last executing test programs: 2m3.175714677s ago: executing program 1 (id=324): syz_emit_ethernet(0xc3, &(0x7f00000000c0)={@broadcast, @empty, @void, {@x25={0x805, {0x1, 0x6, 0xb, "aba302e1c709ebf94617ae25d3e74a8b16022036d410353b21e74ebffe781a83d2a453ffc2132c7d060376cfbbefa58567e15ff0c7e12a71c2487c482640650c21a64697203da0bd0e007d4d52697527177b4b625dd19cd7c8d7f966588c5e9b32925c12a55ecf0b24c53d5e70b4f9cca1b62d71a88a8433c562dad63811315458ee6123ec70c15434fb5a5c4302a45bdf64e9b0db4ae33ad80c591935216937b78cedec7f441eace0f0ec8596c8e6aa96f9"}}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a48e08f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ec"], 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x2, 0x1, 0x8, 0x5}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3020000c72b000341", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) 1m58.975064479s ago: executing program 1 (id=337): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) write$FUSE_BMAP(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 1m56.769589344s ago: executing program 1 (id=341): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001e40)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000001800000050000000300000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005000000040000000b000000009a00"/28], 0x50) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000140)={0x4, 0x17000, 0x40}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001e40)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000001800000050000000300000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005000000040000000b000000009a00"/28], 0x50) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000140)={0x4, 0x17000, 0x40}) (async) 1m55.977708627s ago: executing program 1 (id=343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0xffff887fffffbfff, 0x401, 0x0, 0x8001, 0x0, [{0x4, 0x5, 0xc7, '\x00', 0x81}, {0x4, 0x4, 0xc, '\x00', 0xc}, {0x0, 0x8, 0xff, '\x00', 0xd}, {0x2, 0xe, 0x1, '\x00', 0x1f}, {0xf, 0xff, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0xb, 0x6, 0x7, '\x00', 0x4e}, {0x6, 0x6, 0x6, '\x00', 0x1}, {0x2, 0x8, 0x41, '\x00', 0x6}, {0xd, 0x1, 0x1, '\x00', 0x3}, {0x7f, 0x9, 0xff, '\x00', 0x2c}, {0xa, 0x1, 0x6, '\x00', 0x7f}, {0x5, 0x6, 0x7, '\x00', 0x8}, {0x47, 0x12, 0xc, '\x00', 0x9}, {0xfe, 0xb, 0x49, '\x00', 0xf}, {0xe, 0x5, 0x6}, {0x4, 0x12, 0x52}, {0x4, 0x4, 0x2, '\x00', 0x40}, {0xf2, 0x2, 0x8e, '\x00', 0x81}, {0x81, 0x0, 0x12, '\x00', 0x6}, {0x2, 0x2, 0x0, '\x00', 0x83}, {0x6, 0x8, 0x9b, '\x00', 0x4}, {0x7f, 0x3, 0x7d, '\x00', 0xd3}, {0xfc, 0x8, 0x3a, '\x00', 0x5}]}}) setregid(0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) setgid(0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 1m53.427529585s ago: executing program 1 (id=352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0xf5ffffff, {0x2}}], {0x14}}, 0x3c}}, 0x0) 1m53.321687874s ago: executing program 1 (id=354): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="c092743dc33a2dbd94c8cced3d9e9faaace2dde8742f9618f5fd647d086ba76794655b4301462f252cd33a8e9e8ba84bf545e41ce434cd52228e69d9bae2ee24f6a8e42d0bedfe668f39848afa34660880c4b7574fca0ee54e"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000000)=""/40, 0x28) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000300)={0x6, 0x1}) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r4 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000087900110000000000000109022d00010000000409040000010300000009210000000122070009058103000000000009050203ff02000701"], 0x0) unshare(0x62040200) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r8, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = fsmount(r7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRES32=r6, @ANYBLOB="1200000006000000000000003294"], 0x10) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x401) writev(r5, &(0x7f0000001700)=[{&(0x7f0000000340)="97ca783f890cdf2ff2f0901d33", 0xd}, {&(0x7f0000000400)="caf69d81ec424c2f4f4a271c94e61667e6f31b774dd29e60335f7d3a2015105259b254f08c91663bc2106cd104c59754a7785a72a111276a8bed3e580eb30e4c4b51ff376e97fd9149bd7c6f62144bbaa54628f03991d0ec66add1555375d85adda4d6edaf04c44e662acf074d417bb5f970853923efa7f1df36d9f8f059eb8e9ffed0c0abbfce782d9317f356b17dd42cde37e43ef20e0da91c6da241fb86a7f2295de271d3bba3b2a8", 0xaa}, {&(0x7f0000000540)="d7e2732603824a4875fd5780d49e857ab9039578799361a1e483904f4262f4a04c88802013a2acb8fb69af1aa77537b1b36f4a0914d90330a387cb3d6026ece798d148286f948d0da2d5f557063cda", 0x4f}, {&(0x7f00000005c0)="20bee7bdddc0ee906c4559548aac20ecb4846fdd317c77e532139c81f81c71975c2d5a710b4214942298187fef39e78e4a709c6f64a46df180559853f1333890a08f125f910e1517a67b84f4335cd763c0a09a5764018431db7c68b11b574c3fafa267de5fb27e306dcc1325717161ce91dac77b0c53182ae44dcc501bc949d54d7b", 0x82}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000380)="7e33602c6921d606184d73cdf89f79e65416f9caed5b376d93d614deff124e6e2918f980c67869401e2a53950be5e5cdf1ffc77bd41a3e4a91d9a8b5aa", 0x3d}, {&(0x7f0000001680)="5ccabd7097c68e3b33ebefb9baea7ad8576f58267f4ebcc5a6b161261e1437562ac0bfa9cf1f2bfed5cb5e9e57d94f6e91256bf8b918eecc01faf20ffad3493d6dc82ffbf1c0aa17e172f8191418363a7eca547199", 0x55}], 0x7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000080)={{0x4e79, 0x3, 0x3, 0x1}, 'syz1\x00', 0x41}) r10 = socket(0x2b, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r10, 0x11e, 0x2, 0x0, 0x6a653c3ce7aa4ce) 1m38.288406971s ago: executing program 32 (id=354): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="c092743dc33a2dbd94c8cced3d9e9faaace2dde8742f9618f5fd647d086ba76794655b4301462f252cd33a8e9e8ba84bf545e41ce434cd52228e69d9bae2ee24f6a8e42d0bedfe668f39848afa34660880c4b7574fca0ee54e"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000000)=""/40, 0x28) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000300)={0x6, 0x1}) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r4 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000087900110000000000000109022d00010000000409040000010300000009210000000122070009058103000000000009050203ff02000701"], 0x0) unshare(0x62040200) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r8, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = fsmount(r7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRES32=r6, @ANYBLOB="1200000006000000000000003294"], 0x10) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x401) writev(r5, &(0x7f0000001700)=[{&(0x7f0000000340)="97ca783f890cdf2ff2f0901d33", 0xd}, {&(0x7f0000000400)="caf69d81ec424c2f4f4a271c94e61667e6f31b774dd29e60335f7d3a2015105259b254f08c91663bc2106cd104c59754a7785a72a111276a8bed3e580eb30e4c4b51ff376e97fd9149bd7c6f62144bbaa54628f03991d0ec66add1555375d85adda4d6edaf04c44e662acf074d417bb5f970853923efa7f1df36d9f8f059eb8e9ffed0c0abbfce782d9317f356b17dd42cde37e43ef20e0da91c6da241fb86a7f2295de271d3bba3b2a8", 0xaa}, {&(0x7f0000000540)="d7e2732603824a4875fd5780d49e857ab9039578799361a1e483904f4262f4a04c88802013a2acb8fb69af1aa77537b1b36f4a0914d90330a387cb3d6026ece798d148286f948d0da2d5f557063cda", 0x4f}, {&(0x7f00000005c0)="20bee7bdddc0ee906c4559548aac20ecb4846fdd317c77e532139c81f81c71975c2d5a710b4214942298187fef39e78e4a709c6f64a46df180559853f1333890a08f125f910e1517a67b84f4335cd763c0a09a5764018431db7c68b11b574c3fafa267de5fb27e306dcc1325717161ce91dac77b0c53182ae44dcc501bc949d54d7b", 0x82}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000380)="7e33602c6921d606184d73cdf89f79e65416f9caed5b376d93d614deff124e6e2918f980c67869401e2a53950be5e5cdf1ffc77bd41a3e4a91d9a8b5aa", 0x3d}, {&(0x7f0000001680)="5ccabd7097c68e3b33ebefb9baea7ad8576f58267f4ebcc5a6b161261e1437562ac0bfa9cf1f2bfed5cb5e9e57d94f6e91256bf8b918eecc01faf20ffad3493d6dc82ffbf1c0aa17e172f8191418363a7eca547199", 0x55}], 0x7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000080)={{0x4e79, 0x3, 0x3, 0x1}, 'syz1\x00', 0x41}) r10 = socket(0x2b, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r10, 0x11e, 0x2, 0x0, 0x6a653c3ce7aa4ce) 10.033587631s ago: executing program 0 (id=646): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000003c0)={0x1fd, 0x1, 0x8080000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r5, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.825098878s ago: executing program 5 (id=648): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f0000000300)=0x10, 0x180800) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x90}}, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 8.994535369s ago: executing program 0 (id=651): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x88e42) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x2860020, &(0x7f0000000180)=ANY=[]) r2 = getpid() socket$netlink(0x10, 0x3, 0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r6, 0x31f, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2e80, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r8, 0x0, r7, 0x0, 0x4, 0x0) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000400)={0x4, &(0x7f0000000300)=[{0xa00, 0x9a, 0x4, 0x13c}, {0xf4, 0x9, 0x7, 0x4}, {0x8, 0x6, 0xf9, 0x3}, {0x0, 0x4, 0x1, 0x6}]}) 8.689609154s ago: executing program 5 (id=652): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000057b5de00f3b200f4118a0000006873f6000000000000000000dd4a6082a1600000000a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000057b5de00f3b200f4118a0000006873f6000000000000000000dd4a6082a1600000000a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_pts(r1, 0x141601) (async) r4 = syz_open_pts(r1, 0x141601) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x1b) close(0x3) syz_usb_connect(0x3, 0x367, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32], 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) (async) bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x0, &(0x7f0000000180)=0x80000039f8, 0x4) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x0, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r5, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r6, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) lseek(r7, 0x3, 0x1) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000080)=0x22c5408) socket$kcm(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000030101030011000000000000070000"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4000002) 7.729044503s ago: executing program 2 (id=656): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r0, &(0x7f0000000600)=ANY=[], 0x82) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x90ffffff, 0x1, 0x1}}, 0x40) 7.10230626s ago: executing program 2 (id=659): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') read$eventfd(r1, &(0x7f0000000100), 0xfffffd79) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gretap0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x8000, 0x8, 0x0, 0x7, {{0x21, 0x4, 0x1, 0x26, 0x84, 0x66, 0x0, 0x0, 0x29, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x1c, 0xd8, 0x0, 0xe, [0x9, 0xb, 0x9, 0x5, 0x1ff, 0xfffffff7]}, @timestamp_addr={0x44, 0x2c, 0xcf, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x842}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@broadcast, 0x9}, {@local}, {@broadcast, 0x401}]}, @timestamp={0x44, 0x10, 0x31, 0x0, 0xa, [0x6, 0x5, 0x6e8]}, @ssrr={0x89, 0x17, 0x4, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010101, @rand_addr=0x64010100, @local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x17, 0x8, 0x25, 0x4, 0x2, @mcast1, @local, 0x700, 0x8, 0xffffff00, 0x4}}) sendmsg$nl_route_sched(r3, &(0x7f0000001c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x600000}, 0xc, &(0x7f0000001c00)={&(0x7f0000000340)=@delchain={0x1894, 0x65, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0xffff}, {0xc, 0xffff}, {0x8, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x21}}, @filter_kind_options=@f_route={{0xa}, {0x183c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x32}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_TO={0x8, 0x2, 0x4d}, @TCA_ROUTE4_POLICE={0x460, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x35d}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x20000000, 0x4, 0x1, 0x7, {0xd, 0x2, 0xffff, 0x3, 0x1, 0x3}, {0x9, 0x0, 0xf, 0xfff7, 0x3, 0x414}, 0x6, 0x80, 0x7122}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x57, 0x6, 0x80000000, 0x40, 0x5, 0x200, 0xfffffff8, 0x200, 0x7, 0x3, 0x4, 0xa, 0x1000, 0x9ac0, 0x5, 0x5, 0x2, 0x6, 0x3c04, 0x8, 0x4, 0xfffffffd, 0x4b3, 0x4, 0x400, 0xe99, 0x4, 0x69d5, 0x80000001, 0x3, 0x6, 0xb, 0x8, 0x7ff, 0x6, 0x4, 0x354, 0xdb405c4a, 0x4, 0x8, 0x8, 0x1, 0x97, 0x7fff, 0x1ec4, 0x48, 0x3ff, 0xffffffff, 0x2, 0x6, 0x100, 0x6, 0x9, 0x2, 0xe13, 0xe, 0x2, 0x400, 0x0, 0x6, 0xb045, 0xe, 0x3, 0xfffffff5, 0x66, 0x4, 0x3, 0xf, 0xffffffff, 0x4, 0x800, 0x8, 0xf736, 0xa, 0x100, 0x5, 0x3, 0x2, 0x81, 0x9, 0x9, 0x8, 0x3, 0xc, 0x1, 0x101, 0x5, 0x4, 0x1, 0x5, 0x9, 0x3, 0xb4a5, 0x401, 0x6, 0x292ad22d, 0x0, 0x7, 0xdce5, 0x5, 0x6, 0x8, 0x7f, 0x1, 0x7, 0xfffffffa, 0x5, 0x79, 0x9, 0x9, 0x3, 0x58, 0xffffff80, 0x0, 0x7, 0x5, 0x60000, 0x4, 0xfffffffe, 0x23, 0x80000000, 0x6, 0x40, 0x7, 0x1, 0x84, 0x200, 0x7fed, 0x7, 0x4, 0x8, 0x2, 0xcec, 0x81f7, 0xfffffff8, 0xfff, 0x80000000, 0x7, 0x6, 0x1000, 0x3, 0x3, 0x5, 0x2, 0x8001, 0x7, 0x9, 0xe9d, 0x80000001, 0x5, 0x5, 0x3, 0x0, 0x9, 0x5, 0x5, 0x200, 0x7, 0x5b, 0x1, 0x5f1, 0x9, 0x2, 0xb86000, 0x3, 0x8, 0xbb, 0x2, 0x9, 0x400, 0x8, 0x3, 0xfffff800, 0x401, 0xfffffffd, 0x4, 0xade7, 0x5, 0x80000000, 0x9, 0x5, 0x80000001, 0x80, 0x9, 0x0, 0x9, 0x3, 0xfff, 0xfffffffc, 0x1, 0xfffffffa, 0x3, 0x869, 0x0, 0x5, 0x10000, 0x1000, 0x2, 0xffffffff, 0x0, 0x8, 0x9, 0x7, 0x4, 0x7ff, 0x2, 0xb, 0x9, 0x7, 0x2fc9fecc, 0x5, 0x5, 0x8, 0x67, 0x9, 0x8, 0x0, 0xfffffff7, 0x9, 0x2, 0x2, 0x3, 0xfff, 0x1, 0x2, 0x7, 0x8, 0x5, 0xffffffff, 0x6, 0x8a, 0x2, 0x2, 0x3, 0xffffffff, 0x3, 0x8, 0x10001, 0x7, 0x5, 0xfdb, 0x8b0f, 0x2, 0xf1, 0x80000000, 0x2, 0xfff, 0x100, 0x8001, 0x8, 0x8001, 0xffff, 0xff, 0x31, 0x5, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_ROUTE4_POLICE={0x102c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x9f, 0x28, 0x3, 0x9, 0x7, 0x57d, 0x1, 0x81, 0x4, 0x4, 0x2, 0x2d800000, 0x4, 0x80, 0x80000000, 0x3, 0x8001, 0x0, 0x9, 0x25bc, 0x2, 0x5, 0xf0db, 0x0, 0xb, 0x1, 0x1ff, 0xb462, 0x2, 0x8, 0x2, 0x9, 0x1c000, 0xfff, 0x9, 0x1, 0x5, 0x400, 0x5, 0x4, 0x9, 0x5, 0xc, 0x7fffffff, 0x81, 0xffff0000, 0x0, 0x0, 0x1, 0x367, 0xc, 0x4, 0x2, 0x1, 0x200, 0x7, 0x7, 0x4, 0xd, 0xa2ed, 0x7fff, 0x1, 0xae, 0x3, 0x4, 0x0, 0x5, 0x3ff, 0x2, 0xe, 0x296f, 0xffffffff, 0xa0, 0x6, 0x3, 0xfffffffb, 0x22, 0x2, 0x1, 0x7, 0x3, 0xffffffff, 0x3ff, 0x1, 0x8001, 0xd, 0xfffffeff, 0x10, 0x8, 0x8, 0x0, 0x8, 0x401, 0x80000001, 0x3, 0x2, 0x3, 0x800, 0x1, 0x5, 0x7, 0x5, 0x9, 0xa, 0xffff, 0x715, 0x0, 0xc304, 0x4, 0x2, 0x5, 0x5, 0x80000000, 0x0, 0x2b62, 0x8, 0x4, 0x9, 0x7, 0x80, 0x2, 0xa, 0x4, 0x6, 0x200, 0x1, 0x4, 0x5db31123, 0x7, 0x7, 0x2, 0xfffff6ab, 0x5, 0x5, 0x7, 0xfffffffc, 0x800, 0x2, 0x800, 0x8, 0x5, 0x80, 0x3ff, 0x218000, 0x1, 0x166, 0xfffffffc, 0x2, 0xcbf, 0xb, 0x3ff, 0x1, 0x6, 0x4, 0x8, 0x401, 0xfffffff9, 0x2, 0xfffffff9, 0x31f, 0x6, 0x8, 0x7, 0x800, 0x9, 0x6, 0x5, 0x7f, 0x2, 0x1, 0x6, 0x7e, 0x5, 0x8, 0x8, 0x25, 0xa5, 0x326, 0x4, 0xa08, 0x8, 0x8000, 0x80000001, 0x7, 0xfffffea6, 0xffffffff, 0x3, 0x5, 0x4, 0x5, 0x0, 0x8, 0x81, 0x9, 0x5, 0x0, 0x8, 0x5, 0x8000, 0xfffff5cf, 0x39, 0x4, 0x6, 0x1, 0x3, 0x8, 0x9, 0x5, 0x8, 0x1000, 0x8000, 0xef, 0x0, 0x0, 0x9, 0x79, 0xff, 0x1, 0x5, 0x2, 0x1, 0x7, 0x6, 0x3, 0x10, 0xfffffffc, 0x4, 0x8, 0x7fff, 0x6, 0x8001, 0x0, 0xc120, 0x48, 0x3c, 0x200, 0x2, 0x80000001, 0x10000, 0x8, 0x6, 0xb6c, 0xd, 0x1, 0x1b, 0x3, 0x7, 0x9, 0x4, 0x10000, 0x7fffffff, 0x40, 0x1, 0xcbd, 0x101]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x52f, 0x1, 0x6, 0xfffffffe, 0xfffffffb, 0x7, 0x1, 0x8, 0x10000000, 0x10000, 0x2, 0x0, 0x6, 0x1, 0x5, 0x9, 0x0, 0x6, 0x0, 0x6, 0x5, 0x0, 0x0, 0x5709, 0x1, 0x7, 0x7, 0x7ff, 0xf, 0x6e, 0x5, 0x3, 0x200, 0x0, 0x4, 0x7, 0x6, 0x4, 0xa5, 0x9, 0x800, 0xc, 0xffffff80, 0x9, 0xd8, 0xbf47, 0x1, 0x4, 0x8ef, 0x7fff, 0xad, 0x5b7b, 0x3, 0x9, 0x830c, 0x0, 0x2, 0x4, 0x0, 0x0, 0x5, 0x9, 0x5e, 0xafc8, 0x1, 0x83, 0x35, 0x3ff, 0x6, 0x1ffc, 0xdb2, 0x0, 0x0, 0x5, 0x8001, 0x1, 0xd, 0x10000, 0x100, 0xffffffff, 0xfffffffb, 0x5, 0x4, 0x81, 0x9, 0x6, 0x4, 0x7, 0x7aea, 0xfd68, 0x9, 0x8, 0x6, 0x7, 0x2, 0x7, 0xb7, 0x3, 0x7, 0x7, 0x90000, 0x3, 0x5, 0x3, 0x2a7, 0x800000, 0x10001, 0xf23, 0x3, 0xd9d, 0xc1, 0x7, 0xf1e1, 0x6, 0x7f900000, 0x8000, 0x2, 0x2, 0x7fffffff, 0xb, 0x5, 0x8, 0x1, 0xc7fe, 0x8, 0xa6b9, 0x7, 0x0, 0xea, 0xa, 0x9, 0x7, 0x9, 0x10002, 0xb, 0x8001, 0x101, 0x9, 0x81, 0x9, 0xffffffff, 0x6, 0x5, 0x72cf, 0x80, 0x3, 0x8, 0x80000001, 0x7, 0x7, 0x4, 0x2, 0x2, 0x2, 0x80000000, 0xf, 0xf9, 0x3, 0x81, 0x4, 0x8, 0x1, 0x6, 0x7, 0xf, 0x0, 0x1, 0x81, 0x9f13, 0x9, 0xfffffffe, 0x3, 0x4622, 0xffe00000, 0xef, 0x4, 0x80, 0x10, 0x2, 0x3, 0xffffffff, 0x7, 0x2, 0x4fcf, 0x5, 0xa8, 0x5bc8a75d, 0xfffffff0, 0x8, 0xfffffffd, 0x748, 0xb2ac, 0xa799, 0x9, 0xf, 0x3, 0x0, 0x5, 0xd29, 0x82, 0x71, 0x5d, 0x1ff, 0x7f, 0x4, 0x5, 0x76f3, 0x2, 0x7, 0x8000, 0x7, 0xfffffff2, 0x735, 0x9, 0x599b116c, 0x7f, 0x0, 0x2, 0x4, 0x1, 0x7f, 0x4, 0x0, 0x64, 0x1, 0x2, 0xd805, 0x7, 0x3, 0x9, 0x1, 0x7, 0x7, 0xbd99, 0x3, 0x1, 0xfffffffd, 0x10, 0x8, 0xffff7fff, 0x8, 0xfffffffb, 0x2, 0xc, 0x5, 0x2, 0x38, 0x9, 0x101, 0x9, 0xa56dd175, 0xffffff01, 0x8, 0x92a0, 0x7, 0x7fffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x7, 0x200, 0x1, 0x5, 0x0, 0x6, 0x6, 0x0, 0x18, 0x4, 0xc52d624, 0xc, 0x8, 0x7, 0x5, 0x7, 0x9, 0xd, 0x8, 0x2, 0x1, 0x408, 0x8, 0x7, 0x6, 0x3, 0xfaf, 0x2, 0x4, 0x3, 0x4, 0x2, 0x3, 0x3, 0x80000001, 0xde, 0x100, 0x0, 0x1, 0x7, 0x10, 0xf, 0x81, 0x5, 0x1, 0x4000000, 0x7fffffff, 0xc9, 0x6, 0x2, 0xe8, 0x3, 0x8, 0xe, 0x3, 0x6, 0x9, 0x5, 0xfffffffc, 0x2, 0x80, 0x8, 0x4, 0x7, 0xb5, 0x1, 0x37, 0x7ff, 0x6, 0x9, 0x3ff, 0x7ff, 0xdad, 0x2, 0xef1e, 0x5, 0x69d, 0x8, 0x7fff, 0x7, 0x183, 0x3, 0xc, 0x0, 0x6, 0x4, 0x1, 0x10, 0xe, 0x8ea, 0xffffffff, 0x4, 0x8, 0x7, 0x8000, 0x10, 0x1, 0x2, 0x8, 0x5, 0x8, 0x3ff, 0xff, 0x8, 0xf409, 0x3, 0xa453, 0x5, 0x4, 0x4, 0xfff, 0x5, 0x8, 0x100, 0x9, 0x1, 0x2, 0xfffffffd, 0x3bb, 0x10001, 0x0, 0xed0, 0x1, 0x7, 0xbb, 0x10001, 0xb975, 0x2, 0x81, 0x101, 0x101, 0x6, 0x4, 0xe, 0xfff, 0x10, 0xc1000000, 0x6, 0x9, 0x2, 0x4f0, 0x6, 0x802d, 0xa, 0x0, 0xfffffa81, 0x2, 0x2005, 0xd, 0xe, 0x4, 0x1, 0x9bb, 0x3, 0x5ff, 0x8f2, 0x1, 0x5, 0x10000, 0x6, 0xc1, 0xa4, 0xe, 0x1, 0x200, 0x1ff, 0x80000000, 0xb, 0x4, 0xfe, 0x6, 0x6, 0x632f, 0x5, 0x6, 0x3, 0xe231, 0x1, 0xc, 0xf, 0x0, 0x9, 0x6, 0x6, 0xfa7f, 0x8, 0x10000, 0x4, 0x751, 0xffffffff, 0x0, 0xdb3, 0x7, 0x24, 0x2, 0xffffffff, 0x3, 0x6, 0x5, 0x4, 0x101, 0xaa4b, 0x5, 0x4, 0x78c, 0x1, 0x4, 0x3, 0x9, 0x5, 