver dm9601 failed with error -22 [ 468.140713][ T3091] usb 4-1: USB disconnect, device number 33 [ 468.337253][T11507] syz.0.1626 uses obsolete (PF_INET,SOCK_PACKET) [ 468.449865][T11516] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 468.905912][ T30] audit: type=1400 audit(1753001363.570:473): avc: denied { read } for pid=11515 comm="syz.1.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 469.965297][T11539] binder: 11530:11539 ioctl 4018620d 0 returned -22 [ 469.981387][ T30] audit: type=1400 audit(1753001364.650:474): avc: denied { read write } for pid=11530 comm="syz.3.1631" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 470.019965][ T880] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 470.046007][ T30] audit: type=1400 audit(1753001364.670:475): avc: denied { open } for pid=11530 comm="syz.3.1631" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 470.190117][ T880] usb 3-1: Using ep0 maxpacket: 32 [ 470.201431][ T880] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 470.217164][ T880] usb 3-1: config 0 has no interface number 0 [ 470.277769][T11534] could not allocate digest TFM handle cryptd(blake2b-160) [ 470.288157][ T880] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 470.312224][ T880] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 470.321734][ T880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.334226][ T880] usb 3-1: Product: syz [ 470.339900][ T880] usb 3-1: Manufacturer: syz [ 470.344773][ T880] usb 3-1: SerialNumber: syz [ 470.354292][ T880] usb 3-1: config 0 descriptor?? [ 470.393804][ T880] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 470.411489][ T880] em28xx 3-1:0.132: Video interface 132 found: [ 470.698300][T11560] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 470.706860][T11560] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 470.714965][T11560] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 470.780155][T11575] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1640'. [ 470.795661][ T880] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 471.294156][ T43] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 472.027821][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 472.040720][ T880] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 472.073163][ T880] em28xx 3-1:0.132: board has no eeprom [ 472.093914][ T30] audit: type=1400 audit(1753001366.760:476): avc: denied { shutdown } for pid=11522 comm="syz.2.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 472.104244][T11579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1642'. [ 472.125829][ T30] audit: type=1400 audit(1753001366.760:477): avc: denied { setopt } for pid=11578 comm="syz.3.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 472.152428][ T43] usb 5-1: device descriptor read/64, error -71 [ 472.179961][ T880] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 472.193014][ T880] em28xx 3-1:0.132: analog set to bulk mode. [ 472.204138][ T9] em28xx 3-1:0.132: Registering V4L2 extension [ 472.449814][ T43] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 472.915928][T11567] Bluetooth: hci0: command 0x0c1a tx timeout [ 472.924720][T11567] Bluetooth: hci2: command 0x0c1a tx timeout [ 472.932216][T11567] Bluetooth: hci3: command 0x0c1a tx timeout [ 473.039974][ T43] usb 5-1: device descriptor read/64, error -71 [ 473.160122][ T43] usb usb5-port1: attempt power cycle [ 473.440111][ T9] em28xx 3-1:0.132: reading from i2c device at 0x4a failed: couldn't get the received message from the bridge (error=-5) [ 473.530352][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 473.557889][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 473.606467][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 473.625328][ T43] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 473.642472][T11629] overlayfs: missing 'workdir' [ 473.675291][ T5901] usb 3-1: USB disconnect, device number 30 [ 473.714408][ T5901] em28xx 3-1:0.132: Disconnecting em28xx [ 473.884415][ T43] usb 5-1: device not accepting address 32, error -71 [ 474.159252][ T9] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 474.176769][ T9] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 474.215684][ T9] em28xx 3-1:0.132: No AC97 audio processor [ 474.257232][ T9] usb 3-1: Decoder not found [ 474.279045][ T9] em28xx 3-1:0.132: failed to create media graph [ 474.315442][ T9] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 474.346283][ T9] em28xx 3-1:0.132: Remote control support is not available for this card. [ 474.378180][ T5901] em28xx 3-1:0.132: Closing input extension [ 474.406944][ T5901] em28xx 3-1:0.132: Freeing device [ 474.820422][ T880] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 474.971226][T11611] Bluetooth: hci2: command 0x0c1a tx timeout [ 474.987283][ T43] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 475.143690][ T880] usb 4-1: Using ep0 maxpacket: 16 [ 475.159918][ T880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.183145][ T880] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 475.185169][ T43] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 475.213922][T11687] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1663'. [ 475.233654][ T880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.253348][ T43] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 475.261445][ T880] usb 4-1: config 0 descriptor?? [ 475.287320][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 475.306732][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 475.321675][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 475.337017][ T43] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 475.346542][ T43] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 475.348940][T11694] netlink: 'syz.2.1664': attribute type 1 has an invalid length. [ 475.354935][ T43] usb 5-1: Product: syz [ 475.354955][ T43] usb 5-1: Manufacturer: syz [ 475.375725][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 475.381197][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 475.394151][ T43] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 475.413231][ T43] cdc_wdm 5-1:1.0: Unknown control protocol [ 475.428316][T11694] 8021q: adding VLAN 0 to HW filter on device bond2 [ 475.450171][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 475.833514][ T880] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 475.869965][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 475.882025][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.893194][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 475.899935][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 475.909221][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.928951][ T9] usb 2-1: config 0 descriptor?? [ 476.195689][ T5901] usb 4-1: USB disconnect, device number 34 [ 476.361571][ T9] nzxt-smart2 0003:1E71:2009.001E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 476.576476][T11774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.587384][T11774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.962051][ T9] usb 5-1: USB disconnect, device number 33 [ 478.054699][ T880] IPVS: starting estimator thread 0... [ 478.107108][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 478.151325][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 478.164369][ T43] usb 2-1: USB disconnect, device number 25 [ 478.170045][T11800] IPVS: using max 43 ests per chain, 103200 per kthread [ 478.761135][T11825] netlink: 'syz.3.1675': attribute type 1 has an invalid length. [ 478.789375][T11825] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1675'. [ 479.574985][ T30] audit: type=1400 audit(1753001374.240:478): avc: denied { remount } for pid=11833 comm="syz.4.1677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 480.382431][T11854] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 480.429462][ T5901] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 481.089890][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 481.096428][ T30] audit: type=1400 audit(1753001375.760:479): avc: denied { map } for pid=11855 comm="syz.3.1683" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 481.142154][ T5901] usb 3-1: config 244 has an invalid interface number: 228 but max is 0 [ 481.161698][ T5901] usb 3-1: config 244 has an invalid interface association descriptor of length 5, skipping [ 481.245294][ T5901] usb 3-1: config 244 has no interface number 0 [ 481.290011][ T5901] usb 3-1: config 244 interface 228 altsetting 213 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 481.305400][ T5901] usb 3-1: config 244 interface 228 has no altsetting 0 [ 481.315049][ T5901] usb 3-1: New USB device found, idVendor=0a46, idProduct=9601, bcdDevice=94.68 [ 481.324733][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.335689][ T5901] usb 3-1: Product: syz [ 481.342881][ T5901] usb 3-1: Manufacturer: syz [ 481.347783][ T5901] usb 3-1: SerialNumber: syz [ 481.680238][ T5901] dm9601 3-1:244.228: probe with driver dm9601 failed with error -22 [ 481.696975][ T5901] usb 3-1: USB disconnect, device number 31 [ 482.419911][ T5972] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 482.580373][ T5972] usb 4-1: Using ep0 maxpacket: 16 [ 482.615089][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.645253][ T5972] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 482.674123][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.782367][ T5972] usb 4-1: config 0 descriptor?? [ 482.859872][ T5901] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 483.033378][ T5901] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 483.099898][ T5901] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 483.109589][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.144413][ T5901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 483.173957][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 483.208690][ T5972] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 483.220613][ T5901] usb 5-1: Product: syz [ 483.230381][ T5901] usb 5-1: Manufacturer: syz [ 483.235187][ T5901] usb 5-1: SerialNumber: syz [ 484.375240][ T5972] usb 4-1: USB disconnect, device number 35 [ 484.554550][ T5901] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 484.879845][ T30] audit: type=1400 audit(1753001379.530:480): avc: denied { getattr } for pid=11967 comm="syz.0.1703" name="/" dev="secretmem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 485.303910][T11984] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 485.809818][ T5901] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 485.977362][ T3091] usb 5-1: USB disconnect, device number 34 [ 485.989947][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 486.008067][ T3091] usblp0: removed [ 486.028696][ T5901] usb 2-1: config 244 has an invalid interface number: 228 but max is 0 [ 486.058358][ T5901] usb 2-1: config 244 has an invalid interface association descriptor of length 5, skipping [ 486.071832][ T5901] usb 2-1: config 244 has no interface number 0 [ 486.081904][ T5901] usb 2-1: config 244 interface 228 altsetting 213 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 486.214447][ T5901] usb 2-1: config 244 interface 228 has no altsetting 0 [ 486.240071][ T5901] usb 2-1: New USB device found, idVendor=0a46, idProduct=9601, bcdDevice=94.68 [ 486.250012][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.267084][ T5901] usb 2-1: Product: syz [ 486.271591][ T5901] usb 2-1: Manufacturer: syz [ 486.276277][ T5901] usb 2-1: SerialNumber: syz [ 486.495578][ T5901] dm9601 2-1:244.228: probe with driver dm9601 failed with error -22 [ 486.540381][ T5901] usb 2-1: USB disconnect, device number 26 [ 487.319426][ T30] audit: type=1400 audit(1753001381.980:481): avc: denied { read append } for pid=12035 comm="syz.3.1714" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 487.491812][ T30] audit: type=1400 audit(1753001382.020:482): avc: denied { open } for pid=12035 comm="syz.3.1714" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 487.863870][ T30] audit: type=1400 audit(1753001382.520:483): avc: denied { mount } for pid=12043 comm="syz.1.1715" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 488.482123][T12044] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 488.488883][T12044] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 488.523186][T12044] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 488.644790][T12051] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 489.349183][T12068] syz2: rxe_newlink: already configured on bridge_slave_0 [ 489.884654][ T30] audit: type=1400 audit(1753001384.540:484): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 489.931852][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 489.939903][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 490.090041][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 490.135586][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 490.147185][ T9] usb 4-1: config 0 has no interface number 0 [ 490.166127][ T9] usb 4-1: config 0 interface 2 altsetting 2 has an endpoint descriptor with address 0x55, changing to 0x5 [ 490.189992][ T9] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x5 has an invalid bInterval 36, changing to 9 [ 490.212711][ T9] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x5 has invalid maxpacket 33067, setting to 1024 [ 490.238088][ T9] usb 4-1: config 0 interface 2 has no altsetting 0 [ 490.582117][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 490.582248][T11611] Bluetooth: hci3: command 0x0c1a tx timeout [ 490.627654][ T9] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 490.637016][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.646435][ T9] usb 4-1: Product: syz [ 490.654675][ T9] usb 4-1: Manufacturer: syz [ 490.659484][ T9] usb 4-1: SerialNumber: syz [ 490.659513][T12083] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 490.678563][ T9] usb 4-1: config 0 descriptor?? [ 490.684802][ T30] audit: type=1400 audit(1753001385.360:485): avc: denied { relabelto } for pid=12081 comm="syz.0.1725" name="422" dev="tmpfs" ino=2248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 490.770603][ T30] audit: type=1400 audit(1753001385.360:486): avc: denied { associate } for pid=12081 comm="syz.0.1725" name="422" dev="tmpfs" ino=2248 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 490.773787][T12083] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 490.895279][T12083] overlayfs: failed to set xattr on upper [ 490.904508][ T30] audit: type=1400 audit(1753001385.430:487): avc: denied { mount } for pid=12081 comm="syz.0.1725" name="/" dev="ramfs" ino=29877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 490.930109][ T30] audit: type=1400 audit(1753001385.430:488): avc: denied { mounton } for pid=12081 comm="syz.0.1725" path="/bus" dev="ramfs" ino=29879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 490.959866][T12083] overlayfs: ...falling back to redirect_dir=nofollow. [ 490.976969][T12083] overlayfs: ...falling back to index=off. [ 490.977806][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.986475][T12083] overlayfs: ...falling back to uuid=null. [ 491.871488][T12061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.975319][ T9] usb 4-1: invalid MIDI in EP 0 [ 492.504027][ T30] audit: type=1400 audit(1753001387.160:489): avc: denied { remove_name } for pid=5829 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 492.652837][ T30] audit: type=1400 audit(1753001387.290:490): avc: denied { rmdir } for pid=5829 comm="syz-executor" name="422" dev="tmpfs" ino=2248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 493.027108][ T9] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 493.058126][ T30] audit: type=1400 audit(1753001387.720:491): avc: denied { setopt } for pid=12124 comm="syz.0.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 493.384512][ T9] usb 4-1: USB disconnect, device number 36 [ 494.849861][ T43] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 497.981916][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 498.015006][T12175] geneve2: entered promiscuous mode [ 498.021063][T12175] geneve2: entered allmulticast mode [ 498.229816][ T5941] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 498.673801][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.685143][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.696814][ T5941] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 498.713156][ T5941] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 498.722547][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.734233][ T5941] usb 2-1: config 0 descriptor?? [ 499.278481][T12204] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 499.278481][T12204] The task syz.4.1747 (12204) triggered the difference, watch for misbehavior. [ 499.319325][ T5941] usbhid 2-1:0.0: can't add hid device: -71 [ 499.352351][ T5941] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 499.374224][ T5941] usb 2-1: USB disconnect, device number 27 [ 499.476625][ T30] audit: type=1400 audit(1753001394.140:492): avc: denied { watch watch_reads } for pid=12210 comm="syz.3.1749" path="/339" dev="tmpfs" ino=1810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 500.359867][ T30] audit: type=1400 audit(1753001394.960:493): avc: denied { getopt } for pid=12220 comm="syz.2.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 500.972951][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.980653][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.263442][ T30] audit: type=1400 audit(1753001395.230:494): avc: denied { mount } for pid=12229 comm="syz.4.1751" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 501.779906][ T30] audit: type=1400 audit(1753001395.230:495): avc: denied { mounton } for pid=12229 comm="syz.4.1751" path="/328/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 501.804947][ T30] audit: type=1400 audit(1753001395.230:496): avc: denied { read } for pid=12229 comm="syz.4.1751" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 501.828517][ T30] audit: type=1400 audit(1753001395.230:497): avc: denied { open } for pid=12229 comm="syz.4.1751" path="/328/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 501.851611][ T30] audit: type=1400 audit(1753001395.230:498): avc: denied { read } for pid=12229 comm="syz.4.1751" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 501.873604][ T30] audit: type=1400 audit(1753001396.100:499): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 502.165577][T12242] SELinux: failed to load policy [ 502.201034][ T30] audit: type=1400 audit(1753001396.830:500): avc: denied { load_policy } for pid=12241 comm="syz.2.1755" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 503.009839][ T5972] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 504.042712][ T5972] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 504.130991][ T3091] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 504.147656][ T5972] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 504.183427][ T5972] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 504.225168][ T5972] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.284865][ T5972] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 504.317723][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.630533][ T5972] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.638160][ T5972] usb 3-1: invalid MIDI out EP 0 [ 504.669955][ T5972] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 504.681679][ T5972] usb 3-1: USB disconnect, device number 33 [ 505.017034][ T3091] usb 2-1: Using ep0 maxpacket: 16 [ 505.080055][ T3091] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 505.134003][ T3091] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 505.214570][ T3091] usb 2-1: Product: syz [ 505.215078][ T30] audit: type=1400 audit(1753001399.880:501): avc: denied { create } for pid=12283 comm="syz.0.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 505.238978][ T3091] usb 2-1: Manufacturer: syz [ 505.243727][ T3091] usb 2-1: SerialNumber: syz [ 505.429174][ T3091] usb 2-1: config 0 descriptor?? [ 505.449553][ T30] audit: type=1400 audit(1753001399.940:502): avc: denied { ioctl } for pid=12283 comm="syz.0.1767" path="socket:[29532]" dev="sockfs" ino=29532 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 505.495411][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1770'. [ 505.521627][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1770'. [ 505.841488][T12338] tc_dump_action: action bad kind [ 505.861182][ T30] audit: type=1400 audit(1753001400.480:503): avc: denied { accept } for pid=12332 comm="syz.3.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 506.227388][ T30] audit: type=1400 audit(1753001400.890:504): avc: denied { setopt } for pid=12254 comm="syz.1.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 506.601490][ T5972] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 506.681285][ T3091] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 506.736019][T12364] SET target dimension over the limit! [ 506.839872][ T3091] usb 4-1: Invalid ep0 maxpacket: 32 [ 507.004726][ T30] audit: type=1400 audit(1753001401.670:505): avc: denied { read } for pid=12365 comm="syz.4.1776" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 507.021691][ T3091] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 507.028557][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.158390][ T5972] usb 3-1: Using ep0 maxpacket: 16 [ 507.167301][ T30] audit: type=1400 audit(1753001401.670:506): avc: denied { open } for pid=12365 comm="syz.4.1776" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 507.191567][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.199122][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 507.645471][ T5972] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 507.655614][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 507.665468][ T5972] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 507.699135][ T24] usb 2-1: USB disconnect, device number 28 [ 507.713962][ T5972] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 507.739812][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 507.748068][ T5972] usb 3-1: Product: syz [ 507.750071][ T3091] usb 4-1: Invalid ep0 maxpacket: 32 [ 507.760105][ T5972] usb 3-1: Manufacturer: syz [ 507.764746][ T5972] usb 3-1: SerialNumber: syz [ 507.775735][ T3091] usb usb4-port1: attempt power cycle [ 507.783750][ T5972] usb 3-1: config 0 descriptor?? [ 507.794790][ T5972] usb 3-1: NFC: intf ffff88805db88000 id ffffffff8f561920 [ 507.986595][ T5972] nfcmrvl 3-1:0.0: NFC: registered with nci successfully [ 508.479966][ T3091] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 508.551579][ T3091] usb 4-1: Invalid ep0 maxpacket: 32 [ 511.824666][ T5887] usb 3-1: USB disconnect, device number 34 [ 511.956306][ T5887] usb 3-1: NFC: intf ffff88805db88000 [ 512.144204][T12419] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 512.150768][T12419] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 512.299809][T12419] vhci_hcd vhci_hcd.0: Device attached [ 512.316702][T12428] vhci_hcd: connection closed [ 512.331790][ T36] vhci_hcd: stop threads [ 512.389433][ T36] vhci_hcd: release socket [ 512.398736][ T36] vhci_hcd: disconnect device [ 512.619898][ T3091] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 512.724038][T12469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1792'. [ 512.779860][ T3091] usb 2-1: Using ep0 maxpacket: 16 [ 512.789232][ T3091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.809131][ T3091] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 512.824749][ T3091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.848694][ T3091] usb 2-1: config 0 descriptor?? [ 512.906690][ T30] audit: type=1400 audit(1753001407.570:507): avc: denied { setattr } for pid=12472 comm="syz.3.1794" name="vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 513.265356][ T3091] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 513.319923][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 513.449915][ T24] usb 4-1: device descriptor read/64, error -71 [ 513.539942][T12491] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1795'. [ 513.686977][ T3091] usb 2-1: USB disconnect, device number 29 [ 513.699798][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 513.918828][ T24] usb 4-1: device descriptor read/64, error -71 [ 514.053527][ T24] usb usb4-port1: attempt power cycle [ 514.789961][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 514.821655][ T24] usb 4-1: device descriptor read/8, error -71 [ 514.839930][ T3091] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 514.872546][ T30] audit: type=1400 audit(1753001409.540:508): avc: denied { associate } for pid=12532 comm="syz.2.1805" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 515.000139][ T3091] usb 2-1: Using ep0 maxpacket: 8 [ 515.031456][ T3091] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 515.059925][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 515.138835][ T3091] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 515.152674][ T24] usb 4-1: device descriptor read/8, error -71 [ 515.169131][ T3091] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 515.180189][T12538] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1568557508 (100387680512 ns) > initial count (91621988416 ns). Using initial count to start timer. [ 515.213797][ T3091] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 515.238717][ T3091] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 515.258950][ T3091] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.272464][ T24] usb usb4-port1: unable to enumerate USB device [ 515.296662][ T3091] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 515.316253][ T3091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.374678][ T30] audit: type=1400 audit(1753001410.040:509): avc: denied { module_request } for pid=12543 comm="syz.0.1808" kmod="rtnl-link-vridge" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 515.574508][T12514] overlayfs: failed to resolve './file1': -2 [ 515.682915][ T3091] usb 2-1: GET_CAPABILITIES returned 0 [ 515.780254][ T3091] usbtmc 2-1:16.0: can't read capabilities [ 516.242801][ T3091] usb 2-1: USB disconnect, device number 30 [ 516.397562][T12571] xt_TPROXY: Can be used only with -p tcp or -p udp [ 517.731522][T12612] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 518.172939][ T5836] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 518.230943][ T3091] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 518.589834][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 518.604793][ T5836] usb 2-1: config 244 has an invalid interface number: 228 but max is 0 [ 518.623100][ T5836] usb 2-1: config 244 has no interface number 0 [ 518.659818][ T3091] usb 4-1: Using ep0 maxpacket: 32 [ 518.761556][ T5836] usb 2-1: config 244 interface 228 altsetting 213 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 518.773748][ T5836] usb 2-1: config 244 interface 228 has no altsetting 0 [ 519.244890][ T5836] usb 2-1: New USB device found, idVendor=0a46, idProduct=9601, bcdDevice=94.68 [ 519.259883][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.270425][ T5836] usb 2-1: Product: syz [ 519.287005][ T5836] usb 2-1: Manufacturer: syz [ 519.292390][T12273] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 