last executing test programs: 15.479031589s ago: executing program 2 (id=437): r0 = socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, &(0x7f0000003480)={0x0, 0x0, 0x4, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000), 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0], 0x0, 0x34}, 0x28) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, 0x0, 0x4004815) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c) unshare(0x40400) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0xfff, 0xfffffffffffffffc, 0x0, 0xea0a}, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67d6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a717a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70a00000040fad95667e006dcdf63951f215ce3bb14feb9f542585200ce4006f3e5", 0xd9}], 0x1}, 0x4000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000002140)='/proc/asound/card1/oss_mixer\x00', 0x600000, 0x0) unshare(0x4c060d00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x8884) r6 = syz_open_dev$vbi(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000200)={0x0, 0x8000001, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x8000, '\x00', @p_u8=&(0x7f0000000100)=0x3}}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002180)='./file0\x00', 0x8) bind$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) eventfd(0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) 13.900396232s ago: executing program 2 (id=441): getpid() socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000bf85f34018", @ANYRES16=0x0, @ANYBLOB="200028bd7000fddbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e000300"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) sendmsg$AUDIT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, r0, 0xe, 0x9, 0x6, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x412240, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 13.868786502s ago: executing program 4 (id=442): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f00000005c0)=@tcp6}, 0x20) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x33e}, 0x1c) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f00000004c0)={[0x0, &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d00", @ANYRES32=r7, @ANYBLOB, @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'dummy0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80d1}, 0x30008000) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/sync_on_suspend', 0x100102, 0x50) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r10, 0xc00464c9, &(0x7f00000001c0)) 12.331444633s ago: executing program 1 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xf) r3 = dup(r2) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r4, &(0x7f0000001600)='./file0\x00', 0x200, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x3, 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000240), 0x3, 0x10000) r5 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0x6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000"], 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r9) socket$unix(0x1, 0x1, 0x0) 11.223515976s ago: executing program 1 (id=446): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000180)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) 11.148484142s ago: executing program 2 (id=447): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(0xffffffffffffffff, 0x1000000, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60e400ff00403a00fe800000000000000000004000000027fe059078020000006f000000000000000000000000000001fe8000000000000000000000000000372900040001300200f1a96e3d0e3a60"], 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x3, 0x4ea, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, &(0x7f0000000040), &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x562) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES8=r5], 0x20}}, 0x8000) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() 10.987313463s ago: executing program 4 (id=448): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000cc9000/0x4000)=nil, 0x4000, 0x1000002, 0x20010, r0, 0x200000) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x5) r4 = dup(r3) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x50060}, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8926, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{}, 0x3}}, 0x10) socket$phonet(0x23, 0x2, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x5}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto, @fwd={0x8}]}}, 0x0, 0x5e, 0x0, 0x1, 0x7}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r6, 0x25, 0x4, @void}, 0x10) 10.523468978s ago: executing program 3 (id=449): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4078, 0xfee}], 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a030000000000000000000300000009000b0073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c0001"], 0xcc}}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000380)="361d362ff382c53fcbd314acbb49", 0x0, 0xe5, 0x0, 0x0, 0x90, 0x0, &(0x7f00000006c0)="544b78ffba069bfc81d3a56c7a81fba3f73d584ed48af4bb69181ea006cd5348a373788b2d3ef606e965a378186bbbf149bda0b74794906fb1dfa6c04892fa2bbeaea64af4f752bf12e53812333e2a5d69752945cf69664f7ab7659768427d6c24b9b5fbb8482d7f9209c7c1653e83727af2b3bf4d2b9bc9e42a91b81ad30a80a978e32fd51a5a7edf9dc9dc6ab9b477"}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 9.685458332s ago: executing program 0 (id=450): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x101200, 0x0) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000340), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000640)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) 9.307316414s ago: executing program 3 (id=451): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc657}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) write$cgroup_devices(r6, 0x0, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) 8.080774889s ago: executing program 3 (id=452): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x8, 0x0, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb60}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x404a815) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000000480)="17000000020001000003be8c5e687a8a6a003c00020100ecff3f0000000300dc290001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb2e2f8144243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c9000000000100000000000080c457681f009cee79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085dbda1348fe947f1da062a00"/184, 