last executing test programs: 10.381614444s ago: executing program 4 (id=2058): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/rt_cache\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, 0x0, 0x4000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket(0x1e, 0x4, 0x0) r5 = openat$procfs(0xffffff9c, &(0x7f0000003a80)='/proc/partitions\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_usb_connect$uac1(0x3, 0x93, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000002040)='ns\x00') 8.323640653s ago: executing program 0 (id=2064): syz_open_dev$sndpcmc(&(0x7f0000000980), 0x800, 0x100) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="40180d000000eb7ad14ad707d5ff2b390300ef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x897, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x3c4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x81) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x138, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_team\x00', {}, 'macvlan0\x00', {}, 0x0, 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0xf00}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x8000) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7e, 0x20203843, 0x3, [0x2], [0x800, 0x0, 0x3], [0x101, 0x0, 0x0, 0xb1e5]}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0xf8, 0x60, 0xd0e0000, 0x0, 0x100, 0x1d0, 0x1d8, 0x1d8, 0x1d0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0xd8, 0xf8, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'vlan1\x00', 'rose0\x00', 0x4, 0x0, 0x50, 0x7, 0xffffffff, 0x8, {0x8}, {0xff}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0xff000000, 'batadv_slave_1\x00', 'macsec0\x00', {}, {0xff}, 0x89, 0x1, 0x1}, 0x9400, 0x70, 0xd8, 0x94}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x3, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="673d231729c3c05c12f1784c3c8f8bef18bcafcdbc3b71fff124d94f5ed9d5a7b24939901e5335323c7461bd36000a4eef9e43c14e48233958d104", 0x3b}, {&(0x7f0000000040)="03df2571e8e06bcaa27665f61c80bc15a8afefba107b6194194b60484837e897891defe9c001b805a78b14df4f558b876cdbc0e79d3f25de9e197dba64a94531063c26a7af8687bf89680ae6974bb799e859881ebf91330ebee217986d9de2d4517a09fec6798f09c675c87af4bbc6df56cf38331ea52020a08cc2777c157d53f3794c63d63e273f65d09d49900fb54d363dc2142491fc976e7698d68d023d64e3fba0c910f1a69033b0bcf7190bda07794ed03e3586de34e3", 0xb9}, {&(0x7f0000000100)="9ff8272de45204e3b7709512baede63f5e068d6563552728ac3143cc36e4693b0121ed598c5cc75116a396d12c046bcc87a1d02de5eded5324ddc8b5e98ea594c1541e2a0b67ba7ed31366ef01f11b10141b0ac30a7c54ab97f3858a92ec7cbcc375ee763b3ad197aa6ffc9ff3dff34a1a5d346ead1698bbf7c0170088893516d19dcdd0fdc51775c1f217652236140fe6ee4a1595800988b05779bc766a88484012b1202705c1eff8", 0xa9}, {&(0x7f00000002c0)="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", 0xfa}, {&(0x7f00000003c0)="1c211b33dc61a4c9fd2859d016bfd16a5aad7346d5779438c7eaf318d41a69a2b4e1d71f101d1c71c91cd0dd4c56e4d30a0d4b3a6730a963fe2cc8ded938cd1ceb3b0a36657e6e876a7ee680a94cdf64e3ef75871eaf316599c51be102faf9c5615ed4d14bb079d2", 0x68}, {&(0x7f0000000440)="577277c9458ed388b627fd2be9fe27a3adb90a6c83f0d61943ad2c08f37f99f23a988d0af6d800", 0x27}, {&(0x7f0000000480)="21f7ffde07fd663096b1a20b3040732797e3942a797c5900d7a4115307a6366f1ff19b6fc526c3da2f5400fbaf945dd3209fa1c6ad3c44269966a8068ded2a50e0de15f55991d72da50d24fb39d87209b18b6d6aa71bf703b384ae14ccfddcd859beebf232a93fda6b376d9dfe3b2cbb8b1b356325b2ca49668ae4eda6b407af98241ab7736494a1ae6a4166f9a153391f92f26c369709b18f1229b9b56a615527efb93e991996f5c217d6ea7030824f761698ad13c1", 0xb6}], 0x7, 0x3) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="fc00000016000104feffffff00000000fc0000000000000000000000000000006401010000100000000000000000000000001000"/64, @ANYRES32=0x0, @ANYBLOB="cf3a20ab38944d80802e60e95f77de0aae31bda4773d9100fe7075d7b4668d2956728384722e7ba1572d6308f5db6ad1d4490ceb1c6d57c4630d52242384c0294a9b338d59e4a4a0241f32d9b88b2313d2ecd498865706b80c28764bf76a83db293d07e82e5eedfaf75716b806fa50f826112510ab", @ANYBLOB="ac1414370000000000000000000000002000000033000000fc0100000000000000000000000000010300000000000000000000000000000005000000000000000100000000000000020000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000007f00000000000000000000000000000003000000feffffff0000000000000000d00000000000000008000000ffffffff04001b00"], 0xfc}}, 0x20004808) name_to_handle_at(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0c00060000000400"/20], &(0x7f0000000240), 0x200) 7.562886022s ago: executing program 3 (id=2065): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000340)={{0x80, 0x8}, 0x1, 0x2, 0xfa8, {0x55, 0xf}, 0x2, 0x926}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x303e, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0x2a9}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r8, 0x2219, 0x7721, 0x6, 0x0, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r3) ioctl$TCSBRKP(r1, 0x5425, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000023896) socket$netlink(0x10, 0x3, 0x0) 7.138981807s ago: executing program 4 (id=2067): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @any, 0x5}, 0xa) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, 0x0, &(0x7f0000000580)) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r6, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000340)=@sack_info={0x0, 0xfff, 0x9e}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x675, @dev={0xfe, 0x80, '\x00', 0x31}, 0x80000002}, 0x1c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x72bd28, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 6.515556943s ago: executing program 3 (id=2068): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000d40)='net/llc/socket\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x109880) mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x180) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.72562124s ago: executing program 3 (id=2073): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x2}) 4.721363221s ago: executing program 0 (id=2074): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xd, 0x0, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000180)=@arm64={0xfc, 0x81, 0x5, '\x00', 0xfffffffeffffffff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000853000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x4010, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f00006ff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x28}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000700001002abd7000fbdbdf2507000000", @ANYRES32=r6, @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 4.286274132s ago: executing program 4 (id=2075): open(0x0, 0x80140, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)={[], [], 0x2f}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000540)={0x9, 0x1ff, [{0x9, 0x0, 0x340}, {}, {0x2a5, 0x0, 0xc}, {0xc, 0x0, 0x3}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x4}, {0x9, 0x0, 0x100}, {0xff, 0x0, 0xffffffffffff7a62}, {0x9, 0x0, 0x10}, {0xffffffff, 0x0, 0x7f}, {0xd591, 0x0, 0x9}, {0x7, 0x0, 0x9}, {0xf5e, 0x0, 0xffff}, {0xe376, 0x0, 0x2}, {0x0, 0x0, 0x5}, {0x9, 0x0, 0xff}]}) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0x1a}, {0x0, 0x9}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 4.238260262s ago: executing program 3 (id=2077): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) 3.965407845s ago: executing program 1 (id=2081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18040000fdff8ae8706e3913ad07a61d1858042f7cda0dc4aadc4e7c77a7876cd818ffff000000000000000081b94c00000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x94) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0), 0x0, 0xa5, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.432454746s ago: executing program 3 (id=2082): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967", 0x9a}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b", 0xcd}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.38020998s ago: executing program 2 (id=2083): socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sysvipc/sem\x00', 0x0, 0x0) unshare(0x20040600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x800, 0x4000000000000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xfdff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xca, &(0x7f0000000340)=""/202, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x7, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x3ff, 0x10, 0x6, 0xd}, {0x0, 0xb, 0x5, 0xe66}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0xd649}, {0x6, 0x78, 0x2, 0x401}, {0xf13c, 0x7, 0x2, 0x8001}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e2100000000ffffffff0100000000000000feffffff000000000000000000000000dfe01daf2215441e03158d13a460e04aa48aad311933615a35945a2f97e078b020976e61aaa94dd1facf1b69d2863201cfe193f8c5db5d4e9103e43a58025bf2a7cca3575c001dbf7889eeaf8926cde76c038ebe9d1b05f77466b6b0f169f466b6ea5508ffc89c55a204b0c0083c7122b1e198b7bb1eddda27b25feab64872c3346b2c00824609975f8c9cfdde7d1b3afbbfd2f62041e53b818e02b69b145f5de26b6feefd7e2ab908f0675f3cbb20332a03815e286f13cffb871cdef45578ca34dd360db3706f77c629b1dd073c4a23aefe0f7338000000000000000000000000977c4b7670886e11262c602a8a62d1c684441e936e5da4c1e9d24ef91efcc900f15f5a1dedd5b78127589ec27a08913b0c41a1ee184c83c6387094357089ba0f7d372b40215138ffce92c64bdf27e373b8c3ca81e6a0379d7e0cb4a4ccf1a21dd7a1f401772bfb32bf6ee3f423ce891bc33c6de92a2a16b521c43ef6c56bb0f5367a6c109ea15ca0a5618e3e22a5a30d9849a068ed4a5a0d7613056cbed428d417fe7d729fc1108825608de7bc9b34e851ef8dc14a69843109a782013c9dc387cf987263dbf0fbb2c3950ade369278ca2ba0c3895640bc324afa729c3464990300"/521, @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030011000000"], 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01"], 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) unshare(0x40020000) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 3.28925537s ago: executing program 3 (id=2084): syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbb"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x9}, {0xd, 0x8}, {0xb}}}, 0x24}}, 0x20000000) sendto$packet(r0, &(0x7f0000000100)="947263f71180a9449318", 0xa, 0x0, &(0x7f0000000040)={0x11, 0x1c, r2, 0x1, 0x1, 0x6, @random}, 0x14) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f00000005c0)={0x0, 0xa, 0x2, "251a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1a00000004000000e27f00000100000040000000", @ANYRES32, @ANYBLOB="0800000000000000000000000000000000000500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) 2.769987435s ago: executing program 1 (id=2085): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @any, 0x5}, 0xa) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, 0x0, &(0x7f0000000580)) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r6, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000340)=@sack_info={0x0, 0xfff, 0x9e}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x675, @dev={0xfe, 0x80, '\x00', 0x31}, 0x80000002}, 0x1c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x72bd28, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 2.670094412s ago: executing program 4 (id=2086): socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x2000000) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00'}) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x24000041, &(0x7f0000000340)={0xa, 0x0, 0xab, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x20) (async) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) (async) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001800)=[{&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000200)=""/81, 0x51}, {0x0, 0xffffffffffffffaf}], 0x3, 0x8, 0x3}}], 0x48}, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000140)) (async) sendmmsg(r2, &(0x7f0000000040), 0x0, 0x20008000) 2.533666293s ago: executing program 4 (id=2087): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x2}) 2.46696134s ago: executing program 4 (id=2088): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x21, 0x90) memfd_create(0x0, 0xde932a8e875be35) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x1, 0x8, 0x7, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x7}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$clear(0x7, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = dup(r4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 2.431953454s ago: executing program 2 (id=2089): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x6, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x0, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.005286989s ago: executing program 2 (id=2090): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udplite\x00') pread64(r6, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) unlink(&(0x7f00000001c0)='./file0\x00') close(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000000)="ee", 0x1) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r2, 0x0, 0x0, 0xc806, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44004) semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000100)=""/257) r8 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000200)={0xff, 0x0, 0x8306, 0x9, 0x3ff, 0x0, 0x0, 0x293}, &(0x7f0000000000)=0x20) 1.522515872s ago: executing program 0 (id=2091): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x40000002, "fa02791d2a69a2610f02000000000000001100010000000800"}) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000000)) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x5, 0x9}) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r9, 0x4, 0x10001}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0xf0e0fc9000f8e609}) io_uring_enter(r1, 0x3, 0x6a4c, 0x67, 0x0, 0x0) 1.374482431s ago: executing program 1 (id=2092): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) 857.391588ms ago: executing program 1 (id=2093): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x7, 0xcae, 0x6, 0x1b, 0x7, 0x3420df9d, 0xfffffffc}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0xfff9, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x2, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0xffffffffffffffff, 0x40099d}}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000010401016c0c3f1900000000050000030a000200000000000200000005000100011f36231474f016481ba06538c991948d000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008081}, 0x4) 797.678126ms ago: executing program 0 (id=2094): open(0x0, 0x80140, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)={[], [], 0x2f}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000540)={0x9, 0x1ff, [{0x9, 0x0, 0x340}, {}, {0x2a5, 0x0, 0xc}, {0xc, 0x0, 0x3}, {0x5, 0x0, 0x1}, {0x2, 0x0, 0x4}, {0x9, 0x0, 0x100}, {0xff, 0x0, 0xffffffffffff7a62}, {0x9, 0x0, 0x10}, {0xffffffff, 0x0, 0x7f}, {0xd591, 0x0, 0x9}, {0x7, 0x0, 0x9}, {0xf5e, 0x0, 0xffff}, {0xe376, 0x0, 0x2}, {0x0, 0x0, 0x5}, {0x9, 0x0, 0xff}]}) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) 371.996525ms ago: executing program 2 (id=2095): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000003000000000500000008000100", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000004) 283.418024ms ago: executing program 1 (id=2096): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 201.720239ms ago: executing program 2 (id=2097): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x1, 0x0, 0x0, r1}) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x14, "3eccd8fd0000000000000010000000040100"}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c6153f600d3d4e8f99702f5fe4fa616a4f438a74c6dcaeec1ee84a29eb6fe9ac4b9582281be0c8f3e340f44d0dc372056ed4d", @ANYRES16=r2, @ANYBLOB="040029bd7000fddbdf25340000000c009900e80e0000220000001500340062eedc2ae700265703104145dfe147d8080000001400fe004d626ca276dec6631e9e42844bcddf590a00060008021100000100001400fe00510c38138e908aa639b6851ed8daedd10600fd00ff7f0000050020015e000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20049044) ioctl(r3, 0x8b22, &(0x7f0000000040)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) socket$netlink(0x10, 0x3, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000003280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003240)={&(0x7f0000002080)={{0x14}, [@NFT_MSG_DELOBJ={0x1bc, 0x14, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0xd2, 0x8, "da2c28950695556ff7ae052fa50c638b7e889e9e18b7228f5e9e1dd5dfa646098117badc75fee093716153d24f8cdfe859c7bae4d6941ba8526d0b9ac1185a4db5698bd68dda8b1ddf777c7e2ef33a2244a8e9da14e811bccd93ae01a43b4b95995b89307ac1ac8c6b73b528573812a569e60be539dee4e161096864040a8fe0369649fa52ca83b87f3262f7da662410bfe88ef4b8686e02a26f5dec95d116fed803895459c6c554703982c5a00ed7a2fbac80f7c071426767cd45bbe5ea459cbd3623ce83b35104ff1251814259"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xb4, 0x8, "9546bcf6b8ab5cd4ce62e419834c497e942c95b1e8c161fbcf588c114a27ce1853dd26827513fbea94a8d75c26023281d1e6586518f8764e2fe50f94be827f3540a0e914f877e3e52fa25d46979e04cc048aa5b202453b51c4d48360c29e04548005d0afb552f9c8eded1f63b3bcd42ad0c0c018ce93ce3753ad5c3c3b6e8f3fc9ee51e0a9bf4e862207177650c12a5706a92579d3beb655e2c6c44f2fee2aff9fdff1fbac16ed4320d378029c01dc16"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPR={0x58, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xd9}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x184, 0x0, 0xa, 0x200, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x72, 0x6, "53a43789b6e4e475730da4fe83f8dee2ecd250516a68ec2e59630f6a58ae0050bbd42ed5d620666d66aa53a917d3fd9b92b6f67ea4e868c220639f2ddef3495f86b14d6391e68cf2e7d5b0c95b8bc44375191b71aabe4df2d3140676c8dc236d80f220a592a46a40fc143c671108"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xd2, 