last executing test programs: 13.494355406s ago: executing program 3 (id=2676): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x218800, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x35314241, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x7}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {0x0, 0xb}, {0x1000000, 0x1}]}}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) write$selinux_access(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='system_u:object_r:null_device_t:sent 00000000004294967295\x00\x00\x00\x00\x00\x00'], 0x47) socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r0, &(0x7f0000001140)=""/228, 0x87, 0x8) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/43) 12.355212713s ago: executing program 3 (id=2680): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001b40)=ANY=[@ANYBLOB="f8c8a03f0500000000000004002b0858fc"], 0x11) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000779000/0x1000)=nil, 0x1000, 0x2, 0x2}) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f00000002c0)=[0x0, 0x7]) 11.926841456s ago: executing program 1 (id=2684): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0xfeffffff) 11.88351252s ago: executing program 1 (id=2685): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x408, 0x3}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000040)) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)={0x4c, r12, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x800}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000f00000008000300", @ANYBLOB='\b\x002\x00\x00\x00'], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="08002c090f00"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x810c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 11.059846224s ago: executing program 0 (id=2688): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x4, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000740)={0x0}) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f00000000c0)={r7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r11, 0x3, r5, 0x5}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r13 = dup(r12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r13, 0x2000) 10.485582299s ago: executing program 3 (id=2691): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18d042, 0x140) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r3, 0x0) io_uring_enter(r3, 0x510c, 0x3512, 0x22, &(0x7f0000000000)={[0x8]}, 0x8) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES16=r5, @ANYBLOB="11032bbd7000fbdbdf25000000001400020077673200000000000000000000160000c40552635f6ed9668e27da6177f2d815266d2bfbe146ff8b285c04fa6f1d17d7cbb3d68fa858a6089830a99aff461bae0f0ac5efa87532542b6a9b822f7c9343dbf3d4adab56d3e23b1b058c48167e518640d82f6d0898a30905afc66866a902283fd8b2788d883fd1ce189e42967d4cfe"], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x8000000000000002, {0x2, 0x1}}, 0x18) sendmmsg$unix(r7, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000480)="00000080b9850a008bea07f05ff160245b8197e8a3a640a7aca967555f51f9c5df94565d10e751f0fdf2b1be3f2c06f7c7edf68cfef2f20baef7bebb22ef7a91a72d867d4efe0a7d58437cbcb3927e85648f03168e006467afef16ef6fbc729a76b481b59b683c42985865dfbd70ae609a644ddda4b9022b592d9f914da7d4761e39a8c1840e5570bc8ef4559069e4e029924493bd67c9af602a10bc18dd9439f17d2dae2d7bc0c6", 0xa8}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4136a2d6529d6be5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10008082) 10.146938595s ago: executing program 1 (id=2693): r0 = syz_open_dev$hiddev(&(0x7f00000003c0), 0x40000000000014c1, 0x103880) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x6) socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg(r3, 0x0, 0x4) socket$key(0xf, 0x3, 0x2) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1800) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000380)=0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0xfffffffffffff000, 0x1000000}) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x8200003, 0x801, 0x4, 0x7}) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x1000006, 0x100010, r6, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x2) r9 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000001480)=ANY=[@ANYBLOB="040a00000d000000050000004c6bc09f5a156f1ee39b763ddcbb626052103c678ce02c7a8d4b2e9f978d936e8a9a8d0f9a91407364422c1d56a3e707f9c9f70834d1f8038e02de39c389c18c8876b10a4c8f557eec57bb5c8d195560a0faca27b9add7ae7b59194f00b8bc3044fa1280368bd07416af150ec7301dcb542e8a5ccdf5f2c329241f847af2830ebe128153212bd1c84e34b753d6dd973c2192996294aeb613b9de6742b061b16b7ca511e2345119fa2a3611f8372908e3d4f5458888de9a829ce21c0a6a02cc32040e169e7a198444211a4801892fe447a60d1bb278289d120dbdf4bc75a1d26ada1f7ffbe67e57c438e3d35e7e8a86acddcadf4013ad97b9447c2aedb83749edc15d2d1f7316d783d195388c5ae2e975dc9140b40401010a2ca1058bd6f50a51ac43a3efb27af73f54a4c611db0d464a55c4d071e8df9f30c85be8122afcc10a8a40bfd7d2ad4bacc6b89018054a9eb7d93db7d902cb32d6d1829b6dc725cb7e3eaede569e668f2847bd94667f734a652ac87243ed3bc7efbb3f0edfae2716699c27e250df98ea65b6c6c1c098de543434f38272e9389ec051f28c8ae45f2ef3bf8b36d9e9961e1fbd2261d0cbc7b6f3007d07bf3634faf96c8e10d546932c2a010d6805b7ca76536077b7f8883e588dcf9c908331c672660a2a5f993c9740385a457d44bd107ee958d8db85e06a3525e2921102dbbdb107f7f95a8d877b11329d892153ce210a90863a0e9d2c930613534cfbd534437bf38bc63bd72e046693ac1669c909f5a95b731b12ef02c2cb027db6d9574f09b88cb82b10840517b322a178b918807f4c85449558218c942631570c6fcb0de4be5895381a51d0a54a549276eb2399dc11ef71e9157147bf782829861d8f7a156b37cbe01d73755c2bf312e2d400b8d80cd42daf2c31e85d6583952f103394301622d79b786795ff844a596adcaae6fecf023eb68a180c4e19a339bfcfed89b3f086c1449a78d671628988f8faee13fe3d4b07a910a8829cd805645f81598c6a35fbaa8ea0787ffc32eb0b4d179f51efb1af038ec19bc17e3577d3d461caf4a712f2732437c8c01a8ce692d5b1cbf3754653f4b7db3e09f192b7905fe627e311aa3269a4a773a237fe08e085500aebd3bd9577cfe7561f2f8d9677f4bc77e4bb6ed2f98529d0e4be386cd5e890f9d64bef36e37c63f45764963da94e5583f7c192fa1dfed9d44b7a4c5e7a44cdcdf92c57d5301909af8a5c002d3d07537c634ee113f07c16b677d3966e337b3360336ac8e52e0a35c23a873839395d3799d029c0ec745d77881afa8761459fb950f36c03c46e836130f8ad05cfe811431a61c0009a3414880db47a153f6fb8fd7dcce0515616e98b570c3cf0d5d3ed23c26156eb7812f66550b7614a001ccdfba83cdc4acee50f4567394094103f40810a22c3d9ea4ec4dfb3274b6294a5c794ed01cd91a81192e25a2990e6539c85d62fd3b2ac7b4ded24694fdf3725e3ba61f390e9c975a8bc051e2a9bc03c606e54ed9a6f048308deda12b5b96c25d6b04e01f429797e50e2de01ac699fa2a1fbca230bd826ace7eb735d4ee4ec114edbebdea54b8fb405ae840568528ea0aa761a0110751fe29b6cf038b3f1f0ad43a6d15c710da9552f036b197942d613240dd2826aebf681103e8e3bd9eda9dab1f375b8181daf0581cc7e041c412bdf6eb46bc634b1c499fc88d532d642019746d335ddf673af72834a86cfcd2ca33fc58c48789337171c36345d00b4383003b7a7eedb9a6e2a19273e274dad1ce5e0302c018fd952ff216a5e77da66be8aee7b1bea6808f1c618a0d9dcec0241ef9c5475b41ea0f15452ecab0ab8cc8b196e4c9674e92d10feb3255d96a60628e59b846514ed5ec6e474044934841a5c86cc89770ea5dd4c1e0811c9799b91ea303ff9387b43a9061beca388ab9e1c384f317853c7be99512c1a64c32a7d4ee09b7c703403cff0507ef858ac21273d665a6e25fb8005d4cd0a97b282c21067418767a1ff1db517dfdfa3db58d350d8b1afabfcb506a8ce5921dafd7432e69f702a532807766d79ab18cc035aa1ca7f699fa6243b8264f38c86f5b20637608ed66f3e9f9950982bd8869fef9a01fea3639bd7baf9ed7be25b1d46276bf69788ed716a60ef40bf045b5a9f779fc74147357e2a7fe97df4fcdc166da5cc8f70886c8d7300bf364c28098bfb2d29e6906717815e5552f281fef2476b3c780317f5bd61ed5c6f59d540188910aa8aae4d0851290169800e50caa894c98449b06ec5af6dc50c0b823069b6366dccf17da1e7f37fd6068e257c103aaf2d7f85e2d42f028cebb74f829a7045cc7908892d795c86067f37d22893b8bac527b55dcb4cc2fda3bbdd7ae91a75d95112768c9477c9d3665d18f00112de915e2f85b95a80b9775451a7c6d91181f40608c571d181cb8c81792e14e51bb9095f1d7b8860091c0d0a4a1c3e3d92d9136f2161a23feb517f83b2e570f5c1a6d52db5a35bb37a407977bfe48c7b5766d9dd2e85b6a6d08431c7235dd6a859ddb460db6bf6a4e4827315ecdeeab0b2a5c17513f57bfe65b28904d347359d2cc0d77b0f45b4f8b3bd0b5646eb9eca85b9160f7e9f9978b75026c019944a4af3436b32b14fd2d85b6aed31592e6a10e7a3c9caff27fb24172c509de9e1f7748b2230ced746a8de7fe3d790d34bbbacc66e648d9bd88a3eae604971d8822b38afab6ff9f1d79f3034a241228ae54cbf86599d2eca70eae2e6a848c92d33eb20c66793e162dbef282562fa1360959333aa19fa7e02b8305776b808a9cca46e857263ae0f6bccf0ef20626709f2ad32e3d66b3702b7c99cb09d70777c2f459d441260e4aa21a423b2a62cd8e724b202260da18578080e77ab8b2cef257375eb354ab187b3daa3b79c4640af85ef2ad3442104f58164360cc0234d221a3a28614fa43e2cb6271a2ddb8d3c22c7a36d97cec90547776aaa46b29c1658e2113fd819ade1d65d37ea953000a4c2902109d50a4f4f9e0aa95016132091e817b043ac5f0cc3b9366fcbb76bac83b9c49da917439c94ae2bfc002c3945976436e6253e3cabb9b5d0c913dba2346cc236cd48db0079c8357fa37c85ec3885cc438b0bf39c892eed66b2132158a895160ed639b61c8a7c9d00ad5359911019e1d11aeebb1043e4c827fd879a05867945f4611b2609f5b7302717f4f96a4ba768e741c4d6c59b90315eb71595e8729b14335aaa2fb8b9ebb2f620ae399b7c7a9336ff14b315059e00b5fec269f764038040cd3a4efcb73eb790794c753968d3c228b40310effe2a6312fced9616dc31586c367865f428b7ae4e17ca59182d0cbfd4ac146359749e33fd1ac55ec1f2168e18c79dbb307f86be04e2ed9066b5326ce6edf8b12ee703af79759ff5fa9694a6d5f69bf45e05cd39cd2cebca1c1e35878d0bd2464404740fbe71b0f9dff750edab2184f0c3f5c2c8346f638c93f35a2cdbcb1893cf44e4fbe6cf7555e15626b72572f61bda4052f9ec8eae383885f83300efcdad413fba4b75475631d874e7aab41dd59b827ea872640088c64965d0ea1e768c54d6b464b121ffb6252d0c8dc9f3cc8d845c1e39befccfa2f77b91bb65416745caf51f"]) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x20000bbd) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 8.110238205s ago: executing program 2 (id=2698): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r5, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r7, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_enter(r4, 0x7dbc, 0x185f, 0x22, &(0x7f0000000040)={[0x7]}, 0x8) 7.074833238s ago: executing program 4 (id=2700): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [0x7fffffffffffffff, 0xc1, 0xde, 0xa929, 0x5, 0x8000000000000000]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00') ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000180)={0x3, 0x7, 0x0, [{0x4, 0x8, 0x7f, 0x4, 0xc, 0xee, 0x81, '\x00', 0xdd}, {0x4a3, 0x100000001, 0x2, 0xe9, 0x5, 0x4, 0x6, '\x00', 0x2}, {0x2, 0x5, 0xfffffffffffffeff, 0xff, 0x40, 0x81, 0x4, '\x00', 0x9}, {0x3, 0x1, 0xffffffff, 0x4, 0x2, 0xa2, 0x3, '\x00', 0x2}, {0x7, 0x200, 0x7, 0xba, 0x1, 0x0, 0x4, '\x00', 0x7c6066d4}, {0x2, 0x1, 0xffffffffffffffff, 0x9, 0x7, 0xb, 0x7, '\x00', 0x3}, {0x0, 0x2, 0xfbae, 0x6, 0x9, 0xff, 0x0, '\x00', 0x100000001}]}) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000380)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/custom0\x00', 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/custom0\x00', 0x802, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x880, 0x0) ioctl$SNDCTL_TMR_SOURCE(r2, 0xc0045406) r3 = fcntl$getown(r1, 0x9) write$cgroup_pid(r0, &(0x7f0000000480)=r3, 0x12) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x90040}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={0x318, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcc2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x567}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x915}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @local, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80000000, @mcast1, 0x9}}}}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "ee7354f802087db6407dbc2cdb9c870aaf3d9f1e1fb50f65bf975376d849c66814280ed2c41e339d9ed05cce03b4ba68476133557dc8b51fd24cc5bb5cc3b1656ee8e9e7081d8892a2a5dcca53106ad36cd406a42e0045f102edace6766cc073108256915dc5acf0e579a894322a905f1329a61ac762a4a3cceb1baa27b72248a1fe306a9f4d7030b2bcf727f6a78ff81a37f7b41957c8"}, @TIPC_NLA_NODE_ID={0xee, 0x3, "17042c85d96083855184272e71e16ebcade3ba9279f3886f8d184b505900393b0930d4f0a88d04e3b9889e74094e60cbe6567f3e1ffadc6607a819aecc7321e19adc8330ea17d2448d144a68dadfb0924bd72361b8fe8f351ff89fc1955df532975717489fb52813fb237bd4333daf3812020dea8164ac0527a207da897b157259fa6bf07d3ddecc2491b67f88208a5226692eb2d44e65a7d42c554c4b61d371daa210c86d1a630e9d5c450a2dc7755dc613ef7961155e55e53306944a280e0a974dcf054cbc34516122caeda9be27d2e8b5adaf4623ec5f6e537e22ca62a0fb6e8a3a2cc01eb1bb81eb"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}]}, 0x318}}, 0x4000) r5 = fsmount(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000900)=0x10000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000009c0)={@initdev, @empty, 0x0}, &(0x7f0000000a00)=0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a40)={'veth0_to_batadv\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000ac0)=0x14) getsockname$packet(r5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b40)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xf8, r7, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x6000081}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000d00)={0x0, 0x5}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r12, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, 0x0, 0xd00, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x44}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x3a}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xc8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x20040000) r13 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r13, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x7c, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8db}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d2d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff4ec}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7.017488558s ago: executing program 2 (id=2701): io_setup(0x3ff, &(0x7f0000000500)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) dup3(r0, r0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) open_by_handle_at(r4, &(0x7f0000000180)=ANY=[], 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xfff2}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x1a4a, 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1e1a00, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r10, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmmsg$inet(r6, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000c0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 6.937809536s ago: executing program 0 (id=2702): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setitimer(0x1, &(0x7f00000001c0)={{0x0, 0xea60}, {0x77359400}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0xffe, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x400486dd) 6.728474962s ago: executing program 4 (id=2703): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001280012800b00010065727370616e000018000280050016000000000006000e000071"], 0x48}}, 0x0) 6.727822124s ago: executing program 3 (id=2704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x6000, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.491410517s ago: executing program 4 (id=2705): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc769}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="150000503230304b"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000540), 0x400, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 6.486172906s ago: executing program 1 (id=2706): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/113, 0x71}], 0x2, &(0x7f0000000740)=""/5, 0x5}, 0x3}, {{&(0x7f0000000380)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000800)=""/185, 0xb9}, {&(0x7f00000008c0)=""/84, 0x54}], 0x2, &(0x7f0000000400)=""/28, 0x1c}, 0x8}], 0x3, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000240)={{0x32, 0xf7}, 'port0\x00', 0x16, 0x400, 0x3, 0xd489, 0x0, 0x9, 0xf, 0x0, 0x0, 0x5}) prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000001090101000000001700010000000007"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r6, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setrlimit(0x9, &(0x7f00000001c0)={0x5, 0xdbc}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) close_range(r3, r7, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xfffffffffffff000, 0xfffffffff0000000}) 5.963102765s ago: executing program 4 (id=2707): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x1009}}) io_uring_enter(r3, 0x29ed, 0x8a24, 0x4, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.827343407s ago: executing program 2 (id=2708): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x218800, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x35314241, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x7}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {0x0, 0xb}, {0x2000000, 0x1}]}}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) write$selinux_access(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='system_u:object_r:null_device_t:sent 00000000004294967295\x00\x00\x00\x00\x00\x00'], 0x47) socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r0, &(0x7f0000001140)=""/228, 0x87, 0x8) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/43) 5.73236917s ago: executing program 3 (id=2709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000020601040000fffffff5000000000000050004000000090005000100060000000d000300686173683a6d61630000000005000500000000001400078008001240000500000500150028000000090002"], 0x5c}}, 0x0) 4.757874773s ago: executing program 2 (id=2710): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10}}, './file0\x00'}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) (async) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0xa, 0x0, '\x00', {0x0, @reserved}}) (async) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x4) (async) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000100)) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000140)=0xffffffffffffffff}) (async) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@bcast, @default, 0x1, [@bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000240)='./file0\x00', r0, 0x4000, r1}, 