0xb8) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a0103000000000000000001000000140004800800024000000000080001400000000509ed020073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c00014000000400000000"], 0x92fc}, 0x1, 0x0, 0x0, 0x40}, 0x40c5) 8.001571471s ago: executing program 1 (id=453): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000300)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x129100, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() write$P9_RWALK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x30) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @rand_addr=0x64010102}}}}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r7, &(0x7f0000000f00)=""/4104, 0x1008) 7.96530906s ago: executing program 0 (id=454): r0 = socket$inet6(0xa, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) socket(0xf, 0x1, 0xfffffffe) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x6, 0x200000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x3, 0xf0, 0x8, 0x36, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x7800, 0xd758}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r4, 0x2f, 0x4, 0x4, 0xaa, 0x51, @local, @empty, 0x0, 0x80, 0x6, 0x9}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) read(r5, &(0x7f0000000080)=""/186, 0xba) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) rseq(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) poll(0x0, 0x0, 0x6) 6.871552857s ago: executing program 1 (id=455): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = epoll_create1(0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2982, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x10b, &(0x7f0000000240)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r9, 0x107, 0x16, &(0x7f0000000000)=0x5, 0x4) setsockopt$packet_int(r8, 0x107, 0x16, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r10, 0x5420, 0x0) ioctl$TIOCSSOFTCAR(r10, 0x541a, &(0x7f0000000080)=0x3) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc600c7, 0x0) ioctl$SNDCTL_TMR_SELECT(r11, 0x40045408) io_uring_enter(r5, 0x7277, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x10000000}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 6.798788411s ago: executing program 4 (id=456): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000380)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) chdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x3b, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\t\x00\x00'], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYBLOB="9b00000000000000070000faffffff0000000000", @ANYRES32, @ANYRES16=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @free_buffer], 0x0, 0x0, &(0x7f0000000140)}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r5, &(0x7f0000000380), &(0x7f0000000400)=""/236}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000040)={[{0x2, 0x1, 0x81, 0x7f, 0x6, 0x7, 0x1, 0x7f, 0x7, 0x5, 0x7f, 0x92, 0x80000}, {0x8ab, 0x0, 0x1, 0x40, 0x7, 0x9, 0x8, 0xfa, 0x0, 0x6d, 0x6, 0x9, 0xa32}, {0x5, 0x6, 0x78, 0xa1, 0xd, 0x8, 0x6, 0x1, 0x1, 0x5, 0x1, 0xff, 0x7}], 0x7}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.645361956s ago: executing program 0 (id=457): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) r1 = syz_open_dev$vcsn(0x0, 0x1, 0x12000) mkdir(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xd6741, 0x2fb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) unshare(0x2040400) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) getresuid(0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x80}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip_vti0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x58840}, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x40200) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0a00fe005e8b9da7cba69d917de2ce3e0e2d000000bda10600000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000ca0000275b000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x3) epoll_create1(0x0) r4 = io_uring_setup(0x669, &(0x7f00000002c0)={0x0, 0x10000000, 0x20}) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) 6.118702506s ago: executing program 2 (id=458): socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xe) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x20082, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x7, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000004c0)={r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0xc000) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f0000000300)={0x0, @ethernet={0x306, @random="fc06839d09fe"}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x1, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='bridge_slave_1\x00', 0x6, 0x7, 0x9}) 6.046157093s ago: executing program 4 (id=459): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="3b1c1b2098f0bc154c9778a9229a", 0xe) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = fanotify_init(0xf00, 0x1000) fanotify_mark(r8, 0x105, 0x5000003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 5.701731693s ago: executing program 0 (id=460): socket$tipc(0x1e, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r4) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r7 = accept(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r7, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) socket$kcm(0x2, 0xa, 0x2) flock(0xffffffffffffffff, 0x1780f9c373410dea) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r8, 0x104, 0x6, 0x0, 0x0) 4.116349914s ago: executing program 1 (id=461): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xe8}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x10001, 0x0, 0x0, 0x4000000, 0x7, 0x4}, {0x8, 0x5, 0x0, 0xfffffffc, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x10, 0x6, 0x0, 0x0, 0xfffffff9}, {0x0, 0x7, 0x1, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x800, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xafc}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9}, {0x0, 0x2000, 0x0, 0x0, 0x10001}, {}, {0x0, 0x401, 0x0, 0x0, 0xffffffff}, {0x0, 