0x6, "dfd977b25d8e1c45efd7632176bb9cb982ec22038b1fde3bf70dd0830b6b9856da739a405482fe872073434ae3b3f21f0a3753beb1a571e6bbf6bd8f7ebe7ed0b5f85d7d4da476dfdfe73113b48652cf09d2fdee0fb9e4183c6f0efe1472b9768d784247ef38cec7f79fea53ed8c0eb94845fc849edd70d92ea94b4796e4deab9315423cde36e9b42528609dc670e6fe459f8f257c3a29ad4628f7dda1ab5c5c8cf643bd15a00fb74d1069a22f3ada1511e27720d6aa918e3bf3225682c1ba0daeb69f786330c67eed94eb9d0c7b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x214, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x1d4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}]}]}, @NFT_MSG_NEWSET={0x1e0, 0x9, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x1a0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x13c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfc000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb5894a6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x60, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbca}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x69}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}]}]}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2b}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x75}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x920, 0xc, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3b4, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7e}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x2c, 0x6, 0x1, 0x0, "3c2f63b94572ad80bd5ac80e0f875e8102ca9206ba4c5dbec1984f76b7d86c8796570be048e96dd7"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffff}]}, {0x1e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xeb, 0x6, 0x1, 0x0, "e1fefae384efc8f207d68720aa3974b9b46d5a5880127b38e343839497a7d1e32830caca63ecc12b48831b23181bf20e95a4135394267334302b5e1e99a01c9dd8bef40b4d2db9d4e8fc3fed7844235f74fbe61d559a50f64bb6b7ce0bb86aa46c78519ad72cb0ad81692ac69af3c73f9b9d5741bc8e9668ca765bdc1bc071311817b86a4c9bb811ec54ec51748a04bf442994e3d35afa1610a72473d9925448e47421f8b65db168f0f2d1ebd0baa8820bab96929173b834f983ac675b5cdb6685948f1fc6d8541078c07ac08acaeb256ddf9098285ebd99c35b506a5d15a9cf99a91f41849dfd"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0xac, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa6, 0x1, "2d43231053669d971234eb13d7e7e5e2105d53fb76748b10330cdf6659c2d50f761b7bdaf23bb6534b2b8df84a506b5b5c31690069c412099cefedc887a59f4e0ae29c61d30c1c238264517512fd46be9f29199a7d419c5627cefcd6e2c9d5fbcab6f7242595c76b6caef0664f9e1d61a794fb04c7215cbeedaad4f77b17abd68cde0a7173dacc9dcee312151651908d2e231dc2c0393ce6ce32446d5e57045750c5"}]}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x18, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}, {0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xad, 0x6, 0x1, 0x0, "e7ab18ceca2fe878e8c6a873f4b4b668d4b7242f0eb6160db3fa55d3cc3b898fc0526aa6b45fdbbe5df8e88d7d74130e2c7c6adb13219f27260c4c097df5c03132695640b659c95ccce990bd99263d405a0da96262aedc0cef5fa616fbf847f5257789698c065ca88920714be717c9f05f7a0f1e4a1e9759c5f3c98b479083ec76dc55b3e229bd9c0958fdda23181ada8ca6bdaa33a4c16a2682559ceecb7fbbbe09dfc8fb49726dba"}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x44, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x524, 0x3, 0x0, 0x1, [{0x520, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x9f, 0x6, 0x1, 0x0, "c20e36e78bc4f97d9d57a7c511de0e808c196ac7830880913323f08742bdb0c63cb0f728ed823b441713d00a5e86017ed766b3abb3160c551f696bca8799cee9648b56d81ca516be1b95cef6afd5c9ea2312e9e38864ecf522d40899f9a714c405226ee9cfe18481837c65f27396e38751cc73b61579a302949229d3e02dd836d4dd64027ae7b9bd2d51b140d99effd5958af83d594ead111e5784"}, @NFTA_SET_ELEM_KEY_END={0xbc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb8, 0x1, "4beed0a6a648eba3aabeba299688590c07b1dd8da8e7a61200c8c5795d32f963788a0fc4e2740d6baf010a9abc58a6b6a71af4499e0c531df54f3d6dfac930ea61fd43afb1fd7f8ce7e6dda893a7e562f4cfb31bb362ce5b2fd8674a0760e25d0646df8ee196b4b34254c980abacb8a5ac4f72cbd3078c0681002f5b89cdcd474a9f81c7c5887750024ae103bf74d69d5efdc4190e830b9544fd262aa40c8657f3ce25b4676862861219c3c4498fd85ee5d91796"}]}, @NFTA_SET_ELEM_USERDATA={0x91, 0x6, 0x1, 0x0, "1241e1eb591d4f5bdf2ba0dce1522c92cf525661b7a82df478301c5b474d07b75f8289c3c874f9d560cdb363a07f42dd893c40c1d8dfa24aabc5c54e061b69b1a9ac97657f5bfa1a9b4d45c313589f13c4187da8bbb93663e212e0ea18c7d2f9eb08e813a13d34bee39e5af6ee3d02c6beffbf21142f352d5b24349f6184a9daa3c44e01e0e7132954e3a0e2c6"}, @NFTA_SET_ELEM_USERDATA={0xec, 0x6, 0x1, 0x0, "079bad8b2197a7c17284663eda8a235ef53670505199daea96702ad05b2bd07401859f7664ece8e1466b303d2f3ed28a82d02e8aad3d258d5263906f66a92e3c63d4725bf34682d551abdeb0f5cb85dbe243d5549b936b01d664ef3f5293fa9be08924ae4b5f4b3b74aa8658c5c0e9a9d294335eb14add258e1b5fdcfadac4ea6beb51724b676e5e8da78fdd89f83fd99dfbbf40c5828fa35dc6246d6b0b369fcf1d9363402b554c318ae4cd336259e5d896fa3718a2759a18f13f7c9b8c34fc51757dcf223447ecd7d75dc181ade75f2c3c3db3c8d58576cea0189f6ca11e62b7a3d1c6e8b67f87"}, @NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x38}]}}}]}, @NFTA_SET_ELEM_DATA={0x168, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc8, 0x1, "d6577822f665e6d6b17931949b1a1f0611019b1c6b8352857d1c084ca4ea05ef09e8c3e06a459ef8aa0ba2b9f3aad8e7caadeb9bdf9f0332da10c6aa10b66e29bd03f9c833f6dc3e205c01b5bd4850dd66ba6222f2f6ca0f6d1054d116b34f7724de679a42d839afe74a30654884537cbffad81b02c5ad0c99a0f3898f9ca0e4e4232d4d3748906f67e7f73e8ab4024376ad20fd6dccdb5fca3784c44a6efa80ec5d857dcffb922ca32f49fd8ac09c7011874fd55281dc1b248c680f452302fb40fd1231"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @exthdr={{0xb}, @void}}]}]}]}], {0x14}}, 0x1188}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffc5a}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000680)={r9, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, 0x0, r9, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfff8, 0xfffe, 0xfffffffc, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f0000000040)) 201.280691ms ago: executing program 0 (id=2098): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 164.948885ms ago: executing program 1 (id=2099): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0}, 0x1, 0x1, {}, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sysinfo(&(0x7f0000000000)=""/196) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='net_cls.classid\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000280), 0x12) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x3, @sliced={0x0, [0x886, 0x4, 0xc, 0x8001, 0x6, 0xa, 0x7fff, 0x5, 0x40, 0x9, 0x3, 0x9, 0x1000, 0x3, 0x4, 0x8, 0x3, 0x10, 0x1, 0x8, 0x4, 0x9, 0x7, 0xa61, 0x9, 0x2, 0x0, 0x7, 0x1, 0x7, 0x5, 0x131, 0x3, 0x0, 0x8, 0x8, 0x3, 0x4, 0x581e, 0xfffc, 0x8, 0x8, 0x4f2, 0x3, 0x7fff, 0x10f, 0x10, 0xb3], 0x8}}) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x0, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, '\x00\x00\x00\x00'}}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1800000004140100"], 0x18}, 0x1, 0x0, 0x0, 0x20004004}, 0x8002) sysinfo(&(0x7f0000000180)=""/114) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xfffffffd, 0x14, "3eccd8fd0000000000000010000000040100"}) fremovexattr(r3, &(0x7f0000000480)=@random={'os2.', '\x00'}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f000000000000001c0012800b40000000000000006500000c0002800500170000000000"], 0x3c}}, 0x0) 66.785461ms ago: executing program 0 (id=2100): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$vbi(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000240001082dbd7000f2db"], 0x1c}}, 0x40050) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x40000008}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(r3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xdd4, r5, 0x4}, 0x38) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000200)={0x12, {{0x29, 0x0, 0x3b000000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}}, 0x88) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x0) 0s ago: executing program 2 (id=2101): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026, r1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x2000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdbdf25027c00000cb9fd72c32d9e5e2fa29c79"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0xdddd1000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xbf}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000, 0x80f3}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf001, 0xd000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): 368.578527][ T5814] usb 5-1: Product: syz [ 368.583690][ T5814] usb 5-1: Manufacturer: syz [ 368.588851][ T5814] usb 5-1: SerialNumber: syz [ 368.655054][ T5814] usb 5-1: config 0 descriptor?? [ 368.884688][ T5814] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 369.180086][T10539] netlink: 'syz.0.1324': attribute type 12 has an invalid length. [ 369.342236][ T5814] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 369.407654][ T5814] usb 5-1: USB disconnect, device number 39 [ 369.565264][ T29] audit: type=1400 audit(1775942258.133:717): avc: denied { ioctl } for pid=10526 comm="syz.4.1319" path="socket:[30379]" dev="sockfs" ino=30379 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 370.223537][ T29] audit: type=1400 audit(1775942258.793:718): avc: denied { shutdown } for pid=10559 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 370.357479][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035de4000: rx timeout, send abort [ 370.644506][T10577] netlink: 'syz.0.1336': attribute type 12 has an invalid length. [ 370.865743][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035de4000: abort rx timeout. Force session deactivation [ 371.536869][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 371.537336][T10601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1342'. [ 371.547757][T10600] overlayfs: failed to resolve './file1': -2 [ 371.614900][ T29] audit: type=1400 audit(1775942260.103:719): avc: denied { nlmsg_read } for pid=10588 comm="syz.4.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 371.675355][T10603] fuse: Bad value for 'fd' [ 372.072220][T10611] No such timeout policy "syz0" [ 372.660753][ T5938] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 372.962745][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.970172][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.034881][ T5938] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 373.047324][ T5938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.057725][ T5938] usb 5-1: config 0 has no interfaces? [ 373.069690][ T5938] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 373.084066][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.098885][ T5938] usb 5-1: config 0 descriptor?? [ 373.196808][T10617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.444342][T10625] netlink: 'syz.1.1351': attribute type 12 has an invalid length. [ 373.613794][T10628] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 373.620624][T10628] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 373.638650][T10628] vhci_hcd vhci_hcd.0: Device attached [ 373.870742][ T9] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 374.211924][T10629] vhci_hcd: connection reset by peer [ 374.221797][ T7451] vhci_hcd vhci_hcd.1: stop threads [ 374.233236][ T7451] vhci_hcd vhci_hcd.1: release socket [ 374.241739][ T7451] vhci_hcd vhci_hcd.1: disconnect device [ 374.536706][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ad70c00: rx timeout, send abort [ 374.663300][T10643] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1357'. [ 374.940672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 375.044945][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ad70c00: abort rx timeout. Force session deactivation [ 375.379473][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1358'. [ 375.390671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 375.400855][T10645] overlayfs: failed to resolve './file1': -2 [ 375.487546][T10652] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 375.499389][ T5938] usb 5-1: string descriptor 0 read error: -71 [ 375.507880][ T5938] usb 5-1: USB disconnect, device number 40 [ 375.878492][ T29] audit: type=1400 audit(1775942264.283:720): avc: denied { write } for pid=10651 comm="syz.3.1361" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 376.999808][ T29] audit: type=1400 audit(1775942265.483:721): avc: denied { bind } for pid=10665 comm="syz.2.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 377.066582][T10678] fuse: Bad value for 'fd' [ 377.442151][T10687] No such timeout policy "syz0" [ 378.157395][ T29] audit: type=1400 audit(1775942266.723:722): avc: denied { ioctl } for pid=10690 comm="syz.3.1372" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 378.185243][T10695] binder: 10690:10695 ioctl 4018620d 0 returned -22 [ 378.200793][ T29] audit: type=1400 audit(1775942266.723:723): avc: denied { set_context_mgr } for pid=10690 comm="syz.3.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 378.266412][ T29] audit: type=1400 audit(1775942266.753:724): avc: denied { map } for pid=10690 comm="syz.3.1372" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 378.929355][T10699] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1374'. [ 379.066765][ T29] audit: type=1400 audit(1775942267.633:725): avc: denied { name_connect } for pid=10698 comm="syz.3.1374" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 379.255105][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 379.397403][ T29] audit: type=1400 audit(1775942267.963:726): avc: denied { block_suspend } for pid=10706 comm="syz.4.1376" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 379.474838][ T29] audit: type=1400 audit(1775942268.043:727): avc: denied { watch watch_reads } for pid=10704 comm="syz.1.1375" path="/282" dev="tmpfs" ino=1547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 379.882646][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a217c00: rx timeout, send abort [ 380.058461][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1377'. [ 380.147913][T10713] overlayfs: failed to resolve './file1': -2 [ 380.390857][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a217c00: abort rx timeout. Force session deactivation [ 380.521378][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'. [ 380.531055][T10720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1381'. [ 380.869853][T10721] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1381'. [ 380.880451][T10721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1381'. [ 381.999480][ T29] audit: type=1400 audit(1775942270.563:728): avc: denied { write } for pid=10743 comm="syz.3.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.114159][ T29] audit: type=1400 audit(1775942270.673:729): avc: denied { checkpoint_restore } for pid=10747 comm="syz.3.1390" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 382.611880][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'. [ 382.622033][T10750] overlayfs: failed to resolve './file1': -2 [ 383.040935][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 383.211028][ T9] usb 5-1: device descriptor read/64, error -71 [ 383.244690][T10767] fuse: Bad value for 'fd' [ 383.470741][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 383.623743][ T9] usb 5-1: device descriptor read/64, error -71 [ 383.751272][ T9] usb usb5-port1: attempt power cycle [ 383.821076][ T29] audit: type=1400 audit(1775942272.393:730): avc: denied { create } for pid=10770 comm="syz.3.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 384.067941][ T29] audit: type=1400 audit(1775942272.633:731): avc: denied { getopt } for pid=10777 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 384.097689][ T29] audit: type=1400 audit(1775942272.663:732): avc: denied { ioctl } for pid=10777 comm="syz.2.1401" path="socket:[31883]" dev="sockfs" ino=31883 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 384.132345][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 384.151251][ T9] usb 5-1: device descriptor read/8, error -71 [ 384.473960][T10792] fuse: Bad value for 'fd' [ 384.511007][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 384.531465][ T9] usb 5-1: device descriptor read/8, error -71 [ 384.688127][ T9] usb usb5-port1: unable to enumerate USB device [ 384.741356][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059cfe400: rx timeout, send abort [ 385.081024][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 385.249616][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059cfe400: abort rx timeout. Force session deactivation [ 385.291790][ T29] audit: type=1400 audit(1775942273.863:733): avc: denied { read } for pid=10812 comm="syz.3.1413" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 386.265360][ T9] usb 2-1: device descriptor read/64, error -71 [ 386.271782][ T29] audit: type=1400 audit(1775942273.863:734): avc: denied { open } for pid=10812 comm="syz.3.1413" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 386.455500][ T29] audit: type=1400 audit(1775942275.023:735): avc: denied { read } for pid=10815 comm="syz.0.