0x18) (async) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001300)=@buf={0x1000, &(0x7f0000000300)="87cca2bf53f272a42944a2eb34e522b13bd5123dcdbdca2106a71b7adf1b9dc27076b038cfde770cb2767dc8b63b690702db0fb414256faa8171e550e1e466d433cc47d3aa2de4723d71a1b2c600accb2560f6e4e2a19f2ce3babde824de037c1929ee1609ea5914394cd2812a1855ce2aab8f4f58095f160ae6feab73a329fde6810ac0db3bf0ce450352e80bcdfed11c88a9f6187604fa6d2de5f9f8bf5b160736533f62ee2c9466e648fceff98d972927cb00735a37971b227a0989b1ae3e38d8cc392a37c6e214c1d4a61f51f6e87839d91bb43ab17dd6190966a1477448e8c3215e797938dddf2a9a4ac9517c181aa52e7675ba0b37892b27e7ac8f258d3c851e432c633dcdb0c18dbf4bc11940d204e2bd4a7038b1f19edf86fbee13220955bd481323d7dc68bf22b98a230126922b9b3475d2d944aa7e31e4a62715c3efd702228d43315ad64003947904a678c9bd3c13c169ea3053947d57b6ae0c2e864ab9c42afc94b3f4369819e4a90855ffe7539bb5227f472aa3194f61434a61624f2619c0d9c41eba9a97ed15323adac8af89b8801d6130c9d2804eaddd0b8c0e897d4a963582c2d0d88abd9e526aa3553ed72ea6014f81555bd92dc5f7821fb9647229909908d1defb1b5907940a31093e2dfb5f31ae2bb69004cdb1decdafd223b330e12b7df17e15941c92e238c06d9d96b40361660996b25bc104cfc7e9875f1322b77fc6de197621309738ac2626dbdbf61d828e1b8c080e5eca641dcb9d460cb99dd1fc337413a6453d537675e17635bca18c2c72be8d89b6a8dc6e874363912e200bcce745482b13ecccc72658f3a95e827618813649d36f66698f2e446c7c9005330d1374f580b13cd85f480398888682f51e9b5b10b07834826b79ccb02022792c2e31bea76cd08bcb4a4c3c71033a3f2f84468f9fea78d27b076ea70f8333e665909ea26a84464f59a931ed056d60eb3561667c8dc0ae9ca1cf84cc4354e018ff1588cd27dd04461bc5adcb49b4ca32efb012b8dca68efd3092f0b314ff09374f00f42f0978109bb0b0e9377b1acca6e526ea1e640f8cdbedf93ff6c1dcf9a230f6ccefdeaf4bbb9266f111525f867def16e2019380abe24577e4fff314062ee365a2dd60ae2eafc14c96047762c1f44e4fd34c7d79478db29c5f3902d4ae35d96a0b9d58d7520824f5882c72da07e82b4255136c2fd8a2115a04ac7737d6c1bf44c843c4081f3080a962322729c7003ee4feb2537c7b9f50fa689dc1e19baa59d2875b7dc93b9b36a8fda467e495f45370d9afef8c12f7a18e3a243e94917d71895a869334647d78f4d02ce423449dd095e3331fc23af55b882f7ba6ca985d80e8569c15a6a557a4f7ce6b1fdf090297473f2ce7773f47907c27fcf16374a4f70e6aad4fc9bbc1380b5b9f3ccc7f279880c9c6af5826eda73cbe73b5c5b00229a8f6c2a821addf46904e7ecdef82faf1b14c28c90c75423eb22055837bef2085c1f5dd1ced8840ec7781232dee7338dd0f1c33e12e600c7d701ebab8a743ed7140cde9e09a0b29c5720afccfb6d8109be201bef81adc21d00e7ce83f959187af0a5bcc359dc7104f3881e0876e545950dbd0d15223d2834e4c47a93ee1c699fd7158125899bacf16c6dbded37d8228d6cc9015e43471170abdec61359505a0c03bb621da0378dfbfc7e72dce9c160796f3c0a35a029bcd0da6393da8752977aae409d9b3d1fe1254a48cc8032d4c8e7c1b43664d8ddb27c21dc47e8c41593631c805e798b7030a91ddb999ff2ca2a3283d9e0a98c89c37c9a7b36a2270b2e4b73723344bf6a78096d829c4e116b0e5649024848357bd4faeca5d92d3ad08820f7a7e7406cd539107eb7d690a4eaedfd09879d183abeab9d3dd2a95223625c338d13e25acf1c911bc67a799d4854e29145b5e31f86d75f9230568ccd9c858080668d2df6e44d56f88c11fcf47c512809d920bef4de1800d87333774f58e9d38bef2b8308080d293d0e451be0b00d515e8d1bed68ba0276c6c75ffddb381b35b92e269e8ec363c960d93ea5f3b3d7e30e3164e2351b3a6893ac3745e65a45ed64c5e3785ab79321c776fd961677076675ca9975d562f714e0dbc424da99fd7a6600376c02f882911d0c0c22b632135aca70a77f573aaafa499cb01f72d91a9142d83c4313efc46152c99d3978e670d837a9b6a42f685eb0308c654d08e7a7330cdba2c392b28ae62467d367c71ddb09fca4fa666eb4514e30e2fe76fcc7ef3a6ee3b45c99b3f6d23c42e7d6762a15dbe440298ee7dd2df714d7bda5d5f848878d10a1e0753a64dbb8a718335bc5cc34ab953919bece3861321a817a34b37e69841936f28dcd5226c840956646269c67a47db259a5ee08c4f04ee9e0a664eed4755b5bb9f7097caedde7671cf948b914f3e93a16202c9580ca48a7b29f5cdc42e3b3ee384c018c3f5c1bba3fbccbafeaeb11c2f89a87efd8168be1917432e0973d9b5bbf0f710fe8714e89b15cb2cc7ae73f0185af4a1a034cfbc22f8c168c2f6e75d2b52f8ec8a6e6c80f9cf9443984007ee261e34d9ca53bc65d77c0cb7deb76783751d14f4983fa7948f58fddb08ef4c11207ac7064f71800bfbc2beca13e268cf363e1eef50a6c0c7c8e79b6f221ce38c45dd91377737ca78999fd7158615f56736e3e4255276497740bc730f6aec08f58fa15e11f6fb85e70356e3c4ded2c438c797693f748eff9f1222f2f916b630ba64f3d4c78ef54aaf9f789a882cfe4c8600d18b28f149b6ac88738fb47701a2b4e7b30ce691edf247424a98ec9398b711730fa6d838e0cec459c3ef074d62c0462e316540254b28f92f998969f3bda16a4daf097b12cd65b97c24181843f145978c47901e7d6bfc14c64e967e875990dcd905913137aec7b91c5d353f99a50d36817d059e76c431e0df5f73f319e49e3e73d29767f641c295c73eec821f3b60ffe1cc4d8543a5fce9e238f7d58268f3c2d24f03f018203142365fe3f477bbecdfc5aae9cd94e971c1bef6784583509fa8bd84dad74ca3d09d0f2707e49900b05fa92d69d0285b3d9d48cf36e64038a6352ebaca0d743d78bb6474339464a9216a9eb3dd7d2282bde60edea1e59f04f27684ff3341ea5323c716011af8467001e4757ea46b993fc49109e7f8182d480cc0bc3b5a59a11c5e767dffa65b364ceb49ac5ff22cec5a89e668a4fbd5a08ff52f6e0a0687adaa547f5d920250e43a98c704ab9095cb16bc04c4e373065f99a70036fddf5a0b5be16ee45ada28cdc6ed313edccee93edc3843e3112afa6dd4e3f1ba4195c993377fd5dcab1972a1cb01cec71c5095e85effdbad0a6cf5f6f8f11befd8dd4c0c588d97ffad64be83f5590b1dc6f0a424e7dc533af7c7a5eb5e191832bd97733b006a6b90533a11858a3ec5c6f15ea52a0809a8191cdfe59c0184267dbe220110d0f0ccf546aa3ed68c49c6aff6c01a7ef448747d233f4776cc7958a9bca22e24e34a86cda94ec301839138541537aa78b5cbbd67ed17a10d3cd737c859a3f6e1e2b7044d7cf76204353e9c621b4c5055270462cd60c3852efa85b2e0169f67baebf99b095a9e118cd04a592342d2957df75af3f8f81a2e4e31c1989990d482de82c244785398ea07024e8fb443e37047fea224b97c466dc085d76041e4b407c90da09206d319785c2d1a11222082bb15bc31af6e66150c2f43354e7ed19763624e187c00c523b0e73c8f7d637ff75ab7096d54e6952cec1714d23311aef82852eca1f8b17037614bf9959a95385b0d386de149ca044653f623c9b2975e5854e7ed9dd0e6069ffe21fc0066f2ca4365a60cbad205ec1b2da7c94e1b15b3e6d83ab0377ed46118b60263ab3e03938a361795a5087d46eed113a02b4fbc2fed844d4952dbe46ed2b0a2be9b8165312acc521e80ffd38463379aaa6b6d562c28c08dcee368d701f5272e50652366be94c2ea78d2077aaa403d167f47ce595684bde9a1bf70f513f0619f501636163dfb6dc1a313cb2c706cc53314c30aca0f9d858ca6741f235fd87dbaacce84c03411a16153f4083601a9b908515d891c29a83066693c8e4171b6fa47c70a39fa0f6663791f53dc6073cb83498f3cc67a42da02b5987751aec0bef9b30446100fdf9736048a2f840adc6aa5352feb50dc2b01ef45b843bef5e476e81ff7f291cee8f341b3e6c94adb52fc96f61218f03fcf1650be34a4b98069ab9e2201d56ce206570bc0170372769b0703151c7bdefb9a07c5378100355cb757735c5266f1401ad4188d57f16cf8c3546eb227e4194087333a9c42eb76467ec239c3e4701b631746a6b5d643618c16496cf3a8a80fe008ecb8a534ff9fb1c86e41c1a8b79be49000fd72b55e265e0db4fe9d7787de90ba34dd5079a8614823d370fb71b02525175ff2ac90084280e6e50678405fae9a5f9ccc8c5beefd63d413368a52ab80ccefbf2528c05d34875ca0052b095fa3c9cf9145e53c63cb30f85ed385981ef00a5db2220158bd30cef52e7e7e8a6587f5c3e76144a51d36582354c7d350400e705fe616ab7668b2250af1a62b54467062664c568fcb63ca10fe02e3d2868f7b6f3629cd592b898a4fac56c2b2f434e61ada2faaf8610fb5e3aefd52fdaab6111657a7403319cbcb3aa20b4e972604fe50996fbb052b27d87297c1756bb28dd6e383edda465614f06361ab6a0212ff86ce4af08056ed5417c2a4cd4bcf9fe6aca36a3e044d4a3d7ce6a09a81e2ecf773cbd1144e47c590439430be57bc39f9ed10ba8686fcd1797ce5ab5b6e1a66de07524ed7edc18ff9df43760e1457de63c56d2e2287455e6369a8a3122ab5d12105d650aca8c6e731534878be3f55414076e1c53c53e9f908903b9cbe92e749a3e8ffa7e23fc87577e090a772e92a4d0f25bb076449b438ae533801dc5c1930d95d37198f4d80e705aa23dc05386d368e417fc9c9c675e2a7c43ddb814c720e4d0abd4a39df66d17c374b0da609c7f90543c5b111333527e61a914d533282e8fa923c1746edf876d7c0afb18a2a458ab7d2e743db22a2cf75022a6e2db88883a2cca5fad3ab0eeb10955a0e00ce6bd77ee28d2656b0975a60cbb3caa8e3684b7ee146ab2f76864e8099343d13f7d349de378ea0e9a2a539318806e89f707ea052397443f522c9e748bffaa8e41e528b82421e98f48dc304f086f68ce202bcffee44cd59e6c8bc44fe143216e5d4d26c6d0596d74e1e5d240d8f60fd765bb7dd20d03116a28dcc925b50b30e0cb903986ec8ff5f9a8fd0d0b8f8c776adeb298afca98558d3f1a4a33611284b3766afc4b1a54cf73eb70ede1c8d06c3e23042cdda5810110faf02d9add8bc9cae06e490ff5768706c3a3724024b2d798c25942c80fb07ad1356d9525e3f3de5142682c3f66bf2232ef2636028fccba057b67f8cfb1939339a6aee069986002d52003e18ff1203cfc82dd698755f42b0d1b3c39fbd99bdbcd04e12a70f4379b01da58e1e5c9439eeeb628f5119bb3c3f8bab1dd8472ed1fe5befcdcd11a420c85e0a220b7635bc621d3b79ded7ab20a613e7315212508c0f194b7b181cb32ac3d8b2a2a3ac91ae0c5e3413f9c1e4b4cc98c7c0c9e038d6ab2595e3ee67a2c01e543394b0cb308bb79d9e5f450e40fc0e7c2720e29fc117d74d5c1fc9b0fc6ed68b05c98d4f69d8a7df184f080cdeb43b76ed37d0ca88f6f89f059e3f326405c40337728243bb1d4d64f8a80b69e9747a2e964f8779ffff4bb034b0af0492f2a062b772a3523c026bf6c78f87a59640"}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000001500)={0x1, 0x1, 0x1000, 0xec, &(0x7f0000001340)="0dce7be303f90f4d96cad7628279c50f8b22bd5c3cae2fff53cfc06de8ba98acc8e3834bcff00576f9c1a191cce29f8e89b199ac7fdbe3d96711c96dc66ad135d4ab2e72ad20febe42d03c134e81e68ec5d81c30900d2c278a7331b920757ebfb0349f77e2c0b1a6dbe4cf7ed3a640fe2084f33cde82e4839393f522c8c46c109f016fd8c04dcbce15776e8a5f8ed2d3e7ea3f7480da6686a70509e9e02dceb3a225bd5a0b6511600f4fa68851d84705b7d11dc3bf6f9b5d4e1d3ff59a0f4959a5d5605f4417fd2aacce92617c20bb15925375d1c0da308a035b1df78134322ebe50785e99da800568a7cc09", 0x8c, 0x0, &(0x7f0000001440)="416e4dd794d65d9b6ac598cee27880f1f208016d25c3387e8df6f6110fbb011b92c665de8cf2b2fbe9fb6e877310895d560ee38a2ec976e553019ffd3af90d4ec52cc4ea315e25c957d438ff86a6f3656285f4a3bcda713f440264dc69c57ce95e30eee4610c170e0558c9d169654ec0ff8dd7dbebf8bee4c49ceab5e28bd3381e7d49f25b4730d259b51e5d"}) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000015c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000001700)=@multiplanar_userptr={0x6, 0x9, 0x4, 0x4, 0x401, {r3, r4/1000+10000}, {0x5, 0x2, 0x8, 0x5, 0x8, 0xf, "61047bea"}, 0x6, 0x2, {&(0x7f0000001680)=[{0x2, 0x3ff, {&(0x7f0000001600)}, 0x9}, {0x4, 0x2, {&(0x7f0000001640)}}]}, 0x4000, 0x0, r1}) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x25}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x5c, r5, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x200}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000001a80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x15}, 0x20040801) (async) recvmmsg(r0, &(0x7f00000044c0)=[{{&(0x7f0000001ac0)=@nfc, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b40)=""/251, 0xfb}], 0x1, &(0x7f0000001c80)=""/231, 0xe7}, 0x6}, {{&(0x7f0000001d80)=@nfc, 0x80, &(0x7f0000002f80)=[{&(0x7f0000001e00)=""/131, 0x83}, {&(0x7f0000001ec0)=""/189, 0xbd}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x3}, 0x7}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002fc0)=""/98, 0x62}], 0x1, &(0x7f0000003080)=""/54, 0x36}, 0xc4}, {{&(0x7f00000030c0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000004380)=[{&(0x7f0000003140)=""/41, 0x29}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/253, 0xfd}, {&(0x7f0000004280)=""/195, 0xc3}], 0x4, &(0x7f00000043c0)=""/204, 0xcc}, 0x8}], 0x4, 0x12003, &(0x7f00000045c0)={0x77359400}) (async) bind$bt_hci(r0, &(0x7f0000004600)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000004640)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000004780)={&(0x7f0000004680)={0x1d, r7}, 0x10, &(0x7f0000004740)={&(0x7f00000046c0)={0x4, 0x225, 0x40, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "bdd970a46b2d93c2"}}, 0x48}, 0x1, 0x0, 0x0, 0x10004000}, 0x8000) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004800)={0x0, 0x38, &(0x7f00000047c0)=[@in6={0xa, 0x4e22, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, @in6={0xa, 0x4e21, 0xdb1, @local, 0x3}]}, &(0x7f0000004840)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000004880)={r8, @in6={{0xa, 0x4e20, 0x9, @mcast2, 0x4}}, 0x2, 0x40, 0x8, 0x8, 0x10, 0x1}, &(0x7f0000004940)=0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000004980)={r9, 0x4, 0x7}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000004a40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x828, 0x510, 0x3e8, 0x0, 0x2c8, 0x2c8, 0x758, 0x758, 0x758, 0x758, 0x758, 0x6, &(0x7f00000049c0), {[{{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x5, 0x8, 0x6, 0x4, @mcast2, @loopback, @mcast2, [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], [0x0, 0xff000000, 0x0, 0xff], [0x0, 0xff000000, 0xff000000, 0xffffffff], 0x110, 0x100}}, @common=@ah={{0x30}, {[0x4d5, 0x4d5], 0x4, 0x7, 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@mcast1, 0x31, 0x33, 0x7fff}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffffff, 0xffffffff, 0x277bad3985daf334], [0x0, 0x0, 0xff, 0xda9114315df26ab6], 'veth1_to_bridge\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x2b, 0x7}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @empty, [0xffffff00, 0xff, 0x0, 0xff000000], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', 'veth0_macvtap\x00', {0xff}, {0x80}, 0x89, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffff00, 0xffffff00, 0xff000000], [0xff, 0xffffffff, 0xff, 0xff000000], 'syzkaller1\x00', 'pimreg1\x00', {0xff}, {}, 0x33, 0x4, 0x5, 0x3c}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@l2tp={{0x30}, {0x1, 0x0, 0x3, 0x0, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x8}}}, {{@ipv6={@empty, @remote, [0xff, 0xffffffff, 0xff000000, 0xff000000], [0x7f0000ff, 0xffffff00, 0xff], 'ip6erspan0\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x62, 0x7f, 0x4, 0x51}, 0x0, 0x208, 0x248, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@rt={{0x138}, {0x0, [0x6, 0x5], 0xb0, 0x10, 0x1, [@mcast2, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @dev={0xfe, 0x80, '\x00', 0x25}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xe, {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x888) (async) getpid() (async) setxattr$system_posix_acl(&(0x7f0000005300)='./file0\x00', &(0x7f0000005340)='system.posix_acl_default\x00', &(0x7f00000055c0)={{}, {0x1, 0x2}, [{0x2, 0x5}], {0x4, 0x2}, [{0x8, 0x7}, {0x8, 0x2}, {0x8, 0xa}, {0x8, 0x4}, {0x8, 0x6}], {0x10, 0x6}, {0x20, 0x4}}, 0x54, 0x0) 4.623325582s ago: executing program 3 (id=2711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffff, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5888, 0x100, 0xfffffffc, 0xbfeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x1d, 0x0, r0, 0x80, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r3, 0x351e, 0x884b, 0x0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r7 = open_tree(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x81901) mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x9000, &(0x7f0000001dc0)={0xf0, 0x4, 0xe0000, {r7}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x800000007, 0x8000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xcb}], 0x1}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800) 4.473879913s ago: executing program 0 (id=2712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41002}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0, 0x0, 0x1000000000009}, 0x18) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000600) 4.45881231s ago: executing program 2 (id=2713): socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x7c53, 0x20002002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$key(0xf, 0x3, 0x2) close(0xffffffffffffffff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x40) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x7, 0xc1, [@multicast1]}, @ssrr={0x89, 0x3, 0x21}]}}, @timestamp={0xd, 0x0, 0x0, 0xc, 0x3, 0xb, 0x401, 0x8000}}}}}, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.279234568s ago: executing program 0 (id=2714): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18d042, 0x140) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r3, 0x0) io_uring_enter(r3, 0x510c, 0x3512, 0x22, &(0x7f0000000000)={[0x8]}, 0x8) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES16=r5, @ANYBLOB="11032bbd7000fbdbdf25000000001400020077673200000000000000000000160000c40552635f6ed9668e27da6177f2d815266d2bfbe146ff8b285c04fa6f1d17d7cbb3d68fa858a6089830a99aff461bae0f0ac5efa87532542b6a9b822f7c9343dbf3d4adab56d3e23b1b058c48167e518640d82f6d0898a30905afc66866a902283fd8b2788d883fd1ce189e42967d4cfe"], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x8000000000000002, {0x2, 0x1}}, 0x18) sendmmsg$unix(r7, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000480)="00000080b9850a008bea07f05ff160245b8197e8a3a640a7aca967555f51f9c5df94565d10e751f0fdf2b1be3f2c06f7c7edf68cfef2f20baef7bebb22ef7a91a72d867d4efe0a7d58437cbcb3927e85648f03168e006467afef16ef6fbc729a76b481b59b683c42985865dfbd70ae609a644ddda4b9022b592d9f914da7d4761e39a8c1840e5570bc8ef4559069e4e029924493bd67c9af602a10bc18dd9439f17d2dae2d7bc0c6", 0xa8}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4136a2d6529d6be5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10008082) 2.764521608s ago: executing program 4 (id=2715): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x3, 0x60400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bb, 0x1, 0x5, 0x1c3}, 0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200, 0x2, 0x3, 0xb, 0x13ec, 0x1}, 0x20) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x1, 0x0, 0x0}) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 2.743397095s ago: executing program 1 (id=2716): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x3, 0x60400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bb, 0x1, 0x5, 0x1c3}, 0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000080040000000800100005000000"], 0x1c}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200, 0x2, 0x3, 0xb, 0x13ec, 0x1}, 0x20) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x1, 0x0, 0x0}) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 1.341605679s ago: executing program 4 (id=2717): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x6f, 0x2b, 0x1, 0x8, 0x1}, 0x0, 0x0, 0x2, [{0x49, &(0x7f0000000240)=@string={0x49, 0x3, "24a6f83abab2f641d0d11b32a757dd5cc75ee9cf4f45e08fba6f577d7304ae57cec1ffdfae0eb7902b1e3c12e3285402955f3c1db180568d705b552d907f74e44b7fc634a6f95a"}}, {0x10, &(0x7f00000002c0)=@string={0x10, 0x3, "06b58596d4291d7b6f0fdbf3f896"}}]}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000071c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00140b000000a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000440), r6, 0x3}}, 0x18) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r7, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x7041, 0x0) 1.31513506s ago: executing program 0 (id=2718): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101000, 0x120) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 195.372268ms ago: executing program 0 (id=2719): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000080)="09000000010001", 0x7) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x32) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) syz_open_procfs(0x0, 0x0) connect$pppl2tp(r5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x6e, 0x0, &(0x7f0000000340)="8c0657f71fa5e7a15c00dd0a9a9cd27d18023b7bed1ca53460fd6d557df0e576d57302c520b4b7aa0c5b731fd74572337f5eec475bedaff45bc36156ac745ba9f09f470f54ede8fed21b7a7b4ca4f7716541022e5fa98642ed0e210e8aeede14944cf0631fccc2f15a6a2a3e2bdc"}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 116.911487ms ago: executing program 1 (id=2720): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1}, 0x38) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x8400) 0s ago: executing program 2 (id=2721): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000f00)={0xffff9b61, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs(r1, &(0x7f0000000000)='pagemap\x00') r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) kernel console output (not intermixed with test programs): 00 audit(1757187023.665:2620): avc: denied { name_bind } for pid=13074 comm="syz.0.1989" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 659.267615][ T30] audit: type=1400 audit(1757187023.705:2621): avc: denied { node_bind } for pid=13074 comm="syz.0.1989" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 659.392958][ T30] audit: type=1400 audit(1757187023.705:2622): avc: denied { write } for pid=13074 comm="syz.0.1989" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 659.462071][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1985'. [ 659.464861][ T30] audit: type=1400 audit(1757187023.715:2623): avc: denied { write } for pid=13074 comm="syz.0.1989" path="socket:[38447]" dev="sockfs" ino=38447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 659.641363][T13086] netlink: 'syz.0.1991': attribute type 4 has an invalid length. [ 659.843581][ T30] audit: type=1400 audit(1757187280.824:2624): avc: denied { ioctl } for pid=13083 comm="syz.0.1991" path="socket:[38463]" dev="sockfs" ino=38463 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 661.198469][T13098] tipc: Enabled bearer , priority 0 [ 661.839130][T13112] netlink: 'syz.4.1997': attribute type 4 has an invalid length. [ 662.282518][T13101] syzkaller0: entered promiscuous mode [ 662.288010][T13101] syzkaller0: entered allmulticast mode [ 662.833431][T13095] tipc: Resetting bearer [ 662.866582][T13095] tipc: Disabling bearer [ 663.180623][T13126] netlink: 'syz.3.2002': attribute type 1 has an invalid length. [ 663.188541][T13126] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2002'. [ 663.658703][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 663.658717][ T30] audit: type=1400 audit(1757187284.905:2630): avc: denied { read } for pid=5515 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 663.693654][ T30] audit: type=1400 audit(1757187284.915:2631): avc: denied { search } for pid=5515 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.724131][ T30] audit: type=1400 audit(1757187284.915:2632): avc: denied { search } for pid=5515 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.748277][ T30] audit: type=1400 audit(1757187284.915:2633): avc: denied { search } for pid=5515 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.769954][ C0] vkms_vblank_simulate: vblank timer overrun [ 663.781139][ T30] audit: type=1400 audit(1757187284.915:2634): avc: denied { read } for pid=5515 comm="dhcpcd" name="n105" dev="tmpfs" ino=8735 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 663.802880][ C0] vkms_vblank_simulate: vblank timer overrun [ 663.815252][ T30] audit: type=1400 audit(1757187284.915:2635): avc: denied { open } for pid=5515 comm="dhcpcd" path="/run/udev/data/n105" dev="tmpfs" ino=8735 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 663.838290][ C0] vkms_vblank_simulate: vblank timer overrun [ 663.933827][ T30] audit: type=1400 audit(1757187284.915:2636): avc: denied { getattr } for pid=5515 comm="dhcpcd" path="/run/udev/data/n105" dev="tmpfs" ino=8735 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 664.818739][ T30] audit: type=1400 audit(1757187286.065:2637): avc: denied { listen } for pid=13137 comm="syz.3.