0x4, 0xff, 0x9, 0xf5a, 0x68, 0x8, 0x0, 0x6, 0x6a, 0x6, 0xfffffffd, 0xc, 0x0, 0x8, 0x4, 0x3, 0xffff9d76, 0x1, 0x1, 0x9, 0x3ff, 0xe0, 0xff, 0x1, 0x6, 0x6fd90474, 0x0, 0x6c, 0x80000001, 0x5, 0xf, 0x1, 0xb, 0x5f, 0x5, 0x0, 0x80, 0x1, 0x2, 0x7, 0x6, 0x8, 0x2, 0x8, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0xf, 0x1, 0x5, 0x4e5a22e2, 0x2, 0xe5, 0x9, 0x9a8, 0xfffffffe, 0x7, 0xc, 0x101, 0x9, 0xffff9c47, 0x4, 0x0, 0x5, 0x1, 0x58, 0xa48, 0xf79a, 0x2, 0xfffffff9, 0x6, 0x3, 0xe5, 0x6, 0x4, 0x6, 0x10000, 0x7fff, 0xa, 0x5, 0x10, 0x401, 0xf, 0xe, 0xffff, 0x4, 0x8, 0x5e3, 0x40, 0x1, 0x4e, 0x2, 0x7, 0x1, 0x9, 0x67a, 0x3, 0x63f, 0xf, 0x5, 0x2, 0x3, 0x7, 0x9, 0x3, 0x6099, 0x8, 0x7, 0x7, 0x40, 0x4, 0x6, 0x4, 0x80, 0xd, 0x400, 0x80000001, 0x4, 0xa9, 0x1, 0x8001, 0x31, 0x401, 0x2, 0x2, 0x6, 0xffff, 0xeed, 0x0, 0x0, 0x23af5136, 0xa, 0x3, 0x10, 0x9, 0x7, 0xb, 0x2, 0x0, 0x3d, 0xfffffff9, 0x8, 0x822, 0x8, 0x80000000, 0x2, 0x0, 0x8, 0xfffffffd, 0x9, 0xe, 0x3, 0x5, 0x8f, 0x1ff, 0x9, 0x5e, 0x3, 0x8, 0x20000000, 0x3, 0x7, 0x1ff, 0x6, 0x5, 0x1, 0x993, 0xfffffffd, 0x3, 0x7870cbc3, 0x7fffffff, 0x0, 0x4, 0x7, 0x5, 0x4, 0xf, 0x2, 0x1, 0x8, 0x2, 0x5, 0x5, 0x7f, 0x10000, 0x8, 0x7, 0xec25, 0xc0, 0xfffffff8, 0xfffffffa, 0xa7, 0xc, 0xffff, 0x1, 0x81, 0x80, 0xd, 0x78, 0x100, 0x4, 0x1, 0x5, 0xbf5, 0x9, 0xe, 0x8, 0x3c1, 0x7, 0x1ce19b29, 0x800, 0x3, 0x7, 0x2, 0x3, 0x1a24, 0x5, 0x3, 0x6, 0x7fffffff, 0x5, 0x7, 0x2, 0xf9, 0x8, 0x9, 0x9, 0x3, 0xe, 0x7, 0x3, 0x7, 0x8b80641, 0x81, 0xfb, 0x4, 0x9, 0x3, 0xd, 0x7fffffff, 0x2, 0xf1, 0x1, 0x4, 0x8, 0x101, 0x0, 0x0, 0x7, 0x2, 0x6, 0x1, 0x80, 0xf77230b3, 0x1, 0x7ff, 0x1, 0x77, 0x6, 0xfff, 0x0, 0xe, 0x80000000, 0xf, 0x7, 0x1, 0x2, 0xe, 0x7, 0x1, 0x4f, 0xbd52, 0x5, 0x5620913a, 0xb, 0x7fffffff, 0x8, 0x65d1, 0xa, 0x0, 0x0, 0x200, 0x7, 0x9, 0x6, 0x5, 0x4, 0x51c, 0xa, 0x8, 0x3, 0x4, 0x4, 0x20, 0x9, 0x8ba, 0x2, 0x3, 0x100, 0x76, 0xa, 0x7]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0x10}}, @TCA_ROUTE4_ACT={0x38c, 0x6, [@m_csum={0x1b8, 0x4, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0xd, 0x4, 0x3, 0xf}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x2, 0x40, 0x16d9b083}, 0x6f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x20000000, 0xd}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xbdb, 0x5, 0x9, 0xfffffffa}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x10000000, 0x7, 0xa6d}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x5, 0x1, 0x3ff, 0x1}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0xc, 0x3, 0x4, 0x5}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x6, 0x3, 0x2}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xd7, 0x7, 0x1, 0x9}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x80aa7804dc384e1e, 0x1, 0x6}, 0x11}}]}, {0x73, 0x6, "3981b3c7ca1bcb61e398a9ad44e411c3cfcaae7af5ba9a57db4a4342efc581cc360ed27f54a956eb59e521f6945f9f4f9ea19831bbf0c654c35c8137b2dea2fcaa760a644959d312cf25cb96e62582dc412c169f22e001e13656a51b0ba6d794e1896dd0c1447d0d3a292d4354b956"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x1d0, 0x1d, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c61, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x6, 0x3, 0x8, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x5, 0x20000000, 0x8, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xdc, 0x3ff, 0x20000000, 0x2, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffb, 0x5, 0x3, 0x2, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb04, 0x54, 0x7, 0x0, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x24ce, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xe8c, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x15db, 0x6}}]}, {0xf9, 0x6, "f6ba92e3d4f3dbdb57e7ed8aaea5d4f1f970b908e7e83da3d8dd9e473a0b6f7b16ebb99a5f4c6c0fd2d0a2111ce4c7a971ac0e56512dfeae808081a559247bfb89f4ee77a34a775f848c707bd5d8fc1eb4f45ca6f66268a31484b4c91d09b3a70fe351e1bb92ccb70a77f513269cf0cc22f397aa937dfb85da8a70613ee06cc7d29c09d49ccf6bd86668c2e415958ff18eaab2aaaa1b99e627592e5fb2f3ce9ada93affa8a546d0cf055b0eef3741d4c6d5e343ea12fb60d3322f6a5c158f2aeff9d8d7eae9c6cec7d9316e927e56493f41f13007ebc9df6a76cdd04bf33e3c6cfa158050eedbf9fddc69b6ecf8b3bfd6f3aa28095"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xff}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x1}]}}]}, 0x1894}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r6) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x1001, 0x3}, 0xe) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r10, 0x541b, &(0x7f0000002300)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) bind$unix(r11, &(0x7f0000000140)=@abs={0x1}, 0x6e) 5.928732747s ago: executing program 3 (id=660): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000040)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = memfd_secret(0x0) setresuid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) pipe(&(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x11}]}, 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x8001, @empty}, 0x1c) 5.839943815s ago: executing program 4 (id=661): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000003c0)={0x1fd, 0x1, 0x8080000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r5, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.921056517s ago: executing program 2 (id=662): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000040)=r2, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000001700010073797a300000fb1e2c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000208000b400000000050000480340001800b000100657874686472000024000280080001400000000c08000340000000000800044000ffff210500020007000000180001800c0001006269747769736500080002"], 0xe0}}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r6, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x2020, 0x0) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="0d000000010001", 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00', @ANYBLOB="1c007a80"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x840) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000440)={0x29, 0x1d, '\x00', [@generic={0x0, 0xec, "b326036f96add7e3c3e51a7ba91026eb8bcb55b96cbe6443b82424c9e84a6714b78c0e0d67b590559ed97e24466c55d3d7cabead63c624c74ab49096d9a6a475466d04803b960107fc46a19fff6abe258ef6173408b0a8abb083c96c0f34b8a5d8b35b8db60af405e7df56cdc2b98a69b0976ee7679feacec75d5080194e1ff377c2599736ffcfecfad58dec1553305ac4c1ec4e31929a1761429d5a3f7d805ae0677562753a6927f0dbf9ae1f1dbb886e9a63e955751128bb233113961411565f892b17a45c65c5d5a8d1946735b64914e7b75b8c11fdd828d2f926f0e863f38ccb878676c888bdb394e7aa"}]}, 0xf8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x2, 0x9, 0xe55, 0x6, 0x2, 0x1040, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x1, 0x1000d6}) ioctl$KVM_RUN(r9, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r10 = userfaultfd(0x80001) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r11, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) 4.913099852s ago: executing program 5 (id=663): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e23, 0xa, @loopback, 0x80000000}, 0x1c) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket(0x2a, 0x3, 0xfffffffc) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000001c0)="bc40c03a8650ccbe15279d8f7c3d09060809292e9e934e0100000000000000cf8600a5cc8cfe2967ad1531825b4e1470c590945f", 0x5f}, {&(0x7f0000000100)="072f101410f6dc27ca24732dbebc68a4c51922c3747e02774f0cd3d3441837e54546037aa0b2e307febac8777920346c62d3f1995109ff7b8b7c64d52cb158d9b54821725770a750d984124e3a88c68151e9af07e020a0c77c0c7362acb70c4da46e7a408aadfa2675836e65b447f76851bc6a98"}, {&(0x7f0000000900)="aff834a95d1a09dd55719e1b4965d900c5ba33731f9a5bb5807c37c9ab0f83d500000000000000000000dab5a4d253318aa55afe12c164366500b992fbe7b22bb8003677650726362cdc7b72667ef90ee6e65d2fbde586560b868bbf1cee9063094ad52cb4d86ced09ad9a8281cbb36fb842591e4942c1f24a605e0fff18c98aed830000"}, {&(0x7f0000000180)="2a73287a65d4f6c75ea9131169501edaed829b6037adea7100923026413a9906219828245b7b1d03037d430b089c35a06d6c"}, {&(0x7f0000000380)="ec47d3001b359d0078e9f6b1be41b5ebca0dfee19ace82cc4ce8233df240ffc2a357be8f147b154bd890d2912b8a7236a49a2d3c1e0f3ae29c9e0630596b09e2638a2225c8d34a7b8859638b60cede2c83933bbf5a38215bb9fac752410216101424c07b8ed61b6958cf5d7d3214faefa0b7525f2c1e83c35d8f736b06da5fb4baafcc7f852d9bb26886d5c47b8328c825a7e59a8890155b822c3cfce21403f204ac014285768ca405020000000000000000"}, {&(0x7f0000000600)="d6eea3af9504584257a22eec5f7e5a17d63aac74283b659020130d30e5edca5ad2c0ea06bd8bf1bc19ab0c5c9de254676b75755c699464b9a6c5256a65b0e2377d055c8273833dad9491f52a537ae53bc0cb82ea34b84dae04585ef01bb88f76ea7ca5a7f6c458191eaa3e156605284178cd698b6f08ed9692524229c7b26c89c54787018bbae22ac72e8c298a3e93104abc1447213207f06643f7235cd88d8126291f0a01199f63d2da5285b288021eaf30aabb61c78629b007a75c5fc653516a69c32546a61bc9a347e1faec2e5692a71b"}], 0x100000000000007a) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000480)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f00000000c0)=0x32) r8 = syz_open_dev$cec(0x0, 0x0, 0x401) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r3}, 0x18) ioctl$CEC_S_MODE(r8, 0xc05c6104, &(0x7f00000000c0)=0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000300000000000000bba0000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901b84210c5f56eedace00fdc880300000000009500000000ffed001849000004000000000000000000000018130000", @ANYRES32=r9, @ANYBLOB="00000000000000008520000004000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x5f, &(0x7f0000000700)=""/95, 0x40f00, 0x4, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xd, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r9, r9, r3, r9, 0xffffffffffffffff, r9], 0x0, 0x10, 0x4, @void, @value}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYRES16=r3, @ANYBLOB="4b14c1913c1da8d8e809b9d8db23e5639ef9bff8ffd920388193837f35dcc4af3b53e21e87655d8a89f7c9ff2d9be4b6700708528f9dc05a5096aa80db9f208ade07fafcb24e39bc579d182f3ff75df4c22619d6da919a9d4a00d3523b7b644643d49bfbb8b9436154ac7c5490809cb993502c0d1be4d6bb97dfee2071cc7e5ae105ddc0c42ef1e658763585463dbba89bdd8d0302f9a4ed1ecc780501e9c82cbdda8d4c01075ea3d09fec47c9eb4ce85f465f8bfaa4198ce15d6a59d866596287d09c2cee188019938356", @ANYRESHEX=r9, @ANYRESDEC=r1, @ANYBLOB, @ANYRES32=r7], 0x3c}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x305, 0xfffffffc, 0x4, 0x0, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 4.724158665s ago: executing program 0 (id=664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000f5ff00000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) 4.348145598s ago: executing program 0 (id=665): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@memory_hugetlb_accounting}, {@favordynmods}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x7, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0xfffffffc], [0x6, 0x4, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={r7, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r8}) close_range(r2, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) write$tcp_congestion(r0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r10, r9, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0018000020010000000000000000000000000000fe80000000000000000000000000000000020000000000000709"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0xfc19}, {0x0, 0x2}], 0x2) write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5) 4.347685106s ago: executing program 4 (id=666): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xff00}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x11}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.293277715s ago: executing program 5 (id=667): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000002480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}, {@cachetag={'cachetag', 0x3d, '([)'}}, {@version_L}, {@access_uid}, {@nodevmap}, {@posixacl}, {@version_L}, {@afid={'afid', 0x3d, 0x1}}], [{@uid_eq}, {@permit_directio}, {@smackfshat={'smackfshat', 0x3d, '\b-(T\xb6'}}, {@pcr={'pcr', 0x3d, 0x34}}, {@subj_user={'subj_user', 0x3d, 'trans=fd,'}}]}}) 4.272444263s ago: executing program 3 (id=668): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c460004000cff7f00000000000002003e00ecffffff940200000000fbff3f000000000000ff9f00000000000000000000000000380001"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0xf500) 4.241391228s ago: executing program 4 (id=669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005002000060000000d000300686173683a6d6163000000000500050000000000140007800800124000050000050015000c000000090002"], 0x5c}}, 0x0) 4.001160557s ago: executing program 2 (id=670): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c0400070080000700", 0x33a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$dri(0x0, 0x1ff, 0x40802) syz_io_uring_setup(0x4169, 0x0, &(0x7f0000000480), &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) 4.000974606s ago: executing program 3 (id=671): dup(0xffffffffffffffff) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa0003"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) (fail_nth: 7) 3.655616509s ago: executing program 0 (id=672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="300300002400010026bd7000fedbdf3c1f0300800c00010002"], 0x330}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r3, 0x1, 0x70bd27, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}}, 0x0) 3.614090846s ago: executing program 5 (id=673): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x0, 0x2e, 0x0, 0x0, 0x5, 0x10000, @value}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x67) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close(0x4) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB="08001f0005"], 0x70}}, 0x0) 2.405255258s ago: executing program 4 (id=674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x91) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x110, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="188fae000000000df89d190000003bf235776e47b000049500"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x141800) setfsgid(0xee00) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000040)={0x0, 0x664d, 0x1, 0x1}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000480)={0x1, 0xfffa, "a38bb7", 0x6, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000140)={0x1, 0x1, 0x17, 0x12, 0x87, 0x0}) socket$netlink(0x10, 0x3, 0x0) 2.405024867s ago: executing program 3 (id=675): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x4c}}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x90}}, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 2.298167812s ago: executing program 2 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f00000001c0)='./file0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000380)=0x8, 0x5, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000380)={{r3}, "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"}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00'}) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'dvmrp0\x00'}) bind$inet6(r6, 0x0, 0x0) listen(r6, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140600fe8000000000000000000000000000bbfea300000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='T\x00\x00\x00px\x00\x00'], 0x0) 1.042119261s ago: executing program 3 (id=677): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3983], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3020000c72b000341", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.03758107s ago: executing program 0 (id=678): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_ifreq(r6, 0x8922, &(0x7f00000000c0)={'batadv_slave_0\x00', @ifru_flags=0x1}) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 973.563147ms ago: executing program 4 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40180, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000100)={0x30, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x1000, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) unshare(0x68060200) 113.249203ms ago: executing program 3 (id=680): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x200000000000000}) 33.176663ms ago: executing program 2 (id=681): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x700, 0x700, 0x7, 0x3, {{0x15, 0x4, 0x2, 0x1, 0x54, 0x68, 0x0, 0x2, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @empty, {[@noop, @timestamp_prespec={0x44, 0x34, 0x62, 0x3, 0x2, [{@remote, 0x66c}, {@multicast2, 0x4c7}, {@private=0xa010101, 0x6}, {@broadcast, 0x2}, {@multicast2, 0x6}, {@private=0xa010102, 0x101}]}, @rr={0x7, 0x7, 0x82, [@remote]}, @end]}}}}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000060000000400000091c6be7a00000000", @ANYBLOB="ffea0000000000e5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/21], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "87e41f3f2518cf22b058fe40b3bfb0888226e54e123436d75a884ae89b4b8ea5dc074df2550d8bfaf75fd05332be6fb3df1d0756f1193298e53b21d91ba047f0", 0x4}, 0x48, r5) keyctl$unlink(0x9, r6, r5) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde}, &(0x7f0000000080)=0x40) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x5452, &(0x7f00000006c0)) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0xcbff}, 0x3004c080) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='4', @ANYRES16=0x0, @ANYBLOB="080006000000000000000000000000000000e85b91b850de88a2b00d72f11475bcf7bc879ead1fc0c2f917d5ee04720460f3894ea7f68a1ec2603972b86324b5cd143bf7bdfa9b11fd7135b2a53b9c31ec4c1d7aa38e71430fb8f28487fbb2bac0befc0801d2b4061571d3c422bd70348302419df6433aa1554fa05b8e687ad67bbe24e3d9de30bc19259a3600fdeb355bd4e42005b5833bd3a38b2c9a563c552b1d8a20de47a3fe22d7c69f50f57fc9e1e7ff4734b624e6b86324c34e7053d16e4144", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24044066}, 0x800) 28.387702ms ago: executing program 4 (id=682): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@memory_hugetlb_accounting}, {@favordynmods}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x7, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0xfffffffc], [0x6, 0x4, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={r7, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r8}) close_range(r2, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) write$tcp_congestion(r0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r10, r9, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0018000020010000000000000000000000000000fe80000000000000000000000000000000020000000000000709"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0xfc19}, {0x0, 0x2}], 