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 386.481467][ T29] audit: type=1400 audit(1775942275.053:736): avc: denied { ioctl } for pid=10812 comm="syz.3.1413" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 386.511256][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 386.533240][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1414'. [ 386.635064][T10824] fuse: Unknown parameter 'group_id00000000000000000000' [ 386.651219][ T9] usb 2-1: device descriptor read/64, error -71 [ 386.764138][ T9] usb usb2-port1: attempt power cycle [ 387.140926][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 387.171269][ T9] usb 2-1: device descriptor read/8, error -71 [ 387.369269][ T29] audit: type=1400 audit(1775942275.933:737): avc: denied { ioctl } for pid=10837 comm="syz.0.1422" path="socket:[31350]" dev="sockfs" ino=31350 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 387.425736][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 387.488630][ T9] usb 2-1: device descriptor read/8, error -71 [ 387.594709][ T29] audit: type=1400 audit(1775942276.163:738): avc: denied { append } for pid=10843 comm="syz.3.1425" name="demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 387.700461][ T9] usb usb2-port1: unable to enumerate USB device [ 388.553138][ T5879] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 388.570542][ T29] audit: type=1400 audit(1775942276.163:739): avc: denied { setopt } for pid=10843 comm="syz.3.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.590186][ T5879] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 388.650524][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'. [ 388.661947][T10853] overlayfs: failed to resolve './file1': -2 [ 388.669814][ T5879] usb 4-1: USB disconnect, device number 33 [ 388.675830][ T29] audit: type=1400 audit(1775942276.163:740): avc: denied { write } for pid=10843 comm="syz.3.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.799698][T10860] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1429'. [ 388.809941][T10860] syzkaller0: entered promiscuous mode [ 388.815552][T10860] syzkaller0: entered allmulticast mode [ 389.186246][T10864] batman_adv: batadv0: Adding interface: macvtap1 [ 389.192814][T10864] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.218679][T10864] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 389.430810][ T5879] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 389.800958][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 389.807715][ T5879] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 389.816213][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.827528][ T5879] usb 5-1: config 0 has no interface number 0 [ 389.837200][ T5879] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 389.846686][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.856496][ T5879] usb 5-1: Product: syz [ 389.864919][ T5879] usb 5-1: Manufacturer: syz [ 389.869673][ T5879] usb 5-1: SerialNumber: syz [ 389.877299][ T5879] usb 5-1: config 0 descriptor?? [ 389.888054][ T5879] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 389.896620][ T5879] uvcvideo 5-1:0.105: No valid video chain found. [ 390.284623][ T5814] usb 5-1: USB disconnect, device number 45 [ 391.423059][ T29] audit: type=1400 audit(1775942279.993:741): avc: denied { bind } for pid=10894 comm="syz.3.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 391.445818][T10895] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1439'. [ 392.113915][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1441'. [ 392.128731][T10903] overlayfs: failed to resolve './file1': -2 [ 392.409190][ T29] audit: type=1400 audit(1775942280.973:742): avc: denied { write } for pid=10905 comm="syz.4.1442" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 392.410007][T10906] input: syz0 as /devices/virtual/input/input23 [ 392.700782][ T930] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 392.831219][ T930] usb 5-1: device descriptor read/64, error -71 [ 392.887746][ T29] audit: type=1400 audit(1775942281.453:743): avc: denied { setopt } for pid=10917 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 392.920062][T10915] lo speed is unknown, defaulting to 1000 [ 392.927439][ T29] audit: type=1400 audit(1775942281.463:744): avc: denied { create } for pid=10917 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 392.961999][T10924] fuse: Bad value for 'user_id' [ 392.993971][T10924] fuse: Bad value for 'user_id' [ 393.054855][ T29] audit: type=1400 audit(1775942281.463:745): avc: denied { getopt } for pid=10917 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 393.120925][ T930] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 393.193482][ T29] audit: type=1400 audit(1775942281.763:746): avc: denied { read write } for pid=10929 comm="syz.1.1451" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 393.261292][ T29] audit: type=1400 audit(1775942281.763:747): avc: denied { open } for pid=10929 comm="syz.1.1451" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 393.285219][ T930] usb 5-1: device descriptor read/64, error -71 [ 393.362667][ T29] audit: type=1400 audit(1775942281.903:748): avc: denied { ioctl } for pid=10929 comm="syz.1.1451" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 393.422522][ T930] usb usb5-port1: attempt power cycle [ 393.601409][T10936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1451'. [ 393.859077][T10942] ubi: mtd0 is already attached to ubi31 [ 394.247361][ T29] audit: type=1400 audit(1775942282.423:749): avc: denied { append } for pid=10937 comm="syz.3.1452" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 394.271136][ T930] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 394.330773][ T930] usb 5-1: device descriptor read/8, error -71 [ 394.510790][ T5814] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 394.592353][ T930] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 394.622619][ T930] usb 5-1: device descriptor read/8, error -71 [ 394.693854][ T5814] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 394.710763][ T5814] usb 4-1: config 160 has no interface number 0 [ 394.717075][ T5814] usb 4-1: config 160 interface 200 has no altsetting 0 [ 394.741350][ T930] usb usb5-port1: unable to enumerate USB device [ 394.749722][ T5814] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 394.771288][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.786003][ T29] audit: type=1400 audit(1775942283.343:750): avc: denied { create } for pid=10956 comm="syz.0.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 394.812172][ T5814] usb 4-1: Product: syz [ 394.818710][ T5814] usb 4-1: Manufacturer: syz [ 394.827707][ T5814] usb 4-1: SerialNumber: syz [ 395.233330][T10971] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 395.583615][T10976] mkiss: ax0: crc mode is auto. [ 395.605277][ T29] audit: type=1400 audit(1775942284.173:751): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 395.839160][T10983] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 395.839160][T10983] The task syz.1.1463 (10983) triggered the difference, watch for misbehavior. [ 396.301629][ T930] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 396.462588][ T930] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 396.471364][ T930] usb 2-1: config 0 has no interface number 0 [ 396.477714][ T930] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 396.490285][ T930] usb 2-1: config 0 interface 11 has no altsetting 0 [ 396.499563][ T930] usb 2-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 396.520344][ T930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.542672][ T930] usb 2-1: config 0 descriptor?? [ 396.558067][T10983] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 396.568781][ T930] keyspan 2-1:0.11: Keyspan 4 port adapter converter detected [ 396.589405][ T930] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 396.612667][ T930] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 396.651190][ T930] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 396.740373][ T5814] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 396.758431][ T930] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 396.779398][ T5814] usb 4-1: MIDIStreaming interface descriptor not found [ 396.796928][ T930] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 396.839037][ T930] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 397.619107][ T930] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 397.679424][ T930] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 397.760564][ T5814] usb 4-1: USB disconnect, device number 34 [ 397.777206][ T930] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 397.848673][ T930] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 397.879548][ T930] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 397.918354][ T930] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 397.927748][T11008] fuse: Unknown parameter 'fd0x0000000000000003' [ 398.685696][ T9] usb 2-1: USB disconnect, device number 50 [ 398.695447][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 398.737957][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 398.797821][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 398.843539][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 398.860978][ T9] keyspan 2-1:0.11: device disconnected [ 398.951869][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 399.010856][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 399.010875][ T29] audit: type=1400 audit(1775942287.543:755): avc: denied { mount } for pid=11018 comm="syz.1.1476" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 399.286392][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.366636][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 399.496214][ T29] audit: type=1400 audit(1775942288.043:756): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 399.529052][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.549937][ T10] usb 4-1: config 0 descriptor?? [ 399.570063][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 399.586243][T11031] netlink: 'syz.1.1480': attribute type 12 has an invalid length. [ 399.612681][ T29] audit: type=1400 audit(1775942288.183:757): avc: denied { mount } for pid=11033 comm="syz.2.1482" name="/" dev="mqueue" ino=5207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 399.721279][T11039] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 399.892351][T11043] ubi: mtd0 is already attached to ubi31 [ 400.202538][ T930] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 400.492121][ T930] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 400.509023][ T930] usb 5-1: config 160 has no interface number 0 [ 400.515685][ T930] usb 5-1: config 160 interface 200 has no altsetting 0 [ 400.526952][ T930] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 400.536252][ T930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.545869][ T930] usb 5-1: Product: syz [ 400.550510][ T930] usb 5-1: Manufacturer: syz [ 400.555383][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 400.555706][ T930] usb 5-1: SerialNumber: syz [ 400.569842][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 400.587851][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 400.599651][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 400.812212][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 400.869063][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 400.876384][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 400.884003][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 401.098071][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 401.106562][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 401.114300][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 401.125088][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 401.135721][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 401.142855][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 401.152255][ T10] pwc: Registered as video103. [ 401.158906][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 401.174303][ T10] usb 4-1: USB disconnect, device number 35 [ 401.340307][T11060] lo speed is unknown, defaulting to 1000 [ 401.697064][T11063] overlayfs: failed to clone upperpath [ 402.009415][ T29] audit: type=1400 audit(1775942290.563:758): avc: denied { create } for pid=11065 comm="syz.3.1491" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 402.190018][T11076] netlink: 'syz.0.1494': attribute type 12 has an invalid length. [ 402.233462][T11078] fuse: Bad value for 'fd' [ 402.660017][ T29] audit: type=1400 audit(1775942291.223:759): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file5" dev="tmpfs" ino=1617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 402.684125][ T930] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.692301][ T930] usb 5-1: MIDIStreaming interface descriptor not found [ 402.754374][T11085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1498'. [ 402.789774][ T930] usb 5-1: USB disconnect, device number 50 [ 402.799902][T11085] ip6gre1: entered promiscuous mode [ 402.851401][T11085] ip6gre1: entered allmulticast mode [ 402.936606][T11085] netlink: 'syz.3.1498': attribute type 6 has an invalid length. [ 402.944556][T11085] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1498'. [ 402.992813][ T29] audit: type=1400 audit(1775942291.553:760): avc: denied { connect } for pid=11083 comm="syz.3.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 403.051114][ T29] audit: type=1400 audit(1775942291.553:761): avc: denied { ioctl } for pid=11083 comm="syz.3.1498" path="socket:[32503]" dev="sockfs" ino=32503 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 403.569655][T11109] netlink: 'syz.4.1505': attribute type 12 has an invalid length. [ 403.603873][T11105] SELinux: failed to load policy [ 403.837284][ T29] audit: type=1400 audit(1775942292.403:762): avc: denied { mount } for pid=11115 comm="syz.1.1507" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 404.826786][T11123] ubi: mtd0 is already attached to ubi31 [ 405.120813][ T5814] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 405.254433][T11131] fuse: Bad value for 'fd' [ 405.372953][ T5814] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 405.381875][ T5814] usb 5-1: config 160 has no interface number 0 [ 405.815499][ T5814] usb 5-1: config 160 interface 200 has no altsetting 0 [ 405.824818][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1514'. [ 405.835428][T11144] overlayfs: failed to resolve './file1': -2 [ 406.650960][ T5814] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 406.680995][T11151] netlink: 'syz.3.1516': attribute type 12 has an invalid length. [ 406.720500][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.753718][ T5814] usb 5-1: Product: syz [ 406.767881][ T5814] usb 5-1: Manufacturer: syz [ 406.786912][ T5814] usb 5-1: SerialNumber: syz [ 406.831602][T11153] SELinux: failed to load policy [ 407.688972][T11166] lo speed is unknown, defaulting to 1000 [ 407.810743][T11124] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 407.914857][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1520'. [ 407.961328][T11124] usb 4-1: no configurations [ 407.966017][T11124] usb 4-1: can't read configurations, error -22 [ 408.087097][ T5814] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 408.099028][ T5814] usb 5-1: MIDIStreaming interface descriptor not found [ 408.141715][T11124] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 408.196588][T11180] fuse: Bad value for 'fd' [ 408.216976][ T5814] usb 5-1: USB disconnect, device number 51 [ 408.289501][ T6027] udevd[6027]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.307300][T11124] usb 4-1: no configurations [ 408.731576][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'. [ 408.732197][T11124] usb 4-1: can't read configurations, error -22 [ 408.844525][T11186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1526'. [ 408.866736][T11186] overlayfs: failed to resolve './file1': -2 [ 409.000031][T11124] usb usb4-port1: attempt power cycle [ 409.113062][T11189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.126149][T11189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.212214][T11197] fuse: Bad value for 'fd' [ 409.311271][ T5814] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 409.351082][T11165] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 409.370947][T11124] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 409.401813][T11124] usb 4-1: no configurations [ 409.406414][T11124] usb 4-1: can't read configurations, error -22 [ 409.483974][ T5814] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 409.492215][ T5814] usb 2-1: config 0 has no interface number 0 [ 409.498569][ T5814] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 409.510110][ T5814] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 409.520974][ T5814] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 409.560778][T11124] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 409.581338][ T5814] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 409.593652][T11124] usb 4-1: no configurations [ 409.598239][T11124] usb 4-1: can't read configurations, error -22 [ 409.606527][T11124] usb usb4-port1: unable to enumerate USB device [ 409.615825][ T5814] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 409.627128][ T5814] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 409.640616][ T5814] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 409.649852][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.667662][ T5814] usb 2-1: config 0 descriptor?? [ 409.676643][T11191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 409.686463][T11191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 409.700175][ T5814] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 409.947475][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 410.635879][ T5865] usb 2-1: USB disconnect, device