519.300785][ T5836] usb 2-1: SerialNumber: syz [ 519.310331][ T3091] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.321494][ T5836] usb 2-1: Interface #228 referenced by multiple IADs [ 519.353449][ T3091] usb 4-1: config 0 has no interfaces? [ 519.414534][ T3091] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 519.445118][ T3091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.607251][ T3091] usb 4-1: Product: syz [ 519.614511][ T5836] dm9601 2-1:244.228: probe with driver dm9601 failed with error -22 [ 519.616649][ T3091] usb 4-1: Manufacturer: syz [ 519.642852][T12273] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 519.686124][T12273] usb 3-1: config 5 has no interface number 0 [ 519.699362][ T5836] usb 2-1: USB disconnect, device number 31 [ 519.708783][T12273] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 519.741892][T12273] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 50589, setting to 64 [ 519.763658][ T3091] usb 4-1: SerialNumber: syz [ 519.787909][T12273] usb 3-1: config 5 interface 123 has no altsetting 0 [ 519.798265][T12273] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 519.825803][T12273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.828450][ T3091] usb 4-1: config 0 descriptor?? [ 519.875724][T12273] usb 3-1: Product: syz [ 519.884976][T12273] usb 3-1: Manufacturer: syz [ 519.892723][T12273] usb 3-1: SerialNumber: syz [ 519.914459][T12614] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 520.472497][T12273] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 520.487347][T12273] usb 3-1: USB disconnect, device number 35 [ 520.556271][ T30] audit: type=1400 audit(1753001415.220:510): avc: denied { setcheckreqprot } for pid=12650 comm="syz.4.1828" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 520.576844][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.619338][T12651] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 520.631203][T12651] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 520.743798][ T30] audit: type=1400 audit(1753001415.410:511): avc: denied { create } for pid=12650 comm="syz.4.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 521.128064][T12683] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 521.647189][ T3091] usb 4-1: USB disconnect, device number 45 [ 522.691130][T12691] tc_dump_action: action bad kind [ 522.706787][T12704] overlayfs: failed to clone upperpath [ 523.049926][T12273] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 523.119986][ T3091] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 523.191107][T12273] usb 5-1: device descriptor read/64, error -71 [ 523.279890][ T3091] usb 4-1: Invalid ep0 maxpacket: 32 [ 523.419835][ T3091] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 523.439882][T12273] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 523.630113][T12273] usb 5-1: device descriptor read/64, error -71 [ 523.680572][ T3091] usb 4-1: Invalid ep0 maxpacket: 32 [ 523.687820][ T3091] usb usb4-port1: attempt power cycle [ 523.740175][T12273] usb usb5-port1: attempt power cycle [ 524.051203][ T3091] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 524.091304][T12273] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 524.111923][ T3091] usb 4-1: Invalid ep0 maxpacket: 32 [ 524.140004][T12273] usb 5-1: device descriptor read/8, error -71 [ 524.280739][ T3091] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 524.301388][ T3091] usb 4-1: Invalid ep0 maxpacket: 32 [ 524.307736][ T3091] usb usb4-port1: unable to enumerate USB device [ 524.379831][T12273] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 524.402006][T12273] usb 5-1: device descriptor read/8, error -71 [ 524.521245][T12273] usb usb5-port1: unable to enumerate USB device [ 525.140377][T12744] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 525.883740][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1852'. [ 525.921347][T12760] overlayfs: failed to clone upperpath [ 525.959833][ T30] audit: type=1400 audit(1753001420.590:512): avc: denied { mount } for pid=12768 comm="syz.4.1853" name="/" dev="rpc_pipefs" ino=31097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 525.982962][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.132092][T12777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1359 sclass=netlink_route_socket pid=12777 comm=syz.2.1854 [ 526.420587][ T30] audit: type=1400 audit(1753001420.670:513): avc: denied { create } for pid=12772 comm="syz.2.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 526.442141][ T30] audit: type=1400 audit(1753001420.740:514): avc: denied { getopt } for pid=12772 comm="syz.2.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 526.462249][ T30] audit: type=1400 audit(1753001421.000:515): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 526.959837][ T30] audit: type=1400 audit(1753001421.620:516): avc: denied { ioctl } for pid=12792 comm="syz.4.1856" path="socket:[31812]" dev="sockfs" ino=31812 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 527.837913][ T5836] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 527.867089][T12799] netlink: 'syz.4.1859': attribute type 2 has an invalid length. [ 527.968608][T12803] openvswitch: netlink: Flow actions attr not present in new flow. [ 527.999888][ T5836] usb 4-1: device descriptor read/64, error -71 [ 528.434612][ T5836] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 528.579905][ T5836] usb 4-1: device descriptor read/64, error -71 [ 528.733651][ T5836] usb usb4-port1: attempt power cycle [ 529.479796][ T5836] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 529.505301][ T5836] usb 4-1: device descriptor read/8, error -71 [ 532.544305][T12853] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 536.111974][T12877] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 536.389779][ T30] audit: type=1800 audit(1753001431.040:517): pid=12883 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1878" name="bus" dev="overlay" ino=1961 res=0 errno=0 [ 536.664189][T12896] overlayfs: workdir and upperdir must be separate subtrees [ 536.819968][ T5836] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 537.220088][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 537.229947][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.243272][ T5836] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.255060][ T5836] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 537.267327][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.275735][ T5836] usb 2-1: Product: syz [ 537.279527][ T5887] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 537.282729][ T5836] usb 2-1: Manufacturer: syz [ 537.293143][ T5836] usb 2-1: SerialNumber: syz [ 537.299447][ T5836] usb 2-1: config 0 descriptor?? [ 537.439820][ T5836] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 537.452090][ T5887] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 537.463480][ T5887] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 537.473411][ T5887] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 537.482534][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.493534][T12884] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 537.502885][ T5887] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 537.570194][ T5836] usb 4-1: device descriptor read/64, error -71 [ 537.628271][T12927] ubi: mtd0 is already attached to ubi31 [ 537.658408][T12927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.859808][T12884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1877'. [ 537.950804][ T5836] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 538.055244][ T5887] usb 2-1: USB disconnect, device number 32 [ 538.129819][ T5836] usb 4-1: device descriptor read/64, error -71 [ 538.249994][ T5836] usb usb4-port1: attempt power cycle [ 538.342778][T12932] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 538.620271][ T5836] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 539.134073][ T5836] usb 4-1: device descriptor read/8, error -71 [ 539.332620][T12970] netlink: 'syz.1.1887': attribute type 12 has an invalid length. [ 539.446027][ T5836] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 539.467814][ T5972] usb 5-1: USB disconnect, device number 39 [ 539.480873][ T5836] usb 4-1: device descriptor read/8, error -71 [ 539.610681][ T5836] usb usb4-port1: unable to enumerate USB device [ 540.020329][ T5972] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 540.179786][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 540.186351][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.198548][ T5972] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 540.209574][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.222914][ T5972] usb 2-1: config 0 descriptor?? [ 540.299575][T13027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1897'. [ 540.678696][ T5972] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 540.945768][T13051] sctp: [Deprecated]: syz.4.1899 (pid 13051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 540.945768][T13051] Use struct sctp_sack_info instead [ 541.022837][T13038] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 541.052917][T13038] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 541.101738][T13038] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 541.108707][ T24] usb 2-1: USB disconnect, device number 33 [ 541.172215][ T30] audit: type=1400 audit(1753001435.830:518): avc: denied { accept } for pid=13054 comm="syz.3.1901" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 542.527029][ T30] audit: type=1400 audit(1753001436.890:519): avc: denied { getopt } for pid=13084 comm="syz.0.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 542.685530][ T30] audit: type=1400 audit(1753001436.970:520): avc: denied { ioctl } for pid=13085 comm="syz.1.1905" path="socket:[32244]" dev="sockfs" ino=32244 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 542.855066][T13102] bridge1: entered promiscuous mode [ 543.305842][ T30] audit: type=1400 audit(1753001437.380:521): avc: denied { create } for pid=13097 comm="syz.2.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 543.309916][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 543.326670][ T30] audit: type=1400 audit(1753001437.380:522): avc: denied { write } for pid=13097 comm="syz.2.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 543.332690][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 543.359638][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 543.371797][T13098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1909'. [ 543.388236][T13098] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 543.394774][T13098] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 543.477520][T13098] vhci_hcd vhci_hcd.0: Device attached [ 543.494846][ T30] audit: type=1326 audit(1753001438.160:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.2.1909" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1c338e9a9 code=0x0 [ 543.723030][T13098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13098 comm=syz.2.1909 [ 543.743039][T13098] netlink: 'syz.2.1909': attribute type 29 has an invalid length. [ 543.752532][T13098] netlink: 'syz.2.1909': attribute type 29 has an invalid length. [ 543.764979][T13098] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1909'. [ 543.779826][ T30] audit: type=1400 audit(1753001438.440:524): avc: denied { mounton } for pid=13097 comm="syz.2.1909" path="/proc/1180/task/1181/net/netfilter" dev="proc" ino=4026533004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 543.872702][ T5972] usb 38-1: SetAddress Request (2) to port 0 [ 543.880421][T13110] vhci_hcd: connection closed [ 543.880656][ T5972] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 543.904397][ T7420] vhci_hcd: stop threads [ 543.915017][ T7420] vhci_hcd: release socket [ 543.928358][ T7420] vhci_hcd: disconnect device [ 544.633235][ T30] audit: type=1400 audit(1753001439.300:525): avc: denied { write } for pid=13127 comm="syz.1.1914" path="socket:[31472]" dev="sockfs" ino=31472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 544.671804][ T30] audit: type=1400 audit(1753001439.330:526): avc: denied { accept } for pid=13127 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 544.691801][ T30] audit: type=1400 audit(1753001439.330:527): avc: denied { read } for pid=13127 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 544.756843][T13133] overlayfs: failed to clone upperpath [ 545.179852][T13143] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 546.269835][ T5836] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 546.460673][ T30] audit: type=1400 audit(1753001441.130:528): avc: denied { connect } for pid=13179 comm="syz.0.