0x1000, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0xffffff1d, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0xff}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5, 0x1}, {0x5}, {0x1, 0x8, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x4, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0xfffffffd, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x203b}, {0x9, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x100}, {0x0, 0x0, 0x80}, {0x0, 0xfffefffd, 0x100000, 0xffffffff}, {0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x6}, {0x5, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xad}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {0x0, 0x0, 0x1fd}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb3}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xfdffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x100000, 0x4000004, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x7, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x40, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x0, 0x2}, {}, {0x0, 0xfffffffd, 0x0, 0xffffffff}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x10000, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x4000000, 0x0, 0x8}, {0x2, 0x0, 0x20000000, 0x0, 0x1}, {0x0, 0xfffffffc, 0x0, 0x2}, {}, {0x0, 0x4, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x9, 0x101}, {0xfffffffb, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x3, 0x80, 0xfffffffc}, {0x10000000, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3, 0x0, 0x0, 0x4}, {0x10, 0x0, 0xfffffffe, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x1, 0x6}, {0x5}, {0x0, 0x0, 0x0, 0x1000000}, {0x0, 0xf}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x2}, {0x7fff, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x80, 0xd70, 0x0, 0xfffffffc}, {0x0, 0x8000, 0x0, 0xfffffff2}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {}, {}, {0x5, 0x0, 0x0, 0x9}], [{}, {}, {0x0, 0x1}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2, 0x1}, {0x2, 0x1}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {0x4}, {0x7}, {0x2}, {}, {}, {}, {}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 3.816726511s ago: executing program 4 (id=462): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SET_THP_DISABLE(0x41, 0x1) prctl$PR_SET_THP_DISABLE(0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d1) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x24000802}, 0x4008804) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x20440, 0x0) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0xe24) fstat(0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) signalfd(r5, &(0x7f00000000c0), 0x8) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r8 = memfd_secret(0x80000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r8, 0x0) r9 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r9, &(0x7f00000012c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyNd,\x97\xea\xb4(\x97x\x98#\xca\xf0N%X\x01.\xc4M\x9ajWT\xf2\xf7\xbb8\xb2\xcc<]\x06\b\xc4\xd5\xde\xf4\xb5\xdd\x7f\xf2\xf8S}q\xe7\xcdZ\xee\xe5\x9f\x19\x11S\x9fVzv\xf7\x04\xe8\xeb\x10z\xd7qy\x17r\x1bV\xb1\xd8\xdb\x061h\xc6\xfb\x84\b\x1a\xd6\x10\xdd\x95$$\xa1\x91=\xa67\xb6\xd8\x12\x88c\xa1\xbe[\xe4\xe0\xc7G\xca\xe3U\xde\xa9\xafU\x15\x93\xed},\xcaE\xba;\xc7yk\xaf8\xa4*Je\x13J\x88\x8bR2\xc0LV\xc1P\\\xe3\xec\x954\x8e>\xa4\xd80\x97\x963f\xdd\x8e\xc5\xdf\x9a.F\x06\x82\xcfg\xe8\xb6V\x92\x944K9F#\xdc\xf4\"', 0x3a, './file0', 0x3a, [0x4f, 0x50, 0x4f, 0x50, 0x4f, 0x46]}, 0x2b6) recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) 3.475960959s ago: executing program 0 (id=463): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000180)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) 3.326990372s ago: executing program 2 (id=464): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000180)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) 3.220193466s ago: executing program 1 (id=465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r5, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000040)) getdents64(r7, &(0x7f0000001f00)=""/4093, 0xffd) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 2.902882422s ago: executing program 3 (id=466): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$tipc(0x1e, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) r2 = userfaultfd(0x801) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/zoneinfo\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1a) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000000c0)=@hopopts={0x5c}, 0x8) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) 1.211452915s ago: executing program 3 (id=467): syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xfffffffc, 0x3, 0x3, 0x0, 0x6}) r2 = socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r6, &(0x7f00000002c0)=""/75, 0x4b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000010c0)="5c00000014006b00c84e21000af32c6e020675f8002500024001080000000000000024eab582949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9081139343d0189594c952e805fffa1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f00000001c0)=0x1) close_range(r7, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) 463.072668ms ago: executing program 3 (id=468): openat$audio1(0xffffffffffffff9c, 0x0, 0x10d202, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000980)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xe9a282f1ec12d0b1, 0x3, 0x0, 0x9, 0x0, 0xf3f, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000128000/0x3000)=nil) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x200000000004, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="d8fdffff", @ANYRES16=0x0, @ANYBLOB="0800220a3089ffdbdf252e0000000a00d26b00000000000000000a003403020202020200005c8d9cbd05978d07a53820dccdd6504008"], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f00000000c0)={r6}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 333.036972ms ago: executing program 0 (id=469): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000380)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) chdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x3b, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\t\x00\x00'], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYBLOB="9b00000000000000070000faffffff0000000000", @ANYRES32, @ANYRES16=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @free_buffer], 