number 51 [ 410.657461][ T5865] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 410.868805][T11216] fuse: Bad value for 'fd' [ 410.871605][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1537'. [ 412.977557][T11247] kAFS: unparsable volume name [ 413.027499][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a7d8800: rx timeout, send abort [ 413.346832][T11256] lo speed is unknown, defaulting to 1000 [ 413.535739][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a7d8800: abort rx timeout. Force session deactivation [ 414.044364][T11264] netlink: 'syz.4.1552': attribute type 29 has an invalid length. [ 414.201072][T11266] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=10150 sclass=netlink_xfrm_socket pid=11266 comm=syz.1.1553 [ 414.285804][T11267] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 414.431962][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 414.652585][ T10] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 414.661626][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.681540][ T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 414.700698][ T10] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 414.723737][ T10] usb 5-1: Manufacturer: syz [ 414.750352][ T10] usb 5-1: config 0 descriptor?? [ 414.820882][ T10] rc_core: IR keymap rc-hauppauge not found [ 414.826830][ T10] Registered IR keymap rc-empty [ 414.835754][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 414.857418][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 415.130391][T11279] overlayfs: missing 'lowerdir' [ 417.023310][ T5814] usb 5-1: USB disconnect, device number 52 [ 417.477219][T11286] ubi: mtd0 is already attached to ubi31 [ 417.896470][T11289] netlink: 'syz.4.1559': attribute type 12 has an invalid length. [ 417.952317][ T5814] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 418.142337][ T5814] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 418.151784][ T5814] usb 2-1: config 160 has no interface number 0 [ 418.158179][ T5814] usb 2-1: config 160 interface 200 has no altsetting 0 [ 418.171294][ T5814] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 418.192305][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.200393][ T5814] usb 2-1: Product: syz [ 418.205508][ T5814] usb 2-1: Manufacturer: syz [ 418.210159][ T5814] usb 2-1: SerialNumber: syz [ 418.253398][T11307] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1566'. [ 418.290336][T11307] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1566'. [ 418.365221][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'. [ 418.784820][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'. [ 418.826103][T11314] : entered promiscuous mode [ 419.278198][ T29] audit: type=1400 audit(1775942307.843:763): avc: denied { connect } for pid=11326 comm="syz.3.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 419.493282][T11330] SQUASHFS error: Failed to read block 0x0: -5 [ 419.766611][T11332] lo speed is unknown, defaulting to 1000 [ 420.166747][T11337] lo speed is unknown, defaulting to 1000 [ 420.368709][ T5814] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 420.388722][ T5814] usb 2-1: MIDIStreaming interface descriptor not found [ 420.856832][ T29] audit: type=1400 audit(1775942309.423:764): avc: denied { read write } for pid=11347 comm="syz.1.1577" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 420.936005][ T5814] usb 2-1: USB disconnect, device number 52 [ 420.966218][ T29] audit: type=1400 audit(1775942309.423:765): avc: denied { open } for pid=11347 comm="syz.1.1577" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 421.274271][ T6027] udevd[6027]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.378822][T11355] syzkaller1: entered promiscuous mode [ 421.385197][T11355] syzkaller1: entered allmulticast mode [ 421.551866][ T29] audit: type=1400 audit(1775942310.103:766): avc: denied { ioctl } for pid=11347 comm="syz.1.1577" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 422.790754][ T5938] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 424.186709][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 424.266289][T11366] overlayfs: failed to resolve './file1': -2 [ 424.369940][ T5938] usb 2-1: device descriptor read/all, error -71 [ 424.387998][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1580'. [ 424.562840][ T29] audit: type=1326 audit(1775942313.133:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.0.1585" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe515d9c819 code=0x0 [ 425.210811][ T29] audit: type=1400 audit(1775942313.583:768): avc: denied { watch } for pid=11383 comm="syz.1.1589" path="/315/file1" dev="tmpfs" ino=1732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 425.380522][ T29] audit: type=1400 audit(1775942313.583:769): avc: denied { watch_sb watch_reads } for pid=11383 comm="syz.1.1589" path="/315/file1" dev="tmpfs" ino=1732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 426.098312][T11401] lo speed is unknown, defaulting to 1000 [ 426.521104][T11408] random: crng reseeded on system resumption [ 426.530574][ T29] audit: type=1400 audit(1775942315.093:770): avc: denied { write } for pid=11406 comm="syz.1.1593" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 426.670783][ T29] audit: type=1400 audit(1775942315.093:771): avc: denied { open } for pid=11406 comm="syz.1.1593" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 426.776872][ T29] audit: type=1400 audit(1775942315.273:772): avc: denied { ioctl } for pid=11406 comm="syz.1.1593" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 426.890829][T11124] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 426.914803][T11421] lo speed is unknown, defaulting to 1000 [ 427.030756][T11124] usb 2-1: device descriptor read/64, error -71 [ 427.325573][T11124] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 427.471039][T11124] usb 2-1: device descriptor read/64, error -71 [ 427.545348][ T29] audit: type=1400 audit(1775942316.113:773): avc: denied { read } for pid=11434 comm="syz.4.1601" dev="sockfs" ino=35052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 427.584712][T11124] usb usb2-port1: attempt power cycle [ 427.894344][T11448] 8021q: VLANs not supported on ip_vti0 [ 427.903236][T11448] netlink: 'syz.3.1604': attribute type 21 has an invalid length. [ 427.911863][T11448] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1604'. [ 427.932045][T11124] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 427.941242][T11448] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1604'. [ 427.980487][ T29] audit: type=1400 audit(1775942316.543:774): avc: denied { read } for pid=11446 comm="syz.3.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 428.004934][T11124] usb 2-1: device descriptor read/8, error -71 [ 428.350857][T11124] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 428.382679][T11124] usb 2-1: device descriptor read/8, error -71 [ 428.528454][T11124] usb usb2-port1: unable to enumerate USB device [ 429.135385][ T29] audit: type=1400 audit(1775942317.673:775): avc: denied { bind } for pid=11455 comm="syz.0.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 429.886247][T11473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=11473 comm=syz.4.1611 [ 430.050219][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 430.064330][T11480] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.1615'. [ 430.073822][ T29] audit: type=1400 audit(1775942574.613:776): avc: denied { bind } for pid=11475 comm="syz.1.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 431.064412][T11493] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 431.951839][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1622'. [ 431.969703][T11510] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1622'. [ 431.986490][T11510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1622'. [ 432.307064][ T29] audit: type=1400 audit(1775942576.873:777): avc: denied { create } for pid=11523 comm="syz.1.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 432.382009][ T29] audit: type=1400 audit(1775942576.943:778): avc: denied { write } for pid=11523 comm="syz.1.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 432.491569][ T29] audit: type=1400 audit(1775942577.063:779): avc: denied { bind } for pid=11533 comm="syz.2.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 433.023282][ T29] audit: type=1400 audit(1775942577.593:780): avc: denied { ioctl } for pid=11539 comm="syz.1.1632" path="socket:[34485]" dev="sockfs" ino=34485 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 433.061544][T11552] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 433.108199][T11552] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 433.136118][T11552] overlayfs: failed to look up (tracing) for ino (-66) [ 433.201164][ T29] audit: type=1400 audit(1775942577.613:781): avc: denied { mount } for pid=11542 comm="syz.3.1633" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 433.224622][ T29] audit: type=1400 audit(1775942577.633:782): avc: denied { mounton } for pid=11542 comm="syz.3.1633" path="/311/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 433.899366][ T5865] kernel write not supported for file /cpu/0/msr (pid: 5865 comm: kworker/0:4) [ 433.917224][ T29] audit: type=1400 audit(1775942578.463:783): avc: denied { write } for pid=11554 comm="syz.4.1635" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 434.334734][T11569] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 434.341896][T11569] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 434.396217][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.405964][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.447262][ T29] audit: type=1400 audit(1775942579.013:784): avc: denied { setopt } for pid=11572 comm="syz.2.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.476544][T11573] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1640'. [ 434.512850][ T29] audit: type=1400 audit(1775942579.043:785): avc: denied { getopt } for pid=11572 comm="syz.2.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.697108][ T5879] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 434.940739][ T5879] usb 5-1: device descriptor read/64, error -71 [ 435.186313][T11590] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 435.200806][ T5879] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 435.385170][ T5879] usb 5-1: device descriptor read/64, error -71 [ 435.791617][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1647'. [ 436.031226][ T5879] usb usb5-port1: attempt power cycle [ 436.370748][ T5879] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 436.391565][ T5879] usb 5-1: device descriptor read/8, error -71 [ 436.630739][ T5879] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 436.651456][ T5879] usb 5-1: device descriptor read/8, error -71 [ 436.771160][ T5879] usb usb5-port1: unable to enumerate USB device [ 436.882655][T11595] tmpfs: Bad value for 'mpol' [ 437.013491][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 437.013507][ T29] audit: type=1400 audit(1775942581.583:788): avc: denied { view } for pid=11597 comm="syz.3.1650" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 437.327251][T11600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.356872][T11600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.598498][ T29] audit: type=1400 audit(1775942582.163:789): avc: denied { bind } for pid=11613 comm="syz.0.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 437.651402][ T5865] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 437.694313][ T29] audit: type=1400 audit(1775942582.203:790): avc: denied { listen } for pid=11613 comm="syz.0.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 437.731503][ T29] audit: type=1400 audit(1775942582.203:791): avc: denied { connect } for pid=11613 comm="syz.0.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 437.757691][ T29] audit: type=1400 audit(1775942582.203:792): avc: denied { accept } for pid=11613 comm="syz.0.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 437.778319][ T29] audit: type=1400 audit(1775942582.203:793): avc: denied { read } for pid=11613 comm="syz.0.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 437.861076][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 437.870199][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.880336][ T5865] usb 4-1: config 0 interface 0 has no altsetting 0 [ 437.892380][ T5865] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 437.910795][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.928234][ T5865] usb 4-1: Product: syz [ 437.933000][ T5865] usb 4-1: Manufacturer: syz [ 437.939491][ T5865] usb 4-1: SerialNumber: syz [ 437.952021][ T5865] usb 4-1: config 0 descriptor?? [ 437.974268][ T5865] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 437.998370][ T5865] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 438.036361][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.052237][ T5865] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 438.063090][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df [ 438.081103][ T5865] usb 4-1: media controller created [ 438.093081][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.114293][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 438.124079][ T10] usb 5-1: config 0 descriptor?? [ 438.132230][ T10] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 438.187003][ T5865] DVB: Unable to find symbol tda10046_attach() [ 438.204065][ T5865] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 438.688664][ T5865] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 438.701337][ T5865] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 438.733384][ T5865] usb 4-1: USB disconnect, device number 40 [ 438.760260][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1660'. [ 438.776560][T11630] overlayfs: failed to resolve './file1': -2 [ 439.132303][ T29] audit: type=1400 audit(1775942583.683:794): avc: denied { create } for pid=11633 comm="syz.2.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 439.440765][ T930] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 439.565042][T11647] overlayfs: failed to resolve './file0': -2 [ 439.571256][ T930] usb 4-1: device descriptor read/64, error -71 [ 439.820764][ T930] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 439.950695][ T930] usb 4-1: device descriptor read/64, error -71 [ 440.060950][ T930] usb usb4-port1: attempt power cycle [ 440.294457][T11658] xt_l2tp: v2 doesn't support IP mode [ 440.400824][T11659] lo speed is unknown, defaulting to 1000 [ 440.662710][ T930] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 440.705545][ T10] pwc: send_video_command error -71 [ 440.712287][ T930] usb 4-1: device descriptor read/8, error -71 [ 440.777318][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 440.883768][ T10] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 440.904405][ T29] audit: type=1400 audit(1775942585.473:795): avc: denied { connect } for pid=11667 comm="syz.4.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 441.022376][ T930] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 441.032137][ T10] usb 5-1: USB disconnect, device number 57 [ 441.061186][ T930] usb 4-1: device descriptor read/8, error -71 [ 441.291246][ T930] usb usb4-port1: unable to enumerate USB device [ 441.343304][T11673] CIFS: VFS: Malformed UNC in devname [ 441.368076][ T29] audit: type=1400 audit(1775942585.903:796): avc: denied { create } for pid=11667 comm="syz.4.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 441.526054][ T29] audit: type=1400 audit(1775942585.903:797): avc: denied { connect } for pid=11667 comm="syz.4.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 442.302377][T11694] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 442.393811][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 442.393843][ T29] audit: type=1400 audit(1775942586.953:799): avc: denied { read } for pid=11689 comm="syz.4.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 446.821373][T11716] netlink: 'syz.0.1688': attribute type 12 has an invalid length. [ 447.413207][T11725] xt_cgroup: path and classid specified [ 447.431195][ T930] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 447.490752][ T5879] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 447.548177][ T29] audit: type=1400 audit(1775942592.113:800): avc: denied { mount } for pid=11727 comm="syz.1.1694" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 447.705892][ T930] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 447.719190][ T930] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 447.728656][ T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.738179][ T5879] usb 4-1: config 0 has no interfaces? [ 447.751424][ T930] usb 5-1: config 0 descriptor?? [ 447.756593][ T5879] usb 4-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 448.187094][ T930] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 448.199258][ T29] audit: type=1400 audit(1775942592.393:801): avc: denied { mount } for pid=11729 comm="syz.2.1686" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 448.228033][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.260522][ T5879] usb 4-1: config 0 descriptor?? [ 448.496065][ T5865] usb 4-1: USB disconnect, device number 45 [ 448.974312][ T29] audit: type=1400 audit(1775942593.303:802): avc: denied { write } for pid=11722 comm="syz.4.