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 546.500498][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 546.510895][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.523045][ T5836] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 546.534558][ T5836] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 546.544077][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.552707][T12273] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 546.561884][ T5836] usb 2-1: Product: syz [ 546.566065][ T5836] usb 2-1: Manufacturer: syz [ 546.580501][ T5836] usb 2-1: SerialNumber: syz [ 546.593254][ T5836] usb 2-1: config 0 descriptor?? [ 546.830025][T12273] usb 5-1: Using ep0 maxpacket: 8 [ 546.859075][T12273] usb 5-1: config 244 has an invalid interface number: 228 but max is 0 [ 546.867617][T12273] usb 5-1: config 244 has an invalid interface association descriptor of length 2, skipping [ 546.884091][T12273] usb 5-1: config 244 has no interface number 0 [ 546.998235][T13189] ubi: mtd0 is already attached to ubi31 [ 547.030922][T13189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.170524][T12273] usb 5-1: config 244 interface 228 altsetting 213 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 547.241426][T12273] usb 5-1: config 244 interface 228 has no altsetting 0 [ 547.284213][T12273] usb 5-1: New USB device found, idVendor=0a46, idProduct=9601, bcdDevice=94.68 [ 547.335334][T12273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.351457][ T5836] usb 2-1: USB disconnect, device number 34 [ 547.369888][T12273] usb 5-1: Product: syz [ 547.377174][T12273] usb 5-1: Manufacturer: syz [ 547.383109][T12273] usb 5-1: SerialNumber: syz [ 547.497711][T13199] mmap: syz.3.1931 (13199): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 547.613814][T12273] dm9601 5-1:244.228: probe with driver dm9601 failed with error -22 [ 547.804576][T12273] usb 5-1: USB disconnect, device number 40 [ 548.820120][T13235] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1936'. [ 548.909979][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 548.970479][ T5972] usb 38-1: device descriptor read/8, error -110 [ 549.082468][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 549.093695][ T24] usb 2-1: config 0 has an invalid interface number: 225 but max is 0 [ 549.103492][ T24] usb 2-1: config 0 has no interface number 0 [ 549.114166][ T24] usb 2-1: config 0 interface 225 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 549.146636][ T24] usb 2-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 549.366890][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1942'. [ 549.441441][ T5972] usb usb38-port1: attempt power cycle [ 549.997930][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.022793][ T24] usb 2-1: Product: syz [ 550.183574][ T24] usb 2-1: Manufacturer: syz [ 550.197180][ T24] usb 2-1: SerialNumber: syz [ 550.214462][ T24] usb 2-1: config 0 descriptor?? [ 550.370333][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 550.370349][ T30] audit: type=1400 audit(1753001445.040:532): avc: denied { setattr } for pid=13251 comm="syz.2.1943" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 550.540926][ T5972] usb usb38-port1: unable to enumerate USB device [ 550.690449][ T24] mos7840 2-1:0.225: required endpoints missing [ 550.740241][T12273] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 550.907255][T12273] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.919267][T12273] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 550.936604][T12273] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 550.946122][T12273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.955180][T12273] usb 3-1: Product: 㐊 [ 550.959840][T12273] usb 3-1: Manufacturer: ଧⱑ杄꼉뚽쟀单 [ 550.966071][T12273] usb 3-1: SerialNumber: 碶쓅坱龂䣝䬴槟㸻䷲ᱭꀴ侄⦊䞞ᢿ℄銓ݰ難溜㭰ꄏ㍇ᩗ沓콫䢮㲺䁑떭鍣꘿枳鋨ۯ苗㲸뛓箎뽬쫆子踦ꔦ걆ж붒룒騩訨ᄳ⇮Ҵ坭 [ 551.203407][T12273] usb 3-1: 0:2 : does not exist [ 551.219421][T12273] usb 3-1: USB disconnect, device number 36 [ 551.480935][ T5972] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 551.492378][ T5941] usb 2-1: USB disconnect, device number 35 [ 551.528761][ T30] audit: type=1400 audit(1753001446.190:533): avc: denied { mounton } for pid=13294 comm="syz.1.1948" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 551.532688][T13295] syz.1.1948: attempt to access beyond end of device [ 551.532688][T13295] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 551.768003][T13295] (syz.1.1948,13295,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 551.958922][T13295] (syz.1.1948,13295,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 551.981447][ T30] audit: type=1400 audit(1753001446.510:534): avc: denied { listen } for pid=13292 comm="syz.4.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 552.001196][ T30] audit: type=1400 audit(1753001446.530:535): avc: denied { accept } for pid=13292 comm="syz.4.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 552.024600][T13295] (syz.1.1948,13295,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 552.033533][T13295] (syz.1.1948,13295,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 552.044000][T13293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1947'. [ 552.078671][ T5972] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 552.127170][ T5972] usb 4-1: config 0 has no interface number 0 [ 552.152335][ T5972] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 552.188302][ T5972] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 552.204004][ T5972] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 552.469829][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.470099][T13298] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 552.486953][T13298] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 552.495884][T13298] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 552.505437][ T5972] usb 4-1: config 0 descriptor?? [ 552.514314][T13262] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 552.535563][T13308] xt_TPROXY: Can be used only with -p tcp or -p udp [ 552.734427][ T5972] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 553.019349][T13327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1953'. [ 553.721959][ T24] usb 4-1: USB disconnect, device number 58 [ 553.911176][T13342] libceph: resolve '4' (ret=-3): failed [ 554.017056][T13358] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1959'. [ 554.229863][ T43] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 554.400762][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 554.409611][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.422508][ T43] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 554.431761][ T43] usb 3-1: config 1 has no interface number 1 [ 554.437843][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 554.452340][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.461423][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.469407][ T43] usb 3-1: Product: syz [ 554.473618][ T43] usb 3-1: Manufacturer: syz [ 554.478207][ T43] usb 3-1: SerialNumber: syz [ 554.503032][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 554.569912][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 554.629862][ T5972] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 554.760845][ T43] usb 3-1: USB disconnect, device number 37 [ 554.782976][ T5972] usb 5-1: Using ep0 maxpacket: 16 [ 554.791668][ T5972] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.806058][ T5972] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 554.818103][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.829479][ T5972] usb 5-1: Product: syz [ 554.836120][ T5972] usb 5-1: Manufacturer: syz [ 554.846257][ T5972] usb 5-1: SerialNumber: syz [ 554.846271][ T24] IPVS: starting estimator thread 0... [ 554.862759][ T5972] usb 5-1: config 0 descriptor?? [ 554.989910][T13397] IPVS: using max 36 ests per chain, 86400 per kthread [ 555.018616][ T30] audit: type=1400 audit(1753001449.680:536): avc: denied { ioctl } for pid=13402 comm="syz.3.1965" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x640c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 555.190117][T13405] ubi: mtd0 is already attached to ubi31 [ 555.299763][T13405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.678185][ T43] usb 5-1: USB disconnect, device number 41 [ 557.216981][T13434] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 557.936997][T13441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.940165][ T3091] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 557.989557][ T30] audit: type=1400 audit(1753001452.650:537): avc: denied { read } for pid=13442 comm="syz.4.1976" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 558.051039][ T30] audit: type=1400 audit(1753001452.650:538): avc: denied { open } for pid=13442 comm="syz.4.1976" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 558.314181][ T30] audit: type=1400 audit(1753001452.970:539): avc: denied { prog_load } for pid=13442 comm="syz.4.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 558.795126][ T3091] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 558.802297][ T30] audit: type=1400 audit(1753001452.970:540): avc: denied { bpf } for pid=13442 comm="syz.4.1976" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 558.807793][ T3091] usb 3-1: config 0 has no interface number 0 [ 558.825595][ T30] audit: type=1400 audit(1753001452.970:541): avc: denied { ioctl } for pid=13442 comm="syz.4.1976" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 558.837889][ T3091] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 558.860695][ T30] audit: type=1400 audit(1753001453.460:542): avc: denied { ioctl } for pid=13428 comm="syz.2.1971" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 558.936181][ T3091] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 558.947289][ T30] audit: type=1400 audit(1753001453.480:543): avc: denied { perfmon } for pid=13442 comm="syz.4.1976" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 558.962218][ T3091] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 558.985258][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1980'. [ 559.005198][ T3091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.007578][ T30] audit: type=1400 audit(1753001453.560:544): avc: denied { read } for pid=13442 comm="syz.4.1976" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 559.063598][ T3091] usb 3-1: config 0 descriptor?? [ 559.069439][T13429] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 559.100026][ T3091] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 559.139793][ T30] audit: type=1400 audit(1753001453.560:545): avc: denied { open } for pid=13442 comm="syz.4.1976" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 559.215399][T13475] FAULT_INJECTION: forcing a failure. [ 559.215399][T13475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.269935][T13475] CPU: 1 UID: 0 PID: 13475 Comm: syz.3.1982 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 559.269965][T13475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.269975][T13475] Call Trace: [ 559.269981][T13475] [ 559.269989][T13475] dump_stack_lvl+0x16c/0x1f0 [ 559.270034][T13475] should_fail_ex+0x512/0x640 [ 559.270066][T13475] _copy_from_user+0x2e/0xd0 [ 559.270085][T13475] memdup_user_nul+0x6c/0x120 [ 559.270103][T13475] cachefiles_daemon_write+0xda/0x500 [ 559.270125][T13475] ? __pfx_cachefiles_daemon_write+0x10/0x10 [ 559.270144][T13475] vfs_write+0x2a0/0x1150 [ 559.270174][T13475] ? __pfx_vfs_write+0x10/0x10 [ 559.270196][T13475] ? find_held_lock+0x2b/0x80 [ 559.270221][T13475] ? __fget_files+0x204/0x3c0 [ 559.270240][T13475] ? __fget_files+0x20e/0x3c0 [ 559.270262][T13475] ksys_write+0x12a/0x250 [ 559.270286][T13475] ? __pfx_ksys_write+0x10/0x10 [ 559.270317][T13475] do_syscall_64+0xcd/0x4c0 [ 559.270337][T13475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.270355][T13475] RIP: 0033:0x7fa9ff18e9a9 [ 559.270370][T13475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.270387][T13475] RSP: 002b:00007fa9fff1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 559.270405][T13475] RAX: ffffffffffffffda RBX: 00007fa9ff3b5fa0 RCX: 00007fa9ff18e9a9 [ 559.270416][T13475] RDX: 000000000000045c RSI: 0000200000000600 RDI: 0000000000000003 [ 559.270427][T13475] RBP: 00007fa9fff1c090 R08: 0000000000000000 R09: 0000000000000000 [ 559.270437][T13475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.270447][T13475] R13: 0000000000000000 R14: 00007fa9ff3b5fa0 R15: 00007ffce798ec68 [ 559.270471][T13475] [ 559.311394][ T30] audit: type=1400 audit(1753001453.560:546): avc: denied { ioctl } for pid=13442 comm="syz.4.1976" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 560.351016][ T5887] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 560.370904][ T3091] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 560.392222][T13505] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1989'. [ 560.499944][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 560.507452][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.518756][ T5887] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 560.527989][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.537853][ T5887] usb 5-1: config 0 descriptor?? [ 560.542914][ T3091] usb 4-1: Using ep0 maxpacket: 16 [ 560.551854][ T3091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.562879][ T3091] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 560.572065][ T3091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.581124][ T5941] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 560.582398][ T3091] usb 4-1: config 0 descriptor?? [ 560.730065][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 560.735766][ T5941] usb 2-1: too many configurations: 10, using maximum allowed: 8 [ 560.753867][ T5941] usb 2-1: New USB device found, idVendor=00bb, idProduct=0da4, bcdDevice=6a.6b [ 560.763100][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.771187][ T5941] usb 2-1: Product: syz [ 560.775456][ T5941] usb 2-1: Manufacturer: syz [ 560.780159][ T5941] usb 2-1: SerialNumber: syz [ 560.786739][ T5941] usb 2-1: config 0 descriptor?? [ 560.959077][ T5887] mcp2221 0003:04D8:00DD.0022: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 560.980932][T13517] Driver unsupported XDP return value 0 on prog (id 204) dev N/A, expect packet loss! [ 561.005431][ T3091] mcp2221 0003:04D8:00DD.0023: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 561.126075][ T5941] usb 3-1: USB disconnect, device number 38 [ 561.625611][ T3091] usb 5-1: USB disconnect, device number 42 [ 562.198643][ T24] usb 4-1: USB disconnect, device