0x0, 0x0, &(0x7f0000000140)}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r5, &(0x7f0000000380), &(0x7f0000000400)=""/236}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000040)={[{0x2, 0x1, 0x81, 0x7f, 0x6, 0x7, 0x1, 0x7f, 0x7, 0x5, 0x7f, 0x92, 0x80000}, {0x8ab, 0x0, 0x1, 0x40, 0x7, 0x9, 0x8, 0xfa, 0x0, 0x6d, 0x6, 0x9, 0xa32}, {0x5, 0x6, 0x78, 0xa1, 0xd, 0x8, 0x6, 0x1, 0x1, 0x5, 0x1, 0xff, 0x7}], 0x7}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.288587ms ago: executing program 2 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r1 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x11, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {0x0}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x10, r4, 0xcf032000) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 0s ago: executing program 4 (id=471): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) accept4(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r3, &(0x7f0000000200)='net/llc/core\x00') r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000081000000000000000400063010c200000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000010280)={0x0, 0x9, 0x0, 0x5}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='nfs4\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) kernel console output (not intermixed with test programs): denied { write } for pid=6519 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 122.702525][ T30] audit: type=1400 audit(1759626398.087:367): avc: denied { firmware_load } for pid=6519 comm="syz.3.91" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 122.838568][ T6526] syz.3.91 (6526) used greatest stack depth: 19720 bytes left [ 123.084829][ T6550] input: syz1 as /devices/virtual/input/input7 [ 123.379977][ T6554] input: syz1 as /devices/virtual/input/input8 [ 125.208889][ T6568] debugfs: 'ttyS3' already exists in 'caif_serial' [ 125.976049][ T30] audit: type=1400 audit(1759626401.557:368): avc: denied { read write } for pid=6582 comm="syz.0.102" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.222599][ T9] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 126.235482][ T30] audit: type=1400 audit(1759626401.557:369): avc: denied { open } for pid=6582 comm="syz.0.102" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.397886][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 126.579199][ T9] usb 1-1: config 0 has no interface number 0 [ 126.585649][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 126.617077][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 126.632276][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 126.852019][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 126.899043][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 126.930942][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.032174][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 127.063790][ T30] audit: type=1400 audit(1759626402.637:370): avc: denied { listen } for pid=6593 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.134314][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.221660][ T9] usb 1-1: config 0 descriptor?? [ 127.234009][ T6583] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.241360][ T6583] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.251576][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 128.705147][ T6609] lo speed is unknown, defaulting to 1000 [ 128.711227][ T6609] lo speed is unknown, defaulting to 1000 [ 128.718835][ T6609] lo speed is unknown, defaulting to 1000 [ 128.728802][ T6609] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 128.742691][ T6609] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 128.831177][ T6609] lo speed is unknown, defaulting to 1000 [ 128.838082][ T6609] lo speed is unknown, defaulting to 1000 [ 128.845439][ T6609] lo speed is unknown, defaulting to 1000 [ 128.852209][ T6609] lo speed is unknown, defaulting to 1000 [ 128.858907][ T6609] lo speed is unknown, defaulting to 1000 [ 129.544211][ T30] audit: type=1400 audit(1759626405.117:371): avc: denied { read } for pid=6611 comm="syz.3.105" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 129.567324][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.700170][ T30] audit: type=1400 audit(1759626405.117:372): avc: denied { open } for pid=6611 comm="syz.3.105" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 129.799547][ T5944] usb 1-1: USB disconnect, device number 6 [ 129.874697][ T5944] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 130.236030][ T30] audit: type=1400 audit(1759626405.497:373): avc: denied { append } for pid=6624 comm="syz.2.109" name="cec0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.469000][ T30] audit: type=1400 audit(1759626406.037:374): avc: denied { open } for pid=6629 comm="syz.0.108" path="/dev/ptyq5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 130.630853][ T30] audit: type=1400 audit(1759626406.037:375): avc: denied { ioctl } for pid=6629 comm="syz.0.108" path="/dev/ptyq5" dev="devtmpfs" ino=123 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 130.655699][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.739580][ T30] audit: type=1400 audit(1759626406.047:376): avc: denied { mounton } for pid=6629 comm="syz.0.108" path="/proc/116/cgroup" dev="proc" ino=10198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 130.840775][ T30] audit: type=1400 audit(1759626406.207:377): avc: denied { ioctl } for pid=6624 comm="syz.2.109" path="socket:[11026]" dev="sockfs" ino=11026 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.865498][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.366482][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.375133][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.724618][ T6668] lo speed is unknown, defaulting to 1000 [ 133.078500][ T30] audit: type=1400 audit(1759626408.107:378): avc: denied { sqpoll } for pid=6647 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 133.332199][ T6628] capability: warning: `syz.1.107' uses deprecated v2 capabilities in a way that may be insecure [ 133.362124][ T30] audit: type=1400 