0x2) write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5) 0s ago: executing program 5 (id=683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async, rerun: 32) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (rerun: 32) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) r2 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0) (async, rerun: 32) sendmmsg$inet6(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="cc1f", 0x2}], 0x1}}], 0x1, 0x4000) (rerun: 32) kernel console output (not intermixed with test programs): ng 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 116.653254][ T5866] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 116.658882][ T6517] fido_id[6517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 116.667976][ T5866] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 116.689900][ T30] audit: type=1400 audit(2000000033.000:282): avc: denied { connect } for pid=6521 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.717836][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.730244][ T5866] usb 3-1: config 0 descriptor?? [ 116.845825][ T6525] batman_adv: batadv0: Adding interface: dummy0 [ 116.852225][ T6525] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.877392][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.883745][ T6525] batman_adv: batadv0: Interface activated: dummy0 [ 116.901802][ T30] audit: type=1400 audit(2000000033.220:283): avc: denied { ioctl } for pid=6521 comm="syz.1.160" path="socket:[10281]" dev="sockfs" ino=10281 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.926546][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.952807][ T6525] batadv0: mtu less than device minimum [ 116.959572][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.971026][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.982405][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.993801][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.005173][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.016550][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.027904][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.039286][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.050675][ T6525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.588477][ T5866] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 117.603285][ T12] usb 3-1: Failed to submit usb control message: -71 [ 117.610162][ T12] usb 3-1: unable to send the bmi data to the device: -71 [ 117.640161][ T5866] usb 3-1: USB disconnect, device number 5 [ 117.649861][ T12] usb 3-1: unable to get target info from device [ 117.656198][ T12] usb 3-1: could not get target info (-71) [ 117.678630][ T12] usb 3-1: could not probe fw (-71) [ 117.933331][ T6537] capability: warning: `syz.3.164' uses 32-bit capabilities (legacy support in use) [ 119.215787][ T30] audit: type=1400 audit(2000000035.530:284): avc: denied { create } for pid=6549 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 119.933512][ T6557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.368432][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 120.368468][ T30] audit: type=1400 audit(2000000036.680:288): avc: denied { read } for pid=6566 comm="syz.0.171" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 120.874010][ T6569] fuse: Unknown parameter '' [ 121.032809][ T30] audit: type=1400 audit(2000000036.680:289): avc: denied { open } for pid=6566 comm="syz.0.171" path="/syzcgroup/unified/syz0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 121.219567][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 122.307045][ T6585] vivid-000: disconnect [ 122.404922][ T30] audit: type=1400 audit(2000000038.640:290): avc: denied { setopt } for pid=6576 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 122.424237][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.492788][ T6576] vivid-000: reconnect [ 122.653828][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 122.909367][ T6593] process 'syz.3.176' launched './file2' with NULL argv: empty string added [ 123.343218][ T30] audit: type=1400 audit(2000000038.640:291): avc: denied { bind } for pid=6576 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.488325][ T30] audit: type=1400 audit(2000000038.640:292): avc: denied { name_bind } for pid=6576 comm="syz.2.175" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 123.508950][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.753830][ T6598] syz.2.178: attempt to access beyond end of device [ 123.753830][ T6598] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 123.767026][ T6598] FAT-fs (loop5): unable to read boot sector [ 124.103781][ T30] audit: type=1400 audit(2000000038.640:293): avc: denied { node_bind } for pid=6576 comm="syz.2.175" saddr=fc00::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 124.125587][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.270011][ T30] audit: type=1400 audit(2000000039.220:294): avc: denied { execute } for pid=6579 comm="syz.3.176" name="file2" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.292005][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.299443][ T30] audit: type=1400 audit(2000000039.230:295): avc: denied { execute_no_trans } for pid=6579 comm="syz.3.176" path="/31/file2" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.343106][ T6609] 9pnet_fd: Insufficient options for proto=fd [ 125.570546][ T30] audit: type=1400 audit(2000000040.060:296): avc: denied { append } for pid=6589 comm="syz.2.178" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.593135][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.603158][ T30] audit: type=1400 audit(2000000040.060:297): avc: denied { mounton } for pid=6589 comm="syz.2.178" path="/40/file0" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.625845][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.793713][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 126.804096][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 126.820699][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 127.030043][ T5934] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.248802][ T6644] IPv6: Can't replace route, no match found [ 127.657192][ T30] audit: type=1400 audit(2000000043.975:298): avc: denied { read } for pid=6647 comm="syz.3.189" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.785210][ T30] audit: type=1400 audit(2000000043.975:299): avc: denied { open } for pid=6647 comm="syz.3.189" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 128.722387][ T6668] hfsplus: unable to find HFS+ superblock [ 128.940906][ T6670] netlink: 104 bytes leftover after parsing attributes in process `syz.0.192'. [ 129.106102][ T30] audit: type=1400 audit(2000000045.405:300): avc: denied { ioctl } for pid=6663 comm="syz.2.193" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 129.147065][ T30] audit: type=1400 audit(2000000045.455:301): avc: denied { mount } for pid=6678 comm="syz.4.196" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.238562][ T6684] net_ratelimit: 10 callbacks suppressed [ 129.238573][ T6684] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 277 [ 129.955784][ T30] audit: type=1400 audit(2000000045.785:302): avc: denied { read } for pid=6678 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.038109][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 130.736366][ T6688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=6688 comm=syz.2.193 [ 131.120092][ T974] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 131.360546][ T6695] 9pnet_fd: Insufficient options for proto=fd [ 131.386194][ T974] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 131.425045][ T974] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 131.550122][ T974] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 131.732646][ T974] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 131.789792][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 131.821754][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 131.883885][ T974] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 131.887673][ T974] usb 5-1: string descriptor 0 read error: -22 [ 131.887775][ T974] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 131.887797][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.890097][ T974] usb 5-1: config 0 descriptor?? [ 131.900627][ T6703] 9pnet_fd: Insufficient options for proto=fd [ 131.903236][ T974] hub 5-1:0.0: bad descriptor, ignoring hub [ 131.903259][ T974] hub 5-1:0.0: probe with driver hub failed with error -5 [ 131.908193][ T974] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 132.356191][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.356259][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.739331][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.749357][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.876662][ T974] usb 5-1: USB disconnect, device number 8 [ 134.168592][ T6724] 9pnet_fd: Insufficient options for proto=fd [ 134.353249][ T30] audit: type=1400 audit(2000000050.605:303): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.470505][ T5866] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 134.699835][ T30] audit: type=1400 audit(2000000050.915:304): avc: denied { bind } for pid=6727 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.719047][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.979789][ T5866] usb 2-1: device descriptor read/64, error -71 [ 135.012218][ T30] audit: type=1400 audit(2000000050.915:305): avc: denied { listen } for pid=6727 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.183435][ T30] audit: type=1400 audit(2000000051.365:306): avc: denied { bind } for pid=6734 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.658744][ T30] audit: type=1400 audit(2000000051.975:307): avc: denied { write } for pid=6738 comm="syz.0.209" path="socket:[10562]" dev="sockfs" ino=10562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.706696][ T5866] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 135.969811][ T5866] usb 2-1: device descriptor read/64, error -71 [ 136.430704][ T5866] usb usb2-port1: attempt power cycle [ 136.912434][ T6753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.135810][ T30] audit: type=1400 audit(2000000053.435:308): avc: denied { bind } for pid=6752 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.279824][ T5894] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 139.119919][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 139.411348][ T6783] input: syz1 as /devices/virtual/input/input9 [ 139.595760][ T6787] FAULT_INJECTION: forcing a failure. [ 139.595760][ T6787] name failslab, interval 1, probability 0, space 0, times 0 [ 139.870379][ T6787] CPU: 1 UID: 0 PID: 6787 Comm: syz.3.221 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 139.870406][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.870416][ T6787] Call Trace: [ 139.870423][ T6787] [ 139.870430][ T6787] dump_stack_lvl+0x16c/0x1f0 [ 139.870459][ T6787] should_fail_ex+0x512/0x640 [ 139.870483][ T6787] ? fs_reclaim_acquire+0xae/0x150 [ 139.870509][ T6787] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 139.870535][ T6787] should_failslab+0xc2/0x120 [ 139.870554][ T6787] __kmalloc_noprof+0xd2/0x510 [ 139.870577][ T6787] tomoyo_realpath_from_path+0xc2/0x6e0 [ 139.870606][ T6787] ? tomoyo_profile+0x47/0x60 [ 139.870627][ T6787] tomoyo_path_number_perm+0x245/0x580 [ 139.870649][ T6787] ? tomoyo_path_number_perm+0x237/0x580 [ 139.870674][ T6787] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 139.870724][ T6787] ? find_held_lock+0x2b/0x80 [ 139.870746][ T6787] ? hook_file_ioctl_common+0x145/0x410 [ 139.870772][ T6787] ? __fget_files+0x20e/0x3c0 [ 139.870794][ T6787] security_file_ioctl+0x9b/0x240 [ 139.870825][ T6787] __x64_sys_ioctl+0xb7/0x200 [ 139.870850][ T6787] do_syscall_64+0xcd/0x260 [ 139.870877][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.870895][ T6787] RIP: 0033:0x7ff8c458e969 [ 139.870910][ T6787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.870926][ T6787] RSP: 002b:00007ff8c5468038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.870944][ T6787] RAX: ffffffffffffffda RBX: 00007ff8c47b6080 RCX: 00007ff8c458e969 [ 139.870956][ T6787] RDX: 0000000000000000 RSI: 000000004008556c RDI: 0000000000000004 [ 139.870966][ T6787] RBP: 00007ff8c5468090 R08: 0000000000000000 R09: 0000000000000000 [ 139.870976][ T6787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.870986][ T6787] R13: 0000000000000000 R14: 00007ff8c47b6080 R15: 00007ffe09c4f8a8 [ 139.871016][ T6787] [ 140.082323][ T6787] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.645501][ T30] audit: type=1400 audit(2000000056.965:309): avc: denied { getopt } for pid=6795 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.665192][ T60] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.684108][ T5869] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 140.949822][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 140.962611][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.032574][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.058276][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.068972][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.312954][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.351856][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 141.395395][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.413176][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 141.420920][ T5894] usb 3-1: can't read configurations, error -71 [ 141.425240][ T5869] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.442052][ T60] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 141.460361][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.469124][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.670458][ T60] usb 4-1: config 0 descriptor?? [ 141.680599][ T5869] usb 2-1: config 0 descriptor?? [ 141.930913][ T30] audit: type=1400 audit(2000000058.255:310): avc: denied { write } for pid=6812 comm="syz.0.229" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 141.996135][ T6793] netlink: 'syz.3.224': attribute type 1 has an invalid length. [ 142.209907][ T30] audit: type=1400 audit(2000000058.525:311): avc: denied { create } for pid=6812 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 142.229260][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.364112][ T5869] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 142.384572][ T5869] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 142.534468][ T6818] netlink: 'syz.2.230': attribute type 1 has an invalid length. [ 142.640824][ T5894] usb 2-1: USB disconnect, device number 12 [ 142.734739][ T6818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.843772][ T6821] bond1: (slave ip6erspan0): making interface the new active one [ 142.902509][ T6821] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 143.461708][ T60] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 143.469004][ T60] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 143.477499][ T60] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 143.487284][ T60] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 143.494537][ T60] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 143.522515][ T60] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input11 [ 143.556966][ T60] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 143.757201][ T60] usb 4-1: USB disconnect, device number 9 [ 144.552378][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 144.561373][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 144.688336][ T6843] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.929786][ T5894] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 145.141728][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 148.492120][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short [ 148.731625][ T6865] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 148.737121][ T30] audit: type=1400 audit(2000000065.055:312): avc: denied { relabelfrom } for pid=6864 comm="syz.4.244" name="NETLINK" dev="sockfs" ino=11644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.261776][ T30] audit: type=1400 audit(2000000065.065:313): avc: denied { relabelto } for pid=6864 comm="syz.4.244" name="NETLINK" dev="sockfs" ino=11644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 149.299540][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 149.308375][ T5894] usb 2-1: can't read configurations, error -71 [ 149.625128][ T6872] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 149.640778][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 149.666813][ T30] audit: type=1400 audit(2000000065.955:314): avc: denied { append } for pid=6868 comm="syz.3.245" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 149.765757][ T30] audit: type=1400 audit(2000000065.955:315): avc: denied { read append } for pid=6868 comm="syz.3.245" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 149.792927][ T30] audit: type=1400 audit(2000000065.955:316): avc: denied { open } for pid=6868 comm="syz.3.245" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 150.012613][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'. [ 150.123021][ T6883] netlink: 'syz.1.246': attribute type 10 has an invalid length. [ 150.147595][ T6883] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 150.750194][ T60] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 150.788373][ T30] audit: type=1400 audit(2000000067.105:317): avc: denied { connect } for pid=6893 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.915794][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.938275][ T30] audit: type=1400 audit(2000000067.135:318): avc: denied { write } for pid=6893 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.272165][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.285485][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.286977][ T6899] ======================================================= [ 151.286977][ T6899] WARNING: The mand mount option has been deprecated and [ 151.286977][ T6899] and is ignored by this kernel. Remove the mand [ 151.286977][ T6899] option from the mount to silence this warning. [ 151.286977][ T6899] ======================================================= [ 151.298593][ T60] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.298618][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.300825][ T60] usb 4-1: config 0 