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 665.015501][ T30] audit: type=1400 audit(1757187286.265:2638): avc: denied { setopt } for pid=13141 comm="syz.2.2007" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 665.017293][T13142] netlink: 'syz.2.2007': attribute type 9 has an invalid length. [ 665.035945][ C0] vkms_vblank_simulate: vblank timer overrun [ 665.060786][T13140] vivid-001: ================= START STATUS ================= [ 665.072938][T13140] vivid-001: Radio HW Seek Mode: Bounded [ 665.079150][T13140] vivid-001: Radio Programmable HW Seek: false [ 665.091156][T13140] vivid-001: RDS Rx I/O Mode: Block I/O [ 665.096863][T13140] vivid-001: Generate RBDS Instead of RDS: false [ 665.109151][T13140] vivid-001: RDS Reception: true [ 665.116126][T13140] vivid-001: RDS Program Type: 0 inactive [ 665.126955][T13140] vivid-001: RDS PS Name: inactive [ 665.137311][T13140] vivid-001: RDS Radio Text: inactive [ 665.147285][T13140] vivid-001: RDS Traffic Announcement: false inactive [ 665.161114][T13140] vivid-001: RDS Traffic Program: false inactive [ 665.167607][T13140] vivid-001: RDS Music: false inactive [ 665.175333][T13140] vivid-001: ================== END STATUS ================== [ 665.340457][ T30] audit: type=1400 audit(1757187286.315:2639): avc: denied { ioctl } for pid=13137 comm="syz.3.2006" path="/dev/radio2" dev="devtmpfs" ino=968 ioctlcmd=0x5646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 666.423209][T13158] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 666.475550][T13161] binder: 13160:13161 unknown command 0 [ 666.490527][T13161] binder: 13160:13161 ioctl c0306201 2000000001c0 returned -22 [ 666.498566][T13158] CPU: 1 UID: 0 PID: 13158 Comm: syz.1.2010 Not tainted syzkaller #0 PREEMPT(full) [ 666.498590][T13158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 666.498600][T13158] Call Trace: [ 666.498607][T13158] [ 666.498613][T13158] dump_stack_lvl+0x16c/0x1f0 [ 666.498641][T13158] sysfs_warn_dup+0x7f/0xa0 [ 666.498667][T13158] sysfs_do_create_link_sd+0x124/0x140 [ 666.498690][T13158] sysfs_create_link+0x61/0xc0 [ 666.498713][T13158] device_add+0x62c/0x1aa0 [ 666.498740][T13158] ? __pfx_device_add+0x10/0x10 [ 666.498763][T13158] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 666.498783][T13158] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 666.498809][T13158] wiphy_register+0x1df4/0x29f0 [ 666.498831][T13158] ? netdev_run_todo+0x864/0x1320 [ 666.498855][T13158] ? __dev_printk+0x270/0x270 [ 666.498880][T13158] ? __pfx_wiphy_register+0x10/0x10 [ 666.498909][T13158] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 666.498936][T13158] ieee80211_register_hw+0x2546/0x4120 [ 666.498970][T13158] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 666.498992][T13158] ? find_held_lock+0x2b/0x80 [ 666.499021][T13158] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 666.499042][T13158] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 666.499061][T13158] ? __hrtimer_setup+0x176/0x280 [ 666.499082][T13158] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 666.499120][T13158] ? trace_kmalloc+0x2b/0xd0 [ 666.499142][T13158] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 666.499163][T13158] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 666.499189][T13158] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 666.499217][T13158] ? __asan_memcpy+0x3c/0x60 [ 666.499245][T13158] hwsim_new_radio_nl+0xb51/0x12c0 [ 666.499267][T13158] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 666.499287][T13158] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 666.499304][T13158] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 666.499324][T13158] genl_family_rcv_msg_doit+0x206/0x2f0 [ 666.499340][T13158] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 666.499360][T13158] ? bpf_lsm_capable+0x9/0x10 [ 666.499375][T13158] ? security_capable+0x7e/0x260 [ 666.499388][T13158] ? ns_capable+0xd7/0x110 [ 666.499402][T13158] genl_rcv_msg+0x55c/0x800 [ 666.499418][T13158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 666.499434][T13158] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 666.499451][T13158] ? __lock_acquire+0x62e/0x1ce0 [ 666.499469][T13158] netlink_rcv_skb+0x155/0x420 [ 666.499483][T13158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 666.499499][T13158] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 666.499518][T13158] ? netlink_deliver_tap+0x1ae/0xd30 [ 666.499530][T13158] ? selinux_netlink_send+0x578/0x830 [ 666.499543][T13158] ? is_vmalloc_addr+0x86/0xa0 [ 666.499555][T13158] genl_rcv+0x28/0x40 [ 666.499568][T13158] netlink_unicast+0x5aa/0x870 [ 666.499583][T13158] ? __pfx_netlink_unicast+0x10/0x10 [ 666.499597][T13158] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 666.499614][T13158] netlink_sendmsg+0x8d1/0xdd0 [ 666.499630][T13158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.499650][T13158] ____sys_sendmsg+0xa98/0xc70 [ 666.499666][T13158] ? copy_msghdr_from_user+0x10a/0x160 [ 666.499678][T13158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.499697][T13158] ? __pfx_futex_wake_mark+0x10/0x10 [ 666.499711][T13158] ___sys_sendmsg+0x134/0x1d0 [ 666.499724][T13158] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.499756][T13158] __sys_sendmsg+0x16d/0x220 [ 666.499769][T13158] ? __pfx___sys_sendmsg+0x10/0x10 [ 666.499781][T13158] ? __x64_sys_futex+0x1e0/0x4c0 [ 666.499806][T13158] do_syscall_64+0xcd/0x4c0 [ 666.499821][T13158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.499833][T13158] RIP: 0033:0x7f9a8db8ebe9 [ 666.499842][T13158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.499852][T13158] RSP: 002b:00007f9a8e960038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.499862][T13158] RAX: ffffffffffffffda RBX: 00007f9a8ddc6180 RCX: 00007f9a8db8ebe9 [ 666.499868][T13158] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 666.499875][T13158] RBP: 00007f9a8dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 666.499881][T13158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.499888][T13158] R13: 00007f9a8ddc6218 R14: 00007f9a8ddc6180 R15: 00007fff1acf5c58 [ 666.499903][T13158] [ 667.190222][T13159] loop6: detected capacity change from 0 to 63 [ 667.202710][ T6400] buffer_io_error: 10 callbacks suppressed [ 667.202723][ T6400] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.360068][ T6400] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.405178][ T6400] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.493944][ T6400] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.559417][ T6400] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.645653][T13177] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2016'. [ 667.771290][T13177] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2016'. [ 667.773769][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2017'. [ 667.780943][T13177] netlink: 'syz.3.2016': attribute type 1 has an invalid length. [ 667.944696][T13184] netlink: 'syz.0.2019': attribute type 17 has an invalid length. [ 667.971165][T13184] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2019'. [ 668.003697][T13184] macvtap0: entered allmulticast mode [ 668.025886][T13188] netlink: 'syz.0.2019': attribute type 1 has an invalid length. [ 668.034728][T13184] veth0_macvtap: entered allmulticast mode [ 668.089896][T13184] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 668.647255][T13167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2014'. [ 668.755868][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 668.755883][ T30] audit: type=1400 audit(1757187290.005:2711): avc: denied { write } for pid=13197 comm="syz.1.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 669.856013][ T30] audit: type=1400 audit(1757187291.055:2712): avc: denied { sys_module } for pid=13197 comm="syz.1.2021" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 670.135829][T13216] netlink: 'syz.2.2024': attribute type 1 has an invalid length. [ 670.360236][T13216] bond7 (unregistering): Released all slaves [ 671.599006][ T30] audit: type=1400 audit(1757187292.845:2713): avc: denied { create } for pid=13234 comm="syz.1.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 671.715642][ T30] audit: type=1400 audit(1757187292.855:2714): avc: denied { write } for pid=13234 comm="syz.1.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 672.688286][T13256] 9pnet: Could not find request transport: fd0x0000000000000006 [ 672.701987][T13256] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 672.708509][T13256] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 672.716392][T13256] vhci_hcd vhci_hcd.0: Device attached [ 672.901897][ T9] vhci_hcd: vhci_device speed not set [ 672.928056][ T30] audit: type=1400 audit(1757187294.175:2715): avc: denied { ioctl } for pid=13266 comm="syz.2.2041" path="socket:[38836]" dev="sockfs" ino=38836 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 672.965445][ T30] audit: type=1400 audit(1757187294.205:2716): avc: denied { bind } for pid=13266 comm="syz.2.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 672.995512][ T8786] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 673.004499][ T9] usb 39-1: new full-speed USB device number 5 using vhci_hcd [ 673.029979][ T30] audit: type=1400 audit(1757187294.205:2717): avc: denied { setopt } for pid=13266 comm="syz.2.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 673.415123][ T8786] usb 4-1: config 0 has no interfaces? [ 673.424694][ T8786] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 673.782750][ T8786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.915568][ T8786] usb 4-1: config 0 descriptor?? [ 674.450032][ T30] audit: type=1400 audit(1757187295.355:2718): avc: denied { firmware_load } for pid=13277 comm="syz.2.2044" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 675.252791][T13286] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 675.837865][T13260] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 675.866610][T13297] netlink: 'syz.4.2049': attribute type 1 has an invalid length. [ 675.893971][ T2189] vhci_hcd: stop threads [ 675.984996][ T2189] vhci_hcd: release socket [ 675.994345][ T2189] vhci_hcd: disconnect device [ 676.012501][T13297] 8021q: adding VLAN 0 to HW filter on device bond3 [ 676.045965][ T30] audit: type=1400 audit(1757187297.285:2719): avc: denied { unlink } for pid=13299 comm="syz.1.2050" name="#1d" dev="tmpfs" ino=2155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 676.076806][T13297] vlan3: entered promiscuous mode [ 676.081658][ T30] audit: type=1400 audit(1757187297.305:2720): avc: denied { mount } for pid=13299 comm="syz.1.2050" name="/" dev="overlay" ino=2150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 676.105947][T13297] bond3: entered promiscuous mode [ 676.114716][T13297] vlan3: entered allmulticast mode [ 676.120079][T13297] bond3: entered allmulticast mode [ 676.124343][ T30] audit: type=1400 audit(1757187297.365:2721): avc: denied { watch } for pid=13299 comm="syz.1.2050" path="/407/bus/file1" dev="overlay" ino=2157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 676.252235][ T30] audit: type=1400 audit(1757187297.365:2722): avc: denied { watch_sb watch_reads } for pid=13299 comm="syz.1.2050" path="/407/bus/file1" dev="overlay" ino=2157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 676.317951][ T30] audit: type=1400 audit(1757187297.365:2723): avc: denied { execute } for pid=13299 comm="syz.1.2050" path="/407/bus/file1" dev="overlay" ino=2157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 676.404039][T13308] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13308 comm=syz.4.2052 [ 676.461245][ T30] audit: type=1400 audit(1757187297.425:2724): avc: denied { create } for pid=13296 comm="syz.4.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 676.526940][ T30] audit: type=1400 audit(1757187297.425:2725): avc: denied { write } for pid=13296 comm="syz.4.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 677.652951][ T30] audit: type=1400 audit(1757187298.885:2726): avc: denied { create } for pid=13318 comm="syz.4.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 677.711360][T13321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2055'. [ 678.200571][ T30] audit: type=1400 audit(1757187298.895:2727): avc: denied { connect } for pid=13318 comm="syz.4.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 678.230098][ T9] vhci_hcd: vhci_device speed not set [ 678.741766][ T5855] usb 4-1: USB disconnect, device number 46 [ 680.125241][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 680.125255][ T30] audit: type=1400 audit(1757187301.375:2731): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 680.287658][ T30] audit: type=1400 audit(1757187301.525:2732): avc: denied { getopt } for pid=13332 comm="syz.3.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 680.406070][T13344] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2058'. [ 680.419853][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 680.811275][ T9] usb 1-1: device descriptor read/64, error -71 [ 681.038419][ T5855] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 681.079124][ T30] audit: type=1400 audit(1757187302.295:2733): avc: denied { bind } for pid=13340 comm="syz.4.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 681.127471][ T30] audit: type=1400 audit(1757187302.295:2734): avc: denied { listen } for pid=13340 comm="syz.4.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 681.162845][ T30] audit: type=1400 audit(1757187302.295:2735): avc: denied { write } for pid=13340 comm="syz.4.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 681.187658][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 681.187938][ T30] audit: type=1400 audit(1757187302.295:2736): avc: denied { connect } for pid=13340 comm="syz.4.