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 449.170030][T11753] netlink: 'syz.3.1700': attribute type 12 has an invalid length. [ 449.214014][ T29] audit: type=1400 audit(1775942593.783:803): avc: denied { setopt } for pid=11751 comm="syz.2.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 449.301733][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 449.480999][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 449.498645][ T10] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 449.513762][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.536734][ T10] usb 2-1: config 0 has no interface number 0 [ 449.556974][ T10] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.175667][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 450.206276][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.223440][ T5865] usb 5-1: USB disconnect, device number 58 [ 450.245903][ T10] usb 2-1: Product: syz [ 450.274016][ T10] usb 2-1: Manufacturer: syz [ 450.278656][ T10] usb 2-1: SerialNumber: syz [ 450.311650][ T10] usb 2-1: config 0 descriptor?? [ 450.429659][ T29] audit: type=1400 audit(1775942594.993:804): avc: denied { read write } for pid=11770 comm="syz.4.1706" name="mouse0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 450.513444][ T29] audit: type=1400 audit(1775942594.993:805): avc: denied { open } for pid=11770 comm="syz.4.1706" path="/dev/input/mouse0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 451.430821][ T5865] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 451.517784][T11792] netlink: 'syz.2.1712': attribute type 12 has an invalid length. [ 451.602587][ T5865] usb 5-1: config 0 has no interfaces? [ 451.608367][ T5865] usb 5-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 451.701040][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.723622][ T5865] usb 5-1: config 0 descriptor?? [ 451.890758][T11796] lo speed is unknown, defaulting to 1000 [ 452.270045][T11795] netlink: 'syz.2.1713': attribute type 9 has an invalid length. [ 452.388979][ T930] usb 2-1: USB disconnect, device number 59 [ 452.559870][T11799] fuse: Unknown parameter '$ö`  [ 452.559870][T11799] ±5ÚÖR„\*Ç×)ª»Ó ¿Ýå®8tç´0x0000000000000003' [ 452.643674][T11788] Invalid source name [ 452.652537][T11788] UBIFS error (pid: 11788): cannot open "./file0", error -22 [ 452.821114][ T930] usb 5-1: USB disconnect, device number 59 [ 453.634866][T11817] 9p: Bad value for 'rfdno' [ 453.692167][T11821] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 453.743935][T11823] netlink: 'syz.2.1719': attribute type 2 has an invalid length. [ 453.785192][T11825] netlink: 'syz.4.1723': attribute type 12 has an invalid length. [ 454.215512][ T29] audit: type=1400 audit(1775942598.773:806): avc: denied { bind } for pid=11831 comm="syz.3.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 454.285928][ T29] audit: type=1400 audit(1775942598.773:807): avc: denied { listen } for pid=11831 comm="syz.3.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 454.650796][ T29] audit: type=1400 audit(1775942599.183:808): avc: denied { mounton } for pid=11834 comm="syz.4.1724" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.932492][T11833] program syz.1.1721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.093234][ T29] audit: type=1400 audit(1775942599.533:809): avc: denied { setopt } for pid=11845 comm="syz.2.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 456.251064][T11857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'. [ 456.272495][T11857] overlayfs: failed to resolve './file1': -2 [ 457.294210][T11869] netlink: 'syz.3.1734': attribute type 12 has an invalid length. [ 457.867452][T11878] netlink: 'syz.3.1736': attribute type 30 has an invalid length. [ 457.940749][T11877] netlink: 'syz.3.1736': attribute type 30 has an invalid length. [ 458.502817][ T29] audit: type=1400 audit(1775942602.843:810): avc: denied { getopt } for pid=11879 comm="syz.2.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 458.716206][ T29] audit: type=1400 audit(1775942603.283:811): avc: denied { read } for pid=11884 comm="syz.0.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 458.990463][T11895] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 459.173138][ T29] audit: type=1400 audit(1775942603.743:812): avc: denied { write } for pid=11887 comm="syz.1.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 459.519947][T11895] program syz.3.1742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.544934][T11904] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 459.564107][T11904] IPVS: set_ctl: invalid protocol: 28719 99.47.115.121:29487 [ 460.136740][T11913] SELinux: failed to load policy [ 460.244663][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'. [ 461.751722][ T5879] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 461.893398][ T5879] usb 5-1: device descriptor read/64, error -71 [ 462.113494][T11932] affs: No valid root block on device nullb0 [ 462.155230][ T29] audit: type=1400 audit(1775942606.663:813): avc: denied { mounton } for pid=11927 comm="syz.3.1751" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 462.469967][ T29] audit: type=1400 audit(1775942606.703:814): avc: denied { append } for pid=11927 comm="syz.3.1751" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 462.560699][ T5879] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 462.609690][T11937] x_tables: ip_tables: osf match: only valid for protocol 6 [ 462.720744][ T5879] usb 5-1: device descriptor read/64, error -71 [ 462.739470][T11937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1754'. [ 462.867278][ T5879] usb usb5-port1: attempt power cycle [ 463.062250][T11945] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 463.071046][T11945] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 463.079510][T11945] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 463.391121][ T5879] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 463.767027][ T5879] usb 5-1: device descriptor read/8, error -71 [ 465.468665][T11982] tipc: Enabling of bearer rejected, failed to enable media [ 465.531081][ T29] audit: type=1400 audit(1775942610.093:815): avc: denied { mount } for pid=11983 comm="syz.0.1766" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 465.604304][T11984] VFS: Mount too revealing [ 465.624177][ T29] audit: type=1400 audit(1775942610.123:816): avc: denied { create } for pid=11983 comm="syz.0.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 465.683250][ T29] audit: type=1400 audit(1775942610.143:817): avc: denied { sys_admin } for pid=11983 comm="syz.0.1766" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 465.720383][T11988] netlink: 'syz.1.1768': attribute type 2 has an invalid length. [ 465.753555][ T29] audit: type=1400 audit(1775942610.323:818): avc: denied { write } for pid=11987 comm="syz.1.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 465.778119][T11990] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1769'. [ 466.171652][ T29] audit: type=1400 audit(1775942610.733:819): avc: denied { listen } for pid=11986 comm="syz.4.1767" lport=57324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 466.461165][ T5865] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 466.745712][T12004] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 466.791561][ T29] audit: type=1400 audit(1775942611.353:820): avc: denied { mount } for pid=11999 comm="syz.3.1770" name="/" dev="autofs" ino=37293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 466.884417][ T5865] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 466.903043][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.913405][ T29] audit: type=1400 audit(1775942611.393:821): avc: denied { read } for pid=11999 comm="syz.3.1770" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 466.938274][ T5865] usb 5-1: Product: syz [ 466.943888][ T5865] usb 5-1: Manufacturer: syz [ 466.948519][ T5865] usb 5-1: SerialNumber: syz [ 466.954186][ T29] audit: type=1400 audit(1775942611.393:822): avc: denied { open } for pid=11999 comm="syz.3.1770" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 466.978526][ T5865] usb 5-1: config 0 descriptor?? [ 466.985819][ T5865] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 064 [ 467.034929][T12004] program syz.1.1773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.712751][ T5865] (null): failure reading functionality [ 468.725782][ T5865] i2c i2c-2: failure reading functionality [ 468.753714][ T5865] i2c i2c-2: connected i2c-tiny-usb device [ 468.809258][ T5865] usb 5-1: USB disconnect, device number 64 [ 469.049935][T12045] SQUASHFS error: Failed to read block 0x0: -5 [ 470.821120][T12055] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 471.294214][T12058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.340505][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1789'. [ 471.558380][T12055] program syz.3.1787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.757395][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 471.807934][T12057] netlink: 'syz.1.1788': attribute type 30 has an invalid length. [ 471.808059][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 471.839679][T12058] netlink: 'syz.1.1788': attribute type 30 has an invalid length. [ 472.028387][ T133] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.051638][ T133] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.080277][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 472.080294][ T29] audit: type=1400 audit(1775942616.643:825): avc: denied { map } for pid=12068 comm="syz.4.1792" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 472.239630][ T133] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.281930][ T133] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.294895][ T29] audit: type=1400 audit(1775942616.643:826): avc: denied { execute } for pid=12068 comm="syz.4.1792" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 472.395907][ T29] audit: type=1400 audit(1775942616.793:827): avc: denied { bind } for pid=12068 comm="syz.4.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 472.471461][ T5865] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 472.732391][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 472.856735][ T5865] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 472.867342][ T5865] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 472.880973][ T5865] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 472.891286][ T5865] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.900695][ T29] audit: type=1400 audit(1775942617.463:828): avc: denied { getopt } for pid=12086 comm="syz.1.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 472.904561][ T5865] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 472.933990][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.137117][ T29] audit: type=1400 audit(1775942617.463:829): avc: denied { listen } for pid=12086 comm="syz.1.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 474.048003][T12098] syz.1.1798 (12098): drop_caches: 2 [ 474.099188][ T5865] usb 5-1: GET_CAPABILITIES returned 0 [ 474.112863][ T5865] usbtmc 5-1:16.0: can't read capabilities [ 474.127619][ T29] audit: type=1400 audit(1775942617.503:830): avc: denied { getopt } for pid=12086 comm="syz.1.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 474.149215][ T29] audit: type=1400 audit(1775942617.503:831): avc: denied { ioctl } for pid=12086 comm="syz.1.1796" path="socket:[38089]" dev="sockfs" ino=38089 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 474.413634][T12102] 9p: Bad value for 'rfdno' [ 474.614333][T12109] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1803'. [ 474.745021][T12111] wg1 speed is unknown, defaulting to 1000 [ 474.751003][T12111] wg1 speed is unknown, defaulting to 1000 [ 474.757581][T12111] wg1 speed is unknown, defaulting to 1000 [ 474.765072][T12111] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 474.776130][T12111] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 474.902382][ T29] audit: type=1400 audit(1775942619.403:832): avc: denied { getopt } for pid=12106 comm="syz.1.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 475.243006][T12111] wg1 speed is unknown, defaulting to 1000 [ 475.250157][T12111] wg1 speed is unknown, defaulting to 1000 [ 475.256805][T12111] wg1 speed is unknown, defaulting to 1000 [ 475.263379][T12111] wg1 speed is unknown, defaulting to 1000 [ 475.269929][T12111] wg1 speed is unknown, defaulting to 1000 [ 475.411331][ T5865] usb 5-1: USB disconnect, device number 65 [ 475.647643][T12126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.996662][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1808'. [ 476.070734][ T5865] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 476.271864][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 476.281606][ T5865] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 476.291379][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.372537][ T5865] pvrusb2: Hardware description: Terratec Grabster AV400 [ 476.399907][ T5865] pvrusb2: ********** [ 476.409984][ T5865] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 476.461525][ T5865] pvrusb2: Important functionality might not be entirely working. [ 476.489743][ T5865] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 476.557311][ T5865] pvrusb2: ********** [ 476.765102][ T2336] pvrusb2: Invalid write control endpoint [ 477.962625][ T2336] pvrusb2: Invalid write control endpoint [ 478.015101][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 478.078420][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 478.117407][T12149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1816'. [ 478.126417][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 478.126456][ T2336] pvrusb2: Device being rendered inoperable [ 478.128895][ T2336] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 478.191922][T12147] lo speed is unknown, defaulting to 1000 [ 478.203500][ T2336] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 478.229942][ T2336] pvrusb2: Attached sub-driver cx25840 [ 478.236133][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 478.246431][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 478.302124][T12158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1819'. [ 478.407626][ T29] audit: type=1326 audit(1775942622.963:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12155 comm="syz.2.1820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5554d9c819 code=0x0 [ 478.487692][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1821'. [ 478.651369][ T5865] usb 5-1: USB disconnect, device number 66 [ 478.832628][T12147] wg1 speed is unknown, defaulting to 1000 [ 479.331326][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805adfbc00: rx timeout, send abort [ 479.839607][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805adfbc00: abort rx timeout. Force session deactivation [ 480.318127][ T5865] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 480.484158][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 480.509161][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 480.565627][ T5865] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 480.595974][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.620414][ T5865] usb 4-1: config 0 descriptor?? [ 480.955180][ T5865] ath6kl: Failed to submit usb control message: -71 [ 480.962912][ T5865] ath6kl: unable to send the bmi data to the device: -71 [ 480.971312][ T5865] ath6kl: Unable to send get target info: -71 [ 480.987908][ T5865] ath6kl: Failed to init ath6kl core: -71 [ 481.011410][ T29] audit: type=1400 audit(1775942625.573:834): avc: denied { accept } for pid=12192 comm="syz.1.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 481.392953][ T5865] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 481.408119][ T5865] usb 4-1: USB disconnect, device number 46 [ 481.777356][T12211] fuse: Unknown parameter 'fd0x0000000000000003' [ 481.900823][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 482.033961][ T29] audit: type=1400 audit(1775942626.573:835): avc: denied { map } for pid=12212 comm="syz.4.1838" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 482.087711][ T10] usb 2-1: device descriptor read/64, error -71 [ 482.200443][T12222] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 482.567325][T12225] SELinux: failed to load policy [ 482.661243][ T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 482.888792][ T10] usb 2-1: device descriptor read/64, error -71 [ 483.310719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 483.456940][ T10] usb usb2-port1: attempt power cycle [ 483.832498][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1844'. [ 483.850967][T12232] overlayfs: failed to resolve './file1': -2 [ 484.060707][T11124] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 484.264871][T11124] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 484.280659][T11124] usb 4-1: config 160 has no interface number 0 [ 484.280957][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 484.286983][T11124] usb 4-1: config 160 interface 200 has no altsetting 0 [ 484.295149][T11124] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 484.463305][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807134e800: rx timeout, send abort [ 484.464375][T11124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.563924][T11124] usb 4-1: Product: syz [ 484.607128][T11124] usb 4-1: Manufacturer: syz [ 484.680328][T11124] usb 4-1: SerialNumber: syz [ 484.767714][ T10] usb 2-1: device descriptor read/8, error -71 [ 484.971556][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807134e800: abort rx timeout. Force session deactivation [ 485.047102][ T29] audit: type=1400 audit(1775942629.613:836): avc: denied { open } for pid=12243 comm="syz.1.1848" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 485.201404][ T29] audit: type=1400 audit(1775942629.723:837): avc: denied { create } for pid=12243 comm="syz.1.