audit(1759626408.207:379): avc: denied { ioctl } for pid=6663 comm="syz.0.113" path="socket:[11070]" dev="sockfs" ino=11070 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.387056][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.795572][ T6665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.835096][ T6665] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.902643][ T6665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.433586][ T30] audit: type=1400 audit(1759626410.017:380): avc: denied { append } for pid=6674 comm="syz.0.124" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 134.455895][ T6682] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 134.466660][ T6682] cramfs: wrong magic [ 134.595368][ T30] audit: type=1400 audit(1759626410.017:381): avc: denied { ioctl } for pid=6674 comm="syz.0.124" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 134.646776][ T30] audit: type=1400 audit(1759626410.057:382): avc: denied { mount } for pid=6674 comm="syz.0.124" name="/" dev="autofs" ino=11146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 134.695204][ T6685] pim6reg: entered allmulticast mode [ 134.850489][ T30] audit: type=1400 audit(1759626410.417:383): avc: denied { write } for pid=6678 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 135.469508][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 135.489749][ T6692] bridge_slave_1: left promiscuous mode [ 135.501987][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.845293][ T6692] bridge_slave_0: left allmulticast mode [ 135.856521][ T30] audit: type=1400 audit(1759626411.437:384): avc: denied { read write } for pid=6696 comm="syz.4.117" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 136.029174][ T6701] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 136.040528][ T6701] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 136.789256][ T30] audit: type=1400 audit(1759626411.437:385): avc: denied { open } for pid=6696 comm="syz.4.117" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 136.992710][ T30] audit: type=1400 audit(1759626411.597:386): avc: denied { mount } for pid=6698 comm="syz.3.118" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 137.082481][ T6692] bridge_slave_0: left promiscuous mode [ 137.151242][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.191077][ T30] audit: type=1400 audit(1759626412.677:387): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 137.686864][ T6702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.881081][ T6717] netlink: 'syz.4.122': attribute type 1 has an invalid length. [ 137.892079][ T6717] netlink: 148 bytes leftover after parsing attributes in process `syz.4.122'. [ 138.266804][ T9] lo speed is unknown, defaulting to 1000 [ 138.282186][ T6717] syz.4.122 (6717): drop_caches: 2 [ 138.722002][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 138.722017][ T30] audit: type=1400 audit(1759626414.297:392): avc: denied { map } for pid=6727 comm="syz.2.125" path="socket:[11236]" dev="sockfs" ino=11236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.839875][ T6731] No control pipe specified [ 139.065340][ T30] audit: type=1400 audit(1759626414.307:393): avc: denied { append } for pid=6729 comm="syz.1.126" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 139.100760][ T30] audit: type=1400 audit(1759626414.337:394): avc: denied { read accept } for pid=6727 comm="syz.2.125" path="socket:[11236]" dev="sockfs" ino=11236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.153730][ T30] audit: type=1400 audit(1759626415.687:395): avc: denied { read write } for pid=6736 comm="syz.0.127" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 140.525792][ T30] audit: type=1400 audit(1759626415.687:396): avc: denied { open } for pid=6736 comm="syz.0.127" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 141.628574][ T30] audit: type=1400 audit(1759626417.147:397): avc: denied { execute } for pid=6747 comm="syz.1.130" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.750046][ T6763] netlink: 72 bytes leftover after parsing attributes in process `syz.4.132'. [ 142.715755][ T6767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.133'. [ 142.731240][ T6767] netlink: 'syz.2.133': attribute type 16 has an invalid length. [ 142.739147][ T6767] netlink: 'syz.2.133': attribute type 17 has an invalid length. [ 142.747011][ T6767] netlink: 'syz.2.133': attribute type 27 has an invalid length. [ 143.579413][ T6778] fuse: Bad value for 'fd' [ 143.660099][ T6776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.135'. [ 143.777858][ T30] audit: type=1400 audit(1759626419.357:398): avc: denied { create } for pid=6783 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.436698][ T30] audit: type=1400 audit(1759626419.407:399): avc: denied { setopt } for pid=6783 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.771240][ T6787] pim6reg: entered allmulticast mode [ 145.553560][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.640175][ T6796] usb usb8: usbfs: process 6796 (syz.1.140) did not claim interface 0 before use [ 146.088826][ T30] audit: type=1400 audit(1759626421.207:400): avc: denied { bind } for pid=6791 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.142349][ T24] usb 3-1: device descriptor read/64, error -71 [ 146.462136][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.725284][ T24] usb 3-1: device descriptor read/64, error -71 [ 146.807782][ T6785] pim6reg: left allmulticast mode [ 146.877685][ T6807] warning: `syz.0.143' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 146.935410][ T6807] process 'syz.0.143' launched './file0' with NULL argv: empty string added [ 147.018044][ T30] audit: type=1400 audit(1759626422.517:401): avc: denied { execute } for pid=6802 comm="syz.0.143" name="file0" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.122431][ T24] usb usb3-port1: attempt power cycle [ 147.225503][ T6813] syz.1.142 (6813): drop_caches: 2 [ 147.237861][ T6813] syz.1.142 (6813): drop_caches: 2 [ 147.291508][ T30] audit: type=1400 audit(1759626422.527:402): avc: denied { execute_no_trans } for pid=6802 comm="syz.0.143" path="/29/file0" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.520636][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 147.714322][ T6823] netlink: 'syz.3.145': attribute type 142 has an invalid length. [ 147.722382][ T6823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.145'. [ 147.933451][ T30] audit: type=1400 audit(1759626422.867:403): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 148.172892][ T30] audit: type=1400 audit(1759626423.277:404): avc: denied { setopt } for pid=6816 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.371697][ T30] audit: type=1400 audit(1759626423.317:405): avc: denied { connect } for pid=6808 comm="syz.2.144" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.881401][ T6830] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 148.929999][ T30] audit: type=1400 audit(1759626424.487:406): avc: denied { remount } for pid=6828 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.881708][ T30] audit: type=1800 audit(1759626425.457:407): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.150" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 150.056417][ T30] audit: type=1326 audit(1759626425.537:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 150.295753][ T30] audit: type=1326 audit(1759626425.537:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 150.327099][ T30] audit: type=1326 audit(1759626425.537:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 150.867777][ T30] audit: type=1326 audit(1759626425.537:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 150.984327][ T30] audit: type=1326 audit(1759626425.537:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 151.011441][ T30] audit: type=1326 audit(1759626425.537:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 151.036039][ T30] audit: type=1326 audit(1759626425.537:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 151.612033][ T30] audit: type=1326 audit(1759626425.537:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 153.974384][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 154.398541][ T30] audit: type=1400 audit(1759626429.527:419): avc: denied { setopt } for pid=6880 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.783512][ T6891] lo speed is unknown, defaulting to 1000 [ 155.399667][ T6898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.159'. [ 155.419231][ T6898] netlink: 'syz.3.159': attribute type 16 has an invalid length. [ 155.427128][ T6898] netlink: 'syz.3.159': attribute type 17 has an invalid length. [ 155.435122][ T6898] netlink: 'syz.3.159': attribute type 27 has an invalid length. [ 156.215908][ T6910] lo speed is unknown, defaulting to 1000 [ 156.758838][ T30] audit: type=1400 audit(1759626432.327:420): avc: denied { create } for pid=6907 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 156.779417][ T6914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.814375][ T30] audit: type=1400 audit(1759626432.367:421): avc: denied { read write } for pid=6904 comm="syz.0.160" name="fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 157.107573][ T6920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.194656][ T30] audit: type=1400 audit(1759626432.367:422): avc: denied { open } for pid=6904 comm="syz.0.160" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 157.236568][ T30] audit: type=1400 audit(1759626432.367:423): avc: denied { ioctl } for pid=6904 comm="syz.0.160" path="/dev/fb0" dev="devtmpfs" ino=628 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 158.069257][ T30] audit: type=1400 audit(1759626433.647:424): avc: denied { remount } for pid=6925 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 158.262069][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.269591][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.342507][ T6936] bridge0: entered allmulticast mode [ 159.240583][ T6959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.532628][ T6955] netlink: 'syz.1.167': attribute type 10 has an invalid length. [ 159.546811][ T6955] team0: Port device geneve1 added [ 159.744971][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 161.106253][ T6984] block device autoloading is deprecated and will be removed. [ 161.252070][ T30] audit: type=1400 audit(1759626436.827:425): avc: denied { ioctl } for pid=6986 comm="syz.4.172" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 161.448365][ T6983] netlink: 14906 bytes leftover after parsing attributes in process `syz.2.174'. [ 161.682041][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 161.766521][ T6994] wg1: entered promiscuous mode [ 161.771503][ T6994] wg1: entered allmulticast mode [ 162.326979][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.346038][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 162.371417][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.390225][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.583102][ T7002] debugfs: '!' already exists in 'ieee80211' [ 162.724962][ T30] audit: type=1326 audit(1759626438.157:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 162.808068][ T7002] loop6: detected capacity change from 0 to 63 [ 162.842440][ T30] audit: type=1326 audit(1759626438.157:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 162.879652][ T6060] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.929541][ T6991] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.940219][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.969102][ T6060] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.976785][ T30] audit: type=1326 audit(1759626438.157:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 163.017605][ T6060] Buffer I/O error on dev loop6, logical block 0, async page read [ 163.152629][ T6991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.163009][ T6991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.256935][ T30] audit: type=1326 audit(1759626438.157:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 163.286932][ T6060] Buffer I/O error on dev loop6, logical block 0, async page read [ 163.291376][ T30] audit: type=1326 audit(1759626438.157:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 163.312460][ T6060] Buffer I/O error on dev loop6, logical block 0, async page read [ 163.318189][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.467890][ T6991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.594852][ T30] audit: type=1326 