descriptor?? [ 151.333445][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.366771][ T5894] kernel write not supported for file bpf-map (pid: 5894 comm: kworker/0:6) [ 151.659641][ T30] audit: type=1400 audit(2000000067.975:319): avc: denied { setopt } for pid=6906 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.440077][ T30] audit: type=1400 audit(2000000068.075:320): avc: denied { allowed } for pid=6906 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 152.475072][ T60] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 152.496246][ T60] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 152.747932][ T5894] usb 4-1: USB disconnect, device number 10 [ 154.030106][ T6915] fido_id[6915]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 154.111062][ T6923] xt_ecn: cannot match TCP bits for non-tcp packets [ 154.194173][ T30] audit: type=1400 audit(2000000070.515:321): avc: denied { connect } for pid=6926 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.222104][ T30] audit: type=1400 audit(2000000070.535:322): avc: denied { write } for pid=6926 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.275747][ T30] audit: type=1400 audit(2000000070.535:323): avc: denied { ioctl } for pid=6926 comm="syz.2.259" path="socket:[11792]" dev="sockfs" ino=11792 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.493963][ T6931] 9pnet_fd: Insufficient options for proto=fd [ 154.819748][ T60] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 154.890340][ T6942] input: syz1 as /devices/virtual/input/input13 [ 155.525729][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.968992][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.995985][ T60] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 156.007992][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.020140][ T5864] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 156.031865][ T60] usb 1-1: config 0 descriptor?? [ 156.189872][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 156.224965][ T5864] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 156.257702][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.271574][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.292065][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.370149][ T5926] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 156.395828][ T6956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6956 comm=syz.4.269 [ 156.408585][ T30] audit: type=1400 audit(2000000072.705:324): avc: denied { mounton } for pid=6933 comm="syz.0.263" path="/syzcgroup/unified/syz0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 156.415799][ T6957] affs: No valid root block on device nullb0 [ 156.433773][ T6956] capability: warning: `syz.4.269' uses deprecated v2 capabilities in a way that may be insecure [ 156.758742][ T5864] usb 4-1: Product: syz [ 156.765428][ T5864] usb 4-1: Manufacturer: syz [ 156.770056][ T5864] usb 4-1: SerialNumber: syz [ 156.786286][ T5864] usb 4-1: config 0 descriptor?? [ 156.796131][ T5864] gspca_main: spca500-2.14.0 probing 046d:0900 [ 156.821628][ T5926] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.830858][ T5926] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 156.841414][ T5926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.850880][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 156.862640][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 156.875290][ T5926] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 156.884575][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.892630][ T5926] usb 2-1: Product: syz [ 156.896807][ T5926] usb 2-1: Manufacturer: syz [ 156.908487][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 156.914586][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 156.922107][ T5926] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 156.928021][ T5926] cdc_wdm 2-1:1.0: Unknown control protocol [ 156.995463][ T60] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 157.003410][ T60] cm6533_jd 0003:0D8C:0022.0005: item fetching failed at offset 4/5 [ 157.011975][ T60] cm6533_jd 0003:0D8C:0022.0005: parse failed [ 157.018225][ T60] cm6533_jd 0003:0D8C:0022.0005: probe with driver cm6533_jd failed with error -22 [ 157.039753][ T5952] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 157.110731][ T30] audit: type=1400 audit(2000000073.435:325): avc: denied { read write } for pid=6950 comm="syz.1.268" name="cdc-wdm0" dev="devtmpfs" ino=2843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 157.134702][ T30] audit: type=1400 audit(2000000073.435:326): avc: denied { open } for pid=6950 comm="syz.1.268" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 157.492265][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.511018][ T5864] gspca_spca500: reg write: error -32 [ 157.513436][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 157.528021][ T5864] gspca_spca500: reg write: error -32 [ 157.528055][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.550912][ T5864] gspca_spca500: reg write: error -32 [ 157.559200][ T5952] usb 5-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 157.571482][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.591935][ T30] audit: type=1400 audit(2000000073.905:327): avc: denied { setattr } for pid=6933 comm="syz.0.263" name="sequencer2" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 157.597307][ T5952] usb 5-1: config 0 descriptor?? [ 157.615550][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.636061][ T5864] gspca_spca500: reg write: error -71 [ 157.645199][ T5864] gspca_spca500: reg write: error -71 [ 157.656756][ T5894] usb 1-1: USB disconnect, device number 7 [ 157.670251][ T6956] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 157.688734][ T5864] gspca_spca500: reg write: error -71 [ 157.698534][ T5864] gspca_spca500: reg write: error -71 [ 157.709780][ T5864] gspca_spca500: reg write: error -71 [ 157.715986][ T5864] gspca_spca500: reg write: error -71 [ 157.725657][ T5864] gspca_spca500: reg write: error -71 [ 157.733061][ T5864] gspca_spca500: reg write: error -71 [ 157.738860][ T5864] gspca_spca500: reg write: error -71 [ 157.748244][ T5864] gspca_spca500: reg write: error -71 [ 157.762040][ T5864] usb 4-1: USB disconnect, device number 11 [ 158.378120][ T5952] nzxt-smart2 0003:1E71:200F.0006: unknown main item tag 0x0 [ 158.385679][ T5952] nzxt-smart2 0003:1E71:200F.0006: item fetching failed at offset 4/5 [ 158.394442][ T5952] nzxt-smart2 0003:1E71:200F.0006: probe with driver nzxt-smart2 failed with error -22 [ 158.408953][ T5952] usb 5-1: USB disconnect, device number 9 [ 158.740512][ T6968] bridge2: entered allmulticast mode [ 158.977710][ T6976] affs: No valid root block on device nbd2 [ 159.011015][ T5926] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 159.124563][ T5894] usb 2-1: USB disconnect, device number 15 [ 159.279660][ T5926] usb 1-1: device descriptor read/64, error -71 [ 159.404387][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.279'. [ 160.069882][ T5926] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 160.740988][ T6993] netlink: 196 bytes leftover after parsing attributes in process `syz.2.280'. [ 160.831066][ T30] audit: type=1400 audit(2000000077.115:328): avc: denied { write } for pid=6991 comm="syz.2.280" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 160.855047][ T5926] usb 1-1: device descriptor read/64, error -71 [ 161.179448][ T5926] usb usb1-port1: attempt power cycle [ 163.150381][ T5926] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.800206][ T5926] usb 1-1: device descriptor read/8, error -71 [ 167.533106][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 167.550456][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 167.559492][ T30] audit: type=1400 audit(2000000083.855:329): avc: denied { bind } for pid=7030 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.813030][ T30] audit: type=1400 audit(2000000085.135:330): avc: denied { search } for pid=7055 comm="syz.0.298" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 168.937433][ T30] audit: type=1400 audit(2000000085.175:331): avc: denied { map } for pid=7055 comm="syz.0.298" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 169.133489][ T30] audit: type=1400 audit(2000000085.175:332): avc: denied { execute } for pid=7055 comm="syz.0.298" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 170.263823][ T30] audit: type=1400 audit(2000000086.585:333): avc: denied { ioctl } for pid=7055 comm="syz.0.298" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 170.301740][ T7070] 9pnet_fd: Insufficient options for proto=fd [ 170.555859][ T30] audit: type=1400 audit(2000000086.875:334): avc: denied { connect } for pid=7075 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.593697][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 170.754503][ T30] audit: type=1400 audit(2000000086.875:335): avc: denied { bind } for pid=7075 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.784140][ T30] audit: type=1400 audit(2000000086.875:336): avc: denied { write } for pid=7075 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.022815][ T7088] ip6t_REJECT: ECHOREPLY is not supported [ 171.040808][ T30] audit: type=1400 audit(2000000087.295:337): avc: denied { create } for pid=7084 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 171.150661][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.307'. [ 171.196915][ T30] audit: type=1400 audit(2000000087.495:338): avc: denied { lock } for pid=7071 comm="syz.1.300" path="socket:[12305]" dev="sockfs" ino=12305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 171.230859][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.309'. [ 171.310400][ T60] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 171.475134][ T60] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 171.596111][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.226231][ T60] usb 5-1: config 0 descriptor?? [ 172.267776][ T60] ums-jumpshot 5-1:0.0: USB Mass Storage device detected [ 172.313401][ T60] ums-jumpshot 5-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 173.210792][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 173.210807][ T30] audit: type=1326 audit(2000000089.535:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc59b8e969 code=0x7fc00000 [ 173.239983][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.312359][ T9] usb 5-1: USB disconnect, device number 10 [ 173.543208][ T30] audit: type=1400 audit(2000000089.865:342): avc: denied { audit_control } for pid=7126 comm="syz.0.319" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 173.849934][ T60] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 174.046266][ T30] audit: type=1400 audit(2000000089.865:343): avc: denied { listen } for pid=7126 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 174.078715][ T30] audit: type=1400 audit(2000000089.865:344): avc: denied { accept } for pid=7126 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 174.112957][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.321'. [ 174.270579][ T60] usb 1-1: device descriptor read/64, error -71 [ 175.361535][ T60] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 175.499827][ T60] usb 1-1: device descriptor read/64, error -71 [ 175.669736][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 175.681725][ T5894] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 175.705024][ T60] usb usb1-port1: attempt power cycle [ 175.851661][ T30] audit: type=1400 audit(2000000092.155:345): avc: denied { create } for pid=7153 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 176.048540][ T30] audit: type=1400 audit(2000000092.155:346): avc: denied { bind } for pid=7153 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 176.090162][ T60] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 176.133423][ T30] audit: type=1400 audit(2000000092.235:347): avc: denied { listen } for pid=7153 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 176.171134][ T60] usb 1-1: device descriptor read/8, error -71 [ 176.239737][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 176.244844][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 176.252363][ T5894] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 176.262229][ T9] usb 5-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 176.271422][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.279711][ T5894] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 176.291392][ T5894] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 176.303164][ T9] usb 5-1: config 0 descriptor?? [ 176.315651][ T5894] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 176.326124][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.334233][ T5894] usb 2-1: Product: syz [ 176.338436][ T5894] usb 2-1: Manufacturer: syz [ 176.343046][ T5894] usb 2-1: SerialNumber: syz [ 176.353025][ T5894] hso 2-1:6.0: Can't find BULK IN endpoint [ 176.409836][ T60] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 176.442848][ T60] usb 1-1: device descriptor read/8, error -71 [ 176.588765][ T60] usb usb1-port1: unable to enumerate USB device [ 176.938200][ T9] asus 0003:0B05:1A30.0007: hidraw0: USB HID v0.00 Device [HID 0b05:1a30] on usb-dummy_hcd.4-1/input0 [ 176.968867][ T9] asus 0003:0B05:1A30.0007: Asus input not registered [ 176.979003][ T9] asus 0003:0B05:1A30.0007: probe with driver asus failed with error -12 [ 177.030890][ T9] usb 5-1: USB disconnect, device number 11 [ 177.141746][ T7174] fido_id[7174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 177.404113][ T60] usb 2-1: USB disconnect, device number 16 [ 180.572241][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 180.584566][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 180.593502][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 180.667885][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'. [ 181.817116][ T7210] netlink: 'syz.3.340': attribute type 1 has an invalid length. [ 182.443984][ T7210] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.469612][ T7217] veth3: entered promiscuous mode [ 182.478291][ T7217] bond2: (slave veth3): Enslaving as an active interface with a down link [ 182.494904][ T7210] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 182.598963][ T7223] tmpfs: Bad value for 'mpol' [ 183.650664][ T5824] Bluetooth: hci3: link tx timeout [ 183.670165][ T5824] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 183.873051][ T5926] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 185.093937][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.351'. [ 185.096148][ T30] audit: type=1400 audit(2000000101.415:348): avc: denied { connect } for pid=7240 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 185.161394][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.172461][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.197044][ T5926] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 185.197071][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.212046][ T5926] usb 5-1: config 0 descriptor?? [ 185.627708][ T30] audit: type=1400 audit(2000000101.945:349): avc: denied { module_request } for pid=7264 comm="syz.3.356" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 185.653603][ T5127] Bluetooth: hci4: command 0x0406 tx timeout [ 185.658297][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 185.661369][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 185.677465][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 185.853209][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 186.063912][ T7273] new mount options do not match the existing superblock, will be ignored [ 186.200723][ T60] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 186.650329][ T5926] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 186.657643][ T5926] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 187.234164][ T30] audit: type=1400 audit(2000000102.125:350): avc: denied { create } for pid=7262 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 187.320359][ T5926] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0008/input/input14 [ 187.458644][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.761721][ T5926] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 187.779970][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.792019][ T7272] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 187.847708][ T30] audit: type=1400 audit(2000000104.165:351): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 187.849906][ T60] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.890912][ T60] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 187.900699][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.914453][ T60] usb 2-1: config 0 descriptor?? [ 187.929341][ T7259] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 189.034215][ T30] audit: type=1400 audit(2000000105.215:352): avc: denied { name_bind } for pid=7287 comm="syz.3.359" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 189.383200][ T5926] usb 5-1: reset high-speed USB device number 12 using dummy_hcd [ 190.413101][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 190.598131][ T30] audit: type=1400 audit(2000000106.885:353): avc: denied { read } for pid=7306 comm="syz.3.363" name="file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 190.722986][ T5934] usb 5-1: USB disconnect, device number 12 [ 190.805733][ T30] audit: type=1400 audit(2000000106.895:354): avc: denied { open } for pid=7306 comm="syz.3.363" path="/66/file0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 191.184715][ T30] audit: type=1400 audit(2000000106.945:355): avc: denied { ioctl } for pid=7305 comm="syz.2.362" path="socket:[13894]" dev="sockfs" ino=13894 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.736707][ T7316] batman_adv: batadv0: Adding interface: dummy0 [ 191.743995][ T7316] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.770275][ T7316] batman_adv: batadv0: Interface activated: dummy0 [ 191.830559][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.367'. [ 191.887264][ T7317] batadv0: mtu less than device minimum [ 191.906519][ T7317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.917886][ T7317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.929284][ T7317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.940656][ T7317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.952024][ T7317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.963330][ T7317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.974705][ T7317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.986031][ T7317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.997382][ T7317] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.674686][ T7336] netlink: 'syz.3.368': attribute type 27 has an invalid length. [ 192.984726][ T7341] nvme_fabrics: unknown parameter or missing value 'øöE' in ctrl creation request [ 193.096147][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'. [ 193.114978][ T60] usbhid 2-1:0.0: can't add hid device: -32 [ 193.121109][ T60] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 193.196736][ T30] audit: type=1400 audit(2000000109.465:356): avc: denied { sys_module } for pid=7346 comm="syz.2.370" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 193.263529][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.271727][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.300451][ T7336] batman_adv: batadv0: Interface deactivated: dummy0 [ 193.600444][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.735630][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.806664][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.813577][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.858625][ T7336] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.868331][ T7336] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.877818][ T7336] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.887374][ T7336] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.923084][ T7336] veth3: left promiscuous mode [ 195.788903][ T7381] overlayfs: failed to resolve 'default_permissions': -2 [ 196.496100][ T7387] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 199.207422][ T7417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'. [ 199.445350][ T30] audit: type=1400 audit(2000000115.765:357): avc: denied { setopt } for pid=7422 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.857570][ T30] audit: type=1400 audit(2000000115.785:358): avc: denied { bind } for pid=7422 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.155870][ T30] audit: type=1400 audit(2000000115.955:359): avc: denied { setopt } for pid=7422 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 200.679738][ T974] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 200.889819][ T974] usb 1-1: Using ep0 maxpacket: 8 [ 200.907626][ T974] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 201.061108][ T974] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 201.138017][ T974] usb 1-1: can't read configurations, error -61 [ 201.219138][ T7458] sctp: [Deprecated]: syz.2.394 (pid 7458) Use of int in max_burst socket option. [ 201.219138][ T7458] Use struct sctp_assoc_value instead [ 201.652304][ T974] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 201.740461][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 201.757749][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 201.765207][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 201.774260][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 201.781686][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 201.902223][ T974] usb 1-1: Using ep0 maxpacket: 8 [ 201.921840][ T974] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 201.980085][ T974] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 201.987747][ T974] usb 1-1: can't read configurations, error -61 [ 202.012827][ T974] usb usb1-port1: attempt power cycle [ 202.953336][ T7460] syz.2.394 (7460): drop_caches: 2 [ 202.990162][ T974] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 203.149784][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 203.162815][ T974] usb 1-1: Using ep0 maxpacket: 8 [ 203.171764][ T974] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 203.180934][ T974] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 203.188516][ T974] usb 1-1: can't read configurations, error -61 [ 203.899505][ T5833] Bluetooth: hci5: command tx timeout [ 204.524963][ T974] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 204.762327][ T974] usb 1-1: device not accepting address 19, error -71 [ 205.275065][ T5867] usb 2-1: USB disconnect, device number 17 [ 205.291743][ T974] usb usb1-port1: unable to enumerate USB device [ 206.383363][ T30] audit: type=1400 audit(2000000122.705:360): avc: denied { append } for pid=7516 comm="syz.0.405" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 206.385465][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.420140][ T5894] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 206.430491][ T5833] Bluetooth: hci5: command tx timeout [ 206.435552][ T7517] ubi31: attaching mtd0 [ 206.443951][ T7517] ubi31: scanning is finished [ 206.448659][ T7517] ubi31: empty MTD device detected [ 206.466495][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.404'. [ 206.580707][ T5867] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 206.606016][ T5894] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 206.718464][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.880083][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.096538][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.133884][ T5894] usb 4-1: config 0 descriptor?? [ 207.149972][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.272886][ T5894] cp210x 4-1:0.0: cp210x converter detected [ 207.282470][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.687208][ T5867] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.699816][ T5894] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 207.707299][ T5894] cp210x 4-1:0.0: querying part number failed [ 207.716255][ T7517] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 207.787668][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.864710][ T7517] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 208.092701][ T5867] usb 5-1: config 0 descriptor?? [ 208.100095][ T5894] usb 4-1: cp210x converter now attached to ttyUSB0 [ 208.118616][ T5894] usb 4-1: USB disconnect, device number 12 [ 208.142865][ T7517] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 208.152632][ T7517] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 208.160285][ T7517] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 208.168172][ T7517] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 208.177190][ T7517] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1225180223 [ 208.187485][ T7517] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 208.210073][ T7527] ubi31: background thread "ubi_bgt31d" started, PID 7527 [ 208.210774][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 208.447209][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.463722][ T5894] cp210x 4-1:0.0: device disconnected [ 208.510917][ T5833] Bluetooth: hci5: command tx timeout [ 208.543143][ T7461] chnl_net:caif_netlink_parms(): no params data found [ 208.657430][ T5867] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 208.728782][ T5867] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 208.747908][ T7543] FAULT_INJECTION: forcing a failure. [ 208.747908][ T7543] name failslab, interval 1, probability 0, space 0, times 0 [ 208.792948][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.803389][ T7543] CPU: 1 UID: 0 PID: 7543 Comm: syz.2.408 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 208.803410][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.803421][ T7543] Call Trace: [ 208.803426][ T7543] [ 208.803434][ T7543] dump_stack_lvl+0x16c/0x1f0 [ 208.803463][ T7543] should_fail_ex+0x512/0x640 [ 208.803488][ T7543] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 208.803507][ T7543] should_failslab+0xc2/0x120 [ 208.803526][ T7543] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 208.803543][ T7543] ? getname_flags.part.0+0x4c/0x550 [ 208.803570][ T7543] getname_flags.part.0+0x4c/0x550 [ 208.803594][ T7543] getname_flags+0x93/0xf0 [ 208.803618][ T7543] user_path_at+0x24/0x60 [ 208.803643][ T7543] __x64_sys_mount+0x1fc/0x310 [ 208.803663][ T7543] ? __pfx___x64_sys_mount+0x10/0x10 [ 208.803680][ T7543] ? rcu_is_watching+0x12/0xc0 [ 208.803708][ T7543] do_syscall_64+0xcd/0x260 [ 208.803736][ T7543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.803754][ T7543] RIP: 0033:0x7f008f78e969 [ 208.803767][ T7543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.803784][ T7543] RSP: 002b:00007f00905b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 208.803801][ T7543] RAX: ffffffffffffffda RBX: 00007f008f9b5fa0 RCX: 00007f008f78e969 [ 208.803813][ T7543] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 208.803823][ T7543] RBP: 00007f00905b7090 R08: 0000200000002480 R09: 0000000000000000 [ 208.803833][ T7543] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.803843][ T7543] R13: 0000000000000000 R14: 00007f008f9b5fa0 R15: 00007ffe3037a068 [ 208.803866][ T7543] [ 208.982977][ T5894] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 209.269855][ T5934] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 209.919369][ T5934] usb 1-1: No LPM exit latency info found, disabling LPM. [ 209.960925][ T5866] usb 5-1: USB disconnect, device number 13 [ 210.119103][ T5934] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 210.166105][ T5934] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 210.179846][ T5934] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 210.190020][ T5934] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 210.514892][ T7555] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 210.605308][ T5833] Bluetooth: hci5: command tx timeout [ 210.691054][ T7566] new mount options do not match the existing superblock, will be ignored [ 210.969545][ T7461] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.976879][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.994404][ T7461] bridge_slave_0: entered allmulticast mode [ 211.009002][ T7461] bridge_slave_0: entered promiscuous mode [ 211.055391][ T7461] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.062770][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.073986][ T7461] bridge_slave_1: entered allmulticast mode [ 211.091053][ T7461] bridge_slave_1: entered promiscuous mode [ 212.009687][ C1] hrtimer: interrupt took 38971 ns [ 212.433250][ T30] audit: type=1400 audit(2000000128.755:361): avc: denied { create } for pid=7587 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 212.469785][ T30] audit: type=1400 audit(2000000128.775:362): avc: denied { write } for pid=7587 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 212.489512][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.506735][ T5934] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.512626][ T7461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.534255][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.553257][ T30] audit: type=1400 audit(2000000128.785:363): avc: denied { getopt } for pid=7587 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.573499][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.596365][ T5934] usb 1-1: can't set config #1, error -71 [ 212.621336][ T5934] usb 1-1: USB disconnect, device number 20 [ 212.621707][ T7461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.682148][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 212.909736][ T5926] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 213.525487][ T7461] team0: Port device team_slave_0 added [ 213.533240][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 213.542582][ T5926] usb 3-1: not running at top speed; connect to a high speed hub [ 213.552821][ T7461] team0: Port device team_slave_1 added [ 213.558884][ T12] bridge_slave_1: left allmulticast mode [ 213.568321][ T12] bridge_slave_1: left promiscuous mode [ 213.576086][ T5926] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 213.587506][ T60] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 213.599796][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.611862][ T5926] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 213.636150][ T5926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 213.655718][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.675914][ T5926] usb 3-1: Product: syz [ 213.684916][ T12] bridge_slave_0: left allmulticast mode [ 213.699413][ T12] bridge_slave_0: left promiscuous mode [ 213.702994][ T5926] usb 3-1: Manufacturer: syz [ 213.708460][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.718467][ T5926] usb 3-1: SerialNumber: syz [ 213.875673][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.889357][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.906232][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.919698][ T60] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.928788][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.940620][ T60] usb 4-1: config 0 descriptor?? [ 214.137082][ T5926] cdc_ncm 3-1:1.0: bind() failure [ 214.253349][ T5926] usbtest 3-1:1.0: Linux gadget zero [ 214.258795][ T5926] usbtest 3-1:1.0: full-speed {control in/out int-in} tests (+alt) [ 214.290862][ T5926] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 214.298134][ T5926] cdc_ncm 3-1:1.1: bind() failure [ 214.319361][ T5926] usbtest 3-1:1.1: couldn't get endpoints, -71 [ 214.334429][ T5926] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 214.349219][ T5926] usb 3-1: USB disconnect, device number 8 [ 214.395223][ T60] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 214.413695][ T60] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 214.614814][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.625173][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.634908][ T12] bond0 (unregistering): Released all slaves [ 214.646712][ T12] bond1 (unregistering): Released all slaves [ 214.654597][ T5926] usb 4-1: USB disconnect, device number 14 [ 214.745262][ T7618] tipc: Enabling of bearer rejected, failed to enable media [ 214.765899][ T7625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.423'. [ 214.838084][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 214.891449][ T7625] net_ratelimit: 10 callbacks suppressed [ 214.891464][ T7625] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 214.908559][ T7625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.944401][ T30] audit: type=1400 audit(2000000131.265:364): avc: denied { bind } for pid=7628 comm="syz.4.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.957212][ T7632] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7632 comm=syz.2.423 [ 215.777550][ T5864] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 215.955544][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.055183][ T5864] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 216.141491][ T5864] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 216.307947][ T5864] usb 1-1: config 8 has no interface number 0 [ 216.436011][ T5864] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.45 [ 216.573809][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.721472][ T5864] usb 1-1: Product: syz [ 216.787195][ T5864] usb 1-1: Manufacturer: syz [ 216.863450][ T5864] usb 1-1: SerialNumber: syz [ 217.017801][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.043720][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.050109][ T7461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.062262][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.069206][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.095100][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.102293][ T7461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.307050][ T30] audit: type=1400 audit(2000000133.615:365): avc: denied { read write } for pid=7644 comm="syz.2.426" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 218.153346][ T30] audit: type=1400 audit(2000000133.625:366): avc: denied { open } for pid=7644 comm="syz.2.426" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 218.313494][ T7461] hsr_slave_0: entered promiscuous mode [ 218.329051][ T7461] hsr_slave_1: entered promiscuous mode [ 218.335763][ T7461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.352756][ T7461] Cannot create hsr debugfs directory [ 218.367237][ T5926] usb 1-1: USB disconnect, device number 21 [ 218.425938][ T30] audit: type=1400 audit(2000000134.735:367): avc: denied { create } for pid=7657 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 219.575011][ T30] audit: type=1400 audit(2000000135.735:368): avc: denied { execmem } for pid=7677 comm="syz.3.