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 485.238804][ T29] audit: type=1400 audit(1775942629.803:838): avc: denied { write } for pid=12243 comm="syz.1.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 485.352231][T12250] fuse: Unknown parameter 'fd0x0000000000000003' [ 485.480744][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 485.770671][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 486.029768][T12267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1855'. [ 486.143575][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 486.154789][T11124] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 486.162085][T12268] dvmrp0: left allmulticast mode [ 486.164010][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 486.178059][T11124] usb 4-1: MIDIStreaming interface descriptor not found [ 486.193486][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 486.753748][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 486.830849][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1856'. [ 486.861859][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.864772][T12274] overlayfs: failed to resolve './file1': -2 [ 486.968119][T11124] usb 4-1: USB disconnect, device number 47 [ 487.167836][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 487.180717][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.237971][ T6027] udevd[6027]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.417961][ T24] usb 5-1: usb_control_msg returned -32 [ 487.436005][ T24] usbtmc 5-1:16.0: can't read capabilities [ 487.809377][T12286] xt_CT: No such helper "snmp_trap" [ 487.853545][T12288] xt_CT: No such helper "snmp_trap" [ 488.533957][T12297] fuse: Bad value for 'user_id' [ 488.547696][T12297] fuse: Bad value for 'user_id' [ 488.945511][T12305] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 489.061525][ T29] audit: type=1400 audit(1775942633.633:839): avc: denied { read write } for pid=12308 comm="syz.1.1867" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 489.086958][ T29] audit: type=1400 audit(1775942633.633:840): avc: denied { open } for pid=12308 comm="syz.1.1867" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 489.114444][ T29] audit: type=1400 audit(1775942633.653:841): avc: denied { read } for pid=12308 comm="syz.1.1867" path="socket:[39127]" dev="sockfs" ino=39127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 489.119281][T12310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1866'. [ 489.426084][ T10] usb 5-1: USB disconnect, device number 67 [ 490.296735][T12327] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1871'. [ 490.959700][T12323] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1869'. [ 491.060784][ T29] audit: type=1400 audit(1775942635.601:842): avc: denied { read } for pid=12338 comm="syz.2.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 492.006374][ T29] audit: type=1400 audit(1775942636.241:843): avc: denied { ioctl } for pid=12348 comm="syz.1.1877" path="socket:[38693]" dev="sockfs" ino=38693 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 492.097635][T12353] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1878'. [ 492.474205][ T29] audit: type=1400 audit(1775942637.031:844): avc: denied { ioctl } for pid=12354 comm="syz.2.1880" path="socket:[39197]" dev="sockfs" ino=39197 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 492.554391][T12364] netlink: 'syz.0.1883': attribute type 12 has an invalid length. [ 492.652988][T12364] netlink: 'syz.0.1883': attribute type 29 has an invalid length. [ 492.678670][T12364] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1883'. [ 492.690678][T12364] netlink: 'syz.0.1883': attribute type 1 has an invalid length. [ 492.769609][T12369] 9p: Bad value for 'rq' [ 492.850722][T12364] netlink: 'syz.0.1883': attribute type 2 has an invalid length. [ 492.861859][T12364] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1883'. [ 494.180561][T12378] xt_hashlimit: size too large, truncated to 1048576 [ 494.284360][T12383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=12383 comm=syz.3.1886 [ 494.770943][ T29] audit: type=1400 audit(1775942638.991:845): avc: denied { setopt } for pid=12377 comm="syz.2.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 496.109002][T12397] lo speed is unknown, defaulting to 1000 [ 496.186120][T12397] wg1 speed is unknown, defaulting to 1000 [ 496.944171][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.950475][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.000403][ T29] audit: type=1326 audit(1775942641.571:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12396 comm="syz.4.1891" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f133899c819 code=0x0 [ 497.192774][T12408] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 497.205797][T12408] program syz.3.1894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 497.568026][ T29] audit: type=1400 audit(1775942642.081:847): avc: denied { execstack } for pid=12414 comm="syz.4.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 497.807533][ T29] audit: type=1400 audit(1775942642.171:848): avc: denied { write } for pid=12410 comm="syz.1.1893" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 499.850553][ T29] audit: type=1400 audit(1775942644.421:849): avc: denied { read } for pid=12436 comm="syz.2.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 499.905607][T12445] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1903'. [ 499.939823][T12449] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 500.086053][T12449] program syz.4.1905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.378164][T12454] program syz.4.1906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.724709][T12473] overlayfs: failed to clone upperpath [ 502.550812][T12492] FAULT_INJECTION: forcing a failure. [ 502.550812][T12492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.565137][T12492] CPU: 0 UID: 0 PID: 12492 Comm: syz.3.1916 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.565165][T12492] Tainted: [L]=SOFTLOCKUP [ 502.565170][T12492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 502.565177][T12492] Call Trace: [ 502.565181][T12492] [ 502.565185][T12492] dump_stack_lvl+0x100/0x190 [ 502.565208][T12492] should_fail_ex.cold+0x5/0xa [ 502.565223][T12492] _copy_to_user+0x32/0xd0 [ 502.565238][T12492] copy_to_sockptr_offset.constprop.0+0x130/0x150 [ 502.565253][T12492] ? __pfx_copy_to_sockptr_offset.constprop.0+0x10/0x10 [ 502.565268][T12492] ? bpf_vlog_finalize+0x1ba/0x360 [ 502.565285][T12492] btf_new_fd+0x450e/0x5670 [ 502.565299][T12492] ? avc_has_perm_noaudit+0x145/0x3b0 [ 502.565318][T12492] ? __pfx_btf_new_fd+0x10/0x10 [ 502.565331][T12492] ? rcu_is_watching+0x12/0xc0 [ 502.565344][T12492] ? cap_capable+0x107/0x460 [ 502.565357][T12492] ? __might_fault+0xc5/0x140 [ 502.565378][T12492] ? bpf_lsm_capable+0x9/0x10 [ 502.565389][T12492] ? security_capable+0x80/0x260 [ 502.565402][T12492] ? ns_capable+0xd2/0xf0 [ 502.565417][T12492] __sys_bpf+0x1b63/0x4b90 [ 502.565431][T12492] ? __pfx___sys_bpf+0x10/0x10 [ 502.565442][T12492] ? proc_fail_nth_write+0x9f/0x220 [ 502.565459][T12492] ? find_held_lock+0x2b/0x80 [ 502.565476][T12492] ? find_held_lock+0x2b/0x80 [ 502.565489][T12492] ? ksys_write+0x190/0x250 [ 502.565503][T12492] ? __mutex_unlock_slowpath+0x15c/0x790 [ 502.565515][T12492] ? __fget_files+0x215/0x3d0 [ 502.565534][T12492] ? fput+0x79/0x100 [ 502.565547][T12492] ? ksys_write+0x1ac/0x250 [ 502.565557][T12492] ? __pfx_ksys_write+0x10/0x10 [ 502.565569][T12492] __x64_sys_bpf+0x7b/0xc0 [ 502.565581][T12492] ? lockdep_hardirqs_on+0x78/0x100 [ 502.565591][T12492] do_syscall_64+0x106/0xf80 [ 502.565601][T12492] ? clear_bhb_loop+0x40/0x90 [ 502.565614][T12492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.565625][T12492] RIP: 0033:0x7f038099c819 [ 502.565634][T12492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.565644][T12492] RSP: 002b:00007f038177d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 502.565655][T12492] RAX: ffffffffffffffda RBX: 00007f0380c16090 RCX: 00007f038099c819 [ 502.565662][T12492] RDX: 0000000000000028 RSI: 0000200000000380 RDI: 0000000000000012 [ 502.565668][T12492] RBP: 00007f038177d090 R08: 0000000000000000 R09: 0000000000000000 [ 502.565674][T12492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.565680][T12492] R13: 00007f0380c16128 R14: 00007f0380c16090 R15: 00007ffd2994c128 [ 502.565694][T12492] [ 503.083177][T12495] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 503.094977][T12495] program syz.3.1917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.384789][ T29] audit: type=1400 audit(1775942647.961:850): avc: denied { compute_member } for pid=12499 comm="syz.3.1919" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 503.420462][T12458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.836072][T12509] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 504.037818][ T29] audit: type=1400 audit(1775942648.611:851): avc: denied { read } for pid=12512 comm="syz.3.1925" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 504.776997][ T29] audit: type=1400 audit(1775942648.611:852): avc: denied { open } for pid=12512 comm="syz.3.1925" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 504.872113][T12516] orangefs_mount: mount request failed with -4 [ 505.106612][ T29] audit: type=1400 audit(1775942648.611:853): avc: denied { ioctl } for pid=12512 comm="syz.3.1925" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x54d5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 505.641215][ T29] audit: type=1804 audit(1775942649.611:854): pid=12521 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1921" name="/newroot/371/file1" dev="tmpfs" ino=2041 res=1 errno=0 [ 505.973699][T12533] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 506.093481][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1922'. [ 506.253714][T12533] program syz.1.1928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.384362][T12537] QAT: Stopping all acceleration devices. [ 506.512336][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 506.523403][T12527] overlayfs: failed to resolve './file1': -2 [ 506.643003][T12540] batman_adv: batadv0: Removing interface: macvtap1 [ 507.215425][ T29] audit: type=1400 audit(1775942651.791:855): avc: denied { setopt } for pid=12552 comm="syz.3.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 507.420746][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 507.650279][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 507.657247][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 507.665531][ T9] usb 2-1: config 0 has no interface number 0 [ 507.672692][ T9] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 507.685351][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 507.694516][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.706710][ T9] usb 2-1: Product: syz [ 507.762505][ T9] usb 2-1: Manufacturer: syz [ 507.787772][ T9] usb 2-1: SerialNumber: syz [ 507.802581][ T9] usb 2-1: config 0 descriptor?? [ 507.828662][T12553] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 508.085861][T12553] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 508.198469][ T29] audit: type=1326 audit(1775942652.771:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.0.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe515d9c819 code=0x7ffc0000 [ 508.242953][ T29] audit: type=1326 audit(1775942652.771:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.0.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe515d9c819 code=0x7ffc0000 [ 508.670676][ T29] audit: type=1326 audit(1775942652.801:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.0.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe515d9c819 code=0x7ffc0000 [ 508.719264][ T29] audit: type=1326 audit(1775942652.821:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.0.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe515d9c819 code=0x7ffc0000 [ 508.742914][ T5814] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 508.806034][ T29] audit: type=1326 audit(1775942652.821:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.0.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe515d9c819 code=0x7ffc0000 [ 508.967113][ T5814] usb 5-1: Using ep0 maxpacket: 8 [ 508.973331][ T29] audit: type=1326 audit(1775942652.821:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.0.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe515d9c819 code=0x7ffc0000 [ 509.410314][ T5814] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 509.424713][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.459083][ T5814] usb 5-1: Product: syz [ 509.592092][ T5814] usb 5-1: Manufacturer: syz [ 509.596727][ T5814] usb 5-1: SerialNumber: syz [ 509.618186][ T29] audit: type=1326 audit(1775942652.821:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.0.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe515d9c819 code=0x7ffc0000 [ 509.863052][T12581] FAULT_INJECTION: forcing a failure. [ 509.863052][T12581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.876161][T12581] CPU: 1 UID: 0 PID: 12581 Comm: syz.3.1944 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.876189][T12581] Tainted: [L]=SOFTLOCKUP [ 509.876196][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 509.876206][T12581] Call Trace: [ 509.876213][T12581] [ 509.876220][T12581] dump_stack_lvl+0x100/0x190 [ 509.876252][T12581] should_fail_ex.cold+0x5/0xa [ 509.876276][T12581] _copy_to_user+0x32/0xd0 [ 509.876300][T12581] __do_sys_getrusage+0xee/0x170 [ 509.876322][T12581] ? __pfx___do_sys_getrusage+0x10/0x10 [ 509.876354][T12581] ? __pfx_ksys_write+0x10/0x10 [ 509.876378][T12581] do_syscall_64+0x106/0xf80 [ 509.876395][T12581] ? clear_bhb_loop+0x40/0x90 [ 509.876417][T12581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.876435][T12581] RIP: 0033:0x7f038099c819 [ 509.876451][T12581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.876468][T12581] RSP: 002b:00007f037ebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000062 [ 509.876486][T12581] RAX: ffffffffffffffda RBX: 00007f0380c16180 RCX: 00007f038099c819 [ 509.876497][T12581] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000000 [ 509.876507][T12581] RBP: 00007f037ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 509.876517][T12581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.876526][T12581] R13: 00007f0380c16218 R14: 00007f0380c16180 R15: 00007ffd2994c128 [ 509.876551][T12581] [ 510.551085][T12583] Timeout policy `syz0' can only be used by L4 protocol number 6 [ 510.641637][ T29] audit: type=1326 audit(1775942652.821:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.0.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe515d9c819 code=0x7ffc0000 [ 510.918079][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 510.928528][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 510.951131][ T9] asix 2-1:0.188: probe with driver asix failed with error -71 [ 510.956985][ T5814] usb 5-1: config 0 descriptor?? [ 510.962089][ T9] usb 2-1: USB disconnect, device number 64 [ 510.968450][ T29] audit: type=1326 audit(1775942652.821:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.0.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe515d9c819 code=0x7ffc0000 [ 511.002995][ T5814] gspca_main: sq930x-2.14.0 probing 2770:930c [ 511.109277][ T5814] gspca_sq930x: reg_r 001f failed -71 [ 511.132996][ T5814] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 511.146955][ T29] audit: type=1326 audit(1775942652.821:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.0.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe515d9c819 code=0x7ffc0000 [ 511.186368][ T5814] usb 5-1: USB disconnect, device number 68 [ 511.222913][ T29] audit: type=1326 audit(1775942652.821:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.0.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe515d9c819 code=0x7ffc0000 [ 511.434306][T12598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1949'. [ 511.606466][ T29] audit: type=1326 audit(1775942652.821:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.0.