number 59 [ 562.846506][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.853432][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.969809][ T5941] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 563.040779][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 563.040796][ T30] audit: type=1326 audit(1753001457.710:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13580 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f900c38e5ab code=0x7ffc0000 [ 563.145217][ T30] audit: type=1400 audit(1753001457.810:626): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 563.167512][ T30] audit: type=1326 audit(1753001457.830:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13580 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f900c38e5ab code=0x7ffc0000 [ 563.193808][ T5941] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 563.204986][ T30] audit: type=1326 audit(1753001457.830:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13580 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f900c38e5ab code=0x7ffc0000 [ 563.228395][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.235196][ T5941] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 563.246023][ T5941] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 563.255451][ T5941] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 563.267899][ T5941] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 563.284097][ T5941] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 563.297076][ T30] audit: type=1326 audit(1753001457.830:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13580 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f900c38e5ab code=0x7ffc0000 [ 563.302907][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 563.328564][ T30] audit: type=1326 audit(1753001457.830:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13580 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f900c38e5ab code=0x7ffc0000 [ 563.352245][ T5941] usb 5-1: Product: syz [ 563.356780][ T5941] usb 5-1: Manufacturer: syz [ 563.363457][ T30] audit: type=1326 audit(1753001457.860:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13580 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f900c38e5ab code=0x7ffc0000 [ 563.390389][ T30] audit: type=1326 audit(1753001457.860:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13580 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f900c38e5ab code=0x7ffc0000 [ 563.392569][ T5941] cdc_wdm 5-1:1.0: skipping garbage [ 563.413720][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.428325][ T30] audit: type=1326 audit(1753001457.950:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13580 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f900c38e5ab code=0x7ffc0000 [ 563.453562][ T5941] cdc_wdm 5-1:1.0: skipping garbage [ 563.538650][ T5887] usb 2-1: USB disconnect, device number 36 [ 563.555098][ T30] audit: type=1326 audit(1753001457.950:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13580 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f900c38e5ab code=0x7ffc0000 [ 563.578465][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.654053][ T5941] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 563.704783][ T5941] cdc_wdm 5-1:1.0: Unknown control protocol [ 564.311910][T13614] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 564.318480][T13614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 564.329065][T13614] vhci_hcd vhci_hcd.0: Device attached [ 564.503245][T13630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2005'. [ 564.545020][T13630] rtc_cmos 00:00: Alarms can be up to one day in the future [ 564.561004][ T5972] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 564.570618][ T5941] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 564.584689][T13630] bridge_slave_0: left promiscuous mode [ 564.597937][T13630] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.614484][T13630] bridge_slave_1: left allmulticast mode [ 564.621407][T13630] bridge_slave_1: left promiscuous mode [ 564.627595][T13632] netlink: 'syz.1.2005': attribute type 10 has an invalid length. [ 564.635825][T13630] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.728275][T13630] bond0: (slave bond_slave_0): Releasing backup interface [ 564.748414][T13630] bond0: (slave bond_slave_1): Releasing backup interface [ 564.768673][T13630] team0: Port device team_slave_0 removed [ 564.769895][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 564.782831][ T5941] usb 3-1: no configurations [ 564.786196][T13630] team0: Port device team_slave_1 removed [ 564.787505][ T5941] usb 3-1: can't read configurations, error -22 [ 564.805496][T13630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.813135][T13630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.822590][T13630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.830689][T13630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.843193][T13630] bond0: (slave wlan1): Releasing backup interface [ 564.862922][T13632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.873116][T13632] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 564.931217][ T5941] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 564.981769][ T5836] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 564.989899][ T5887] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 565.099807][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 565.105545][ T5941] usb 3-1: no configurations [ 565.110340][ T5941] usb 3-1: can't read configurations, error -22 [ 565.118039][ T5941] usb usb3-port1: attempt power cycle [ 565.141159][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.152318][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.159992][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 565.162309][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 565.168672][ T5887] usb 2-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 565.181207][ T5836] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.202135][ T5887] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 565.211631][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.220029][ T5887] usb 2-1: Product: syz [ 565.222531][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.224333][ T5887] usb 2-1: Manufacturer: syz [ 565.237489][ T5887] usb 2-1: SerialNumber: syz [ 565.248810][ T5887] usb 2-1: config 0 descriptor?? [ 565.264236][ T5836] usb 4-1: config 0 descriptor?? [ 565.477987][ T5887] usb 2-1: USB disconnect, device number 37 [ 565.489852][ T5941] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 565.520551][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 565.526276][ T5941] usb 3-1: no configurations [ 565.532449][ T5941] usb 3-1: can't read configurations, error -22 [ 565.660454][ T5941] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 565.682621][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 565.688542][ T5836] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 565.704447][ T5941] usb 3-1: no configurations [ 565.709060][ T5941] usb 3-1: can't read configurations, error -22 [ 565.719283][ T5836] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 565.731650][T12273] usb 5-1: USB disconnect, device number 43 [ 565.739836][ T5941] usb usb3-port1: unable to enumerate USB device [ 565.746337][ T5836] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 565.759406][ T5836] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 565.769226][ T5836] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 565.786184][ T5836] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 566.707336][T13704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2012'. [ 566.750216][ T5887] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 566.950012][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 566.976596][ T5887] usb 2-1: unable to get BOS descriptor or descriptor too short [ 567.066412][ T5887] usb 2-1: config 255 has an invalid interface number: 81 but max is 0 [ 567.095075][ T5887] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 567.119922][T12273] usb 4-1: reset high-speed USB device number 60 using dummy_hcd [ 567.130418][ T5887] usb 2-1: config 255 has no interface number 0 [ 567.139945][ T5887] usb 2-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 567.159912][ T5887] usb 2-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 567.191606][ T5887] usb 2-1: config 255 interface 81 has no altsetting 0 [ 567.202822][ T5887] usb 2-1: string descriptor 0 read error: -22 [ 567.203420][T13716] FAULT_INJECTION: forcing a failure. [ 567.203420][T13716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.209091][ T5887] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 567.235981][T13716] CPU: 0 UID: 0 PID: 13716 Comm: syz.4.2014 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 567.236010][T13716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.236021][T13716] Call Trace: [ 567.236027][T13716] [ 567.236035][T13716] dump_stack_lvl+0x16c/0x1f0 [ 567.236067][T13716] should_fail_ex+0x512/0x640 [ 567.236099][T13716] _copy_to_user+0x32/0xd0 [ 567.236120][T13716] video_usercopy+0xf3e/0x1720 [ 567.236140][T13716] ? __pfx___video_do_ioctl+0x10/0x10 [ 567.236166][T13716] ? selinux_kernel_read_file+0x70/0x130 [ 567.236184][T13716] ? __pfx_video_usercopy+0x10/0x10 [ 567.236217][T13716] v4l2_ioctl+0x1bd/0x250 [ 567.236242][T13716] ? __pfx_v4l2_ioctl+0x10/0x10 [ 567.236273][T13716] __x64_sys_ioctl+0x18e/0x210 [ 567.236299][T13716] do_syscall_64+0xcd/0x4c0 [ 567.236319][T13716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.236337][T13716] RIP: 0033:0x7f900c38e9a9 [ 567.236352][T13716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.236368][T13716] RSP: 002b:00007f900d1b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.236385][T13716] RAX: ffffffffffffffda RBX: 00007f900c5b5fa0 RCX: 00007f900c38e9a9 [ 567.236396][T13716] RDX: 0000200000000140 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 567.236407][T13716] RBP: 00007f900d1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 567.236417][T13716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.236427][T13716] R13: 0000000000000000 R14: 00007f900c5b5fa0 R15: 00007fff2a949ef8 [ 567.236450][T13716] [ 567.403288][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.413299][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'. [ 567.417417][ T5887] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:255.81/input/input19 [ 567.440548][T13615] vhci_hcd: connection reset by peer [ 567.473905][ T36] vhci_hcd: stop threads [ 567.478197][ T36] vhci_hcd: release socket [ 567.484183][ T36] vhci_hcd: disconnect device [ 568.169989][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 568.170008][ T30] audit: type=1400 audit(1753001462.430:680): avc: denied { read write } for pid=13731 comm="syz.4.2017" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 568.256448][ T30] audit: type=1400 audit(1753001462.440:681): avc: denied { open } for pid=13731 comm="syz.4.2017" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 568.299878][ T5941] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 568.355407][ T5836] usb 4-1: USB disconnect, device number 60 [ 568.763366][ T5887] usb 2-1: USB disconnect, device number 38 [ 568.928405][ T5941] usb 3-1: device descriptor read/64, error -71 [ 569.170283][ T30] audit: type=1400 audit(1753001463.340:682): avc: denied { append } for pid=13747 comm="syz.3.2021" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 569.369823][T13783] netlink: 'syz.1.2025': attribute type 15 has an invalid length. [ 569.429935][ T5941] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 569.545601][ T30] audit: type=1400 audit(1753001464.210:683): avc: denied { write } for pid=13782 comm="syz.1.2025" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 569.569977][ T5941] usb 3-1: device descriptor read/64, error -71 [ 569.649783][ T5836] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 569.680024][ T5941] usb usb3-port1: attempt power cycle [ 569.686682][ T5972] vhci_hcd: vhci_device speed not set [ 569.776089][ T30] audit: type=1400 audit(1753001464.440:684): avc: denied { create } for pid=13788 comm="syz.1.