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 681.352610][T13349] Falling back ldisc for ttyprintk. [ 681.436482][ T5855] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 681.447772][ T5855] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 681.458160][ T5855] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 681.467746][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.498396][ T9] usb 1-1: device descriptor read/64, error -71 [ 681.560832][T13347] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 681.598084][ T5855] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 681.622353][ T9] usb usb1-port1: attempt power cycle [ 681.861686][ T5855] usb 4-1: USB disconnect, device number 47 [ 681.973843][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 682.262324][ T9] usb 1-1: device descriptor read/8, error -71 [ 682.354776][ T30] audit: type=1400 audit(1757187303.555:2737): avc: denied { ioctl } for pid=13353 comm="syz.1.2063" path="socket:[40995]" dev="sockfs" ino=40995 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 682.566705][T13344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.575827][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 682.607510][ T9] usb 1-1: device descriptor read/8, error -71 [ 682.752780][T13344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.771775][ T9] usb usb1-port1: unable to enumerate USB device [ 682.785156][T13344] bond0 (unregistering): Released all slaves [ 682.916652][T13354] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 682.926444][T13354] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 683.188588][ T30] audit: type=1400 audit(1757187304.425:2738): avc: denied { write } for pid=13370 comm="syz.1.2067" path="socket:[41006]" dev="sockfs" ino=41006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 683.324190][T13351] Bluetooth: hci4: command 0x0406 tx timeout [ 683.363466][ T30] audit: type=1400 audit(1757187304.435:2739): avc: denied { read append } for pid=13370 comm="syz.1.2067" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 683.946237][ T8775] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 683.956292][ T30] audit: type=1400 audit(1757187304.445:2740): avc: denied { open } for pid=13370 comm="syz.1.2067" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 684.121841][ T8775] usb 2-1: Using ep0 maxpacket: 16 [ 684.128699][ T8775] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 684.139031][ T8775] usb 2-1: config 1 has no interface number 1 [ 684.260644][ T8775] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 684.284001][ T8775] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.60 [ 684.294015][ T8775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.303580][ T8775] usb 2-1: Product: syz [ 684.308012][ T8775] usb 2-1: Manufacturer: syz [ 684.322389][ T8775] usb 2-1: SerialNumber: syz [ 684.568583][ T8775] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 684.603213][ T8775] usb 2-1: USB disconnect, device number 33 [ 684.761272][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 685.005236][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 685.038080][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.057043][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.069118][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 685.079144][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.090256][ T9] usb 3-1: config 0 descriptor?? [ 685.454589][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.488218][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.584232][ T9] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 685.674537][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 685.674551][ T30] audit: type=1400 audit(1757187306.925:2747): avc: denied { mount } for pid=13399 comm="syz.3.2075" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 685.711298][T13390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.734563][T13390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.747653][ T30] audit: type=1400 audit(1757187306.925:2748): avc: denied { mounton } for pid=13399 comm="syz.3.2075" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 685.781823][ T8775] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 685.802945][ T30] audit: type=1400 audit(1757187306.985:2749): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 687.546983][ T8775] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.561714][ T8775] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 687.578124][ T8775] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 687.588150][ T8775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.596837][ T8775] usb 2-1: Product: syz [ 687.601849][ T8775] usb 2-1: Manufacturer: syz [ 687.606418][ T8775] usb 2-1: SerialNumber: syz [ 687.661400][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2076'. [ 687.690195][ T8775] cdc_ncm 2-1:1.0: skipping garbage [ 687.696006][ T8775] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 687.741705][ T9] usb 3-1: reset high-speed USB device number 36 using dummy_hcd [ 688.056492][ T8775] cdc_ncm 2-1:1.0: bind() failure [ 688.069589][ T8775] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 688.302271][T13412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.314515][T13412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.643626][ T30] audit: type=1400 audit(1757187309.425:2750): avc: denied { write } for pid=13396 comm="syz.1.2074" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 688.672652][ T8775] cdc_ncm 2-1:1.1: bind() failure [ 688.708571][ T30] audit: type=1400 audit(1757187309.465:2751): avc: denied { create } for pid=13396 comm="syz.1.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 688.729672][ T30] audit: type=1400 audit(1757187309.535:2752): avc: denied { getopt } for pid=13396 comm="syz.1.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 688.945632][T13418] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2078'. [ 689.768846][ T8775] usb 2-1: USB disconnect, device number 34 [ 690.786181][ T8786] usb 3-1: USB disconnect, device number 36 [ 691.142621][T13434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2082'. [ 691.198238][T13435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13435 comm=syz.0.2082 [ 691.937966][ T30] audit: type=1400 audit(1757187312.905:2753): avc: denied { ioctl } for pid=13433 comm="syz.2.2085" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 692.071587][ T30] audit: type=1400 audit(1757187313.095:2754): avc: denied { mounton } for pid=13433 comm="syz.2.2085" path="/411/file1" dev="tmpfs" ino=2171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 692.297229][T13442] bond7: entered promiscuous mode [ 692.455610][T13442] bond7: entered allmulticast mode [ 692.699497][T13442] 8021q: adding VLAN 0 to HW filter on device bond7 [ 692.941465][ T8775] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 693.132696][ T8775] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 693.151628][ T8775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.312436][ T30] audit: type=1400 audit(1757187314.565:2755): avc: denied { create } for pid=13460 comm="syz.3.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 693.325439][ T8775] usb 3-1: config 0 descriptor?? [ 693.414968][ T30] audit: type=1400 audit(1757187314.655:2756): avc: denied { getopt } for pid=13460 comm="syz.3.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 693.522545][T13466] netlink: 'syz.4.2093': attribute type 1 has an invalid length. [ 693.544073][ T30] audit: type=1400 audit(1757187314.735:2757): avc: denied { mount } for pid=13460 comm="syz.3.2091" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 693.678644][T13466] bond4 (unregistering): Released all slaves [ 693.744839][T13450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.762993][T13450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.764143][ T30] audit: type=1400 audit(1757187315.005:2758): avc: denied { ioctl } for pid=13472 comm="syz.1.2094" path="socket:[40386]" dev="sockfs" ino=40386 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 694.268011][T13474] overlayfs: failed to resolve './file1': -2 [ 694.374165][ T30] audit: type=1400 audit(1757187315.615:2759): avc: denied { read } for pid=13449 comm="syz.2.2088" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 694.758805][ T30] audit: type=1400 audit(1757187315.615:2760): avc: denied { open } for pid=13449 comm="syz.2.2088" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 694.801349][ T8775] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 695.016937][ T30] audit: type=1400 audit(1757187315.615:2761): avc: denied { ioctl } for pid=13449 comm="syz.2.2088" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 695.093534][ T30] audit: type=1400 audit(1757187315.935:2762): avc: denied { write } for pid=13480 comm="syz.4.2096" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 696.053499][ T8775] usb 3-1: USB disconnect, device number 37 [ 696.149505][T13498] binder: 13497:13498 unknown command 0 [ 696.157552][T13498] binder: 13497:13498 ioctl c0306201 2000000001c0 returned -22 [ 697.753370][T13520] veth3: entered promiscuous mode [ 697.758602][T13520] veth3: entered allmulticast mode [ 697.853374][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2111'. [ 699.211957][ T8775] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 699.256801][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 699.256812][ T30] audit: type=1400 audit(1757187320.505:2771): avc: denied { read } for pid=13551 comm="syz.2.2117" name="sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 699.537077][ T30] audit: type=1400 audit(1757187320.505:2772): avc: denied { open } for pid=13551 comm="syz.2.2117" path="/dev/sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 699.562719][ T30] audit: type=1400 audit(1757187320.505:2773): avc: denied { ioctl } for pid=13551 comm="syz.2.2117" path="/dev/sg0" dev="devtmpfs" ino=779 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 699.616741][ T8775] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 699.627186][ T8775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.711944][ T8775] usb 2-1: config 0 descriptor?? [ 699.899954][ T30] audit: type=1400 audit(1757187320.965:2774): avc: denied { relabelto } for pid=13551 comm="syz.2.2117" name="417" dev="tmpfs" ino=2197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:console_device_t:s0" [ 700.188972][T13547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.202801][T13547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.464892][ T30] audit: type=1400 audit(1757187320.965:2775): avc: denied { associate } for pid=13551 comm="syz.2.2117" name="417" dev="tmpfs" ino=2197 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:console_device_t:s0" [ 700.527728][ T30] audit: type=1800 audit(1757187321.065:2776): pid=13549 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2113" name="file1" dev="tmpfs" ino=2148 res=0 errno=0 [ 701.273856][ T30] audit: type=1400 audit(1757187321.295:2777): avc: denied { create } for pid=13540 comm="syz.0.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 701.283481][ T8775] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 701.396322][ T30] audit: type=1400 audit(1757187321.305:2778): avc: denied { ioctl } for pid=13540 comm="syz.0.2113" path="socket:[41549]" dev="sockfs" ino=41549 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 701.535504][ T30] audit: type=1400 audit(1757187321.305:2779): avc: denied { write } for pid=13540 comm="syz.0.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 701.901296][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 701.993101][ T8786] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 702.074912][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 702.094643][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.161174][ T8786] usb 1-1: Using ep0 maxpacket: 32 [ 702.191118][ T8786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.216960][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.240815][ T8786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.302480][ T5855] usb 2-1: USB disconnect, device number 35 [ 702.308873][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 702.333811][ T8786] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 702.458497][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.511457][ T8786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.526817][ T9] usb 3-1: config 0 descriptor?? [ 702.632055][ T8786] usb 1-1: config 0 descriptor?? [ 703.067420][ T9] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 703.097290][ T8786] savu 0003:1E7D:2D5A.0010: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 703.183586][T13569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.193878][T13569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.471620][ T8775] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 704.684205][ T8775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 704.896144][T13572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.811615][ T5898] usb 3-1: reset high-speed USB device number 38 using dummy_hcd [ 705.962753][T13572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.060614][ T8775] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 706.069689][ T8775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.225943][ T8786] usb 1-1: USB disconnect, device number 54 [ 706.783187][ T8775] usb 2-1: config 0 descriptor?? [ 706.798108][ T8775] usb 2-1: can't set config #0, error -71 [ 706.824530][ T8775] usb 2-1: USB disconnect, device number 36 [ 706.938347][ T975] usb 3-1: USB disconnect, device number 38 [ 707.773769][ T8786] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 707.812434][ T30] audit: type=1400 audit(1757187329.055:2780): avc: denied { write } for pid=13609 comm="syz.1.2133" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 708.354188][T13610] dns_resolver: Unsupported server list version (0) [ 708.381250][ T30] audit: type=1400 audit(1757187329.625:2781): avc: denied { write } for pid=13614 comm="syz.3.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 708.403854][ T8786] usb 1-1: Using ep0 maxpacket: 32 [ 708.435296][ T8786] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.446908][ T8786] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.461354][ T8786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 708.532699][ T8786] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 708.542693][ T8786] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 708.576012][ T8786] usb 1-1: Product: syz [ 708.898697][ T8786] usb 1-1: config 0 descriptor?? [ 709.346912][ T30] audit: type=1400 audit(1757187330.325:2782): avc: denied { getopt } for pid=13625 comm="syz.3.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 709.366480][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.589933][T13602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.612067][T13602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.698482][ T8786] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0 [ 709.724210][ T8786] waterforce 0003:1044:7A4D.0011: unknown main item tag 0x0 [ 709.764578][ T8786] waterforce 0003:1044:7A4D.0011: item fetching failed at offset 2/5 [ 709.822343][ T8786] waterforce 0003:1044:7A4D.0011: hid parse failed with -22 [ 709.872571][ T8786] waterforce 0003:1044:7A4D.0011: probe with driver waterforce failed with error -22 [ 709.889989][ T30] audit: type=1400 audit(1757187331.135:2783): avc: denied { map } for pid=13639 comm="syz.3.2142" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 709.922211][ T8775] usb 1-1: USB disconnect, device number 55 [ 709.931714][T13640] binder_alloc: 13639: pid 13639 spamming oneway? 1 buffers allocated for a total size of 4096 [ 709.958904][ T30] audit: type=1400 audit(1757187331.175:2784): avc: denied { call } for pid=13639 comm="syz.3.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 710.506764][T13641] : entered promiscuous mode [ 711.109647][ T30] audit: type=1400 audit(1757187332.355:2785): avc: denied { write } for pid=13654 comm="syz.2.2147" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 711.133142][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.289528][ T30] audit: type=1400 audit(1757187332.535:2786): avc: denied { ioctl } for pid=13663 comm="syz.3.2149" path="socket:[41778]" dev="sockfs" ino=41778 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 711.405190][ T30] audit: type=1400 audit(1757187332.535:2787): avc: denied { write } for pid=13663 comm="syz.3.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 711.431627][T13672] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2146'. [ 711.489528][T13671] bond4: entered promiscuous mode [ 711.495796][T13671] bond4: entered allmulticast mode [ 711.995450][T13671] 8021q: adding VLAN 0 to HW filter on device bond4 [ 712.146166][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2153'. [ 712.288795][T13683] netlink: 'syz.2.2155': attribute type 1 has an invalid length. [ 712.503326][T13683] 8021q: adding VLAN 0 to HW filter on device bond7 [ 712.536634][T13696] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2155'. [ 712.559101][T13696] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2155'. [ 712.597406][T13690] vlan4: entered promiscuous mode [ 712.617217][T13690] bond7: entered promiscuous mode [ 712.641377][T13690] vlan4: entered allmulticast mode [ 712.648491][T13690] bond7: entered allmulticast mode [ 712.690088][T13701] syz_tun: entered allmulticast mode [ 712.793689][T13699] syz_tun: left allmulticast mode [ 713.930547][T13718] netlink: 'syz.2.2163': attribute type 4 has an invalid length. [ 714.101601][ T30] audit: type=1400 audit(1757187335.285:2788): avc: denied { create } for pid=13675 comm="syz.1.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 714.122920][ T30] audit: type=1400 audit(1757187335.295:2789): avc: denied { setopt } for pid=13675 comm="syz.1.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 714.192981][T13698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2157'. [ 714.473297][ T30] audit: type=1400 audit(1757187335.585:2790): avc: denied { bind } for pid=13675 comm="syz.1.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 714.544569][T13728] netlink: 'syz.0.2167': attribute type 13 has an invalid length. [ 715.100576][ T30] audit: type=1400 audit(1757187336.325:2791): avc: denied { ioctl } for pid=13732 comm="syz.3.2168" path="socket:[40888]" dev="sockfs" ino=40888 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 716.939515][T13757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2173'. [ 718.539948][T13771] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 718.653548][T13778] 9pnet_fd: Insufficient options for proto=fd [ 718.664477][T13778] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 718.671882][T13778] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 718.679850][T13778] vhci_hcd vhci_hcd.0: Device attached [ 718.710646][ T8775] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 718.841169][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 718.861616][ T8775] usb 2-1: Using ep0 maxpacket: 16 [ 718.869697][ T8775] usb 2-1: config 0 has an invalid interface number: 35 but max is 2 [ 718.881483][ T8786] vhci_hcd: vhci_device speed not set [ 718.893003][ T8775] usb 2-1: config 0 has an invalid interface number: 104 but max is 2 [ 718.910002][ T8775] usb 2-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config [ 718.936768][ T8775] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 718.955006][ T8786] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 718.956789][ T8775] usb 2-1: config 0 has no interface number 0 [ 718.981953][ T9] usb 1-1: device descriptor read/64, error -71 [ 718.992749][ T8775] usb 2-1: config 0 has no interface number 1 [ 718.999583][ T8775] usb 2-1: config 0 interface 35 altsetting 116 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 719.049021][ T8775] usb 2-1: config 0 interface 35 altsetting 116 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 719.062831][ T8775] usb 2-1: config 0 interface 35 altsetting 116 has a duplicate endpoint with address 0xF, skipping [ 719.119128][ T8775] usb 2-1: config 0 interface 35 altsetting 116 has an invalid descriptor for endpoint zero, skipping [ 719.140339][ T8775] usb 2-1: config 0 interface 35 altsetting 116 endpoint 0x2 has invalid maxpacket 1056, setting to 64 [ 719.198027][ T8775] usb 2-1: config 0 interface 104 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 719.233602][ T8775] usb 2-1: config 0 interface 104 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 719.255926][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 719.261424][ T8775] usb 2-1: config 0 interface 104 altsetting 5 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 719.310508][ T8775] usb 2-1: config 0 interface 104 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 719.336987][ T8775] usb 2-1: config 0 interface 104 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 