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe515d9c819 code=0x7ffc0000 [ 511.751181][T12600] loop6: detected capacity change from 0 to 2640 [ 511.761719][T12600] buffer_io_error: 10 callbacks suppressed [ 511.761748][T12600] Buffer I/O error on dev loop6, logical block 0, async page read [ 511.776631][T12600] Buffer I/O error on dev loop6, logical block 0, async page read [ 511.784868][T12600] Buffer I/O error on dev loop6, logical block 0, async page read [ 511.793041][T12600] Buffer I/O error on dev loop6, logical block 0, async page read [ 511.802191][T12600] Buffer I/O error on dev loop6, logical block 0, async page read [ 511.810354][T12600] Buffer I/O error on dev loop6, logical block 0, async page read [ 511.818672][T12600] Buffer I/O error on dev loop6, logical block 0, async page read [ 511.826967][T12600] Buffer I/O error on dev loop6, logical block 0, async page read [ 511.835184][T12600] ldm_validate_partition_table(): Disk read failed. [ 511.842239][T12600] Buffer I/O error on dev loop6, logical block 0, async page read [ 511.850224][T12600] Buffer I/O error on dev loop6, logical block 0, async page read [ 511.858566][T12600] Dev loop6: unable to read RDB block 0 [ 511.865991][T12600] loop6: unable to read partition table [ 511.872559][T12600] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³è) failed (rc=-5) [ 512.350444][ T5178] ldm_validate_partition_table(): Disk read failed. [ 512.358739][ T5178] Dev loop6: unable to read RDB block 0 [ 512.366153][ T5178] loop6: unable to read partition table [ 512.490855][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 512.661109][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 512.669668][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 512.738540][ T10] usb 4-1: config 74 has an invalid interface number: 213 but max is 0 [ 512.770745][ T10] usb 4-1: config 74 has no interface number 0 [ 512.779444][ T10] usb 4-1: config 74 interface 213 has no altsetting 0 [ 512.789563][ T10] usb 4-1: string descriptor 0 read error: -22 [ 512.797329][ T10] usb 4-1: New USB device found, idVendor=06f8, idProduct=3009, bcdDevice=66.26 [ 512.811772][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.834393][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:3009 [ 513.094289][ T10] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 513.110877][ T10] gspca_pac7302 4-1:74.213: probe with driver gspca_pac7302 failed with error -71 [ 513.136215][ T10] usb 4-1: USB disconnect, device number 48 [ 514.182298][T12623] binder: 12622:12623 ioctl c018620b 200000000240 returned -14 [ 514.486974][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 514.486985][ T29] audit: type=1400 audit(1775942659.061:919): avc: denied { listen } for pid=12636 comm="syz.3.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 514.914836][T12643] fuse: Bad value for 'fd' [ 515.043818][T12652] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 515.103863][T12653] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.111596][T12653] bridge0: port 1(1¾x9ÿ) entered disabled state [ 515.323527][T12653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.730107][ T3024] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.848237][ T3024] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.858566][ T3024] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.867657][ T3024] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.971574][T12678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1973'. [ 518.095556][ T5879] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 518.831153][ T5879] usb 2-1: device descriptor read/64, error -71 [ 519.531292][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1976'. [ 519.561108][T12688] overlayfs: failed to resolve './file1': -2 [ 519.850864][ T5879] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 519.945914][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1979'. [ 520.020885][ T5879] usb 2-1: device descriptor read/64, error -71 [ 520.217506][T12697] nbd: socks must be embedded in a SOCK_ITEM attr [ 520.255997][ T5879] usb usb2-port1: attempt power cycle [ 521.898788][ T9018] udevd[9018]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 521.948914][ T7580] udevd[7580]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 523.740769][ T5879] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 523.974985][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.987333][ T5879] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 523.999437][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.007814][ T5879] usb 4-1: Product: syz [ 524.012464][ T5879] usb 4-1: Manufacturer: syz [ 524.020177][ T5879] usb 4-1: SerialNumber: syz [ 524.083533][T12729] ubi: mtd0 is already attached to ubi31 [ 524.411058][ T5872] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 524.541445][ T5879] usb 4-1: config 0 descriptor?? [ 524.554735][ T5879] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 524.574848][ T5872] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 524.590738][ T5879] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 524.622349][ T5872] usb 5-1: config 160 has no interface number 0 [ 524.630949][ T5872] usb 5-1: config 160 interface 200 has no altsetting 0 [ 524.707119][ T5872] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 524.730925][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.740294][ T5872] usb 5-1: Product: syz [ 524.745192][ T5872] usb 5-1: Manufacturer: syz [ 524.750549][ T5872] usb 5-1: SerialNumber: syz [ 524.753556][ T9] usb 4-1: USB disconnect, device number 49 [ 524.762914][T11124] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 524.814097][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1987'. [ 524.930663][T11124] usb 2-1: Using ep0 maxpacket: 8 [ 524.946786][T11124] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 524.970682][T11124] usb 2-1: config 0 has no interface number 0 [ 524.977042][T11124] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 525.022562][T12723] overlayfs: failed to clone lowerpath [ 525.108241][T11124] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 525.151228][T11124] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 525.168110][T12743] overlayfs: failed to clone lowerpath [ 525.195977][T11124] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 525.263519][T11124] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 525.293098][T11124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.336606][ T5879] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 525.356767][T11124] usb 2-1: config 0 descriptor?? [ 525.402292][T11124] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 525.543677][ T5879] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 525.563613][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.591038][ T5879] usb 4-1: Product: syz [ 525.616077][ T5879] usb 4-1: Manufacturer: syz [ 525.635036][ T5879] usb 4-1: SerialNumber: syz [ 525.668555][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 525.675943][ T10] usb 2-1: USB disconnect, device number 68 [ 525.689270][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 525.697315][T12736] ldusb: No device or device unplugged -19 [ 525.866346][ T29] audit: type=1400 audit(1775942926.435:920): avc: denied { connect } for pid=12755 comm="syz.1.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 525.898224][ T5879] snd-ua101 4-1:1.1: sample format descriptor not found [ 525.918421][ T5879] snd-ua101 4-1:1.0: invalid num_altsetting [ 526.214590][ T29] audit: type=1800 audit(1775942926.705:921): pid=12757 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1994" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=41335 res=0 errno=0 [ 526.268179][ T5879] usb 4-1: USB disconnect, device number 50 [ 526.664997][ T29] audit: type=1400 audit(1775942927.235:922): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 526.905794][ T5872] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 526.921140][ T5872] usb 5-1: MIDIStreaming interface descriptor not found [ 527.529236][ T5872] usb 5-1: USB disconnect, device number 69 [ 527.698212][ T29] audit: type=1400 audit(1775942928.265:923): avc: denied { map } for pid=12774 comm="syz.4.1999" path="pipe:[40694]" dev="pipefs" ino=40694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 528.971218][ T29] audit: type=1400 audit(1775942928.265:924): avc: denied { execute } for pid=12774 comm="syz.4.1999" path="pipe:[40694]" dev="pipefs" ino=40694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 530.943594][T12789] FAULT_INJECTION: forcing a failure. [ 530.943594][T12789] name failslab, interval 1, probability 0, space 0, times 0 [ 531.101371][T12789] CPU: 1 UID: 0 PID: 12789 Comm: syz.3.2002 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.101400][T12789] Tainted: [L]=SOFTLOCKUP [ 531.101406][T12789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 531.101416][T12789] Call Trace: [ 531.101422][T12789] [ 531.101429][T12789] dump_stack_lvl+0x100/0x190 [ 531.101463][T12789] should_fail_ex.cold+0x5/0xa [ 531.101488][T12789] should_failslab+0xc2/0x120 [ 531.101506][T12789] __kmalloc_cache_noprof+0x7a/0x6f0 [ 531.101529][T12789] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 531.101557][T12789] snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 531.101579][T12789] ? lockdep_hardirqs_on+0x78/0x100 [ 531.101598][T12789] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 531.101620][T12789] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 [ 531.101641][T12789] ? kfree+0x1f6/0x6b0 [ 531.101665][T12789] snd_pcm_oss_change_params_locked+0xae1/0x39f0 [ 531.101686][T12789] ? rcu_is_cpu_rrupt_from_idle+0x257/0x270 [ 531.101715][T12789] ? __lock_acquire+0x4a5/0x2630 [ 531.101732][T12789] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 531.101763][T12789] ? get_pid_task+0xfc/0x250 [ 531.101777][T12789] ? get_pid_task+0xfc/0x250 [ 531.101795][T12789] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 531.101817][T12789] snd_pcm_oss_write+0x4bb/0xa30 [ 531.101846][T12789] ? bpf_lsm_file_permission+0x9/0x10 [ 531.101871][T12789] ? security_file_permission+0x76/0x210 [ 531.101904][T12789] vfs_write+0x2aa/0x1070 [ 531.101922][T12789] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 531.101946][T12789] ? __pfx_vfs_write+0x10/0x10 [ 531.101960][T12789] ? find_held_lock+0x2b/0x80 [ 531.101982][T12789] ? __fget_files+0x215/0x3d0 [ 531.102001][T12789] ? __fget_files+0x215/0x3d0 [ 531.102024][T12789] ? __fget_files+0x21f/0x3d0 [ 531.102050][T12789] ksys_write+0x12a/0x250 [ 531.102066][T12789] ? __pfx_ksys_write+0x10/0x10 [ 531.102089][T12789] do_syscall_64+0x106/0xf80 [ 531.102105][T12789] ? clear_bhb_loop+0x40/0x90 [ 531.102127][T12789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.102144][T12789] RIP: 0033:0x7f038099c819 [ 531.102158][T12789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.102175][T12789] RSP: 002b:00007f038179e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 531.102192][T12789] RAX: ffffffffffffffda RBX: 00007f0380c15fa0 RCX: 00007f038099c819 [ 531.102203][T12789] RDX: 000000000000fdbc RSI: 0000200000000500 RDI: 0000000000000008 [ 531.102213][T12789] RBP: 00007f038179e090 R08: 0000000000000000 R09: 0000000000000000 [ 531.102222][T12789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.102231][T12789] R13: 00007f0380c16038 R14: 00007f0380c15fa0 R15: 00007ffd2994c128 [ 531.102255][T12789] [ 531.690448][T12795] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 532.339767][ T29] audit: type=1400 audit(1775942932.535:925): avc: denied { write } for pid=12800 comm="syz.1.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 533.109523][T12811] [ 533.378660][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2004'. [ 533.572671][ T29] audit: type=1400 audit(1775942933.655:926): avc: denied { read write } for pid=12810 comm="syz.1.2008" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 533.596611][T12812] sctp: [Deprecated]: syz.1.2008 (pid 12812) Use of int in max_burst socket option. [ 533.596611][T12812] Use struct sctp_assoc_value instead [ 533.666484][ T29] audit: type=1400 audit(1775942933.655:927): avc: denied { open } for pid=12810 comm="syz.1.2008" path="/388/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 534.155580][ T29] audit: type=1400 audit(1775942934.725:928): avc: denied { open } for pid=12819 comm="syz.4.2011" path="/dev/ttyqc" dev="devtmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 534.418206][ T29] audit: type=1400 audit(1775942934.985:929): avc: denied { read write } for pid=12828 comm="syz.3.2014" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 534.614382][ T29] audit: type=1400 audit(1775942934.985:930): avc: denied { open } for pid=12828 comm="syz.3.2014" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 534.675422][ T29] audit: type=1400 audit(1775942934.985:931): avc: denied { ioctl } for pid=12828 comm="syz.3.2014" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 535.756519][ T29] audit: type=1400 audit(1775942936.325:932): avc: denied { name_bind } for pid=12845 comm="syz.2.2019" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 535.796653][T12846] pimreg: entered allmulticast mode [ 536.470181][T12862] FAULT_INJECTION: forcing a failure. [ 536.470181][T12862] name failslab, interval 1, probability 0, space 0, times 0 [ 536.483017][T12862] CPU: 0 UID: 0 PID: 12862 Comm: syz.1.2024 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.483047][T12862] Tainted: [L]=SOFTLOCKUP [ 536.483052][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 536.483060][T12862] Call Trace: [ 536.483065][T12862] [ 536.483071][T12862] dump_stack_lvl+0x100/0x190 [ 536.483099][T12862] should_fail_ex.cold+0x5/0xa [ 536.483119][T12862] should_failslab+0xc2/0x120 [ 536.483133][T12862] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 536.483153][T12862] ? do_getname+0x35/0x390 [ 536.483174][T12862] do_getname+0x35/0x390 [ 536.483194][T12862] user_path_at+0x26/0x60 [ 536.483208][T12862] __x64_sys_mount+0x1fb/0x310 [ 536.483227][T12862] ? __pfx___x64_sys_mount+0x10/0x10 [ 536.483250][T12862] do_syscall_64+0x106/0xf80 [ 536.483263][T12862] ? clear_bhb_loop+0x40/0x90 [ 536.483280][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.483294][T12862] RIP: 0033:0x7f731139c819 [ 536.483305][T12862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.483318][T12862] RSP: 002b:00007f730f5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 536.483332][T12862] RAX: ffffffffffffffda RBX: 00007f7311616090 RCX: 00007f731139c819 [ 536.483341][T12862] RDX: 0000200000000500 RSI: 00002000000004c0 RDI: 0000200000000080 [ 536.483349][T12862] RBP: 00007f730f5f6090 R08: 0000200000000540 R09: 0000000000000000 [ 536.483357][T12862] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 536.483365][T12862] R13: 00007f7311616128 R14: 00007f7311616090 R15: 00007ffd8313da78 [ 536.483383][T12862] [ 538.532532][ T5872] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 539.312330][T12882] omfs: Invalid superblock (0) [ 539.659569][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 539.805013][ T5872] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 539.838406][ T5872] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 539.883290][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.943961][ T5872] usb 2-1: Product: syz [ 539.957623][ T5872] usb 2-1: Manufacturer: syz [ 539.970624][ T5872] usb 2-1: SerialNumber: syz [ 540.050919][T11124] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 540.080396][ T5872] usb 2-1: unit 5 not found! [ 540.110194][ T5872] usb 2-1: unit 5 not found! [ 540.141696][ T5872] usb 2-1: unit 5 not found! [ 540.210678][T11124] usb 4-1: Using ep0 maxpacket: 32 [ 540.220978][T11124] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 540.234279][T11124] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 540.240719][ T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 540.251232][T11124] usb 4-1: config 0 interface 0 has no altsetting 0 [ 540.267037][ T5872] usb 2-1: USB disconnect, device number 69 [ 540.270143][T11124] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 540.292427][T11124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.314338][ T7580] udevd[7580]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.333647][T11124] usb 4-1: Product: syz [ 540.339367][T11124] usb 4-1: Manufacturer: syz [ 540.350911][T11124] usb 4-1: SerialNumber: syz [ 540.363725][T11124] usb 4-1: config 0 descriptor?? [ 540.420902][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 540.433387][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.457371][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.478663][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 540.495367][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.519340][ T10] usb 5-1: config 0 descriptor?? [ 540.529867][ T10] hub 5-1:0.0: USB hub found [ 540.610969][ T5872] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 540.733376][ T10] hub 5-1:0.0: 1 port detected [ 540.776929][T11124] gs_usb 4-1:0.0: Configuring for 27 interfaces [ 540.790932][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 540.800689][ T5872] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 540.821226][ T5872] usb 2-1: config 0 has no interface number 0 [ 540.833612][ T5872] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 540.856851][ T5872] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 541.338250][ T5872] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 541.379712][T11124] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 541.450991][T11124] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 541.492347][ T5872] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 541.543046][ T5872] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 541.560670][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.582111][T11124] usb 4-1: USB disconnect, device number 51 [ 541.598171][ T5872] usb 2-1: config 0 descriptor?? [ 541.608031][ T5872] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 541.781179][ T5872] hub 5-1:0.0: activate --> -90 [ 541.822139][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2034'. [ 541.831258][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2034'. [ 542.196935][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2039'. [ 542.836965][ T10] usb 5-1: USB disconnect, device number 70 [ 543.180433][ T9] usb 2-1: USB disconnect, device number 70 [ 543.188997][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 543.699224][T12920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12920 comm=syz.2.2040 [ 543.843989][T12931] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 543.857011][T12926] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 543.881668][T12926] block device autoloading is deprecated and will be removed. [ 544.237555][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 545.882950][T12953] ubi: mtd0 is already attached to ubi31 [ 546.130688][ T5879] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 546.519217][ T5814] IPVS: starting estimator thread 0... [ 546.602022][ T5879] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 546.621051][T12961] IPVS: using max 76 ests per chain, 182400 per kthread [ 546.634163][ T5879] usb 5-1: config 160 has no interface number 0 [ 546.640471][ T5879] usb 5-1: config 160 interface 200 has no altsetting 0 [ 546.678416][T12963] xt_hashlimit: size too large, truncated to 1048576 [ 546.748925][ T5879] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 546.790697][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.810377][ T5879] usb 5-1: Product: syz [ 546.821038][ T5879] usb 5-1: Manufacturer: syz [ 546.835464][ T5879] usb 5-1: SerialNumber: syz [ 547.653082][ T5814] IPVS: starting estimator thread 0... [ 547.770677][T12977] IPVS: using max 45 ests per chain, 108000 per kthread [ 547.898850][T12979] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 548.022392][T12981] lo speed is unknown, defaulting to 1000 [ 548.128973][T12981] wg1 speed is unknown, defaulting to 1000 [ 548.140589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 548.216100][ T5879] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 548.296554][ T5879] usb 5-1: MIDIStreaming interface descriptor not found [ 548.448971][ T29] audit: type=1400 audit(1775942949.005:933): avc: denied { bind } for pid=12985 comm="syz.4.