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 569.857558][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 569.897048][ T5836] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 569.908892][ T30] audit: type=1400 audit(1753001464.470:685): avc: denied { ioctl } for pid=13788 comm="syz.1.2026" path="socket:[33222]" dev="sockfs" ino=33222 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 569.937939][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.977913][ T5836] usb 4-1: Product: syz [ 570.006661][ T5836] usb 4-1: Manufacturer: syz [ 570.029954][ T5941] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 570.048310][ T5836] usb 4-1: SerialNumber: syz [ 570.098821][ T5941] usb 3-1: device descriptor read/8, error -71 [ 570.138568][ T5836] usb 4-1: config 0 descriptor?? [ 570.216422][ T5836] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 570.402912][ T5941] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 570.627422][T13793] ubi: mtd0 is already attached to ubi31 [ 570.640910][T13793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.668679][ T30] audit: type=1400 audit(1753001465.290:686): avc: denied { append } for pid=13777 comm="syz.3.2024" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 570.695310][ T5836] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 570.991112][ T5941] usb 3-1: device descriptor read/8, error -71 [ 571.120063][ T5941] usb usb3-port1: unable to enumerate USB device [ 571.175517][ T30] audit: type=1400 audit(1753001465.840:687): avc: denied { read write } for pid=13803 comm="syz.4.2030" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 571.200081][T13805] FAULT_INJECTION: forcing a failure. [ 571.200081][T13805] name failslab, interval 1, probability 0, space 0, times 0 [ 571.212773][T13805] CPU: 1 UID: 0 PID: 13805 Comm: syz.4.2030 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 571.212794][T13805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.212804][T13805] Call Trace: [ 571.212808][T13805] [ 571.212815][T13805] dump_stack_lvl+0x16c/0x1f0 [ 571.212844][T13805] should_fail_ex+0x512/0x640 [ 571.212868][T13805] ? fs_reclaim_acquire+0xae/0x150 [ 571.212888][T13805] ? tomoyo_encode2+0x100/0x3e0 [ 571.212907][T13805] should_failslab+0xc2/0x120 [ 571.212922][T13805] __kmalloc_noprof+0xd2/0x510 [ 571.212945][T13805] ? d_absolute_path+0x136/0x1a0 [ 571.212967][T13805] tomoyo_encode2+0x100/0x3e0 [ 571.212984][T13805] tomoyo_encode+0x29/0x50 [ 571.212997][T13805] tomoyo_realpath_from_path+0x18f/0x6e0 [ 571.213018][T13805] tomoyo_path_number_perm+0x245/0x580 [ 571.213039][T13805] ? tomoyo_path_number_perm+0x237/0x580 [ 571.213064][T13805] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 571.213087][T13805] ? find_held_lock+0x2b/0x80 [ 571.213127][T13805] ? find_held_lock+0x2b/0x80 [ 571.213146][T13805] ? hook_file_ioctl_common+0x145/0x410 [ 571.213171][T13805] ? __fget_files+0x20e/0x3c0 [ 571.213189][T13805] security_file_ioctl+0x9b/0x240 [ 571.213205][T13805] __x64_sys_ioctl+0xb7/0x210 [ 571.213228][T13805] do_syscall_64+0xcd/0x4c0 [ 571.213244][T13805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.213259][T13805] RIP: 0033:0x7f900c38e9a9 [ 571.213271][T13805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.213286][T13805] RSP: 002b:00007f900d1b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.213301][T13805] RAX: ffffffffffffffda RBX: 00007f900c5b5fa0 RCX: 00007f900c38e9a9 [ 571.213312][T13805] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 571.213321][T13805] RBP: 00007f900d1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 571.213330][T13805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.213339][T13805] R13: 0000000000000000 R14: 00007f900c5b5fa0 R15: 00007fff2a949ef8 [ 571.213362][T13805] [ 571.213377][T13805] ERROR: Out of memory at tomoyo_realpath_from_path. [ 571.430063][T13805] input: syz1 as /devices/virtual/input/input20 [ 571.438561][ T30] audit: type=1400 audit(1753001465.840:688): avc: denied { open } for pid=13803 comm="syz.4.2030" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 571.462384][ T30] audit: type=1400 audit(1753001466.090:689): avc: denied { ioctl } for pid=13803 comm="syz.4.2030" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 571.536173][ T3091] usb 4-1: USB disconnect, device number 61 [ 571.599158][T13822] random: crng reseeded on system resumption [ 572.007346][T13815] [U] [ 572.354011][T13839] input: syz1 as /devices/virtual/input/input21 [ 573.505186][T13863] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 573.511757][T13863] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 573.630011][T13863] vhci_hcd vhci_hcd.0: Device attached [ 573.699642][T13871] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 573.869847][ T880] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 573.893051][ T5887] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 573.920486][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 573.920502][ T30] audit: type=1400 audit(1753001468.595:700): avc: denied { bind } for pid=13872 comm="syz.1.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 573.947227][T13874] Bluetooth: MGMT ver 1.23 [ 573.954163][ T5837] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 574.029277][ T30] audit: type=1400 audit(1753001468.615:701): avc: denied { write } for pid=13872 comm="syz.1.2044" path="socket:[34171]" dev="sockfs" ino=34171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 574.062674][T13879] tipc: Enabling of bearer rejected, already enabled [ 574.074731][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2046'. [ 574.086919][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 574.103536][T13879] tipc: Disabling bearer [ 574.110927][ T5887] usb 4-1: no configurations [ 574.117320][ T5887] usb 4-1: can't read configurations, error -22 [ 574.190927][T13883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.259918][ T5887] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 574.419802][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 574.425971][ T5887] usb 4-1: no configurations [ 574.433450][ T5887] usb 4-1: can't read configurations, error -22 [ 574.442546][ T5887] usb usb4-port1: attempt power cycle [ 574.791979][ T5887] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 574.815906][ T30] audit: type=1400 audit(1753001469.485:702): avc: denied { create } for pid=13889 comm="syz.0.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 574.961030][ T30] audit: type=1400 audit(1753001469.635:703): avc: denied { read } for pid=13886 comm="syz.1.2049" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 574.991505][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 574.997311][ T5887] usb 4-1: no configurations [ 575.005737][ T5887] usb 4-1: can't read configurations, error -22 [ 575.014406][ T30] audit: type=1400 audit(1753001469.635:704): avc: denied { open } for pid=13886 comm="syz.1.2049" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 575.348083][ T5887] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 575.510537][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 575.523930][ T5887] usb 4-1: no configurations [ 575.536580][ T5887] usb 4-1: can't read configurations, error -22 [ 575.551960][ T5887] usb usb4-port1: unable to enumerate USB device [ 575.774232][T13902] capability: warning: `syz.2.2053' uses 32-bit capabilities (legacy support in use) [ 576.288107][ T30] audit: type=1400 audit(1753001470.955:705): avc: denied { shutdown } for pid=13909 comm="syz.0.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 576.464699][ T30] audit: type=1400 audit(1753001471.135:706): avc: denied { write } for pid=13908 comm="syz.2.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 576.492835][T13864] vhci_hcd: connection reset by peer [ 576.514501][ T30] audit: type=1400 audit(1753001471.135:707): avc: denied { connect } for pid=13908 comm="syz.2.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 576.898219][ T30] audit: type=1400 audit(1753001471.135:708): avc: denied { name_connect } for pid=13908 comm="syz.2.2057" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 576.918610][ T151] vhci_hcd: stop threads [ 576.923076][ T151] vhci_hcd: release socket [ 576.927523][ T151] vhci_hcd: disconnect device [ 576.971555][ T30] audit: type=1400 audit(1753001471.335:709): avc: denied { getopt } for pid=13909 comm="syz.0.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 577.480579][T13924] 9pnet_virtio: no channels available for device /dev/loop1 [ 577.497279][T13924] option changes via remount are deprecated (pid=13917 comm=syz.1.2059) [ 577.891850][T13930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.970063][ T880] vhci_hcd: vhci_device speed not set [ 579.025512][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 579.025528][ T30] audit: type=1400 audit(1753001473.695:719): avc: denied { name_bind } for pid=13938 comm="syz.4.2055" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 579.056256][T13940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2064'. [ 579.079568][ T30] audit: type=1400 audit(1753001473.745:720): avc: denied { bind } for pid=13941 comm="syz.2.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 580.022074][ T30] audit: type=1400 audit(1753001474.695:721): avc: denied { watch_reads } for pid=13961 comm="syz.4.2071" path="/382" dev="tmpfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 580.280287][ T5836] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 580.369789][ T5887] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 580.462497][ T5836] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 580.490108][ T5836] usb 5-1: can't read configurations, error -61 [ 580.544415][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 580.565437][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 580.588704][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 580.610893][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 580.671733][ T5836] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 580.710260][ T5887] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 580.719344][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.752814][ T5887] usb 3-1: Product: syz [ 580.839255][ T5887] usb 3-1: Manufacturer: syz [ 580.844955][ T5887] usb 3-1: SerialNumber: syz [ 580.854933][ T5887] usb 3-1: config 0 descriptor?? [ 580.891922][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2076'. [ 580.985411][ T5836] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 581.012276][ T5836] usb 5-1: can't read configurations, error -61 [ 581.131154][ T5836] usb usb5-port1: attempt power cycle [ 581.153992][ T5887] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 581.175021][ T30] audit: type=1400 audit(1753001475.845:722): avc: denied { bind } for pid=13993 comm="syz.1.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 581.195000][T13992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2077'. [ 581.326840][ T30] audit: type=1400 audit(1753001475.845:723): avc: denied { name_bind } for pid=13993 comm="syz.1.2078" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 581.851131][ T30] audit: type=1400 audit(1753001475.845:724): avc: denied { node_bind } for pid=13993 comm="syz.1.2078" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 581.923619][ T5836] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 581.968305][ T5836] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 581.987193][ T5836] usb 5-1: can't read configurations, error -61 [ 582.046417][ T30] audit: type=1400 audit(1753001476.585:725): avc: denied { create } for pid=13959 comm="syz.2.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 582.119911][ T5836] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 582.379955][ T5887] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 582.520250][ T5836] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 582.527914][ T5836] usb 5-1: can't read configurations, error -61 [ 582.671114][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 582.706309][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.722864][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.778880][ T5887] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 582.788895][ T5836] usb usb5-port1: unable to enumerate USB device [ 582.873117][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.886844][ T5887] usb 4-1: config 0 descriptor?? [ 582.996749][ T30] audit: type=1400 audit(1753001477.665:726): avc: denied { bind } for pid=14049 comm="syz.0.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 583.220145][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 583.374141][ T5887] usbhid 4-1:0.0: can't add hid device: -71 [ 583.380442][ T5887] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 583.392935][ T5887] usb 4-1: USB disconnect, device number 66 [ 584.076875][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 584.124646][ T24] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 584.136334][T13960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.154575][ T30] audit: type=1400 audit(1753001478.825:727): avc: denied { name_bind } for pid=14072 comm="syz.4.2086" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 584.160251][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.201909][ T5887] usb 3-1: USB disconnect, device number 47 [ 584.212256][ T30] audit: type=1400 audit(1753001478.825:728): avc: denied { node_bind } for pid=14072 comm="syz.4.2086" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 584.213122][T14079] loop4: detected capacity change from 0 to 524255232 [ 584.248292][ T24] usb 2-1: Product: syz [ 584.256405][T14071] netlink: 'syz.0.2085': attribute type 1 has an invalid length. [ 584.257363][ T24] usb 2-1: Manufacturer: syz [ 584.285125][ T24] usb 2-1: SerialNumber: syz [ 584.295677][ T24] usb 2-1: config 0 descriptor?? [ 584.407053][T14087] loop4: detected capacity change from 524255232 to 524287935 [ 584.432853][ T24] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 585.423415][ T24] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 585.804168][ T30] audit: type=1400 audit(1753001480.465:729): avc: denied { create } for pid=14043 comm="syz.1.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 586.017856][ T30] audit: type=1400 audit(1753001480.465:730): avc: denied { connect } for pid=14043 comm="syz.1.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 586.123767][ T30] audit: type=1400 audit(1753001480.515:731): avc: denied { write } for pid=14043 comm="syz.1.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 586.143077][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.277354][T14111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 586.942692][ T30] audit: type=1400 audit(1753001481.145:732): avc: denied { ioctl } for pid=14103 comm="syz.4.2089" path="socket:[34439]" dev="sockfs" ino=34439 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 587.014114][ T24] usb 2-1: USB disconnect, device number 39 [ 587.489870][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 587.559886][ T5887] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 587.649857][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 587.662077][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.774364][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 587.793538][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.805228][ T24] usb 2-1: config 0 descriptor?? [ 587.843366][ T30] audit: type=1400 audit(1753001482.515:733): avc: denied { write } for pid=14143 comm="syz.4.2094" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 587.872627][ T30] audit: type=1400 audit(1753001482.515:734): avc: denied { create } for pid=14143 comm="syz.4.