719.366695][ T8775] usb 2-1: config 0 interface 104 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 719.412021][ T8775] usb 2-1: config 0 interface 35 has no altsetting 0 [ 719.446985][ T8775] usb 2-1: config 0 interface 104 has no altsetting 0 [ 719.481242][ T9] usb 1-1: device descriptor read/64, error -71 [ 719.503969][ T8775] usb 2-1: New USB device found, idVendor=177f, idProduct=0164, bcdDevice=91.86 [ 719.521633][ T8775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.546701][ T8775] usb 2-1: Product: syz [ 719.566120][ T8775] usb 2-1: Manufacturer: syz [ 719.572543][ T8775] usb 2-1: SerialNumber: syz [ 719.603368][ T9] usb usb1-port1: attempt power cycle [ 719.612441][ T8775] usb 2-1: config 0 descriptor?? [ 719.921983][ T975] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 719.951305][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 719.982396][ T9] usb 1-1: device descriptor read/8, error -71 [ 720.075802][T13789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.080566][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 720.092380][T13789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.117059][ T975] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 720.130165][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.144652][ T975] usb 3-1: Product: syz [ 720.161818][ T975] usb 3-1: Manufacturer: syz [ 720.178691][ T975] usb 3-1: SerialNumber: syz [ 720.214028][ T975] usb 3-1: config 0 descriptor?? [ 720.231273][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 720.246974][ T975] gspca_main: se401-2.14.0 probing 047d:5003 [ 720.266078][ T9] usb 1-1: device descriptor read/8, error -71 [ 720.394099][ T9] usb usb1-port1: unable to enumerate USB device [ 721.017316][ T975] gspca_se401: Wrong descriptor type [ 721.218539][T13787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.227879][T13787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.249910][ T9] usb 3-1: USB disconnect, device number 39 [ 722.110322][T13779] vhci_hcd: connection reset by peer [ 722.124352][ T6809] vhci_hcd: stop threads [ 722.128694][ T6809] vhci_hcd: release socket [ 722.134848][ T6809] vhci_hcd: disconnect device [ 722.621837][ T8775] usb 2-1: USB disconnect, device number 37 [ 722.785104][ T30] audit: type=1400 audit(1757187344.035:2792): avc: denied { mount } for pid=13814 comm="syz.3.2192" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 723.011017][ T30] audit: type=1400 audit(1757187344.245:2793): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 723.675391][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 723.690321][T13832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2196'. [ 723.854485][T13839] netlink: 'syz.0.2196': attribute type 4 has an invalid length. [ 723.863219][T13839] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2196'. [ 724.208567][T13839] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 724.272386][ T8786] vhci_hcd: vhci_device speed not set [ 724.303673][T13846] 9pnet_fd: Insufficient options for proto=fd [ 724.312132][T13846] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 724.318637][T13846] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 724.326701][T13846] vhci_hcd vhci_hcd.0: Device attached [ 724.551242][ T8786] vhci_hcd: vhci_device speed not set [ 724.621721][ T8786] usb 41-1: device descriptor read/64, error -110 [ 724.680930][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 724.821223][ T8786] vhci_hcd: vhci_device speed not set [ 724.861702][ T9] usb 2-1: device descriptor read/64, error -71 [ 724.881286][ T8786] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 725.002728][ T8775] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 725.106781][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 725.184447][ T8775] usb 3-1: Using ep0 maxpacket: 8 [ 725.451573][ T9] usb 2-1: device descriptor read/64, error -71 [ 725.472015][ T8775] usb 3-1: config index 0 descriptor too short (expected 26, got 10) [ 725.480133][ T8775] usb 3-1: config 5 descriptor has 1 excess byte, ignoring [ 725.494376][ T8775] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 725.507117][ T8775] usb 3-1: New USB device found, idVendor=0403, idProduct=e0f0, bcdDevice=d5.e2 [ 725.517099][ T8775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.526045][ T8775] usb 3-1: Product: syz [ 725.530187][ T8775] usb 3-1: Manufacturer: syz [ 725.536229][ T8775] usb 3-1: SerialNumber: syz [ 725.581453][ T9] usb usb2-port1: attempt power cycle [ 725.819507][ T30] audit: type=1400 audit(1757187347.065:2794): avc: denied { mount } for pid=13856 comm="syz.2.2204" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 725.824515][T13857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.857001][T13857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.361273][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 726.391297][ T9] usb 2-1: device descriptor read/8, error -71 [ 726.564234][ T5855] usb 3-1: USB disconnect, device number 40 [ 726.762913][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 726.771577][ T30] audit: type=1400 audit(1757187347.895:2795): avc: denied { name_bind } for pid=13872 comm="syz.3.2210" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 726.814681][ T9] usb 2-1: device descriptor read/8, error -71 [ 728.117461][T13879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.163131][ T9] usb usb2-port1: unable to enumerate USB device [ 728.483668][T13847] vhci_hcd: connection reset by peer [ 728.505604][ T30] audit: type=1400 audit(1757187349.755:2796): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 728.536631][ T9151] vhci_hcd: stop threads [ 728.556276][ T9151] vhci_hcd: release socket [ 728.592781][ T9151] vhci_hcd: disconnect device [ 728.696953][ T30] audit: type=1400 audit(1757187349.945:2797): avc: denied { create } for pid=13892 comm="syz.3.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 728.716678][ C1] vkms_vblank_simulate: vblank timer overrun [ 729.991379][ T8786] vhci_hcd: vhci_device speed not set [ 730.803154][T13929] 9pnet_fd: Insufficient options for proto=fd [ 730.864945][T13929] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 730.871452][T13929] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 730.879644][T13929] vhci_hcd vhci_hcd.0: Device attached [ 731.061561][ T975] vhci_hcd: vhci_device speed not set [ 731.101693][ T8775] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 731.122184][ T975] usb 33-1: new full-speed USB device number 5 using vhci_hcd [ 731.501524][ T8775] usb 1-1: config 0 has no interfaces? [ 731.515662][ T8775] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 731.525705][ T8775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.562144][ T8775] usb 1-1: config 0 descriptor?? [ 732.791181][ T30] audit: type=1400 audit(1757187353.945:2798): avc: denied { map } for pid=13943 comm="syz.3.2230" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 732.831228][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2230'. [ 733.010339][T13930] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 733.031833][ T9151] vhci_hcd: stop threads [ 733.036394][ T9151] vhci_hcd: release socket [ 733.127657][ T9151] vhci_hcd: disconnect device [ 734.037495][T13964] netlink: 'syz.4.2236': attribute type 5 has an invalid length. [ 734.052864][T13964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2236'. [ 734.229234][ T8775] usb 1-1: USB disconnect, device number 60 [ 734.331172][ T30] audit: type=1400 audit(1757187355.565:2799): avc: denied { write } for pid=13963 comm="syz.4.2236" name="sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 736.391755][T13998] /dev/nullb0: Can't open blockdev [ 736.406846][ T30] audit: type=1400 audit(1757187357.655:2800): avc: denied { write } for pid=13994 comm="syz.3.2243" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 736.761316][ T975] vhci_hcd: vhci_device speed not set [ 737.587129][T14014] 9pnet_fd: Insufficient options for proto=fd [ 737.603769][T14014] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 737.610273][T14014] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 737.618705][T14014] vhci_hcd vhci_hcd.0: Device attached [ 737.986296][ T8786] vhci_hcd: vhci_device speed not set [ 738.041075][ T9] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 738.051112][ T8786] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 738.242991][ T9] usb 3-1: config 0 has no interfaces? [ 738.248553][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 738.263795][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.295446][ T9] usb 3-1: config 0 descriptor?? [ 738.755249][ T30] audit: type=1400 audit(1757187360.005:2801): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 738.811955][T14015] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 738.944199][ T3516] vhci_hcd: stop threads [ 738.948516][ T3516] vhci_hcd: release socket [ 738.966040][ T3516] vhci_hcd: disconnect device [ 740.163065][T14045] 9pnet_fd: Insufficient options for proto=fd [ 740.534023][ T30] audit: type=1400 audit(1757187361.775:2802): avc: denied { connect } for pid=14052 comm="syz.4.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 741.001732][ T30] audit: type=1400 audit(1757187361.775:2803): avc: denied { write } for pid=14052 comm="syz.4.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 741.822661][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2266'. [ 741.867720][T14076] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 742.085980][T14081] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2265'. [ 742.103157][T14081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2265'. [ 742.139979][ T30] audit: type=1400 audit(1757187363.365:2804): avc: denied { mount } for pid=14071 comm="syz.3.2265" name="/" dev="ramfs" ino=43755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 743.074138][ T975] usb 3-1: USB disconnect, device number 41 [ 743.209254][ T30] audit: type=1400 audit(1757187364.455:2805): avc: denied { create } for pid=14086 comm="syz.4.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 743.271169][ T8786] vhci_hcd: vhci_device speed not set [ 743.350770][ T30] audit: type=1400 audit(1757187364.495:2806): avc: denied { ioctl } for pid=14086 comm="syz.4.2270" path="socket:[42993]" dev="sockfs" ino=42993 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 743.791626][T14096] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2273'. [ 745.072943][ T30] audit: type=1400 audit(1757187366.315:2807): avc: denied { bind } for pid=14099 comm="syz.0.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 746.253519][T14113] veth0_macvtap: left allmulticast mode [ 746.884094][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.891275][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.205578][ T2940] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.776829][ T2940] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.936027][ T2940] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.032762][ T2189] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.061956][ T30] audit: type=1800 audit(1757187370.275:2808): pid=14159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2287" name="file1" dev="tmpfs" ino=2373 res=0 errno=0 [ 749.132324][T14159] pim6reg: entered allmulticast mode [ 749.461178][ T975] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 749.611794][ T975] usb 1-1: Using ep0 maxpacket: 8 [ 749.622670][ T975] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 749.636199][ T975] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 749.653151][ T975] usb 1-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 749.667403][ T975] usb 1-1: Product: syz [ 749.679700][ T975] usb 1-1: Manufacturer: syz [ 749.686416][ T975] usb 1-1: SerialNumber: syz [ 749.707399][ T975] usb 1-1: config 0 descriptor?? [ 749.726333][T14154] pim6reg: left allmulticast mode [ 749.863987][ T30] audit: type=1400 audit(1757187371.115:2809): avc: denied { listen } for pid=14164 comm="syz.1.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 749.896999][ T30] audit: type=1400 audit(1757187371.145:2810): avc: denied { ioctl } for pid=14166 comm="syz.2.2291" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 749.933242][ T975] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 750.121148][ T8786] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 750.176321][ T30] audit: type=1400 audit(1757187371.425:2811): avc: denied { bind } for pid=14168 comm="syz.2.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 750.196161][ C1] vkms_vblank_simulate: vblank timer overrun [ 750.203937][ T30] audit: type=1400 audit(1757187371.425:2812): avc: denied { listen } for pid=14168 comm="syz.2.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 750.224735][ T30] audit: type=1400 audit(1757187371.425:2813): avc: denied { accept } for pid=14168 comm="syz.2.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 750.275825][ T8786] usb 2-1: unable to get BOS descriptor or descriptor too short [ 750.286886][ T8786] usb 2-1: not running at top speed; connect to a high speed hub [ 750.309762][ T8786] usb 2-1: config 5 has an invalid interface number: 201 but max is 0 [ 750.332503][ T8786] usb 2-1: config 5 has no interface number 0 [ 750.342633][ T8786] usb 2-1: config 5 interface 201 has no altsetting 0 [ 750.357456][ T8786] usb 2-1: New USB device found, idVendor=19d2, idProduct=0199, bcdDevice=9c.c0 [ 750.368499][ T8786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.378747][ T8786] usb 2-1: Product: syz [ 750.383626][ T8786] usb 2-1: Manufacturer: syz [ 750.388542][ T8786] usb 2-1: SerialNumber: syz [ 750.619734][T14165] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2290'. [ 750.804030][ T8786] hub 2-1:5.201: bad descriptor, ignoring hub [ 750.818140][ T8786] hub 2-1:5.201: probe with driver hub failed with error -5 [ 750.847596][ T8786] option 2-1:5.201: GSM modem (1-port) converter detected [ 750.908012][ T8786] usb 2-1: USB disconnect, device number 42 [ 750.975495][ T975] gspca_sunplus: reg_w_riv err -71 [ 750.989581][ T975] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 751.020039][ T8786] option 2-1:5.201: device disconnected [ 751.026226][ T975] usb 1-1: USB disconnect, device number 61 [ 751.957723][T14179] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2293'. [ 753.159984][ T30] audit: type=1400 audit(1757187630.409:2814): avc: denied { mounton } for pid=14191 comm="syz.1.2299" path="/proc/1526/task" dev="proc" ino=45062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 753.182871][ C1] vkms_vblank_simulate: vblank timer overrun [ 753.888993][ T30] audit: type=1800 audit(1757187631.109:2815): pid=14205 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2302" name="file1" dev="tmpfs" ino=2381 res=0 errno=0 [ 754.675343][ T30] audit: type=1400 audit(1757187631.909:2816): avc: denied { map } for pid=14213 comm="syz.3.2305" path="socket:[45097]" dev="sockfs" ino=45097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 755.051979][T14228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2308'. [ 755.107186][T14229] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14229 comm=syz.2.2308 [ 755.442660][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 755.602209][ T9] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 755.627916][ T9] usb 1-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 755.667866][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 755.678179][ T9] usb 1-1: New USB device found, idVendor=0c6d, idProduct=c29c, bcdDevice= 0.00 [ 755.747253][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.769085][ T9] usb 1-1: config 0 descriptor?? [ 757.081262][T14250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.153349][T14250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.302490][ T30] audit: type=1400 audit(1757187634.549:2817): avc: denied { create } for pid=14251 comm="syz.3.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 757.695013][ T30] audit: type=1800 audit(1757187634.929:2818): pid=14262 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2318" name="file1" dev="tmpfs" ino=2450 res=0 errno=0 [ 757.823180][T14262] pim6reg: entered allmulticast mode [ 757.931291][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 758.101375][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 758.109314][ T9] usb 3-1: config 109 has an invalid interface number: 151 but max is 0 [ 758.126011][ T9] usb 3-1: config 109 has no interface number 0 [ 758.143775][ T9] usb 3-1: config 109 interface 151 altsetting 255 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 758.178999][ T9] usb 3-1: config 109 interface 151 altsetting 255 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 758.211237][ T8786] usb 1-1: USB disconnect, device number 62 [ 758.279344][ T9] usb 3-1: config 109 interface 151 altsetting 255 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 758.295556][ T9] usb 3-1: config 109 interface 151 altsetting 255 has a duplicate endpoint with address 0x87, skipping [ 758.307954][ T9] usb 3-1: config 109 interface 151 has no altsetting 0 [ 758.318768][ T9] usb 3-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=19.ea [ 758.356417][T14256] pim6reg: left allmulticast mode [ 758.406364][T14271] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2322'. [ 758.425715][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.586090][ T9] usb 3-1: Product: syz [ 758.815883][T14277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.074808][ T9] usb 3-1: Manufacturer: syz [ 759.079686][ T9] usb 3-1: SerialNumber: syz [ 759.304241][ T9] rndis_host 3-1:109.151: invalid descriptor buffer length [ 759.386161][ T9] usb 3-1: bad CDC descriptors [ 759.409317][ T9] option 3-1:109.151: GSM modem (1-port) converter detected [ 759.481765][ T9] usb 3-1: USB disconnect, device number 42 [ 759.494018][ T9] option 3-1:109.151: device disconnected [ 759.538120][T14284] bond5: entered allmulticast mode [ 759.596267][T14284] 8021q: adding VLAN 0 to HW filter on device bond5 [ 761.633036][T14309] SELinux: failed to load policy [ 761.967618][T14313] netlink: 'syz.3.2333': attribute type 4 has an invalid length. [ 762.151086][ T30] audit: type=1400 audit(1757187638.869:2819): avc: denied { create } for pid=14306 comm="syz.2.