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 219.771514][ T7683] new mount options do not match the existing superblock, will be ignored [ 220.158166][ T30] audit: type=1400 audit(2000000136.475:369): avc: denied { bind } for pid=7671 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.627428][ T12] hsr_slave_0: left promiscuous mode [ 220.637354][ T12] hsr_slave_1: left promiscuous mode [ 220.659378][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 220.672630][ T7694] overlayfs: failed to resolve './file1': -2 [ 220.685039][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 220.941223][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.975471][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.681504][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.688935][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.729738][ T5867] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 221.733156][ T12] veth1_macvtap: left promiscuous mode [ 221.743209][ T12] veth0_macvtap: left promiscuous mode [ 221.749034][ T12] veth1_vlan: left promiscuous mode [ 221.773682][ T12] veth0_vlan: left promiscuous mode [ 221.901904][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.939837][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.949777][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.979871][ T5867] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.997962][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.021265][ T5867] usb 5-1: config 0 descriptor?? [ 222.527691][ T5867] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 222.942501][ T5867] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 223.086533][ T5867] usb 5-1: USB disconnect, device number 14 [ 223.169707][ T30] audit: type=1400 audit(2000000139.485:370): avc: denied { sqpoll } for pid=7715 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 223.258564][ T7717] fido_id[7717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 223.588886][ T12] team0 (unregistering): Port device team_slave_1 removed [ 223.625830][ T12] team0 (unregistering): Port device team_slave_0 removed [ 225.186897][ T7735] bridge3: entered allmulticast mode [ 225.410522][ T7744] netlink: 44 bytes leftover after parsing attributes in process `syz.4.451'. [ 225.552045][ T7744] netlink: 43 bytes leftover after parsing attributes in process `syz.4.451'. [ 226.075332][ T7744] netlink: 'syz.4.451': attribute type 5 has an invalid length. [ 226.083830][ T7744] netlink: 43 bytes leftover after parsing attributes in process `syz.4.451'. [ 226.896823][ T7758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.449'. [ 227.217087][ T5867] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 227.261849][ T7461] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.273785][ T7461] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.281071][ T5864] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 227.299375][ T7461] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.362944][ T7461] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.482302][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 227.487429][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 227.503322][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.519803][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.534875][ T5864] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 227.544384][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.927191][ T5867] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 227.949918][ T5867] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 227.967709][ T5864] usb 4-1: config 0 descriptor?? [ 227.986475][ T5867] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.005948][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.025266][ T5867] usb 5-1: Product: syz [ 228.030528][ T5867] usb 5-1: Manufacturer: syz [ 228.035283][ T5867] usb 5-1: SerialNumber: syz [ 228.049010][ T7461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.088589][ T7461] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.108338][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.115431][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.137559][ T7559] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.144661][ T7559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.206763][ T5864] usbhid 4-1:0.0: can't add hid device: -71 [ 228.268667][ T5864] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 228.299340][ T5864] usb 4-1: USB disconnect, device number 15 [ 228.316716][ T5867] cdc_ncm 5-1:1.0: bind() failure [ 228.342719][ T5867] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 228.354349][ T5867] cdc_ncm 5-1:1.1: bind() failure [ 228.362139][ T7765] Bluetooth: MGMT ver 1.23 [ 228.369981][ T5867] usb 5-1: USB disconnect, device number 15 [ 228.520948][ T7461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.619747][ T5952] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 229.321186][ T5952] usb 1-1: config 4 has an invalid interface number: 156 but max is 0 [ 229.329373][ T5952] usb 1-1: config 4 has no interface number 0 [ 229.341507][ T5952] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 229.351519][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.380236][ T5952] usb 1-1: Product: syz [ 229.410887][ T5952] usb 1-1: Manufacturer: syz [ 229.415503][ T5952] usb 1-1: SerialNumber: syz [ 229.422348][ T7461] veth0_vlan: entered promiscuous mode [ 229.443001][ T7461] veth1_vlan: entered promiscuous mode [ 229.472942][ T7461] veth0_macvtap: entered promiscuous mode [ 229.480634][ T30] audit: type=1400 audit(2000000145.805:371): avc: denied { append } for pid=7790 comm="syz.4.461" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 229.508531][ T7461] veth1_macvtap: entered promiscuous mode [ 229.570789][ T7461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.616034][ T7461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.617509][ T5952] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 229.626779][ T7461] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.644054][ T7461] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.652825][ T5867] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 229.676997][ T7461] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.840455][ T30] audit: type=1400 audit(2000000146.135:372): avc: denied { name_bind } for pid=7764 comm="syz.0.454" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 229.911648][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 229.944811][ T7461] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.027177][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.088490][ T5952] usb 1-1: setting power ON [ 230.093416][ T5952] dvb-usb: bulk message failed: -22 (2/0) [ 230.109107][ T5952] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 230.133208][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.143890][ T5867] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 230.157785][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.173921][ T5867] usb 3-1: config 0 descriptor?? [ 230.353382][ T5952] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 230.364038][ T5952] dvb_usb_cxusb 1-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 230.394348][ T5952] usb 1-1: USB disconnect, device number 22 [ 230.901692][ T7559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.947642][ T7559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.011866][ T7800] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 231.099926][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.114365][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.144367][ T30] audit: type=1400 audit(2000000147.465:373): avc: denied { mounton } for pid=7461 comm="syz-executor" path="/root/syzkaller.aeIkl5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 231.170977][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.200285][ T30] audit: type=1400 audit(2000000147.515:374): avc: denied { mounton } for pid=7461 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 231.224083][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.318734][ T30] audit: type=1400 audit(2000000147.635:375): avc: denied { setattr } for pid=7807 comm="syz.5.390" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 231.898859][ T5867] usbhid 3-1:0.0: can't add hid device: -71 [ 231.905270][ T5867] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 231.916643][ T5867] usb 3-1: USB disconnect, device number 9 [ 232.259808][ T5950] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 232.374039][ T5952] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 232.472936][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 232.510954][ T5867] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 232.512414][ T5950] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 232.566987][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.596977][ T5952] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 232.608701][ T5950] usb 4-1: config 0 has no interface number 0 [ 232.617170][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.628571][ T30] audit: type=1400 audit(2000000148.945:376): avc: denied { create } for pid=7829 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.661191][ T5950] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 232.679560][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.687732][ T5952] usb 1-1: Product: syz [ 232.758089][ T5950] usb 4-1: Product: syz [ 232.788922][ T5952] usb 1-1: Manufacturer: syz [ 232.797056][ T5950] usb 4-1: Manufacturer: syz [ 232.804452][ T5952] usb 1-1: SerialNumber: syz [ 232.816805][ T5950] usb 4-1: SerialNumber: syz [ 232.825690][ T5952] usb 1-1: config 0 descriptor?? [ 232.835235][ T5867] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.839468][ T5950] usb 4-1: config 0 descriptor?? [ 232.856432][ T5952] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 232.864235][ T5950] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 232.875907][ T5950] usb 4-1: No valid video chain found. [ 232.911425][ T5867] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.951234][ T5867] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 232.983958][ T5867] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 232.998761][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.024620][ T7825] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 233.096861][ T5934] usb 4-1: USB disconnect, device number 16 [ 233.298758][ T30] audit: type=1400 audit(2000000149.615:377): avc: denied { read write } for pid=7841 comm="syz.2.476" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 233.324036][ T30] audit: type=1400 audit(2000000149.615:378): avc: denied { open } for pid=7841 comm="syz.2.476" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 233.373020][ T5867] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 233.397491][ T5867] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input18 [ 233.454108][ T5867] usb 5-1: USB disconnect, device number 16 [ 233.458663][ T5950] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 233.460081][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 233.652794][ T5950] usb 6-1: Using ep0 maxpacket: 8 [ 233.667958][ T5950] usb 6-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 233.713377][ T5950] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.733021][ T5950] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 233.754460][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.777093][ T5950] usb 6-1: config 0 descriptor?? [ 234.588094][ T7859] 9pnet_fd: Insufficient options for proto=fd [ 235.520479][ T5950] usb 1-1: USB disconnect, device number 23 [ 235.589412][ T30] audit: type=1400 audit(2000000151.905:379): avc: denied { setopt } for pid=7861 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 235.615937][ T7864] veth3: entered promiscuous mode [ 236.467241][ T7864] veth3: entered allmulticast mode [ 236.493691][ T7873] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 236.503102][ T7873] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 236.513441][ T7873] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 236.575553][ T30] audit: type=1400 audit(2000000152.835:380): avc: denied { firmware_load } for pid=7866 comm="syz.4.484" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 236.630536][ T30] audit: type=1400 audit(2000000152.875:381): avc: denied { getopt } for pid=7839 comm="syz.5.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 237.680094][ T5950] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 238.621264][ T30] audit: type=1400 audit(2000000154.925:382): avc: denied { read } for pid=7884 comm="syz.3.487" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 238.775507][ T30] audit: type=1400 audit(2000000154.925:383): avc: denied { open } for pid=7884 comm="syz.3.487" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 238.800335][ T5950] usb 5-1: Using ep0 maxpacket: 32 [ 238.832212][ T5952] usb 6-1: USB disconnect, device number 2 [ 238.857485][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.908407][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.918691][ T30] audit: type=1400 audit(2000000155.235:384): avc: denied { write } for pid=7884 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 238.982076][ T5950] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 239.061923][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.347189][ T7900] fuse: Bad value for 'fd' [ 239.352133][ T30] audit: type=1400 audit(2000000155.665:385): avc: denied { remount } for pid=7898 comm="syz.5.491" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 239.430252][ T5950] usb 5-1: config 0 descriptor?? [ 239.456467][ T7897] netlink: 'syz.2.490': attribute type 33 has an invalid length. [ 239.464586][ T7897] netlink: 152 bytes leftover after parsing attributes in process `syz.2.490'. [ 239.508384][ T7905] netlink: 172 bytes leftover after parsing attributes in process `syz.5.493'. [ 240.031451][ T5950] usbhid 5-1:0.0: can't add hid device: -71 [ 240.040479][ T5950] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 240.053907][ T5950] usb 5-1: USB disconnect, device number 17 [ 240.838246][ T30] audit: type=1400 audit(2000000157.155:386): avc: denied { read } for pid=7923 comm="syz.0.501" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 242.811708][ T7934] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 243.089275][ T7953] overlay: Unknown parameter '/' [ 243.129159][ T30] audit: type=1400 audit(2000000159.445:387): avc: denied { ioctl } for pid=7951 comm="syz.0.505" path="socket:[15269]" dev="sockfs" ino=15269 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.246518][ T30] audit: type=1326 audit(2000000159.565:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008f78e969 code=0x7ffc0000 [ 243.400678][ T30] audit: type=1326 audit(2000000159.595:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008f78e969 code=0x7ffc0000 [ 243.455541][ T30] audit: type=1326 audit(2000000159.605:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f008f78e969 code=0x7ffc0000 [ 243.611731][ T30] audit: type=1326 audit(2000000159.615:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008f78e969 code=0x7ffc0000 [ 243.735905][ T30] audit: type=1326 audit(2000000159.615:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008f78e969 code=0x7ffc0000 [ 243.809200][ T5950] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 243.827906][ T30] audit: type=1326 audit(2000000159.625:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f008f78e969 code=0x7ffc0000 [ 243.929491][ T30] audit: type=1326 audit(2000000159.625:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008f78e969 code=0x7ffc0000 [ 243.979729][ T5952] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 244.049862][ T30] audit: type=1326 audit(2000000159.625:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008f78e969 code=0x7ffc0000 [ 244.079175][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 244.160940][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 244.224543][ T5952] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 244.283751][ T5950] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 244.410442][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.419412][ T5952] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.431225][ T5950] usb 1-1: Product: syz [ 244.435399][ T5950] usb 1-1: Manufacturer: syz [ 244.441175][ T5952] usb 6-1: config 0 has no interface number 0 [ 244.447578][ T5950] usb 1-1: SerialNumber: syz [ 244.453697][ T5952] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 244.481741][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.493149][ T5950] usb 1-1: config 0 descriptor?? [ 244.511803][ T5950] hub 1-1:0.0: bad descriptor, ignoring hub [ 244.547639][ T5950] hub 1-1:0.0: probe with driver hub failed with error -5 [ 244.560706][ T5952] usb 6-1: Product: syz [ 244.566258][ T5952] usb 6-1: Manufacturer: syz [ 244.585437][ T5952] usb 6-1: SerialNumber: syz [ 244.655064][ T5950] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 244.776731][ T5952] usb 6-1: config 0 descriptor?? [ 244.922070][ T5950] input: failed to attach handler mousedev to device input19, error: -5 [ 245.084152][ T5950] usb 1-1: USB disconnect, device number 24 [ 245.647033][ T5952] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 245.664496][ T5952] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82 [ 245.684366][ T5952] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 245.694721][ T5952] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 245.722050][ T5952] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 245.739615][ T7975] xt_TPROXY: Can be used only with -p tcp or -p udp [ 245.824945][ T5952] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 245.960395][ T5952] usb 6-1: USB disconnect, device number 3 [ 245.977573][ T5952] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 246.478130][ T5952] keyspan 6-1:0.133: device disconnected [ 246.552822][ T7982] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.638478][ T7987] overlayfs: failed to resolve './file0': -2 [ 247.365349][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 247.365391][ T30] audit: type=1400 audit(2000000163.685:411): avc: denied { create } for pid=7985 comm="syz.3.