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 587.876948][T14146] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2095'. [ 587.893327][ T30] audit: type=1400 audit(1753001482.515:735): avc: denied { write } for pid=14143 comm="syz.4.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 587.904285][T14146] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2095'. [ 587.925109][ T30] audit: type=1400 audit(1753001482.515:736): avc: denied { nlmsg_write } for pid=14143 comm="syz.4.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 587.933908][ T5887] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 587.964151][ T5887] usb 4-1: config 0 has no interface number 0 [ 587.972116][ T5887] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 587.985232][ T5887] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 587.996581][ T5887] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 588.006541][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.042860][ T5887] usb 4-1: config 0 descriptor?? [ 588.048772][T14131] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 588.064151][ T5887] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 588.229619][ T24] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 588.695076][T14169] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 588.897772][ T5941] usb 2-1: USB disconnect, device number 40 [ 589.228765][T14193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.410727][ T5887] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 590.059939][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 590.067383][ T5887] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 590.076637][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.093965][ T5887] usb 3-1: config 0 descriptor?? [ 590.651102][ T5941] usb 4-1: USB disconnect, device number 67 [ 590.693283][ T5887] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 590.718660][ T5887] usb 3-1: Detected FT4232H [ 590.733644][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 590.733661][ T30] audit: type=1400 audit(1753001485.405:746): avc: denied { open } for pid=14216 comm="syz.3.2105" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 590.775291][ T30] audit: type=1400 audit(1753001485.445:747): avc: denied { ioctl } for pid=14216 comm="syz.3.2105" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 590.938823][T14227] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2107'. [ 590.949931][T14227] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2107'. [ 591.120794][ T5836] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 591.273196][ T30] audit: type=1400 audit(1753001485.945:748): avc: denied { ioctl } for pid=14229 comm="syz.3.2108" path="cgroup:[4026533212]" dev="nsfs" ino=4026533212 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 591.279961][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 591.283379][ T5836] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 591.283408][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.283426][ T5836] usb 2-1: Product: syz [ 591.283442][ T5836] usb 2-1: Manufacturer: syz [ 591.283455][ T5836] usb 2-1: SerialNumber: syz [ 591.285689][ T5836] usb 2-1: config 0 descriptor?? [ 591.287938][ T5836] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 591.609891][ T5836] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 591.715664][T14239] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 592.195395][T14240] ubi: mtd0 is already attached to ubi31 [ 592.250764][T14240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.557145][ T30] audit: type=1400 audit(1753001487.225:749): avc: denied { read write } for pid=14242 comm="syz.2.2110" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 592.558671][ T30] audit: type=1400 audit(1753001487.225:750): avc: denied { open } for pid=14242 comm="syz.2.2110" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 592.562753][ T30] audit: type=1400 audit(1753001487.235:751): avc: denied { read write } for pid=14242 comm="syz.2.2110" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 592.562798][ T30] audit: type=1400 audit(1753001487.235:752): avc: denied { open } for pid=14242 comm="syz.2.2110" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 592.567677][ T30] audit: type=1400 audit(1753001487.235:753): avc: denied { ioctl } for pid=14242 comm="syz.2.2110" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 592.634895][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.739333][ T5941] usb 2-1: USB disconnect, device number 41 [ 592.773543][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.879413][ T30] audit: type=1400 audit(1753001487.545:754): avc: denied { create } for pid=14242 comm="syz.2.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 593.198511][ T30] audit: type=1400 audit(1753001487.755:755): avc: denied { connect } for pid=14256 comm="syz.4.2113" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 593.219117][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.625007][T14266] FAULT_INJECTION: forcing a failure. [ 593.625007][T14266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.638531][T14266] CPU: 0 UID: 0 PID: 14266 Comm: syz.3.2114 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 593.638556][T14266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 593.638567][T14266] Call Trace: [ 593.638573][T14266] [ 593.638580][T14266] dump_stack_lvl+0x16c/0x1f0 [ 593.638613][T14266] should_fail_ex+0x512/0x640 [ 593.638643][T14266] _copy_to_iter+0x463/0x16f0 [ 593.638668][T14266] ? __pfx__copy_to_iter+0x10/0x10 [ 593.638685][T14266] ? __rcu_read_unlock+0x2b4/0x580 [ 593.638704][T14266] ? traverse.part.0.constprop.0+0x2c5/0x640 [ 593.638739][T14266] seq_read_iter+0x719/0x12c0 [ 593.638780][T14266] seq_read+0x39e/0x4e0 [ 593.638803][T14266] ? find_held_lock+0x2b/0x80 [ 593.638825][T14266] ? __pfx_seq_read+0x10/0x10 [ 593.638853][T14266] ? lockdep_hardirqs_on+0x7c/0x110 [ 593.638879][T14266] ? import_ubuf+0x1b6/0x220 [ 593.638900][T14266] ? avc_policy_seqno+0x9/0x20 [ 593.638925][T14266] ? __pfx_seq_read+0x10/0x10 [ 593.638950][T14266] proc_reg_read+0x23d/0x330 [ 593.638971][T14266] ? __pfx_proc_reg_read+0x10/0x10 [ 593.638990][T14266] vfs_readv+0x5be/0x8b0 [ 593.639019][T14266] ? __pfx_vfs_readv+0x10/0x10 [ 593.639072][T14266] ? do_preadv+0x1a6/0x270 [ 593.639095][T14266] do_preadv+0x1a6/0x270 [ 593.639118][T14266] ? __pfx_do_preadv+0x10/0x10 [ 593.639149][T14266] do_syscall_64+0xcd/0x4c0 [ 593.639169][T14266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.639187][T14266] RIP: 0033:0x7fa9ff18e9a9 [ 593.639201][T14266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.639217][T14266] RSP: 002b:00007fa9fcfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 593.639234][T14266] RAX: ffffffffffffffda RBX: 00007fa9ff3b6160 RCX: 00007fa9ff18e9a9 [ 593.639245][T14266] RDX: 0000000000000001 RSI: 0000200000002400 RDI: 0000000000000009 [ 593.639254][T14266] RBP: 00007fa9fcfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 593.639264][T14266] R10: 00000000000039c5 R11: 0000000000000246 R12: 0000000000000001 [ 593.639274][T14266] R13: 0000000000000000 R14: 00007fa9ff3b6160 R15: 00007ffce798ec68 [ 593.639299][T14266] [ 593.853186][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.886326][T14262] tipc: Resetting bearer [ 593.892206][T14262] tipc: Resetting bearer [ 593.903375][T14262] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.913609][T14262] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.939867][ T3523] tipc: Resetting bearer [ 595.018187][T14286] IPv6: NLM_F_REPLACE set, but no existing node found! [ 595.043794][T14284] 9pnet_virtio: no channels available for device 127.0.0.1 [ 595.300779][T14305] 9pnet_fd: Insufficient options for proto=fd [ 595.368180][T14307] comedi comedi0: aio_iiro_16: I/O port conflict (0xee,8) [ 595.509810][ T5941] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 595.679831][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 596.317595][ T5941] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 597.720879][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 597.752682][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.761394][ T5941] usb 4-1: Product: syz [ 597.765631][ T5941] usb 4-1: Manufacturer: syz [ 597.770340][ T5941] usb 4-1: SerialNumber: syz [ 597.777754][ T5941] usb 4-1: config 0 descriptor?? [ 597.787565][ T5941] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 597.789432][ T5887] ftdi_sio ttyUSB0: Unable to read latency timer: -110 [ 597.810414][T14323] pim6reg1: entered allmulticast mode [ 597.822313][ T5887] ftdi_sio ttyUSB0: Unable to write latency timer: -32 [ 597.848388][ T5887] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 597.959815][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 599.005962][ T5941] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 599.092481][ T24] usb 2-1: device descriptor read/all, error -71 [ 599.112996][ T5941] usb 4-1: USB disconnect, device number 68 [ 599.579437][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 600.173287][ T24] usb 2-1: device descriptor read/64, error -71 [ 600.290710][ T24] usb usb2-port1: attempt power cycle [ 600.630604][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 600.762913][ T24] usb 2-1: device descriptor read/8, error -71 [ 600.772000][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 600.772016][ T30] audit: type=1400 audit(1753001495.445:769): avc: denied { map } for pid=14368 comm="syz.3.2137" path="socket:[34638]" dev="sockfs" ino=34638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 600.828164][ T30] audit: type=1400 audit(1753001495.495:770): avc: denied { write } for pid=14342 comm="syz.0.2133" path="socket:[34645]" dev="sockfs" ino=34645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 600.887394][T14392] wg1 speed is unknown, defaulting to 1000 [ 600.894218][T14392] wg1 speed is unknown, defaulting to 1000 [ 600.900404][T14392] wg1 speed is unknown, defaulting to 1000 [ 600.987437][T14392] infiniband syz0: set active [ 600.990438][T14399] pim6reg1: entered allmulticast mode [ 600.997641][T14392] infiniband syz0: added wg1 [ 600.998927][T14399] pim6reg1: left allmulticast mode [ 601.012742][ T30] audit: type=1400 audit(1753001495.655:771): avc: denied { ioctl } for pid=14391 comm="syz.2.2142" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34921 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 601.013508][ T5887] wg1 speed is unknown, defaulting to 1000 [ 601.070518][T14392] RDS/IB: syz0: added [ 601.074553][T14392] smc: adding ib device syz0 with port count 1 [ 601.080895][T14392] smc: ib device syz0 port 1 has pnetid [ 601.100631][T14392] wg1 speed is unknown, defaulting to 1000 [ 601.191965][T14392] wg1 speed is unknown, defaulting to 1000 [ 601.279578][T14392] wg1 speed is unknown, defaulting to 1000 [ 601.366926][T14392] wg1 speed is unknown, defaulting to 1000 [ 601.453447][T14392] wg1 speed is unknown, defaulting to 1000 [ 601.540875][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 601.548652][ T5887] wg1 speed is unknown, defaulting to 1000 [ 601.571369][ T24] usb 2-1: device descriptor read/8, error -71 [ 601.681961][ T24] usb usb2-port1: unable to enumerate USB device [ 603.355509][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2148'. [ 603.500015][ T5972] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 603.957039][ T30] audit: type=1400 audit(1753001498.625:772): avc: denied { setopt } for pid=14451 comm="syz.1.2151" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 604.430317][T14461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.439259][T14461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.460034][ T5972] usb 4-1: Using ep0 maxpacket: 16 [ 604.475192][ T5972] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 604.484481][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.494664][ T5972] usb 4-1: Product: syz [ 604.499857][ T5972] usb 4-1: Manufacturer: syz [ 604.504748][ T5972] usb 4-1: SerialNumber: syz [ 604.512184][ T5972] usb 4-1: config 0 descriptor?? [ 604.525895][ T5972] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 604.794508][T14467] ubi: mtd0 is already attached to ubi31 [ 604.819320][T14467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.038022][ T5972] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 605.073067][ T5972] usb 4-1: USB disconnect, device number 69 [ 605.171588][T14476] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 605.244100][T14480] pim6reg: entered allmulticast mode [ 605.254076][T14461] syz.2.2154: attempt to access beyond end of device [ 605.254076][T14461] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 605.254987][ T30] audit: type=1400 audit(1753001499.925:773): avc: denied { create } for pid=14460 comm="syz.2.2154" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 605.318445][T14479] 9pnet_fd: Insufficient options for proto=fd [ 605.319159][ T30] audit: type=1400 audit(1753001499.925:774): avc: denied { mounton } for pid=14460 comm="syz.2.2154" path="/415/file0" dev="tmpfs" ino=2274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 605.347835][T14461] FAT-fs (loop5): unable to read boot sector [ 607.338817][T14504] 9pnet_fd: Insufficient options for proto=fd [ 607.428927][ T30] audit: type=1400 audit(1753001502.085:775): avc: denied { unlink } for pid=5828 comm="syz-executor" name="file0" dev="tmpfs" ino=2274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 609.239811][ T5941] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 609.530876][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 609.616597][ T5941] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 609.635467][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.737810][ T5941] usb 4-1: Product: syz [ 609.841707][ T5941] usb 4-1: Manufacturer: syz [ 609.846375][ T5941] usb 4-1: SerialNumber: syz [ 610.345713][ T5941] usb 4-1: config 0 descriptor?? [ 610.352982][ T5941] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 610.772685][ T5941] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 610.805188][ T30] audit: type=1400 audit(1753001505.475:776): avc: denied { write } for pid=14585 comm="syz.4.