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 548.586523][ T29] audit: type=1400 audit(1775942949.055:934): avc: denied { write } for pid=12985 comm="syz.4.2055" path="socket:[43095]" dev="sockfs" ino=43095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 548.795351][ T29] audit: type=1400 audit(1775942949.365:935): avc: denied { create } for pid=12991 comm="syz.0.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 548.896721][ T29] audit: type=1400 audit(1775942949.405:936): avc: denied { getopt } for pid=12991 comm="syz.0.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 548.930899][T12996] netlink: 'syz.0.2056': attribute type 39 has an invalid length. [ 549.069514][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2053'. [ 549.737525][T12990] SELinux: failed to load policy [ 549.990870][ T5879] usb 5-1: USB disconnect, device number 71 [ 550.083748][ T6027] udevd[6027]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.112355][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2059'. [ 550.122261][T13006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2059'. [ 550.955606][T13018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2062'. [ 551.650689][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 551.800128][T13027] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 551.811840][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 551.820346][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 551.829586][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.842567][ T9] usb 2-1: config 0 descriptor?? [ 552.188367][T13034] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 552.549961][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 552.566535][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 552.595969][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 552.603703][ T9] usb 2-1: media controller created [ 552.623501][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 553.098564][T13024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.136539][T13024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.183986][ T9] az6027: usb out operation failed. (-71) [ 553.243676][ T9] az6027: usb out operation failed. (-71) [ 553.259431][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 553.272672][ T9] stb0899_attach: Driver disabled by Kconfig [ 553.310870][ T9] az6027: no front-end attached [ 553.310870][ T9] [ 553.321983][T13021] xt_connbytes: Forcing CT accounting to be enabled [ 553.361453][ T9] az6027: usb out operation failed. (-71) [ 553.367897][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 553.522792][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 553.551371][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 553.566816][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 553.686842][ T9] usb 2-1: USB disconnect, device number 71 [ 553.773595][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 553.841064][ T29] audit: type=1400 audit(1775942954.415:937): avc: denied { ioctl } for pid=13048 comm="syz.2.2070" path="socket:[43276]" dev="sockfs" ino=43276 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 554.527399][T13063] xt_ipcomp: unknown flags 1D [ 554.531879][ T29] audit: type=1400 audit(1775942955.095:938): avc: denied { getopt } for pid=13060 comm="syz.0.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 554.668986][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'. [ 554.710906][T13066] overlayfs: failed to resolve './file1': -2 [ 555.426517][T13081] xt_hashlimit: size too large, truncated to 1048576 [ 555.897206][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2084'. [ 555.909587][T13089] hsr_slave_0: left promiscuous mode [ 555.996480][ T29] audit: type=1400 audit(1775942956.565:939): avc: denied { connect } for pid=13086 comm="syz.2.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 556.017221][T13091] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 556.031019][T13089] hsr_slave_1: left promiscuous mode [ 556.043455][ T29] audit: type=1400 audit(1775942956.595:940): avc: denied { read } for pid=13086 comm="syz.2.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 556.083498][T13087] lo speed is unknown, defaulting to 1000 [ 556.167825][T13087] wg1 speed is unknown, defaulting to 1000 [ 556.195580][ T29] audit: type=1400 audit(1775942956.635:941): avc: denied { remount } for pid=13086 comm="syz.2.2083" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 556.320640][ T5879] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 556.648103][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 556.662250][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 556.678287][ T5879] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 556.687990][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.699890][ T5879] usb 4-1: Product: syz [ 556.706880][ T5879] usb 4-1: Manufacturer: syz [ 556.765116][ T5879] usb 4-1: SerialNumber: syz [ 556.803209][ T5879] usb 4-1: config 0 descriptor?? [ 556.833770][ T5879] em28xx 4-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 556.859015][ T5879] em28xx 4-1:0.0: Device initialization failed. [ 556.930942][ T5879] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 557.294169][T13114] lo speed is unknown, defaulting to 1000 [ 557.311099][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.318112][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.494219][T13120] trusted_key: encrypted_key: insufficient parameters specified [ 557.606602][ T29] audit: type=1400 audit(1775942958.075:942): avc: denied { accept } for pid=13116 comm="syz.2.2090" lport=34306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 557.657656][ T29] audit: type=1400 audit(1775942958.075:943): avc: denied { getopt } for pid=13116 comm="syz.2.2090" lport=34306 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 558.405738][T13132] xt_hashlimit: size too large, truncated to 1048576 [ 558.733457][T13114] wg1 speed is unknown, defaulting to 1000 [ 558.742322][T13136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.800492][T13136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.017634][ T29] audit: type=1400 audit(1775942959.585:944): avc: denied { sqpoll } for pid=13142 comm="syz.2.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 559.073075][ T29] audit: type=1400 audit(1775942959.635:945): avc: denied { create } for pid=13142 comm="syz.2.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 559.113776][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2099'. [ 559.179121][T13151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2099'. [ 559.397037][T13155] siw: device registration error -23 [ 559.405282][T13155] smc: removing ib device syz2 [ 559.860848][T13155] ------------[ cut here ]------------ [ 559.866339][T13155] !xa_empty(&pool->xa) [ 559.866348][T13155] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.2.2101/13155 [ 559.881811][T13155] Modules linked in: [ 559.886238][T13155] CPU: 0 UID: 0 PID: 13155 Comm: syz.2.2101 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.897373][T13155] Tainted: [L]=SOFTLOCKUP [ 559.901691][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 559.911751][T13155] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 559.917616][T13155] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 e6 cc 4e f9 5b c3 cc cc cc cc e8 db cc 4e f9 90 <0f> 0b 90 e8 d2 cc 4e f9 5b e9 0c 51 da 02 e8 07 61 bb f9 eb d0 0f [ 559.937431][T13155] RSP: 0018:ffffc9000d0ff1a0 EFLAGS: 00010246 [ 559.943501][T13155] RAX: 0000000000080000 RBX: ffff88806e0ad3b8 RCX: ffffc90005d99000 [ 559.951463][T13155] RDX: 0000000000080000 RSI: ffffffff88ba2ac5 RDI: ffff88806e0ad438 [ 559.959412][T13155] RBP: ffffffff88b88d50 R08: 0000000000000005 R09: 0000000000000001 [ 559.967699][T13155] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88806e0ac6b0 [ 559.975750][T13155] R13: ffff88806e0abfe0 R14: ffff88806e0abfe0 R15: ffff88806e0ad118 [ 559.983718][T13155] FS: 00007f5555b826c0(0000) GS:ffff888124338000(0000) knlGS:0000000000000000 [ 559.993011][T13155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.999577][T13155] CR2: 0000001b2fb0aff8 CR3: 000000006d89e000 CR4: 00000000003526f0 [ 560.007556][T13155] Call Trace: [ 560.010837][T13155] [ 560.013758][T13155] rxe_dealloc+0x25/0xc0 [ 560.017979][T13155] ib_dealloc_device+0x49/0x230 [ 560.023004][T13155] __ib_unregister_device+0x396/0x480 [ 560.028362][T13155] ib_unregister_device_and_put+0x5a/0x80 [ 560.034078][T13155] nldev_dellink+0x226/0x320 [ 560.038675][T13155] ? __pfx_nldev_dellink+0x10/0x10 [ 560.043809][T13155] ? rcu_is_watching+0x12/0xc0 [ 560.048562][T13155] ? cap_capable+0x107/0x460 [ 560.053359][T13155] ? bpf_lsm_capable+0x9/0x10 [ 560.058025][T13155] ? security_capable+0x80/0x260 [ 560.063075][T13155] ? ns_capable+0xd2/0xf0 [ 560.067391][T13155] ? __pfx_nldev_dellink+0x10/0x10 [ 560.072572][T13155] rdma_nl_rcv_msg+0x38a/0x6e0 [ 560.077325][T13155] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 560.082807][T13155] ? __lock_acquire+0x4a5/0x2630 [ 560.087744][T13155] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 560.094160][T13155] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 560.101126][T13155] ? netlink_deliver_tap+0x1ae/0xcc0 [ 560.106404][T13155] netlink_unicast+0x5aa/0x870 [ 560.111346][T13155] ? __pfx_netlink_unicast+0x10/0x10 [ 560.116635][T13155] netlink_sendmsg+0x8b0/0xda0 [ 560.121477][T13155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.126777][T13155] ? __might_fault+0x50/0x140 [ 560.131532][T13155] ____sys_sendmsg+0x9e1/0xb70 [ 560.136307][T13155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.141782][T13155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 560.147051][T13155] ? __pfx_futex_wake_mark+0x10/0x10 [ 560.152423][T13155] ___sys_sendmsg+0x190/0x1e0 [ 560.157079][T13155] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.162278][T13155] __sys_sendmsg+0x170/0x220 [ 560.166850][T13155] ? __pfx___sys_sendmsg+0x10/0x10 [ 560.172156][T13155] ? __x64_sys_futex+0x34f/0x4d0 [ 560.177078][T13155] do_syscall_64+0x106/0xf80 [ 560.181680][T13155] ? clear_bhb_loop+0x40/0x90 [ 560.186341][T13155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.192243][T13155] RIP: 0033:0x7f5554d9c819 [ 560.196637][T13155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.216852][T13155] RSP: 002b:00007f5555b82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.225257][T13155] RAX: ffffffffffffffda RBX: 00007f5555015fa0 RCX: 00007f5554d9c819 [ 560.233242][T13155] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 560.241395][T13155] RBP: 00007f5554e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 560.249340][T13155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.257302][T13155] R13: 00007f5555016038 R14: 00007f5555015fa0 R15: 00007ffcd113d748 [ 560.265264][T13155] [ 560.268276][T13155] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 560.275538][T13155] CPU: 0 UID: 0 PID: 13155 Comm: syz.2.2101 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.286461][T13155] Tainted: [L]=SOFTLOCKUP [ 560.290775][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 560.300810][T13155] Call Trace: [ 560.304077][T13155] [ 560.306997][T13155] dump_stack_lvl+0x100/0x190 [ 560.311673][T13155] vpanic+0x552/0x970 [ 560.315642][T13155] ? __pfx_vpanic+0x10/0x10 [ 560.320122][T13155] panic+0xd1/0xe0 [ 560.323814][T13155] ? __pfx_panic+0x10/0x10 [ 560.328206][T13155] check_panic_on_warn.cold+0x19/0x34 [ 560.333559][T13155] ? rxe_pool_cleanup+0x46/0x60 [ 560.338383][T13155] __warn.cold+0x191/0x348 [ 560.342772][T13155] __report_bug+0x296/0x3d0 [ 560.347250][T13155] ? rxe_pool_cleanup+0x46/0x60 [ 560.352075][T13155] ? __pfx___report_bug+0x10/0x10 [ 560.357075][T13155] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 560.362857][T13155] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 560.368644][T13155] ? __flush_workqueue+0x426/0x1200 [ 560.373823][T13155] ? __mutex_unlock_slowpath+0x15c/0x790 [ 560.379427][T13155] ? rxe_pool_cleanup+0x46/0x60 [ 560.384258][T13155] report_bug+0xb2/0x220 [ 560.388484][T13155] ? rxe_pool_cleanup+0x46/0x60 [ 560.393310][T13155] handle_bug+0x16a/0x2a0 [ 560.397613][T13155] exc_invalid_op+0x17/0x50 [ 560.402088][T13155] asm_exc_invalid_op+0x1a/0x20 [ 560.406913][T13155] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 560.412347][T13155] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 e6 cc 4e f9 5b c3 cc cc cc cc e8 db cc 4e f9 90 <0f> 0b 90 e8 d2 cc 4e f9 5b e9 0c 51 da 02 e8 07 61 bb f9 eb d0 0f [ 560.431927][T13155] RSP: 0018:ffffc9000d0ff1a0 EFLAGS: 00010246 [ 560.437963][T13155] RAX: 0000000000080000 RBX: ffff88806e0ad3b8 RCX: ffffc90005d99000 [ 560.445910][T13155] RDX: 0000000000080000 RSI: ffffffff88ba2ac5 RDI: ffff88806e0ad438 [ 560.453939][T13155] RBP: ffffffff88b88d50 R08: 0000000000000005 R09: 0000000000000001 [ 560.461885][T13155] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88806e0ac6b0 [ 560.469829][T13155] R13: ffff88806e0abfe0 R14: ffff88806e0abfe0 R15: ffff88806e0ad118 [ 560.477779][T13155] ? __pfx_rxe_dealloc+0x10/0x10 [ 560.482700][T13155] ? rxe_pool_cleanup+0x45/0x60 [ 560.487531][T13155] rxe_dealloc+0x25/0xc0 [ 560.491761][T13155] ib_dealloc_device+0x49/0x230 [ 560.496591][T13155] __ib_unregister_device+0x396/0x480 [ 560.501946][T13155] ib_unregister_device_and_put+0x5a/0x80 [ 560.507646][T13155] nldev_dellink+0x226/0x320 [ 560.512227][T13155] ? __pfx_nldev_dellink+0x10/0x10 [ 560.517346][T13155] ? rcu_is_watching+0x12/0xc0 [ 560.522088][T13155] ? cap_capable+0x107/0x460 [ 560.526668][T13155] ? bpf_lsm_capable+0x9/0x10 [ 560.531330][T13155] ? security_capable+0x80/0x260 [ 560.536243][T13155] ? ns_capable+0xd2/0xf0 [ 560.540566][T13155] ? __pfx_nldev_dellink+0x10/0x10 [ 560.545666][T13155] rdma_nl_rcv_msg+0x38a/0x6e0 [ 560.550411][T13155] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 560.555673][T13155] ? __lock_acquire+0x4a5/0x2630 [ 560.560594][T13155] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 560.567007][T13155] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 560.573957][T13155] ? netlink_deliver_tap+0x1ae/0xcc0 [ 560.579243][T13155] netlink_unicast+0x5aa/0x870 [ 560.584004][T13155] ? __pfx_netlink_unicast+0x10/0x10 [ 560.589283][T13155] netlink_sendmsg+0x8b0/0xda0 [ 560.594049][T13155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.599330][T13155] ? __might_fault+0x50/0x140 [ 560.603995][T13155] ____sys_sendmsg+0x9e1/0xb70 [ 560.608737][T13155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.614007][T13155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 560.619269][T13155] ? __pfx_futex_wake_mark+0x10/0x10 [ 560.624538][T13155] ___sys_sendmsg+0x190/0x1e0 [ 560.629205][T13155] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.634395][T13155] __sys_sendmsg+0x170/0x220 [ 560.638976][T13155] ? __pfx___sys_sendmsg+0x10/0x10 [ 560.644078][T13155] ? __x64_sys_futex+0x34f/0x4d0 [ 560.648999][T13155] do_syscall_64+0x106/0xf80 [ 560.653567][T13155] ? clear_bhb_loop+0x40/0x90 [ 560.658221][T13155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.664089][T13155] RIP: 0033:0x7f5554d9c819 [ 560.668481][T13155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.688065][T13155] RSP: 002b:00007f5555b82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.696458][T13155] RAX: ffffffffffffffda RBX: 00007f5555015fa0 RCX: 00007f5554d9c819 [ 560.704405][T13155] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 560.712350][T13155] RBP: 00007f5554e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 560.720294][T13155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.728239][T13155] R13: 00007f5555016038 R14: 00007f5555015fa0 R15: 00007ffcd113d748 [ 560.736204][T13155] [ 560.739469][T13155] Kernel Offset: disabled [ 560.743788][T13155] Rebooting in 86400 seconds..