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 762.504181][ T8786] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 762.621091][ T30] audit: type=1400 audit(1757187638.889:2820): avc: denied { load_policy } for pid=14306 comm="syz.2.2331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 763.896019][T14330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 763.942033][ T8786] usb 3-1: device descriptor read/all, error -71 [ 763.973398][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 764.343028][T14340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2340'. [ 764.350974][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 764.882014][ T9] usb 4-1: config 0 has an invalid interface number: 232 but max is 0 [ 764.890306][ T9] usb 4-1: config 0 has no interface number 0 [ 764.901516][ T9] usb 4-1: config 0 interface 232 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.917527][ T9] usb 4-1: config 0 interface 232 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.928252][ T9] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 764.937544][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.954302][ T9] usb 4-1: config 0 descriptor?? [ 765.182671][ T30] audit: type=1400 audit(1757187642.359:2821): avc: denied { read } for pid=14345 comm="syz.1.2344" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 765.209625][ T30] audit: type=1400 audit(1757187642.359:2822): avc: denied { open } for pid=14345 comm="syz.1.2344" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 765.376934][ T30] audit: type=1400 audit(1757187642.369:2823): avc: denied { read } for pid=14345 comm="syz.1.2344" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 765.376977][ T30] audit: type=1400 audit(1757187642.369:2824): avc: denied { open } for pid=14345 comm="syz.1.2344" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 765.377015][ T30] audit: type=1400 audit(1757187642.369:2825): avc: denied { mount } for pid=14345 comm="syz.1.2344" name="/" dev="hugetlbfs" ino=45363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 765.383449][ T30] audit: type=1400 audit(1757187642.629:2826): avc: denied { ioctl } for pid=14348 comm="syz.0.2345" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 765.832834][ T9] hid (null): global environment stack underflow [ 765.868221][ T9] usb 4-1: USB disconnect, device number 48 [ 767.100022][ C1] vkms_vblank_simulate: vblank timer overrun [ 767.723742][T14373] usb usb8: usbfs: process 14373 (syz.4.2350) did not claim interface 0 before use [ 768.431760][ T30] audit: type=1326 audit(1757187644.979:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.4.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb778ebe9 code=0x7fc00000 [ 768.641687][ T30] audit: type=1326 audit(1757187645.319:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.4.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbfb778ebe9 code=0x7fc00000 [ 768.665076][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.698413][ T30] audit: type=1400 audit(1757187645.689:2829): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 768.802720][ T30] audit: type=1400 audit(1757187646.059:2830): avc: denied { create } for pid=14387 comm="syz.3.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 769.301147][ T8786] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 769.501260][ T8786] usb 3-1: Using ep0 maxpacket: 32 [ 769.562747][ T8786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.587538][ T8786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.126657][ T8786] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 770.293694][ T8786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.324011][ T8786] usb 3-1: config 0 descriptor?? [ 770.784811][T14415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2361'. [ 770.801560][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2361'. [ 771.314134][ T8786] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 771.517128][T14432] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 772.129773][T14392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.191940][T14392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.239459][ T30] audit: type=1800 audit(1757187649.489:2831): pid=14427 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2367" name="file1" dev="tmpfs" ino=2516 res=0 errno=0 [ 772.261287][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.801109][ T30] audit: type=1400 audit(1757187650.999:2832): avc: denied { write } for pid=14435 comm="syz.3.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 773.897824][T14427] pim6reg: entered allmulticast mode [ 774.089740][T14421] pim6reg: left allmulticast mode [ 774.361604][ T5898] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 774.474522][ T975] usb 3-1: USB disconnect, device number 45 [ 775.274688][T14454] 9pnet_fd: Insufficient options for proto=fd [ 775.294640][T14454] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 775.301182][T14454] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 775.309394][T14454] vhci_hcd vhci_hcd.0: Device attached [ 775.392845][ T30] audit: type=1400 audit(1757187652.649:2833): avc: denied { append } for pid=14460 comm="syz.1.2378" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 775.494784][ T975] vhci_hcd: vhci_device speed not set [ 775.561987][ T975] usb 33-1: new full-speed USB device number 6 using vhci_hcd [ 776.106636][ T8786] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 776.136659][T14471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 776.190254][ T30] audit: type=1400 audit(1757187653.059:2834): avc: denied { mount } for pid=14457 comm="syz.2.2377" name="/" dev="autofs" ino=44956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 776.212826][ C1] vkms_vblank_simulate: vblank timer overrun [ 776.341917][ T8786] usb 1-1: device descriptor read/64, error -71 [ 776.474649][ T30] audit: type=1400 audit(1757187653.729:2835): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 776.582663][ T8786] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 776.731992][ T8786] usb 1-1: device descriptor read/64, error -71 [ 776.871614][ T8786] usb usb1-port1: attempt power cycle [ 776.982813][T14488] program syz.3.2385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 777.291800][ T8786] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 777.338388][ T8786] usb 1-1: device descriptor read/8, error -71 [ 777.496566][T14493] bond2: entered allmulticast mode [ 777.503555][T14493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 777.591749][ T8786] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 777.611762][ T8786] usb 1-1: device descriptor read/8, error -71 [ 777.731410][ T8786] usb usb1-port1: unable to enumerate USB device [ 778.191159][ T30] audit: type=1800 audit(1757187655.439:2836): pid=14505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2389" name="file1" dev="tmpfs" ino=2547 res=0 errno=0 [ 778.213947][ C1] vkms_vblank_simulate: vblank timer overrun [ 778.255796][T14505] pim6reg: entered allmulticast mode [ 778.275772][T14455] vhci_hcd: connection reset by peer [ 778.331391][T13984] vhci_hcd: stop threads [ 778.335973][T13984] vhci_hcd: release socket [ 778.343759][T13984] vhci_hcd: disconnect device [ 779.584236][T14502] pim6reg: left allmulticast mode [ 780.259474][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2395'. [ 780.387116][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2397'. [ 780.423580][T14537] netlink: 'syz.2.2398': attribute type 13 has an invalid length. [ 780.824775][ T975] vhci_hcd: vhci_device speed not set [ 781.223501][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 781.234722][T14543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2400'. [ 782.166959][T14565] vxfs: WRONG superblock magic 00000000 at 1 [ 782.170469][T14565] vxfs: WRONG superblock magic 00000000 at 8 [ 782.170492][T14565] vxfs: can't find superblock. [ 782.458082][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 782.602985][T14561] ceph: No mds server is up or the cluster is laggy [ 782.860534][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 783.505538][ T30] audit: type=1400 audit(1757187660.759:2837): avc: denied { bind } for pid=14585 comm="syz.3.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 784.620117][T14603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2416'. [ 784.634206][T14603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2416'. [ 784.879761][T14612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 784.917005][ T30] audit: type=1400 audit(1757187662.169:2838): avc: denied { ioctl } for pid=14609 comm="syz.1.2420" path="socket:[46365]" dev="sockfs" ino=46365 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 787.869807][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 787.878221][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 788.021807][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 788.040099][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 788.142016][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 788.148105][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 788.222829][ T30] audit: type=1800 audit(1757187665.469:2839): pid=14652 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2429" name="file1" dev="tmpfs" ino=2583 res=0 errno=0 [ 788.244654][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.279462][T14652] pim6reg: entered allmulticast mode [ 788.591756][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 788.597786][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 788.660839][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 788.673079][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 788.765163][T14641] ceph: No mds server is up or the cluster is laggy [ 788.781811][T14636] ceph: No mds server is up or the cluster is laggy [ 790.695306][ T30] audit: type=1400 audit(1757187667.949:2840): avc: denied { map } for pid=14670 comm="syz.3.2436" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 790.768705][ T30] audit: type=1400 audit(1757187667.949:2841): avc: denied { execute } for pid=14670 comm="syz.3.2436" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 790.952559][T14646] pim6reg: left allmulticast mode [ 791.237763][ T30] audit: type=1400 audit(1757187668.089:2842): avc: denied { create } for pid=14674 comm="syz.1.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 791.313441][T14681] 9pnet_fd: Insufficient options for proto=fd [ 791.336699][T14681] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 791.343225][T14681] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 791.351276][T14681] vhci_hcd vhci_hcd.0: Device attached [ 791.363300][ T30] audit: type=1400 audit(1757187668.549:2843): avc: denied { write } for pid=14677 comm="syz.0.2438" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 791.535367][ T8786] vhci_hcd: vhci_device speed not set [ 791.591732][ T9] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 791.605793][ T8786] usb 39-1: new full-speed USB device number 6 using vhci_hcd [ 791.821551][ T9] usb 4-1: device descriptor read/64, error -71 [ 792.761720][ T9] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 793.019380][T14698] syz.1.2443 (14698): drop_caches: 2 [ 793.051677][ T9] usb 4-1: device descriptor read/64, error -71 [ 793.162545][ T9] usb usb4-port1: attempt power cycle [ 793.248165][ T30] audit: type=1400 audit(1757187926.499:2844): avc: denied { name_connect } for pid=14707 comm="syz.2.2447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 793.291788][ T30] audit: type=1400 audit(1757187926.539:2845): avc: denied { listen } for pid=14707 comm="syz.2.2447" lport=44454 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 793.316731][ T30] audit: type=1400 audit(1757187926.539:2846): avc: denied { accept } for pid=14707 comm="syz.2.2447" lport=44454 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 793.520152][ T30] audit: type=1400 audit(1757187926.539:2847): avc: denied { write } for pid=14707 comm="syz.2.2447" lport=44454 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 793.561874][ T9] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 793.663523][ T9] usb 4-1: device descriptor read/8, error -71 [ 793.796195][ T30] audit: type=1400 audit(1757187927.039:2848): avc: denied { getopt } for pid=14707 comm="syz.2.2447" lport=44454 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 793.901384][ T9] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 793.925917][ T9] usb 4-1: device descriptor read/8, error -71 [ 793.935841][T14715] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2448'. [ 794.047462][ T9] usb usb4-port1: unable to enumerate USB device [ 794.278260][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2449'. [ 794.297395][T14682] vhci_hcd: connection reset by peer [ 794.327169][ T3516] vhci_hcd: stop threads [ 794.387358][ T3516] vhci_hcd: release socket [ 794.547544][T14723] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 794.917862][ T3516] vhci_hcd: disconnect device [ 795.247912][ T30] audit: type=1800 audit(1757187928.499:2849): pid=14727 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2451" name="file1" dev="tmpfs" ino=2604 res=0 errno=0 [ 795.340306][T14727] pim6reg: entered allmulticast mode [ 795.634847][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2454'. [ 795.827815][T14724] pim6reg: left allmulticast mode [ 795.954490][T14739] netlink: 'syz.0.2457': attribute type 13 has an invalid length. [ 796.263590][ T9] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 796.435052][ T9] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 796.453579][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.475633][ T9] usb 2-1: Product: syz [ 796.494196][ T9] usb 2-1: Manufacturer: syz [ 796.555745][ T9] usb 2-1: SerialNumber: syz [ 796.572163][ T9] usb 2-1: config 0 descriptor?? [ 797.255639][ T8786] vhci_hcd: vhci_device speed not set [ 797.437096][T14759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2456'. [ 797.506822][ T6809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.516088][ T30] audit: type=1400 audit(1757187930.759:2850): avc: denied { write } for pid=14740 comm="syz.1.2456" name="event3" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 797.545085][ T6809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.624424][ T30] audit: type=1400 audit(1757187930.759:2851): avc: denied { write } for pid=14740 comm="syz.1.2456" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 798.018077][T14769] netlink: 'syz.4.2463': attribute type 13 has an invalid length. [ 798.029505][T14769] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 798.043683][T14769] gretap2: entered promiscuous mode [ 798.049211][T14769] gretap2: entered allmulticast mode [ 798.211715][ T5855] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 798.876423][ T5855] usb 3-1: Using ep0 maxpacket: 32 [ 798.895879][ T5855] usb 3-1: unable to get BOS descriptor or descriptor too short [ 798.905255][T14775] netlink: 'syz.4.2464': attribute type 4 has an invalid length. [ 798.934823][ T5855] usb 3-1: config index 0 descriptor too short (expected 53, got 34) [ 798.977223][ T5855] usb 3-1: config 2 has an invalid interface number: 221 but max is 0 [ 799.151806][ T5855] usb 3-1: config 2 has no interface number 0 [ 799.157996][ T5855] usb 3-1: config 2 interface 221 has no altsetting 0 [ 799.902163][ T8786] usb 2-1: USB disconnect, device number 43 [ 799.979164][ T30] audit: type=1400 audit(1757187933.229:2852): avc: denied { write } for pid=14781 comm="syz.4.2466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 800.013092][ T5855] usb 3-1: string descriptor 0 read error: -22 [ 800.019429][ T5855] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 800.031459][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.053603][ T5855] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 800.066308][ T5855] usb 3-1: No valid video chain found. [ 800.259754][ T5898] usb 3-1: USB disconnect, device number 46 [ 800.371984][ T30] audit: type=1800 audit(1757187933.619:2853): pid=14799 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2469" name="file1" dev="tmpfs" ino=2712 res=0 errno=0 [ 800.713597][ T30] audit: type=1400 audit(1757187933.969:2854): avc: denied { create } for pid=14803 comm="syz.1.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 801.089219][T14799] pim6reg: entered allmulticast mode [ 801.533552][T14789] pim6reg: left allmulticast mode [ 801.931781][ T30] audit: type=1400 audit(1757187935.119:2855): avc: denied { ioctl } for pid=14827 comm="syz.2.2479" path="socket:[47337]" dev="sockfs" ino=47337 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 803.173508][T14848] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 803.217577][ T30] audit: type=1400 audit(1757187936.469:2856): avc: denied { create } for pid=14831 comm="syz.2.