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 248.864878][ T8008] new mount options do not match the existing superblock, will be ignored [ 250.435088][ T8011] kvm: pic: non byte read [ 250.446200][ T8011] kvm: pic: non byte read [ 250.451889][ T8011] kvm: pic: non byte read [ 250.457377][ T8011] kvm: pic: non byte read [ 250.793772][ T8025] new mount options do not match the existing superblock, will be ignored [ 250.962846][ T8011] kvm: pic: non byte read [ 250.967928][ T8011] kvm: pic: level sensitive irq not supported [ 250.968024][ T8011] kvm: pic: non byte read [ 251.027075][ T8011] kvm: pic: non byte read [ 251.033902][ T8011] kvm: pic: non byte read [ 251.047641][ T8011] kvm: pic: non byte read [ 251.244805][ T8034] geneve2: entered promiscuous mode [ 251.391962][ T8034] geneve2: entered allmulticast mode [ 251.877782][ T8042] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 251.886274][ T8042] team0: Device ipvlan1 is already an upper device of the team interface [ 252.970104][ T5867] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 253.316580][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 253.335505][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 253.344444][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'. [ 253.749740][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 253.768473][ T5867] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 253.803533][ T8065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.831411][ T30] audit: type=1400 audit(2000000170.125:412): avc: denied { connect } for pid=8056 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.866308][ T5867] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 253.903066][ T5867] usb 4-1: can't read configurations, error -61 [ 254.066315][ T8065] netlink: 'syz.0.537': attribute type 12 has an invalid length. [ 254.163591][ T8065] netlink: 132 bytes leftover after parsing attributes in process `syz.0.537'. [ 254.210161][ T5867] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 254.699724][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 254.713248][ T5867] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 254.839896][ T5867] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 254.857745][ T5867] usb 4-1: can't read configurations, error -61 [ 254.869938][ T5867] usb usb4-port1: attempt power cycle [ 254.947383][ T8079] can: request_module (can-proto-0) failed. [ 255.230378][ T5867] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 255.234140][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.244420][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.271281][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 255.278958][ T5867] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 255.298777][ T5867] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 255.317083][ T5867] usb 4-1: can't read configurations, error -61 [ 255.323476][ T5864] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 255.469782][ T974] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 256.356301][ T8093] xt_connbytes: Forcing CT accounting to be enabled [ 256.363216][ T8093] set match dimension is over the limit! [ 256.650726][ T5867] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 256.683403][ T5864] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 256.728649][ T5867] usb 4-1: device descriptor read/8, error -71 [ 256.758750][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.769549][ T974] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 256.784122][ T974] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 256.799904][ T5864] usb 5-1: Product: syz [ 256.804391][ T5864] usb 5-1: Manufacturer: syz [ 256.808986][ T5864] usb 5-1: SerialNumber: syz [ 256.896487][ T5867] usb usb4-port1: unable to enumerate USB device [ 257.031347][ T974] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 257.054327][ T974] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 258.148205][ T5864] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 258.176835][ T30] audit: type=1400 audit(2000000174.495:413): avc: denied { firmware_load } for pid=5866 comm="kworker/0:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 258.178161][ T8114] FAULT_INJECTION: forcing a failure. [ 258.178161][ T8114] name failslab, interval 1, probability 0, space 0, times 0 [ 258.439062][ T8114] CPU: 1 UID: 0 PID: 8114 Comm: syz.0.550 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 258.439089][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.439100][ T8114] Call Trace: [ 258.439107][ T8114] [ 258.439115][ T8114] dump_stack_lvl+0x16c/0x1f0 [ 258.439146][ T8114] should_fail_ex+0x512/0x640 [ 258.439169][ T8114] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 258.439198][ T8114] ? __pfx_asymmetric_lookup_restriction+0x10/0x10 [ 258.439218][ T8114] should_failslab+0xc2/0x120 [ 258.439236][ T8114] __kmalloc_cache_noprof+0x6a/0x3e0 [ 258.439263][ T8114] ? asymmetric_lookup_restriction+0x40f/0x5a0 [ 258.439286][ T8114] ? __pfx_asymmetric_lookup_restriction+0x10/0x10 [ 258.439305][ T8114] asymmetric_lookup_restriction+0x40f/0x5a0 [ 258.439325][ T8114] ? __pfx_asymmetric_lookup_restriction+0x10/0x10 [ 258.439356][ T8114] ? __pfx_asymmetric_lookup_restriction+0x10/0x10 [ 258.439374][ T8114] keyring_restrict+0x118/0x670 [ 258.439395][ T8114] ? __pfx_keyring_restrict+0x10/0x10 [ 258.439412][ T8114] ? _copy_from_user+0x59/0xd0 [ 258.439439][ T8114] ? memdup_user+0x82/0xe0 [ 258.439462][ T8114] keyctl_restrict_keyring+0x1a4/0x250 [ 258.439485][ T8114] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 258.439507][ T8114] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 258.439530][ T8114] ? ksys_write+0x1b9/0x240 [ 258.439555][ T8114] ? __pfx_ksys_write+0x10/0x10 [ 258.439579][ T8114] ? rcu_is_watching+0x12/0xc0 [ 258.439604][ T8114] __do_sys_keyctl+0x4c1/0x590 [ 258.439629][ T8114] do_syscall_64+0xcd/0x260 [ 258.439659][ T8114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.439676][ T8114] RIP: 0033:0x7fdc59b8e969 [ 258.439691][ T8114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.439709][ T8114] RSP: 002b:00007fdc5a998038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 258.439726][ T8114] RAX: ffffffffffffffda RBX: 00007fdc59db5fa0 RCX: 00007fdc59b8e969 [ 258.439737][ T8114] RDX: 0000200000000100 RSI: 0000000025324845 RDI: 000000000000001d [ 258.439748][ T8114] RBP: 00007fdc5a998090 R08: 0000000000000000 R09: 0000000000000000 [ 258.439758][ T8114] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 258.439769][ T8114] R13: 0000000000000000 R14: 00007fdc59db5fa0 R15: 00007ffd375395d8 [ 258.439792][ T8114] [ 258.471862][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 258.807997][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 258.818968][ T974] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 258.833198][ T974] usb 3-1: string descriptor 0 read error: -71 [ 258.839481][ T974] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 258.862783][ T5866] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 258.954031][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.010336][ T5867] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 259.171079][ T5867] usb 4-1: device descriptor read/64, error -71 [ 259.367175][ T8124] IPv6: Can't replace route, no match found [ 259.874319][ T5934] usb 5-1: USB disconnect, device number 18 [ 259.878457][ T974] usb 3-1: config 0 descriptor?? [ 259.930961][ T974] usb 3-1: can't set config #0, error -71 [ 260.107716][ T5866] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 260.122847][ T974] usb 3-1: USB disconnect, device number 10 [ 260.133195][ T5866] ath9k_htc: Failed to initialize the device [ 260.149705][ T5867] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 260.502156][ T5934] usb 5-1: ath9k_htc: USB layer deinitialized [ 260.559819][ T8135] FAULT_INJECTION: forcing a failure. [ 260.559819][ T8135] name failslab, interval 1, probability 0, space 0, times 0 [ 260.614376][ T8135] CPU: 1 UID: 0 PID: 8135 Comm: syz.3.557 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 260.614401][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.614412][ T8135] Call Trace: [ 260.614419][ T8135] [ 260.614426][ T8135] dump_stack_lvl+0x16c/0x1f0 [ 260.614461][ T8135] should_fail_ex+0x512/0x640 [ 260.614486][ T8135] ? fs_reclaim_acquire+0xae/0x150 [ 260.614512][ T8135] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 260.614539][ T8135] should_failslab+0xc2/0x120 [ 260.614559][ T8135] __kmalloc_noprof+0xd2/0x510 [ 260.614582][ T8135] tomoyo_realpath_from_path+0xc2/0x6e0 [ 260.614611][ T8135] ? tomoyo_profile+0x47/0x60 [ 260.614632][ T8135] tomoyo_path_number_perm+0x245/0x580 [ 260.614653][ T8135] ? tomoyo_path_number_perm+0x237/0x580 [ 260.614679][ T8135] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 260.614703][ T8135] ? find_held_lock+0x2b/0x80 [ 260.614750][ T8135] ? find_held_lock+0x2b/0x80 [ 260.614771][ T8135] ? hook_file_ioctl_common+0x145/0x410 [ 260.614796][ T8135] ? __fget_files+0x20e/0x3c0 [ 260.614818][ T8135] security_file_ioctl+0x9b/0x240 [ 260.614853][ T8135] __x64_sys_ioctl+0xb7/0x200 [ 260.614880][ T8135] do_syscall_64+0xcd/0x260 [ 260.614908][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.614927][ T8135] RIP: 0033:0x7ff8c458e969 [ 260.614942][ T8135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.614960][ T8135] RSP: 002b:00007ff8c5489038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.614978][ T8135] RAX: ffffffffffffffda RBX: 00007ff8c47b5fa0 RCX: 00007ff8c458e969 [ 260.614990][ T8135] RDX: 00002000000000c0 RSI: 00000000c008ae88 RDI: 0000000000000006 [ 260.615001][ T8135] RBP: 00007ff8c5489090 R08: 0000000000000000 R09: 0000000000000000 [ 260.615012][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.615023][ T8135] R13: 0000000000000000 R14: 00007ff8c47b5fa0 R15: 00007ffe09c4f8a8 [ 260.615048][ T8135] [ 260.615097][ T8135] ERROR: Out of memory at tomoyo_realpath_from_path. [ 261.217823][ T8146] 9pnet_fd: Insufficient options for proto=fd [ 261.241434][ T8148] input: syz1 as /devices/virtual/input/input20 [ 261.464708][ T8153] batadv_slave_1: entered promiscuous mode [ 261.484279][ T8153] batadv_slave_1: left promiscuous mode [ 261.671627][ T8157] 9pnet_virtio: no channels available for device 127.0.0.1 [ 261.687561][ T8157] tipc: Started in network mode [ 261.692849][ T8157] tipc: Node identity ac14140f, cluster identity 4711 [ 261.701334][ T8157] tipc: New replicast peer: 255.255.255.255 [ 261.708568][ T8157] tipc: Enabled bearer , priority 10 [ 262.028848][ T8152] trusted_key: encrypted_key: insufficient parameters specified [ 262.647316][ T8167] new mount options do not match the existing superblock, will be ignored [ 262.711779][ T5934] tipc: Node number set to 2886997007 [ 263.219494][ T8171] new mount options do not match the existing superblock, will be ignored [ 263.719740][ T5866] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 263.979708][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 264.067513][ T5866] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 264.083003][ T5866] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 264.094316][ T5866] usb 1-1: config 0 has no interface number 0 [ 264.105705][ T5866] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 264.118207][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.130558][ T5866] usb 1-1: Product: syz [ 264.134764][ T5866] usb 1-1: Manufacturer: syz [ 264.139499][ T5866] usb 1-1: SerialNumber: syz [ 264.338919][ T5866] usb 1-1: config 0 descriptor?? [ 264.369744][ T5864] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 264.499753][ T5864] usb 3-1: device descriptor read/64, error -71 [ 264.703345][ T5866] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 264.710118][ T5866] usb 1-1: No valid video chain found. [ 264.728812][ T5866] usb 1-1: USB disconnect, device number 25 [ 264.969717][ T5864] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 265.169874][ T5864] usb 3-1: device descriptor read/64, error -71 [ 265.294074][ T5864] usb usb3-port1: attempt power cycle [ 265.515211][ T8191] openvswitch: netlink: IP tunnel dst address not specified [ 265.540747][ T8194] netlink: 4412 bytes leftover after parsing attributes in process `syz.4.574'. [ 265.640766][ T8191] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.572'. [ 265.655793][ T30] audit: type=1400 audit(2000000181.975:414): avc: denied { connect } for pid=8188 comm="syz.5.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 265.792067][ T5864] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 265.830495][ T5864] usb 3-1: device descriptor read/8, error -71 [ 265.858201][ T8194] : entered promiscuous mode [ 265.864052][ T30] audit: type=1400 audit(2000000181.975:415): avc: denied { mount } for pid=8188 comm="syz.5.572" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 266.190922][ T8204] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 266.199982][ T8204] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 266.664564][ T5864] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 266.672208][ T30] audit: type=1400 audit(2000000182.575:416): avc: denied { map } for pid=8199 comm="syz.5.576" path="/dev/vcs1" dev="devtmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 266.695286][ T30] audit: type=1400 audit(2000000182.585:417): avc: denied { write } for pid=8199 comm="syz.5.576" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 266.762628][ T5864] usb 3-1: device descriptor read/8, error -71 [ 266.870627][ T5864] usb usb3-port1: unable to enumerate USB device [ 266.904055][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.577'. [ 267.662687][ T5950] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 267.840002][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 267.862488][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.885129][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.902770][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 267.926938][ T5950] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 267.991565][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.029960][ T5950] usb 1-1: config 0 descriptor?? [ 268.093843][ T8224] FAULT_INJECTION: forcing a failure. [ 268.093843][ T8224] name failslab, interval 1, probability 0, space 0, times 0 [ 268.150635][ T8224] CPU: 1 UID: 0 PID: 8224 Comm: syz.3.583 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 268.150659][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.150669][ T8224] Call Trace: [ 268.150675][ T8224] [ 268.150681][ T8224] dump_stack_lvl+0x16c/0x1f0 [ 268.150713][ T8224] should_fail_ex+0x512/0x640 [ 268.150737][ T8224] ? fs_reclaim_acquire+0xae/0x150 [ 268.150761][ T8224] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 268.150788][ T8224] should_failslab+0xc2/0x120 [ 268.150807][ T8224] __kmalloc_noprof+0xd2/0x510 [ 268.150830][ T8224] tomoyo_realpath_from_path+0xc2/0x6e0 [ 268.150859][ T8224] ? tomoyo_profile+0x47/0x60 [ 268.150880][ T8224] tomoyo_path_number_perm+0x245/0x580 [ 268.150901][ T8224] ? tomoyo_path_number_perm+0x237/0x580 [ 268.150924][ T8224] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 268.150949][ T8224] ? find_held_lock+0x2b/0x80 [ 268.150994][ T8224] ? find_held_lock+0x2b/0x80 [ 268.151014][ T8224] ? hook_file_ioctl_common+0x145/0x410 [ 268.151039][ T8224] ? __fget_files+0x20e/0x3c0 [ 268.151061][ T8224] security_file_ioctl+0x9b/0x240 [ 268.151088][ T8224] __x64_sys_ioctl+0xb7/0x200 [ 268.151113][ T8224] do_syscall_64+0xcd/0x260 [ 268.151141][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.151159][ T8224] RIP: 0033:0x7ff8c458e969 [ 268.151174][ T8224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.151191][ T8224] RSP: 002b:00007ff8c5489038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.151208][ T8224] RAX: ffffffffffffffda RBX: 00007ff8c47b5fa0 RCX: 00007ff8c458e969 [ 268.151220][ T8224] RDX: 0000200000000240 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 268.151231][ T8224] RBP: 00007ff8c5489090 R08: 0000000000000000 R09: 0000000000000000 [ 268.151241][ T8224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.151252][ T8224] R13: 0000000000000000 R14: 00007ff8c47b5fa0 R15: 00007ffe09c4f8a8 [ 268.151277][ T8224] [ 268.151828][ T8224] ERROR: Out of memory at tomoyo_realpath_from_path. [ 268.429832][ T5864] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 268.530355][ T5950] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000C/input/input22 [ 268.581658][ T5864] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.615643][ T5864] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.642543][ T5864] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 268.658613][ T5864] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.676432][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.705146][ T5864] usb 3-1: Product: syz [ 268.705165][ T5950] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000C/input/input23 [ 268.724340][ T5864] usb 3-1: Manufacturer: syz [ 268.737659][ T5864] usb 3-1: SerialNumber: syz [ 268.745701][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.754289][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.773673][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.785127][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.793666][ T8233] netlink: 'syz.4.587': attribute type 1 has an invalid length. [ 268.872219][ T5950] kye 0003:0458:5011.000C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 268.964836][ T5950] usb 1-1: USB disconnect, device number 26 [ 269.249446][ T8233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.415024][ T8235] veth3: entered promiscuous mode [ 269.438579][ T8235] bond1: (slave veth3): Enslaving as an active interface with a down link [ 269.448364][ T8240] fido_id[8240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 269.490224][ T8236] vlan2: entered allmulticast mode [ 269.498509][ T8236] bond1: entered allmulticast mode [ 269.534533][ T8236] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 270.438462][ T5864] cdc_ncm 3-1:1.0: bind() failure [ 270.467866][ T5864] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 270.484674][ T5864] cdc_ncm 3-1:1.1: bind() failure [ 270.506667][ T5864] usb 3-1: USB disconnect, device number 15 [ 271.939702][ T5934] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 272.629979][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 272.683819][ T5934] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 272.761667][ T8281] netlink: 'syz.3.597': attribute type 21 has an invalid length. [ 272.769820][ T8281] IPv6: NLM_F_CREATE should be specified when creating new route [ 272.779028][ T8281] IPv6: Can't replace route, no match found [ 272.991816][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz.5.598'. [ 273.026192][ T5934] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.084708][ T5934] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.136024][ T5934] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.157360][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.172999][ T5934] usb 1-1: Product: syz [ 273.203368][ T5934] usb 1-1: Manufacturer: syz [ 273.234666][ T5934] usb 1-1: SerialNumber: syz [ 273.349030][ T30] audit: type=1400 audit(2000000189.665:418): avc: denied { getopt } for pid=8286 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.386564][ T8289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.184381][ T5934] usb 1-1: 0:2 : does not exist [ 274.610026][ T5934] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 274.816797][ T30] audit: type=1400 audit(2000000191.135:419): avc: denied { write } for pid=8312 comm="syz.4.609" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 274.839688][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.881960][ T5934] usb 1-1: USB disconnect, device number 27 [ 274.884095][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 275.327848][ T8245] udevd[8245]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.453342][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 277.174963][ T8333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40464 sclass=netlink_route_socket pid=8333 comm=syz.0.614 [ 277.243055][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 277.252175][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 277.261410][ T8335] netlink: 'syz.2.613': attribute type 15 has an invalid length. [ 277.269181][ T8335] netlink: 'syz.2.613': attribute type 18 has an invalid length. [ 277.362831][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 277.460100][ T8343] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 