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 610.825909][T14586] netlink: 'syz.4.2176': attribute type 17 has an invalid length. [ 610.914393][T14586] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2176'. [ 610.930814][T14589] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 611.053540][T14586] macvtap0: entered allmulticast mode [ 611.059018][T14586] veth0_macvtap: entered allmulticast mode [ 611.075875][T14586] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 611.129983][T14583] ubi: mtd0 is already attached to ubi31 [ 611.137596][T14583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.314885][ T5941] usb 4-1: USB disconnect, device number 70 [ 611.573154][T14605] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14605 comm=syz.0.2180 [ 613.222564][ T30] audit: type=1400 audit(1753001507.895:777): avc: denied { map } for pid=14632 comm="syz.2.2188" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 613.514965][T14639] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 613.531338][ T30] audit: type=1400 audit(1753001507.895:778): avc: denied { execute } for pid=14632 comm="syz.2.2188" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 613.559939][T14639] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2189'. [ 613.739450][T14648] xt_recent: Unsupported userspace flags (000000de) [ 614.233322][T14658] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 615.069266][T14650] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.263696][T14674] netlink: 'syz.3.2201': attribute type 1 has an invalid length. [ 615.322870][ T30] audit: type=1400 audit(1753001509.975:779): avc: denied { getattr } for pid=14675 comm="syz.0.2202" name="/" dev="secretmem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 615.339571][T14674] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2201'. [ 615.399852][T14712] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 615.406403][T14712] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 615.442659][T14712] vhci_hcd vhci_hcd.0: Device attached [ 615.490028][T14720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 615.510019][ T30] audit: type=1400 audit(1753001510.125:780): avc: denied { write } for pid=14709 comm="syz.4.2203" name="001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 615.532985][T14713] vhci_hcd: connection closed [ 615.544717][ T12] vhci_hcd: stop threads [ 615.560302][T14674] xt_CT: No such helper "snmp_trap" [ 615.636443][ T12] vhci_hcd: release socket [ 615.650274][ T12] vhci_hcd: disconnect device [ 616.566055][T14738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.575226][T14738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.665070][T14744] binder: BINDER_SET_CONTEXT_MGR already set [ 616.671496][T14744] binder: 14736:14744 ioctl 4018620d 200000000040 returned -16 [ 616.686488][ T30] audit: type=1400 audit(1753001511.325:781): avc: denied { ioctl } for pid=14736 comm="syz.4.2211" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 616.718376][ T30] audit: type=1400 audit(1753001511.325:782): avc: denied { set_context_mgr } for pid=14736 comm="syz.4.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 616.769888][ T30] audit: type=1400 audit(1753001511.335:783): avc: denied { map } for pid=14736 comm="syz.4.2211" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 616.793727][ C0] vkms_vblank_simulate: vblank timer overrun [ 617.570866][T14757] can0: slcan on ptm0. [ 618.340190][T14752] can0 (unregistered): slcan off ptm0. [ 618.630331][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'. [ 618.639360][T14780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2217'. [ 618.684128][T14782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.727546][T14782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.748208][ T30] audit: type=1400 audit(1753001513.415:784): avc: denied { remount } for pid=14786 comm="syz.1.2218" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 618.968438][ T5836] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 619.875766][T14807] smc: removing ib device syz0 [ 620.713970][T14807] ------------[ cut here ]------------ [ 620.719468][T14807] WARNING: CPU: 1 PID: 14807 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 620.730292][T14807] Modules linked in: [ 620.734545][T14807] CPU: 1 UID: 0 PID: 14807 Comm: syz.0.2222 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 620.746959][T14807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 620.757081][T14807] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 620.762570][T14807] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 e5 aa 0b f9 e8 e0 aa 0b f9 90 <0f> 0b 90 5b e9 d6 aa 0b f9 e8 f1 fd 70 f9 eb da 66 66 2e 0f 1f 84 [ 620.782398][T14807] RSP: 0018:ffffc9001c6b71e8 EFLAGS: 00010246 [ 620.788478][T14807] RAX: 0000000000080000 RBX: ffff888031d75320 RCX: ffffc9000ee81000 [ 620.796519][T14807] RDX: 0000000000080000 RSI: ffffffff88b03dd0 RDI: ffff888031d753a0 [ 620.804534][T14807] RBP: ffffffff88aea280 R08: 0000000000000005 R09: 0000000000000001 [ 620.812556][T14807] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888031d74668 [ 620.820562][T14807] R13: ffff888031d73fe0 R14: ffff888031d73fe0 R15: ffff888031d75080 [ 620.828545][T14807] FS: 00007f1d4d3566c0(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 620.837761][T14807] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 620.844409][T14807] CR2: 0000001b2fe1cff8 CR3: 000000005722b000 CR4: 00000000003526f0 [ 620.852421][T14807] Call Trace: [ 620.855698][T14807] [ 620.858638][T14807] rxe_dealloc+0x25/0xc0 [ 620.862922][T14807] ib_dealloc_device+0x49/0x230 [ 620.867762][T14807] __ib_unregister_device+0x396/0x480 [ 620.873171][T14807] ib_unregister_device_and_put+0x5a/0x80 [ 620.878896][T14807] nldev_dellink+0x21f/0x320 [ 620.883539][T14807] ? __pfx_nldev_dellink+0x10/0x10 [ 620.888673][T14807] ? __pfx___schedule+0x10/0x10 [ 620.893779][T14807] ? cap_capable+0xb3/0x250 [ 620.898308][T14807] ? bpf_lsm_capable+0x9/0x10 [ 620.903033][T14807] ? security_capable+0x7e/0x260 [ 620.907986][T14807] ? ns_capable+0xd7/0x110 [ 620.912433][T14807] ? __pfx_nldev_dellink+0x10/0x10 [ 620.917553][T14807] rdma_nl_rcv_msg+0x38a/0x6e0 [ 620.922338][T14807] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 620.927607][T14807] ? __lock_acquire+0x622/0x1c90 [ 620.932578][T14807] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 620.939006][T14807] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 620.945993][T14807] ? netlink_deliver_tap+0x1ae/0xd30 [ 620.951282][T14807] ? is_vmalloc_addr+0x86/0xa0 [ 620.956052][T14807] netlink_unicast+0x58a/0x850 [ 620.960852][T14807] ? __pfx_netlink_unicast+0x10/0x10 [ 620.966149][T14807] netlink_sendmsg+0x8d1/0xdd0 [ 620.970957][T14807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.976258][T14807] ____sys_sendmsg+0xa98/0xc70 [ 620.981038][T14807] ? copy_msghdr_from_user+0x10a/0x160 [ 620.986513][T14807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.991827][T14807] ? __pfx_futex_wake_mark+0x10/0x10 [ 620.997105][T14807] ___sys_sendmsg+0x134/0x1d0 [ 621.001814][T14807] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.007016][T14807] ? __lock_acquire+0x622/0x1c90 [ 621.012033][T14807] __sys_sendmsg+0x16d/0x220 [ 621.016627][T14807] ? __pfx___sys_sendmsg+0x10/0x10 [ 621.021769][T14807] ? __x64_sys_futex+0x1e0/0x4c0 [ 621.026712][T14807] do_syscall_64+0xcd/0x4c0 [ 621.031243][T14807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.037135][T14807] RIP: 0033:0x7f1d4c58e9a9 [ 621.041555][T14807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.061187][T14807] RSP: 002b:00007f1d4d356038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.069584][T14807] RAX: ffffffffffffffda RBX: 00007f1d4c7b6160 RCX: 00007f1d4c58e9a9 [ 621.077582][T14807] RDX: 0000000000008044 RSI: 0000200000000200 RDI: 0000000000000008 [ 621.085555][T14807] RBP: 00007f1d4c610d69 R08: 0000000000000000 R09: 0000000000000000 [ 621.093548][T14807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.101532][T14807] R13: 0000000000000000 R14: 00007f1d4c7b6160 R15: 00007ffe0b880f48 [ 621.109502][T14807] [ 621.112544][T14807] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 621.119812][T14807] CPU: 1 UID: 0 PID: 14807 Comm: syz.0.2222 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 621.131866][T14807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 621.141912][T14807] Call Trace: [ 621.145192][T14807] [ 621.148120][T14807] dump_stack_lvl+0x3d/0x1f0 [ 621.152727][T14807] panic+0x71c/0x800 [ 621.156612][T14807] ? __pfx_panic+0x10/0x10 [ 621.161030][T14807] ? show_trace_log_lvl+0x29b/0x3e0 [ 621.166233][T14807] ? rxe_pool_cleanup+0x41/0x60 [ 621.171069][T14807] check_panic_on_warn+0xab/0xb0 [ 621.175997][T14807] __warn+0xf6/0x3c0 [ 621.179873][T14807] ? rxe_pool_cleanup+0x41/0x60 [ 621.184707][T14807] report_bug+0x3c3/0x580 [ 621.189035][T14807] ? rxe_pool_cleanup+0x41/0x60 [ 621.193882][T14807] handle_bug+0x184/0x210 [ 621.198197][T14807] exc_invalid_op+0x17/0x50 [ 621.202688][T14807] asm_exc_invalid_op+0x1a/0x20 [ 621.207536][T14807] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 621.212990][T14807] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 e5 aa 0b f9 e8 e0 aa 0b f9 90 <0f> 0b 90 5b e9 d6 aa 0b f9 e8 f1 fd 70 f9 eb da 66 66 2e 0f 1f 84 [ 621.232588][T14807] RSP: 0018:ffffc9001c6b71e8 EFLAGS: 00010246 [ 621.238647][T14807] RAX: 0000000000080000 RBX: ffff888031d75320 RCX: ffffc9000ee81000 [ 621.246633][T14807] RDX: 0000000000080000 RSI: ffffffff88b03dd0 RDI: ffff888031d753a0 [ 621.254601][T14807] RBP: ffffffff88aea280 R08: 0000000000000005 R09: 0000000000000001 [ 621.262570][T14807] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888031d74668 [ 621.270539][T14807] R13: ffff888031d73fe0 R14: ffff888031d73fe0 R15: ffff888031d75080 [ 621.278510][T14807] ? __pfx_rxe_dealloc+0x10/0x10 [ 621.283445][T14807] ? rxe_pool_cleanup+0x40/0x60 [ 621.288312][T14807] ? rxe_pool_cleanup+0x40/0x60 [ 621.293159][T14807] rxe_dealloc+0x25/0xc0 [ 621.297393][T14807] ib_dealloc_device+0x49/0x230 [ 621.302240][T14807] __ib_unregister_device+0x396/0x480 [ 621.307609][T14807] ib_unregister_device_and_put+0x5a/0x80 [ 621.313324][T14807] nldev_dellink+0x21f/0x320 [ 621.317911][T14807] ? __pfx_nldev_dellink+0x10/0x10 [ 621.323025][T14807] ? __pfx___schedule+0x10/0x10 [ 621.327916][T14807] ? cap_capable+0xb3/0x250 [ 621.332428][T14807] ? bpf_lsm_capable+0x9/0x10 [ 621.337120][T14807] ? security_capable+0x7e/0x260 [ 621.342060][T14807] ? ns_capable+0xd7/0x110 [ 621.346477][T14807] ? __pfx_nldev_dellink+0x10/0x10 [ 621.351581][T14807] rdma_nl_rcv_msg+0x38a/0x6e0 [ 621.356356][T14807] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 621.361630][T14807] ? __lock_acquire+0x622/0x1c90 [ 621.366561][T14807] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 621.373019][T14807] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 621.379966][T14807] ? netlink_deliver_tap+0x1ae/0xd30 [ 621.385256][T14807] ? is_vmalloc_addr+0x86/0xa0 [ 621.390026][T14807] netlink_unicast+0x58a/0x850 [ 621.394805][T14807] ? __pfx_netlink_unicast+0x10/0x10 [ 621.400089][T14807] netlink_sendmsg+0x8d1/0xdd0 [ 621.404848][T14807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.410142][T14807] ____sys_sendmsg+0xa98/0xc70 [ 621.414891][T14807] ? copy_msghdr_from_user+0x10a/0x160 [ 621.420360][T14807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.425658][T14807] ? __pfx_futex_wake_mark+0x10/0x10 [ 621.430935][T14807] ___sys_sendmsg+0x134/0x1d0 [ 621.435600][T14807] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.440806][T14807] ? __lock_acquire+0x622/0x1c90 [ 621.445796][T14807] __sys_sendmsg+0x16d/0x220 [ 621.450382][T14807] ? __pfx___sys_sendmsg+0x10/0x10 [ 621.455478][T14807] ? __x64_sys_futex+0x1e0/0x4c0 [ 621.460430][T14807] do_syscall_64+0xcd/0x4c0 [ 621.464924][T14807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.470805][T14807] RIP: 0033:0x7f1d4c58e9a9 [ 621.475206][T14807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.494822][T14807] RSP: 002b:00007f1d4d356038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.503250][T14807] RAX: ffffffffffffffda RBX: 00007f1d4c7b6160 RCX: 00007f1d4c58e9a9 [ 621.511202][T14807] RDX: 0000000000008044 RSI: 0000200000000200 RDI: 0000000000000008 [ 621.519159][T14807] RBP: 00007f1d4c610d69 R08: 0000000000000000 R09: 0000000000000000 [ 621.527123][T14807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.535084][T14807] R13: 0000000000000000 R14: 00007f1d4c7b6160 R15: 00007ffe0b880f48 [ 621.543056][T14807] [ 621.546273][T14807] Kernel Offset: disabled [ 621.550581][T14807] Rebooting in 86400 seconds..