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 803.238909][ T30] audit: type=1400 audit(1757187936.469:2857): avc: denied { ioctl } for pid=14831 comm="syz.2.2482" path="socket:[47412]" dev="sockfs" ino=47412 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 803.956309][ T30] audit: type=1326 audit(1757187937.159:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14858 comm="syz.1.2493" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a8db8ebe9 code=0x0 [ 803.964259][ T975] libceph: connect (1)[c::]:6789 error -101 [ 804.194477][ T975] libceph: mon0 (1)[c::]:6789 connect error [ 804.670619][T14876] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2493'. [ 805.166582][ T975] libceph: connect (1)[c::]:6789 error -101 [ 805.173828][ T975] libceph: mon0 (1)[c::]:6789 connect error [ 805.296116][T14854] ceph: No mds server is up or the cluster is laggy [ 805.690717][ T975] libceph: connect (1)[c::]:6789 error -101 [ 805.701450][ T975] libceph: mon0 (1)[c::]:6789 connect error [ 806.061553][ T30] audit: type=1800 audit(1757187939.319:2859): pid=14890 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2498" name="file1" dev="tmpfs" ino=2662 res=0 errno=0 [ 806.559873][T14890] pim6reg: entered allmulticast mode [ 806.834747][T14885] pim6reg: left allmulticast mode [ 807.608553][T14898] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 808.146101][ T30] audit: type=1400 audit(1757187941.399:2860): avc: denied { create } for pid=14918 comm="syz.4.2506" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 808.208437][ T30] audit: type=1400 audit(1757187941.459:2861): avc: denied { unlink } for pid=14918 comm="syz.4.2506" name="file0" dev="tmpfs" ino=2669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 808.313182][T14924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6292 sclass=netlink_route_socket pid=14924 comm=syz.3.2507 [ 808.329026][T14923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6292 sclass=netlink_route_socket pid=14923 comm=syz.3.2507 [ 808.347734][T14923] netlink: 'syz.3.2507': attribute type 1 has an invalid length. [ 808.357310][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.364740][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.490900][T14923] bond0: entered promiscuous mode [ 808.496275][T14923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.636210][T14935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2508'. [ 808.698801][T14940] FAULT_INJECTION: forcing a failure. [ 808.698801][T14940] name failslab, interval 1, probability 0, space 0, times 0 [ 808.714487][ T30] audit: type=1400 audit(1757187941.949:2862): avc: denied { mounton } for pid=14938 comm="syz.0.2510" path="/496/file0" dev="tmpfs" ino=2642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 808.756194][T14940] CPU: 0 UID: 0 PID: 14940 Comm: syz.0.2510 Not tainted syzkaller #0 PREEMPT(full) [ 808.756217][T14940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 808.756226][T14940] Call Trace: [ 808.756231][T14940] [ 808.756237][T14940] dump_stack_lvl+0x16c/0x1f0 [ 808.756261][T14940] should_fail_ex+0x512/0x640 [ 808.756279][T14940] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 808.756297][T14940] should_failslab+0xc2/0x120 [ 808.756314][T14940] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 808.756330][T14940] ? alloc_empty_file+0x55/0x1e0 [ 808.756355][T14940] alloc_empty_file+0x55/0x1e0 [ 808.756375][T14940] path_openat+0xda/0x2cb0 [ 808.756389][T14940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.756412][T14940] ? __pfx_path_openat+0x10/0x10 [ 808.756432][T14940] do_filp_open+0x20b/0x470 [ 808.756448][T14940] ? __pfx_do_filp_open+0x10/0x10 [ 808.756479][T14940] ? alloc_fd+0x471/0x7d0 [ 808.756503][T14940] do_sys_openat2+0x11b/0x1d0 [ 808.756526][T14940] ? __pfx_do_sys_openat2+0x10/0x10 [ 808.756550][T14940] ? __fget_files+0x20e/0x3c0 [ 808.756572][T14940] __x64_sys_openat+0x174/0x210 [ 808.756592][T14940] ? __pfx___x64_sys_openat+0x10/0x10 [ 808.756612][T14940] ? ksys_write+0x1ac/0x250 [ 808.756635][T14940] do_syscall_64+0xcd/0x4c0 [ 808.756658][T14940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.756673][T14940] RIP: 0033:0x7fd6fdb8ebe9 [ 808.756687][T14940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.756701][T14940] RSP: 002b:00007fd6fea34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 808.756725][T14940] RAX: ffffffffffffffda RBX: 00007fd6fddc5fa0 RCX: 00007fd6fdb8ebe9 [ 808.756734][T14940] RDX: 0000000000020842 RSI: 000020000000c380 RDI: ffffffffffffff9c [ 808.756743][T14940] RBP: 00007fd6fea34090 R08: 0000000000000000 R09: 0000000000000000 [ 808.756752][T14940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.756761][T14940] R13: 00007fd6fddc6038 R14: 00007fd6fddc5fa0 R15: 00007fff7a03c358 [ 808.756781][T14940] [ 808.966917][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2508'. [ 809.393893][T14954] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[14954] [ 810.315595][T14963] binder: 14962:14963 ioctl c0306201 200000000080 returned -14 [ 811.129926][ T30] audit: type=1800 audit(1757187944.379:2863): pid=14970 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2516" name="file1" dev="tmpfs" ino=2663 res=0 errno=0 [ 812.737886][T14989] program syz.4.2521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 812.817527][ T30] audit: type=1400 audit(1757187946.069:2864): avc: denied { execute_no_trans } for pid=14984 comm="syz.4.2521" path="/510/file1" dev="tmpfs" ino=2695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 814.208978][T15012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2527'. [ 816.632799][T15038] Bluetooth: hci5: Frame reassembly failed (-84) [ 816.751161][ T3516] Bluetooth: hci5: Frame reassembly failed (-84) [ 817.803146][T15052] CUSE: info not properly terminated [ 817.888272][ T30] audit: type=1800 audit(1757187951.139:2865): pid=15050 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2538" name="file1" dev="tmpfs" ino=2705 res=0 errno=0 [ 817.987077][T15050] pim6reg: entered allmulticast mode [ 818.296660][T15064] netlink: 'syz.0.2540': attribute type 12 has an invalid length. [ 818.345042][T15044] pim6reg: left allmulticast mode [ 818.359435][ T30] audit: type=1400 audit(1757187951.579:2866): avc: denied { map } for pid=15057 comm="syz.0.2540" path="socket:[48485]" dev="sockfs" ino=48485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 818.500185][ T30] audit: type=1400 audit(1757187951.579:2867): avc: denied { read accept } for pid=15057 comm="syz.0.2540" path="socket:[48485]" dev="sockfs" ino=48485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 818.593938][ T5913] kworker/1:6 (5913) used greatest stack depth: 18536 bytes left [ 818.722454][ T5857] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 818.722466][T13351] Bluetooth: hci5: command 0x1003 tx timeout [ 819.093625][T15059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2541'. [ 821.679509][T15092] block nbd2: not configured, cannot reconfigure [ 821.812969][ T30] audit: type=1400 audit(1757187955.069:2868): avc: denied { read } for pid=15095 comm="syz.4.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 821.889381][ T30] audit: type=1400 audit(1757187955.079:2869): avc: denied { bind } for pid=15097 comm="syz.0.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 821.909934][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.141711][ T8786] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 822.216962][ T975] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 822.396997][T15111] pim6reg: entered allmulticast mode [ 822.410541][ T30] audit: type=1800 audit(1757187955.619:2870): pid=15111 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2554" name="file1" dev="tmpfs" ino=2799 res=0 errno=0 [ 822.719549][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 822.726233][ T8786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.729041][ T975] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 822.759934][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.769209][ T8786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.772096][ T975] usb 3-1: Product: syz [ 822.784572][ T8786] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 822.790685][ T975] usb 3-1: Manufacturer: syz [ 822.798962][ T975] usb 3-1: SerialNumber: syz [ 822.859809][ T975] usb 3-1: config 0 descriptor?? [ 822.868986][ T8786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.890143][ T975] gspca_main: se401-2.14.0 probing 047d:5003 [ 822.914918][ T8786] usb 1-1: config 0 descriptor?? [ 822.979922][T15107] pim6reg: left allmulticast mode [ 823.036210][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2555'. [ 823.054218][T15113] vlan2: entered promiscuous mode [ 823.097626][ T30] audit: type=1400 audit(1757187956.349:2871): avc: denied { bind } for pid=15100 comm="syz.2.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 823.355272][ T8786] usbhid 1-1:0.0: can't add hid device: -71 [ 823.392188][ T8786] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 823.406441][ T8786] usb 1-1: USB disconnect, device number 67 [ 823.541631][ T975] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 824.425296][ T30] audit: type=1400 audit(1757187957.679:2872): avc: denied { read } for pid=5205 comm="acpid" name="event4" dev="devtmpfs" ino=3542 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 824.470855][ T975] usb 3-1: USB disconnect, device number 47 [ 824.471508][ T30] audit: type=1400 audit(1757187957.679:2873): avc: denied { open } for pid=5205 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3542 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 824.515555][ T30] audit: type=1400 audit(1757187957.679:2874): avc: denied { ioctl } for pid=5205 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3542 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 824.901595][ T975] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 825.341699][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 825.561930][ T975] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 825.573282][ T975] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 825.584179][ T975] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 825.595335][ T975] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 825.693659][ T975] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 825.712181][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.163001][ T5857] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 826.434128][T15149] fuse: Bad value for 'fd' [ 826.565792][ T30] audit: type=1400 audit(1757187959.689:2875): avc: denied { setopt } for pid=15126 comm="syz.2.2560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 826.908072][ T975] usb 3-1: usb_control_msg returned -71 [ 826.991603][ T975] usbtmc 3-1:16.0: can't read capabilities [ 827.138897][ T975] usb 3-1: USB disconnect, device number 48 [ 828.016460][T15165] fuse: Bad value for 'fd' [ 828.473294][T15168] tipc: Started in network mode [ 828.478429][T15168] tipc: Node identity 4ad6d449ab73, cluster identity 4711 [ 828.488174][T15168] tipc: Enabled bearer , priority 0 [ 828.524383][T15168] syzkaller0: entered promiscuous mode [ 828.530068][T15168] syzkaller0: entered allmulticast mode [ 828.586788][T15168] sit0: mtu greater than device maximum [ 828.834356][T15167] tipc: Resetting bearer [ 828.912203][T15167] tipc: Disabling bearer [ 829.058055][ T30] audit: type=1400 audit(1757188218.304:2876): avc: denied { read write } for pid=15179 comm="syz.2.2575" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 829.179221][ T30] audit: type=1400 audit(1757188218.304:2877): avc: denied { open } for pid=15179 comm="syz.2.2575" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 829.256648][T15183] 9pnet_fd: Insufficient options for proto=fd [ 830.006555][T15191] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15191 comm=syz.2.2578 [ 830.054849][T15191] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=15191 comm=syz.2.2578 [ 830.218705][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2579'. [ 830.243255][ T5857] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 830.261756][ T5857] Bluetooth: hci4: Injecting HCI hardware error event [ 830.272073][ T5857] Bluetooth: hci4: hardware error 0x00 [ 830.566153][ T30] audit: type=1400 audit(1757188219.804:2878): avc: denied { connect } for pid=15190 comm="syz.2.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 832.431326][T15219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2584'. [ 832.433507][T15223] netlink: 'syz.4.2587': attribute type 1 has an invalid length. [ 832.526290][T15223] 8021q: adding VLAN 0 to HW filter on device bond6 [ 832.631844][T15223] vlan4: entered promiscuous mode [ 832.644622][ T5857] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 832.669141][T15223] bond6: entered promiscuous mode [ 832.682000][T15223] vlan4: entered allmulticast mode [ 832.687394][T15223] bond6: entered allmulticast mode [ 832.908411][T15232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2588'. [ 832.965437][T15233] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15233 comm=syz.2.2588 [ 834.092398][T15241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 834.883884][T15249] netlink: 'syz.0.2591': attribute type 4 has an invalid length. [ 835.154316][ T30] audit: type=1400 audit(1757188224.374:2879): avc: denied { write } for pid=15237 comm="syz.4.2590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 835.173885][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.383066][ T30] audit: type=1400 audit(1757188224.624:2880): avc: denied { write } for pid=15255 comm="syz.2.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 835.565816][ T30] audit: type=1400 audit(1757188224.814:2881): avc: denied { mounton } for pid=15259 comm="syz.3.2596" path="/536/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 835.702616][ T30] audit: type=1400 audit(1757188224.944:2882): avc: denied { remount } for pid=15259 comm="syz.3.2596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 835.793121][ T975] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 836.565659][ T30] audit: type=1400 audit(1757188225.494:2883): avc: denied { ioctl } for pid=15258 comm="syz.4.2595" path="socket:[49033]" dev="sockfs" ino=49033 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 836.766750][ T30] audit: type=1400 audit(1757188225.994:2884): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 837.484732][ T975] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 837.505241][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.632981][ T975] usb 3-1: Product: syz [ 837.637209][ T975] usb 3-1: Manufacturer: syz [ 837.722708][ T975] usb 3-1: SerialNumber: syz [ 837.793229][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'. [ 837.931393][ T975] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 837.976277][ T8775] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 838.213069][T15286] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2599'. [ 838.276625][T15256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.302022][T15256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.529971][ T5855] usb 3-1: USB disconnect, device number 49 [ 838.616270][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2603'. [ 838.630510][T15291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2603'. [ 838.652431][T15291] netlink: 'syz.0.2603': attribute type 18 has an invalid length. [ 838.662321][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2603'. [ 838.672913][T15291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2603'. [ 838.685314][T15291] netlink: 'syz.0.2603': attribute type 18 has an invalid length. [ 838.727012][T15294] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=15294 comm=syz.1.2604 [ 838.769582][ T30] audit: type=1400 audit(1757188228.014:2885): avc: denied { append } for pid=15293 comm="syz.1.2604" name="sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 838.796820][T15294] 9pnet_fd: Insufficient options for proto=fd [ 838.994768][ T5898] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 839.255399][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 839.272798][ T5898] usb 1-1: unable to get BOS descriptor or descriptor too short [ 839.288609][ T5898] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 839.352883][T15301] netlink: 'syz.3.2606': attribute type 1 has an invalid length. [ 839.362096][T15301] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2606'. [ 839.724198][ T8775] usb 3-1: Service connection timeout for: 256 [ 839.742194][ T8775] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 839.869805][ T5898] usb 1-1: can't read configurations, error -71 [ 840.080483][ T8775] ath9k_htc: Failed to initialize the device [ 840.288187][ T5855] usb 3-1: ath9k_htc: USB layer deinitialized [ 840.456631][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2609'. [ 840.493366][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2609'. [ 840.528557][ T30] audit: type=1326 audit(1757188229.774:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15300 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8db8ebe9 code=0x7ffc0000 [ 840.574112][ T30] audit: type=1326 audit(1757188229.774:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15300 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8db8ebe9 code=0x7ffc0000 [ 840.601228][ T30] audit: type=1326 audit(1757188229.774:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15300 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f9a8db8ebe9 code=0x7ffc0000 [ 840.754616][ T30] audit: type=1326 audit(1757188229.774:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15300 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8db8ebe9 code=0x7ffc0000 [ 840.797281][ T30] audit: type=1326 audit(1757188229.774:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15300 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8db8ebe9 code=0x7ffc0000 [ 840.928431][ T30] audit: type=1326 audit(1757188229.804:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15300 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a8db8ebe9 code=0x7ffc0000 [ 841.248990][ T30] audit: type=1326 audit(1757188229.804:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15300 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8db8ebe9 code=0x7ffc0000 [ 841.273657][ T30] audit: type=1326 audit(1757188229.804:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15300 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8db8ebe9 code=0x7ffc0000 [ 841.299089][ T30] audit: type=1326 audit(1757188229.804:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15300 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a8db8ebe9 code=0x7ffc0000 [ 841.326919][ T30] audit: type=1326 audit(1757188229.804:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15300 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8db8ebe9 code=0x7ffc0000 [ 841.561013][ T975] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 841.701778][ T5898] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 841.723553][ T975] usb 2-1: config 0 has an invalid interface number: 190 but max is 0 [ 841.740118][ T975] usb 2-1: config 0 has no interface number 0 [ 841.780216][ T975] usb 2-1: New USB device found, idVendor=19d2, idProduct=1111, bcdDevice= 7.75 [ 841.790131][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.889419][ T5898] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.923714][ T975] usb 2-1: config 0 descriptor?? [ 841.942117][ T5898] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 841.977055][ T5898] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 841.987884][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.997484][ T5898] usb 1-1: Product: syz [ 842.002803][ T5898] usb 1-1: Manufacturer: syz [ 842.007645][ T5898] usb 1-1: SerialNumber: syz [ 842.058588][ T5898] cdc_ncm 1-1:1.0: skipping garbage [ 842.069704][ T5898] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 842.098588][ T5898] cdc_ncm 1-1:1.0: bind() failure [ 842.507789][ T5898] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 842.518013][ T5898] cdc_ncm 1-1:1.1: bind() failure [ 843.389623][T15350] 9pnet_virtio: no channels available for device 127.0.0.1 [ 843.460038][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 843.467249][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 843.732140][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 843.738202][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 844.085156][T15351] ceph: No mds server is up or the cluster is laggy [ 844.535214][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 844.541528][T15325] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 844.541666][T15325] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 844.556104][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 844.597869][T15325] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 844.606052][T15325] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 844.624296][T15325] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 844.631360][T15325] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 844.724588][ T5898] usb 1-1: USB disconnect, device number 69 [ 844.731719][ T975] usb 2-1: string descriptor 0 read error: -71 [ 844.759974][ T975] usb 2-1: bad CDC descriptors [ 844.852755][ T975] usb 2-1: USB disconnect, device number 44 [ 845.043133][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 846.671559][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 846.677686][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 846.685300][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 846.685315][ T30] audit: type=1400 audit(1757188235.894:2928): avc: denied { accept } for pid=15390 comm="syz.1.2632" path="socket:[49663]" dev="sockfs" ino=49663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 847.121824][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 847.147211][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2637'. [ 847.227734][ T30] audit: type=1400 audit(1757188236.474:2929): avc: denied { getopt } for pid=15406 comm="syz.3.