278.053498][ T8355] new mount options do not match the existing superblock, will be ignored [ 279.175071][ T8352] new mount options do not match the existing superblock, will be ignored [ 279.377220][ T30] audit: type=1400 audit(2000000195.695:420): avc: denied { append } for pid=8357 comm="syz.4.621" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 279.461163][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 279.486712][ T8367] No source specified [ 280.212708][ T8375] new mount options do not match the existing superblock, will be ignored [ 280.529850][ T5866] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 280.598900][ T30] audit: type=1326 audit(2000000196.915:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99cb8e969 code=0x7ffc0000 [ 280.934008][ T30] audit: type=1326 audit(2000000196.915:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99cb8e969 code=0x7ffc0000 [ 280.969733][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 282.023267][ T30] audit: type=1326 audit(2000000196.915:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fa99cb8e969 code=0x7ffc0000 [ 282.659872][ T30] audit: type=1326 audit(2000000196.915:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99cb8e969 code=0x7ffc0000 [ 282.683443][ T30] audit: type=1326 audit(2000000196.915:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99cb8e969 code=0x7ffc0000 [ 282.706635][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.715710][ T30] audit: type=1326 audit(2000000196.915:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa99cb8e969 code=0x7ffc0000 [ 282.731557][ T8390] FAULT_INJECTION: forcing a failure. [ 282.731557][ T8390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.739276][ T30] audit: type=1326 audit(2000000196.915:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99cb8e969 code=0x7ffc0000 [ 282.775311][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.783140][ T30] audit: type=1326 audit(2000000196.915:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99cb8e969 code=0x7ffc0000 [ 282.806311][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.816513][ T30] audit: type=1326 audit(2000000196.945:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa99cb8e969 code=0x7ffc0000 [ 282.839710][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.848903][ T5866] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 282.864858][ T5866] usb 4-1: can't read configurations, error -71 [ 282.878461][ T8390] CPU: 1 UID: 0 PID: 8390 Comm: syz.2.629 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 282.878485][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.878495][ T8390] Call Trace: [ 282.878501][ T8390] [ 282.878509][ T8390] dump_stack_lvl+0x16c/0x1f0 [ 282.878539][ T8390] should_fail_ex+0x512/0x640 [ 282.878569][ T8390] _copy_to_user+0x32/0xd0 [ 282.878597][ T8390] simple_read_from_buffer+0xcb/0x170 [ 282.878626][ T8390] proc_fail_nth_read+0x197/0x270 [ 282.878654][ T8390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.878683][ T8390] ? rw_verify_area+0xcf/0x680 [ 282.878705][ T8390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.878732][ T8390] vfs_read+0x1e1/0xc70 [ 282.878761][ T8390] ? __pfx___mutex_lock+0x10/0x10 [ 282.878788][ T8390] ? __pfx_vfs_read+0x10/0x10 [ 282.878821][ T8390] ? __fget_files+0x20e/0x3c0 [ 282.878846][ T8390] ksys_read+0x12a/0x240 [ 282.878870][ T8390] ? __pfx_ksys_read+0x10/0x10 [ 282.878904][ T8390] do_syscall_64+0xcd/0x260 [ 282.878932][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.878949][ T8390] RIP: 0033:0x7f008f78d37c [ 282.878964][ T8390] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 282.878980][ T8390] RSP: 002b:00007f00905b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.878997][ T8390] RAX: ffffffffffffffda RBX: 00007f008f9b5fa0 RCX: 00007f008f78d37c [ 282.879008][ T8390] RDX: 000000000000000f RSI: 00007f00905b70a0 RDI: 0000000000000004 [ 282.879019][ T8390] RBP: 00007f00905b7090 R08: 0000000000000000 R09: 0000000000000000 [ 282.879029][ T8390] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 282.879039][ T8390] R13: 0000000000000000 R14: 00007f008f9b5fa0 R15: 00007ffe3037a068 [ 282.879064][ T8390] [ 285.094945][ T8415] new mount options do not match the existing superblock, will be ignored [ 287.356953][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 287.356969][ T30] audit: type=1400 audit(2000000203.675:444): avc: denied { getopt } for pid=8427 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 287.850414][ T5950] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 288.512391][ T5950] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 288.528421][ T8463] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 288.741513][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.604685][ T8471] new mount options do not match the existing superblock, will be ignored [ 289.620714][ T5950] usb 3-1: config 0 descriptor?? [ 289.641679][ T5950] gspca_main: mars-2.14.0 probing 093a:050f [ 289.944175][ T60] usb 3-1: USB disconnect, device number 16 [ 290.336985][ T5926] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 290.859699][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 291.271412][ T5926] usb 6-1: config index 0 descriptor too short (expected 1821, got 853) [ 291.281790][ T5926] usb 6-1: config 0 has an invalid interface number: 103 but max is 2 [ 291.291304][ T5926] usb 6-1: config 0 has an invalid interface number: 255 but max is 2 [ 291.299474][ T5926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.309661][ T5926] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 291.319321][ T5926] usb 6-1: config 0 has no interface number 0 [ 291.325790][ T5926] usb 6-1: config 0 has no interface number 1 [ 291.332509][ T5926] usb 6-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 291.343781][ T5926] usb 6-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 291.355555][ T5926] usb 6-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 291.368816][ T5926] usb 6-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 291.379727][ T5926] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 291.391485][ T5926] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 291.589883][ T5926] usb 6-1: config 0 interface 103 has no altsetting 0 [ 291.589907][ T5926] usb 6-1: config 0 interface 255 has no altsetting 0 [ 291.605531][ T5926] usb 6-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 291.605559][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.605578][ T5926] usb 6-1: Product: syz [ 291.605592][ T5926] usb 6-1: Manufacturer: syz [ 291.605607][ T5926] usb 6-1: SerialNumber: syz [ 291.617674][ T5926] usb 6-1: config 0 descriptor?? [ 292.157080][ T30] audit: type=1400 audit(2000000208.465:445): avc: denied { bind } for pid=8487 comm="syz.5.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 292.553425][ T8511] tty tty4: ldisc open failed (-12), clearing slot 3 [ 292.668774][ T5926] videodev: could not get a free minor [ 292.689663][ T5926] dsbr100 6-1:0.255: couldn't register video device [ 292.696452][ T5926] dsbr100 6-1:0.255: probe with driver dsbr100 failed with error -23 [ 292.732364][ T5926] usb 6-1: USB disconnect, device number 4 [ 293.671184][ T30] audit: type=1400 audit(2000000209.995:446): avc: denied { name_connect } for pid=8525 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 293.700301][ T8528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8528 comm=syz.2.662 [ 293.728384][ T8528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=8528 comm=syz.2.662 [ 293.745545][ T8528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8528 comm=syz.2.662 [ 294.006193][ T30] audit: type=1400 audit(2000000210.325:447): avc: denied { read } for pid=8525 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 294.049115][ T8536] netlink: 200 bytes leftover after parsing attributes in process `syz.0.664'. [ 294.887695][ T8555] netlink: 666 bytes leftover after parsing attributes in process `syz.2.670'. [ 295.990935][ T30] audit: type=1400 audit(2000000211.725:448): avc: denied { write } for pid=8554 comm="syz.2.670" path="socket:[18363]" dev="sockfs" ino=18363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 296.216421][ T8563] netlink: 'syz.0.672': attribute type 1 has an invalid length. [ 296.224555][ T8563] netlink: 784 bytes leftover after parsing attributes in process `syz.0.672'. [ 296.458273][ T30] audit: type=1400 audit(2000000212.775:449): avc: denied { map } for pid=8565 comm="syz.4.674" path="socket:[18914]" dev="sockfs" ino=18914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 296.855714][ T8572] new mount options do not match the existing superblock, will be ignored [ 297.060219][ T30] audit: type=1400 audit(2000000213.305:450): avc: denied { mount } for pid=8574 comm="syz.2.676" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 297.284667][ T8569] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 297.552282][ T30] audit: type=1400 audit(2000000213.315:451): avc: denied { mounton } for pid=8574 comm="syz.2.676" path="/151/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 297.620736][ T30] audit: type=1400 audit(2000000213.345:452): avc: denied { getopt } for pid=8574 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 297.663285][ T8586] veth0_vlan: entered allmulticast mode [ 297.705662][ T8586] veth0_vlan: left promiscuous mode [ 297.716045][ T8586] veth0_vlan: entered promiscuous mode [ 298.572533][ T8594] siw: device registration error -23 [ 298.606092][ T8594] smc: removing ib device syz2 [ 298.612463][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 298.980440][ T30] audit: type=1400 audit(2000000214.865:453): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 299.027878][ T30] audit: type=1400 audit(2000000214.995:454): avc: denied { ioctl } for pid=8583 comm="syz.0.678" path="socket:[18953]" dev="sockfs" ino=18953 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 299.561733][ T8594] ------------[ cut here ]------------ [ 299.567189][ T8594] WARNING: CPU: 0 PID: 8594 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 299.577890][ T8594] Modules linked in: [ 299.581905][ T8594] CPU: 0 UID: 0 PID: 8594 Comm: syz.0.678 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 299.591720][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.601783][ T8594] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 299.607574][ T8594] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 05 ac 19 f9 e8 00 ac 19 f9 90 <0f> 0b 90 5b e9 f6 ab 19 f9 e8 71 2c 7f f9 eb da 66 66 2e 0f 1f 84 [ 299.627296][ T8594] RSP: 0018:ffffc9001c8cf1b0 EFLAGS: 00010246 [ 299.633916][ T8594] RAX: 0000000000080000 RBX: ffff8880122fd320 RCX: ffffc9000f68a000 [ 299.641888][ T8594] RDX: 0000000000080000 RSI: ffffffff88a199f0 RDI: ffff8880122fd3a0 [ 299.649867][ T8594] RBP: ffffffff88a00020 R08: 0000000000000005 R09: 0000000000000001 [ 299.657833][ T8594] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880122fc668 [ 299.665806][ T8594] R13: ffff8880122fbfe0 R14: ffff8880122fbfe0 R15: ffff8880122fd080 [ 299.673884][ T8594] FS: 00007fdc5a9566c0(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000 [ 299.682814][ T8594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.689384][ T8594] CR2: 00007ff8c5468d58 CR3: 000000002930d000 CR4: 00000000003526f0 [ 299.697355][ T8594] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 299.705325][ T8594] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 299.713495][ T8594] Call Trace: [ 299.716753][ T8594] [ 299.719693][ T8594] rxe_dealloc+0x25/0xc0 [ 299.723947][ T8594] ib_dealloc_device+0x49/0x230 [ 299.728779][ T8594] __ib_unregister_device+0x396/0x480 [ 299.734295][ T8594] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 299.740217][ T8594] ib_unregister_device_and_put+0x5a/0x80 [ 299.745922][ T8594] nldev_dellink+0x21f/0x320 [ 299.750505][ T8594] ? __pfx_nldev_dellink+0x10/0x10 [ 299.755616][ T8594] ? __schedule+0x1186/0x5de0 [ 299.760332][ T8594] ? cap_capable+0xb3/0x250 [ 299.764815][ T8594] ? bpf_lsm_capable+0x9/0x10 [ 299.769466][ T8594] ? security_capable+0x7e/0x260 [ 299.774413][ T8594] ? ns_capable+0xd7/0x110 [ 299.778805][ T8594] ? __pfx_nldev_dellink+0x10/0x10 [ 299.783916][ T8594] rdma_nl_rcv_msg+0x38a/0x6e0 [ 299.788667][ T8594] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 299.793953][ T8594] ? irqentry_exit+0x3b/0x90 [ 299.798531][ T8594] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 [ 299.804956][ T8594] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 299.812089][ T8594] ? netlink_deliver_tap+0x1ae/0xd30 [ 299.817358][ T8594] netlink_unicast+0x53a/0x7f0 [ 299.822126][ T8594] ? __pfx_netlink_unicast+0x10/0x10 [ 299.827396][ T8594] netlink_sendmsg+0x8d1/0xdd0 [ 299.832159][ T8594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.837570][ T8594] ____sys_sendmsg+0xa95/0xc70 [ 299.842343][ T8594] ? copy_msghdr_from_user+0x10a/0x160 [ 299.847779][ T8594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.853089][ T8594] ___sys_sendmsg+0x134/0x1d0 [ 299.857754][ T8594] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.862967][ T8594] __sys_sendmsg+0x16d/0x220 [ 299.867536][ T8594] ? __pfx___sys_sendmsg+0x10/0x10 [ 299.872670][ T8594] ? __x64_sys_futex+0x1e0/0x4c0 [ 299.877592][ T8594] ? rcu_is_watching+0x12/0xc0 [ 299.882362][ T8594] do_syscall_64+0xcd/0x260 [ 299.886848][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.892749][ T8594] RIP: 0033:0x7fdc59b8e969 [ 299.897137][ T8594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.916944][ T8594] RSP: 002b:00007fdc5a956038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.925354][ T8594] RAX: ffffffffffffffda RBX: 00007fdc59db6160 RCX: 00007fdc59b8e969 [ 299.933321][ T8594] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 299.941424][ T8594] RBP: 00007fdc59c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 299.949371][ T8594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.957370][ T8594] R13: 0000000000000000 R14: 00007fdc59db6160 R15: 00007ffd375395d8 [ 299.965354][ T8594] [ 299.968351][ T8594] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 299.975608][ T8594] CPU: 0 UID: 0 PID: 8594 Comm: syz.0.678 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 299.985382][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.995408][ T8594] Call Trace: [ 299.998670][ T8594] [ 300.001578][ T8594] dump_stack_lvl+0x3d/0x1f0 [ 300.006149][ T8594] panic+0x71c/0x800 [ 300.010030][ T8594] ? __pfx_panic+0x10/0x10 [ 300.014425][ T8594] ? show_trace_log_lvl+0x29b/0x3e0 [ 300.019604][ T8594] ? rxe_pool_cleanup+0x41/0x60 [ 300.024448][ T8594] check_panic_on_warn+0xab/0xb0 [ 300.029359][ T8594] __warn+0xf6/0x3c0 [ 300.033227][ T8594] ? rxe_pool_cleanup+0x41/0x60 [ 300.038052][ T8594] report_bug+0x3c3/0x580 [ 300.042361][ T8594] ? rxe_pool_cleanup+0x41/0x60 [ 300.047191][ T8594] handle_bug+0x184/0x210 [ 300.051495][ T8594] exc_invalid_op+0x17/0x50 [ 300.055968][ T8594] asm_exc_invalid_op+0x1a/0x20 [ 300.060797][ T8594] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 300.066233][ T8594] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 05 ac 19 f9 e8 00 ac 19 f9 90 <0f> 0b 90 5b e9 f6 ab 19 f9 e8 71 2c 7f f9 eb da 66 66 2e 0f 1f 84 [ 300.085813][ T8594] RSP: 0018:ffffc9001c8cf1b0 EFLAGS: 00010246 [ 300.091854][ T8594] RAX: 0000000000080000 RBX: ffff8880122fd320 RCX: ffffc9000f68a000 [ 300.099798][ T8594] RDX: 0000000000080000 RSI: ffffffff88a199f0 RDI: ffff8880122fd3a0 [ 300.107742][ T8594] RBP: ffffffff88a00020 R08: 0000000000000005 R09: 0000000000000001 [ 300.115686][ T8594] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880122fc668 [ 300.123633][ T8594] R13: ffff8880122fbfe0 R14: ffff8880122fbfe0 R15: ffff8880122fd080 [ 300.131580][ T8594] ? __pfx_rxe_dealloc+0x10/0x10 [ 300.136496][ T8594] ? rxe_pool_cleanup+0x40/0x60 [ 300.141326][ T8594] rxe_dealloc+0x25/0xc0 [ 300.145546][ T8594] ib_dealloc_device+0x49/0x230 [ 300.150375][ T8594] __ib_unregister_device+0x396/0x480 [ 300.155725][ T8594] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 300.161602][ T8594] ib_unregister_device_and_put+0x5a/0x80 [ 300.167386][ T8594] nldev_dellink+0x21f/0x320 [ 300.171954][ T8594] ? __pfx_nldev_dellink+0x10/0x10 [ 300.177041][ T8594] ? __schedule+0x1186/0x5de0 [ 300.181736][ T8594] ? cap_capable+0xb3/0x250 [ 300.186215][ T8594] ? bpf_lsm_capable+0x9/0x10 [ 300.190866][ T8594] ? security_capable+0x7e/0x260 [ 300.195776][ T8594] ? ns_capable+0xd7/0x110 [ 300.200170][ T8594] ? __pfx_nldev_dellink+0x10/0x10 [ 300.205260][ T8594] rdma_nl_rcv_msg+0x38a/0x6e0 [ 300.210001][ T8594] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 300.215271][ T8594] ? irqentry_exit+0x3b/0x90 [ 300.219943][ T8594] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 [ 300.226355][ T8594] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 300.233277][ T8594] ? netlink_deliver_tap+0x1ae/0xd30 [ 300.238541][ T8594] netlink_unicast+0x53a/0x7f0 [ 300.243291][ T8594] ? __pfx_netlink_unicast+0x10/0x10 [ 300.248559][ T8594] netlink_sendmsg+0x8d1/0xdd0 [ 300.253303][ T8594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.258569][ T8594] ____sys_sendmsg+0xa95/0xc70 [ 300.263312][ T8594] ? copy_msghdr_from_user+0x10a/0x160 [ 300.268745][ T8594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.274015][ T8594] ___sys_sendmsg+0x134/0x1d0 [ 300.278667][ T8594] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.283866][ T8594] __sys_sendmsg+0x16d/0x220 [ 300.288431][ T8594] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.293517][ T8594] ? __x64_sys_futex+0x1e0/0x4c0 [ 300.298443][ T8594] ? rcu_is_watching+0x12/0xc0 [ 300.303192][ T8594] do_syscall_64+0xcd/0x260 [ 300.307674][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.313539][ T8594] RIP: 0033:0x7fdc59b8e969 [ 300.317938][ T8594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.337520][ T8594] RSP: 002b:00007fdc5a956038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.345918][ T8594] RAX: ffffffffffffffda RBX: 00007fdc59db6160 RCX: 00007fdc59b8e969 [ 300.353872][ T8594] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 300.361817][ T8594] RBP: 00007fdc59c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 300.369775][ T8594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.377733][ T8594] R13: 0000000000000000 R14: 00007fdc59db6160 R15: 00007ffd375395d8 [ 300.385684][ T8594] [ 300.388859][ T8594] Kernel Offset: disabled [ 300.393169][ T8594] Rebooting in 86400 seconds..