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 847.884831][ T30] audit: type=1400 audit(1757188237.134:2930): avc: denied { relabelfrom } for pid=15412 comm="syz.2.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 847.959906][ T30] audit: type=1400 audit(1757188237.134:2931): avc: denied { relabelto } for pid=15412 comm="syz.2.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 848.722948][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 848.730585][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 851.563085][T15452] netlink: 'syz.4.2646': attribute type 1 has an invalid length. [ 851.665780][T15452] 8021q: adding VLAN 0 to HW filter on device bond7 [ 852.240424][T15464] netlink: 'syz.2.2647': attribute type 4 has an invalid length. [ 852.285770][T15464] netlink: 'syz.2.2647': attribute type 4 has an invalid length. [ 852.854195][T15470] netlink: 'syz.2.2651': attribute type 13 has an invalid length. [ 853.281406][T15477] netlink: 'syz.0.2650': attribute type 4 has an invalid length. [ 853.317171][T15470] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 853.357351][T15470] gretap2: entered promiscuous mode [ 853.365267][T15479] FAULT_INJECTION: forcing a failure. [ 853.365267][T15479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.365656][T15470] gretap2: entered allmulticast mode [ 853.395549][T15479] CPU: 0 UID: 0 PID: 15479 Comm: syz.4.2652 Not tainted syzkaller #0 PREEMPT(full) [ 853.395573][T15479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 853.395583][T15479] Call Trace: [ 853.395589][T15479] [ 853.395596][T15479] dump_stack_lvl+0x16c/0x1f0 [ 853.395622][T15479] should_fail_ex+0x512/0x640 [ 853.395648][T15479] _copy_from_user+0x2e/0xd0 [ 853.395674][T15479] kstrtouint_from_user+0xd6/0x1d0 [ 853.395693][T15479] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 853.395710][T15479] ? __lock_acquire+0xb97/0x1ce0 [ 853.395749][T15479] proc_fail_nth_write+0x83/0x220 [ 853.395771][T15479] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 853.395797][T15479] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 853.395815][T15479] vfs_write+0x29d/0x11d0 [ 853.395837][T15479] ? __pfx___mutex_lock+0x10/0x10 [ 853.395859][T15479] ? __pfx_vfs_write+0x10/0x10 [ 853.395884][T15479] ? __fget_files+0x20e/0x3c0 [ 853.395910][T15479] ksys_write+0x12a/0x250 [ 853.395931][T15479] ? __pfx_ksys_write+0x10/0x10 [ 853.395949][T15479] ? fdget+0x187/0x210 [ 853.395971][T15479] do_syscall_64+0xcd/0x4c0 [ 853.395993][T15479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.396008][T15479] RIP: 0033:0x7fbfb778d69f [ 853.396023][T15479] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 853.396038][T15479] RSP: 002b:00007fbfb8570030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 853.396054][T15479] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbfb778d69f [ 853.396066][T15479] RDX: 0000000000000001 RSI: 00007fbfb85700a0 RDI: 0000000000000006 [ 853.396075][T15479] RBP: 00007fbfb8570090 R08: 0000000000000000 R09: 0000000000000000 [ 853.396084][T15479] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 853.396092][T15479] R13: 00007fbfb79c6128 R14: 00007fbfb79c6090 R15: 00007ffe97935978 [ 853.396115][T15479] [ 853.842778][T15483] FAULT_INJECTION: forcing a failure. [ 853.842778][T15483] name failslab, interval 1, probability 0, space 0, times 0 [ 853.856771][T15483] CPU: 0 UID: 0 PID: 15483 Comm: syz.1.2654 Not tainted syzkaller #0 PREEMPT(full) [ 853.856795][T15483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 853.856805][T15483] Call Trace: [ 853.856812][T15483] [ 853.856819][T15483] dump_stack_lvl+0x16c/0x1f0 [ 853.856846][T15483] should_fail_ex+0x512/0x640 [ 853.856869][T15483] ? fs_reclaim_acquire+0xae/0x150 [ 853.856894][T15483] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 853.856920][T15483] should_failslab+0xc2/0x120 [ 853.856943][T15483] __kmalloc_noprof+0xd2/0x510 [ 853.856967][T15483] tomoyo_realpath_from_path+0xc2/0x6e0 [ 853.856996][T15483] ? tomoyo_profile+0x47/0x60 [ 853.857015][T15483] tomoyo_path_number_perm+0x245/0x580 [ 853.857035][T15483] ? tomoyo_path_number_perm+0x237/0x580 [ 853.857060][T15483] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 853.857111][T15483] ? hook_file_ioctl_common+0x145/0x410 [ 853.857131][T15483] ? __rcu_read_unlock+0x2bc/0x550 [ 853.857151][T15483] ? __fget_files+0x20e/0x3c0 [ 853.857175][T15483] security_file_ioctl+0x9b/0x240 [ 853.857201][T15483] __x64_sys_ioctl+0xb7/0x210 [ 853.857228][T15483] do_syscall_64+0xcd/0x4c0 [ 853.857253][T15483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.857270][T15483] RIP: 0033:0x7f9a8db8ebe9 [ 853.857284][T15483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.857300][T15483] RSP: 002b:00007f9a8e960038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 853.857316][T15483] RAX: ffffffffffffffda RBX: 00007f9a8ddc6180 RCX: 00007f9a8db8ebe9 [ 853.857327][T15483] RDX: 0000200000000100 RSI: 0000000040104593 RDI: 0000000000000003 [ 853.857336][T15483] RBP: 00007f9a8e960090 R08: 0000000000000000 R09: 0000000000000000 [ 853.857346][T15483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.857356][T15483] R13: 00007f9a8ddc6218 R14: 00007f9a8ddc6180 R15: 00007fff1acf5c58 [ 853.857380][T15483] [ 854.049857][T15483] ERROR: Out of memory at tomoyo_realpath_from_path. [ 854.166447][T15488] netlink: 'syz.0.2655': attribute type 1 has an invalid length. [ 854.189025][ T30] audit: type=1400 audit(1757188243.434:2932): avc: denied { getopt } for pid=15491 comm="syz.4.2658" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 854.277047][T15488] gretap2: entered promiscuous mode [ 854.315030][T15488] bond8: (slave gretap2): making interface the new active one [ 854.322952][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'. [ 854.354832][ T30] audit: type=1400 audit(1757188243.564:2933): avc: denied { getopt } for pid=15485 comm="syz.0.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 854.371006][T15488] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 854.552100][T15488] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 854.578974][T15485] [U] vÔ3 [ 854.636955][T15501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2659'. [ 854.677453][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2659'. [ 854.728586][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2656'. [ 855.180085][ T30] audit: type=1400 audit(1757188244.414:2934): avc: denied { connect } for pid=15507 comm="syz.0.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 857.453474][T15519] binder: Bad value for 'stats' [ 857.764615][T15524] netlink: 'syz.4.2664': attribute type 1 has an invalid length. [ 857.836356][T15524] bond8 (unregistering): Released all slaves [ 858.033784][ T30] audit: type=1800 audit(1757188247.274:2935): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2665" name="file1" dev="tmpfs" ino=2716 res=0 errno=0 [ 858.238300][T15529] pim6reg: entered allmulticast mode [ 858.596369][T15547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2671'. [ 858.956698][T15553] netlink: 'syz.3.2671': attribute type 6 has an invalid length. [ 859.060374][T15526] pim6reg: left allmulticast mode [ 859.146089][ T30] audit: type=1400 audit(1757188248.374:2936): avc: denied { map } for pid=15545 comm="syz.1.2672" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 860.623103][ T5855] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 860.663139][ T8772] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 860.704284][ T30] audit: type=1400 audit(1757188249.954:2937): avc: denied { ioctl } for pid=15578 comm="syz.0.2683" path="socket:[50061]" dev="sockfs" ino=50061 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 860.729229][ C1] vkms_vblank_simulate: vblank timer overrun [ 860.786160][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.819465][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.833573][ T8772] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 860.842095][ T5855] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 860.842122][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.853966][ T5855] usb 3-1: config 0 descriptor?? [ 860.888788][ T8772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.915357][ T8772] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 860.947538][ T8772] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 860.973765][ T8772] usb 4-1: Manufacturer: syz [ 861.018149][ T8772] usb 4-1: config 0 descriptor?? [ 861.030174][T15592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2685'. [ 861.182567][T15592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2685'. [ 861.332954][ T5855] usbhid 3-1:0.0: can't add hid device: -71 [ 861.349109][ T5855] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 861.504996][ T5855] usb 3-1: USB disconnect, device number 50 [ 861.513186][ T8772] rc_core: IR keymap rc-hauppauge not found [ 861.529388][ T8772] Registered IR keymap rc-empty [ 861.555137][ T8772] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 861.584235][ T8772] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 861.612400][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 861.648103][ T8772] usb 4-1: USB disconnect, device number 54 [ 861.896150][T15604] bridge3: entered promiscuous mode [ 862.669127][ T30] audit: type=1800 audit(1757188251.914:2938): pid=15614 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2691" name="file1" dev="tmpfs" ino=2956 res=0 errno=0 [ 862.690992][ C1] vkms_vblank_simulate: vblank timer overrun [ 862.713673][T15616] bridge0: port 3(vxlan0) entered blocking state [ 862.924477][T15616] bridge0: port 3(vxlan0) entered disabled state [ 862.952060][T15616] vxlan0: entered allmulticast mode [ 863.062639][T15616] vxlan0: entered promiscuous mode [ 863.245800][T15619] pim6reg: entered allmulticast mode [ 863.465685][T15625] program syz.1.2693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 863.514891][T15609] pim6reg: left allmulticast mode [ 863.530254][ T30] audit: type=1400 audit(1757188252.714:2939): avc: denied { execute } for pid=15617 comm="syz.1.2693" path="/sys/power/pm_test" dev="sysfs" ino=1415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 863.647523][ T30] audit: type=1400 audit(1757188252.894:2940): avc: denied { kexec_image_load } for pid=15626 comm="syz.4.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 865.181892][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 865.221931][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 865.235362][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 865.248302][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 865.258782][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 865.887761][ T30] audit: type=1400 audit(1757188255.134:2941): avc: denied { setopt } for pid=15643 comm="syz.2.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 866.091692][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2703'. [ 868.253171][T15682] netlink: 'syz.0.2712': attribute type 3 has an invalid length. [ 868.329365][T15682] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2712'. [ 868.824990][ T30] audit: type=1800 audit(1757188257.954:2942): pid=15693 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2714" name="file1" dev="tmpfs" ino=2876 res=0 errno=0 [ 869.871989][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.878297][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.477251][T15719] Bluetooth: MGMT ver 1.23 [ 872.640686][T15721] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 872.662841][T13984] Bluetooth: hci5: Frame reassembly failed (-84) [ 872.755531][T15723] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN NOPTI [ 872.767597][T15723] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 872.776000][T15723] CPU: 1 UID: 0 PID: 15723 Comm: syz.2.2721 Not tainted syzkaller #0 PREEMPT(full) [ 872.785348][T15723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 872.795382][T15723] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 872.801266][T15723] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 8e 58 75 09 66 66 2e 0f 1f 84 00 00 00 [ 872.820877][T15723] RSP: 0018:ffffc9001a64f708 EFLAGS: 00010286 [ 872.826948][T15723] RAX: dffffc0000000000 RBX: 0000000000000258 RCX: 0000000000000000 [ 872.834906][T15723] RDX: 0000000000000000 RSI: ffffffff89656f21 RDI: dffffc000000004b [ 872.842868][T15723] RBP: 0000000000000258 R08: 0000000000000001 R09: 0000000000000000 [ 872.850821][T15723] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff89656f21 [ 872.858778][T15723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 872.866732][T15723] FS: 00007fe6ab5da6c0(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 872.875647][T15723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 872.882217][T15723] CR2: 0000000000000000 CR3: 000000002581d000 CR4: 00000000003526f0 [ 872.890167][T15723] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 872.898121][T15723] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 872.906089][T15723] Call Trace: [ 872.909348][T15723] [ 872.912256][T15723] __kasan_check_byte+0x13/0x50 [ 872.917094][T15723] lock_acquire+0xfc/0x350 [ 872.921493][T15723] ? do_raw_spin_lock+0x12c/0x2b0 [ 872.926501][T15723] lock_sock_nested+0x41/0xf0 [ 872.931162][T15723] ? rose_kill_by_device+0x1f3/0x790 [ 872.936446][T15723] rose_kill_by_device+0x1f3/0x790 [ 872.941545][T15723] ? __pfx_rose_kill_by_device+0x10/0x10 [ 872.947169][T15723] ? __local_bh_enable_ip+0xa4/0x120 [ 872.952442][T15723] rose_device_event+0xe2/0x120 [ 872.957285][T15723] notifier_call_chain+0xb9/0x410 [ 872.962311][T15723] ? __pfx_rose_device_event+0x10/0x10 [ 872.967765][T15723] call_netdevice_notifiers_info+0xbe/0x140 [ 872.973652][T15723] __dev_notify_flags+0x1f7/0x2e0 [ 872.978664][T15723] ? __pfx___dev_notify_flags+0x10/0x10 [ 872.984198][T15723] ? __pfx___dev_change_flags+0x10/0x10 [ 872.989731][T15723] ? __mutex_trylock_common+0xe9/0x250 [ 872.995176][T15723] netif_change_flags+0x108/0x160 [ 873.000187][T15723] dev_change_flags+0xba/0x250 [ 873.004938][T15723] dev_ifsioc+0x1498/0x1f70 [ 873.009423][T15723] ? __pfx_dev_ifsioc+0x10/0x10 [ 873.014253][T15723] ? __pfx___mutex_lock+0x10/0x10 [ 873.019289][T15723] ? dev_load+0x8e/0x240 [ 873.023514][T15723] dev_ioctl+0x223/0x10e0 [ 873.027822][T15723] sock_do_ioctl+0x19d/0x280 [ 873.032398][T15723] ? __pfx_sock_do_ioctl+0x10/0x10 [ 873.037495][T15723] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 873.042507][T15723] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 873.049348][T15723] sock_ioctl+0x227/0x6b0 [ 873.053656][T15723] ? __pfx_sock_ioctl+0x10/0x10 [ 873.058480][T15723] ? hook_file_ioctl_common+0x145/0x410 [ 873.064005][T15723] ? selinux_file_ioctl+0x180/0x270 [ 873.069184][T15723] ? selinux_file_ioctl+0xb4/0x270 [ 873.074277][T15723] ? __pfx_sock_ioctl+0x10/0x10 [ 873.079102][T15723] __x64_sys_ioctl+0x18b/0x210 [ 873.083852][T15723] do_syscall_64+0xcd/0x4c0 [ 873.088338][T15723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.094209][T15723] RIP: 0033:0x7fe6aa78ebe9 [ 873.098603][T15723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.118192][T15723] RSP: 002b:00007fe6ab5da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 873.126610][T15723] RAX: ffffffffffffffda RBX: 00007fe6aa9c5fa0 RCX: 00007fe6aa78ebe9 [ 873.134568][T15723] RDX: 0000200000000300 RSI: 0000000000008914 RDI: 0000000000000006 [ 873.142525][T15723] RBP: 00007fe6aa811e19 R08: 0000000000000000 R09: 0000000000000000 [ 873.150492][T15723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.158462][T15723] R13: 00007fe6aa9c6038 R14: 00007fe6aa9c5fa0 R15: 00007ffeb15a0f38 [ 873.166429][T15723] [ 873.169430][T15723] Modules linked in: [ 873.173428][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.181773][T15723] ---[ end trace 0000000000000000 ]--- [ 873.226789][T15723] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 873.227913][ T30] audit: type=1400 audit(1757188262.464:2943): avc: denied { read } for pid=5202 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 873.248578][T15723] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 8e 58 75 09 66 66 2e 0f 1f 84 00 00 00 [ 873.254689][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.285992][ T30] audit: type=1400 audit(1757188262.464:2944): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.307528][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.328445][ T30] audit: type=1400 audit(1757188262.464:2945): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.416064][ T30] audit: type=1400 audit(1757188262.464:2946): avc: denied { add_name } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.438983][T15723] RSP: 0018:ffffc9001a64f708 EFLAGS: 00010286 [ 873.441589][ T30] audit: type=1400 audit(1757188262.464:2947): avc: denied { create } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 873.469301][ T30] audit: type=1400 audit(1757188262.464:2948): avc: denied { append open } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 873.494749][ T30] audit: type=1400 audit(1757188262.474:2949): avc: denied { getattr } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 873.519745][T15723] RAX: dffffc0000000000 RBX: 0000000000000258 RCX: 0000000000000000 [ 873.529871][T15723] RDX: 0000000000000000 RSI: ffffffff89656f21 RDI: dffffc000000004b [ 873.567333][T15723] RBP: 0000000000000258 R08: 0000000000000001 R09: 0000000000000000 [ 873.576497][T15723] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff89656f21 [ 873.589799][T15723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 873.599210][T15723] FS: 00007fe6ab5da6c0(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 873.609656][T15723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 873.617582][T15723] CR2: 000000110c2a3b3f CR3: 000000002581d000 CR4: 00000000003526f0 [ 873.638553][T15723] Kernel panic - not syncing: Fatal exception [ 873.644828][T15723] Kernel Offset: disabled [ 873.649126][T15723] Rebooting in 86400 seconds..