audit(1759626438.157:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 163.618088][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.672135][ T6991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.904114][ T30] audit: type=1326 audit(1759626438.157:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 165.172970][ T7017] syzkaller0: entered promiscuous mode [ 165.178499][ T7017] syzkaller0: entered allmulticast mode [ 165.334656][ T7016] netlink: 'syz.4.178': attribute type 33 has an invalid length. [ 165.753077][ T30] audit: type=1326 audit(1759626438.187:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 166.137225][ T30] audit: type=1326 audit(1759626438.217:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 166.339693][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 166.339747][ T30] audit: type=1400 audit(1759626441.907:475): avc: denied { name_bind } for pid=7020 comm="syz.0.179" src=24105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 167.730228][ T3089] usb 2-1: USB disconnect, device number 3 [ 167.864497][ T30] audit: type=1400 audit(1759626443.447:476): avc: denied { mount } for pid=7022 comm="syz.3.180" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 168.108878][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 168.441993][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 169.022889][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 169.029271][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 169.040984][ T9] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 169.054320][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 169.062597][ T9] usb 3-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 169.075203][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.093930][ T9] usb 3-1: config 0 descriptor?? [ 170.814332][ T7068] exFAT-fs (loop1): unable to read boot sector [ 170.820692][ T7068] exFAT-fs (loop1): failed to read boot sector [ 170.827040][ T7068] exFAT-fs (loop1): failed to recognize exfat type [ 171.102109][ T30] audit: type=1400 audit(1759626446.077:477): avc: denied { append } for pid=7056 comm="syz.0.185" name="usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 171.337995][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 171.347985][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 171.519681][ T9] usb 3-1: USB disconnect, device number 8 [ 172.362447][ T30] audit: type=1400 audit(1759626447.877:478): avc: denied { mount } for pid=7076 comm="syz.2.190" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 172.775207][ T30] audit: type=1400 audit(1759626448.357:479): avc: denied { write } for pid=7081 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.940369][ T7094] openvswitch: netlink: EtherType a is less than min 600 [ 173.114752][ T7085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.247253][ T30] audit: type=1400 audit(1759626448.357:480): avc: denied { nlmsg_write } for pid=7081 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.304495][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.311827][ T7090] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.360705][ T7090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.373971][ T7090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.434116][ T9] lo speed is unknown, defaulting to 1000 [ 173.454388][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.464332][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.521807][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.566570][ T9] syz0: Port: 1 Link DOWN [ 173.673487][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.972004][ T5936] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 175.083319][ T7109] sctp: [Deprecated]: syz.3.197 (pid 7109) Use of int in maxseg socket option. [ 175.083319][ T7109] Use struct sctp_assoc_value instead [ 175.163898][ T5936] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.183617][ T5936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.201533][ T5936] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.211016][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.244491][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.195'. [ 175.301611][ T7116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.195'. [ 175.618687][ T5936] usb 5-1: Product: syz [ 175.910625][ T5936] usb 5-1: Manufacturer: syz [ 175.922376][ T5936] usb 5-1: SerialNumber: syz [ 176.184678][ T7113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.431719][ T42] usb 5-1: USB disconnect, device number 3 [ 178.438285][ T30] audit: type=1400 audit(1759626453.977:481): avc: denied { ioctl } for pid=7128 comm="syz.3.200" path="mnt:[4026532795]" dev="nsfs" ino=4026532795 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 178.605692][ T30] audit: type=1400 audit(1759626454.187:482): avc: denied { block_suspend } for pid=7133 comm="syz.0.201" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.912989][ T30] audit: type=1400 audit(1759626454.467:483): avc: denied { mount } for pid=7139 comm="syz.4.202" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 178.968966][ T7146] 9pnet_fd: Insufficient options for proto=fd [ 179.177031][ T30] audit: type=1400 audit(1759626454.547:484): avc: denied { write } for pid=7141 comm="syz.2.203" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 179.799936][ T7151] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 180.157448][ T30] audit: type=1400 audit(1759626455.377:485): avc: denied { mounton } for pid=7148 comm="syz.1.204" path="/45/file0" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 180.837236][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 181.914311][ T30] audit: type=1400 audit(1759626457.497:486): avc: denied { watch watch_reads } for pid=7155 comm="syz.1.205" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 181.995637][ T7157] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 182.050345][ T7157] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 182.058826][ T30] audit: type=1400 audit(1759626457.627:487): avc: denied { firmware_load } for pid=7155 comm="syz.1.205" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 182.183044][ T30] audit: type=1400 audit(1759626457.767:488): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 182.859078][ T7184] syz.1.209 (7184): drop_caches: 2 [ 182.899080][ T7184] syz.1.209 (7184): drop_caches: 2 [ 183.810516][ T30] audit: type=1400 audit(1759626459.347:489): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 185.023939][ T7188] geneve2: entered promiscuous mode [ 185.029336][ T7188] geneve2: entered allmulticast mode [ 185.645578][ T7209] exFAT-fs (loop0): unable to read boot sector [ 185.651793][ T7209] exFAT-fs (loop0): failed to read boot sector [ 185.658060][ T7209] exFAT-fs (loop0): failed to recognize exfat type [ 186.067566][ T30] audit: type=1400 audit(1759626461.647:490): avc: denied { create } for pid=7206 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 186.282282][ T7211] lo speed is unknown, defaulting to 1000 [ 186.411713][ T7217] exFAT-fs (loop4): unable to read boot sector [ 186.417999][ T7217] exFAT-fs (loop4): failed to read boot sector [ 186.424236][ T7217] exFAT-fs (loop4): failed to recognize exfat type [ 187.753163][ T30] audit: type=1326 audit(1759626462.707:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 188.112013][ T30] audit: type=1326 audit(1759626462.707:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 188.330487][ T30] audit: type=1326 audit(1759626463.437:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 188.353973][ T30] audit: type=1400 audit(1759626463.437:494): avc: denied { write } for pid=7221 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 188.632928][ T7237] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 188.642147][ T7237] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 188.703215][ T30] audit: type=1326 audit(1759626463.437:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 188.726970][ T30] audit: type=1326 audit(1759626463.437:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 188.760207][ T30] audit: type=1326 audit(1759626463.437:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 188.787263][ T30] audit: type=1326 audit(1759626463.437:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 189.187635][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 189.187646][ T30] audit: type=1400 audit(1759626464.767:550): avc: denied { create } for pid=7240 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 189.615972][ T30] audit: type=1400 audit(1759626465.107:551): avc: denied { create } for pid=7247 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.104305][ T30] audit: type=1326 audit(1759626465.307:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 190.224872][ T30] audit: type=1326 audit(1759626465.307:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 190.572033][ T30] audit: type=1326 audit(1759626465.317:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 190.602113][ T30] audit: type=1326 audit(1759626465.317:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 190.632278][ T30] audit: type=1326 audit(1759626465.317:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 190.663541][ T30] audit: type=1326 audit(1759626465.317:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 190.741532][ T30] audit: type=1326 audit(1759626465.327:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 191.324540][ T30] audit: type=1326 audit(1759626465.327:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7248 comm="syz.4.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 192.044183][ T7276] fuse: Unknown parameter '0xffffffffffffffff' [ 193.798885][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.805288][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.995408][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 194.995424][ T30] audit: type=1400 audit(1759626470.557:598): avc: denied { add_name } for pid=7285 comm="syz.4.231" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.116084][ T30] audit: type=1400 audit(1759626470.557:599): avc: denied { create } for pid=7285 comm="syz.4.231" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 195.179858][ T30] audit: type=1400 audit(1759626470.567:600): avc: denied { associate } for pid=7285 comm="syz.4.231" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 195.323827][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.233'. [ 195.383383][ T7307] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 195.402066][ T7307] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 196.652461][ T30] audit: type=1400 audit(1759626472.057:601): avc: denied { watch } for pid=7315 comm="syz.3.237" path="/45/bus/file1" dev="overlay" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 196.779499][ T30] audit: type=1400 audit(1759626472.057:602): avc: denied { watch_sb } for pid=7315 comm="syz.3.237" path="/45/bus/file1" dev="overlay" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 196.883488][ T7321] Mount JFS Failure: -22 [ 196.892150][ T7321] jfs_mount failed w/return code = -22 [ 197.042095][ T30] audit: type=1400 audit(1759626472.087:603): avc: denied { create } for pid=7315 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 197.163474][ T30] audit: type=1400 audit(1759626472.147:604): avc: denied { map } for pid=7315 comm="syz.3.237" path="socket:[14043]" dev="sockfs" ino=14043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 197.205192][ T7324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.239'. [ 197.783741][ T7331] lo: entered promiscuous mode [ 197.788575][ T7331] lo: entered allmulticast mode [ 197.795772][ T7331] tunl0: entered promiscuous mode [ 197.800827][ T7331] tunl0: entered allmulticast mode [ 197.808198][ T7331] gre0: entered promiscuous mode [ 197.813228][ T7331] gre0: entered allmulticast mode [ 197.820678][ T7331] gretap0: entered promiscuous mode [ 197.826341][ T7331] gretap0: entered allmulticast mode [ 197.833576][ T7331] erspan0: entered promiscuous mode [ 197.838819][ T7331] erspan0: entered allmulticast mode [ 197.846240][ T7331] ip_vti0: entered promiscuous mode [ 197.851474][ T7331] ip_vti0: entered allmulticast mode [ 197.859022][ T7331] ip6_vti0: entered promiscuous mode [ 197.864415][ T7331] ip6_vti0: entered allmulticast mode [ 197.871699][ T7331] sit0: entered promiscuous mode [ 197.876743][ T7331] sit0: entered allmulticast mode [ 197.882471][ T7331] ip6tnl0: entered promiscuous mode [ 197.887676][ T7331] ip6tnl0: entered allmulticast mode [ 197.893692][ T7331] ip6gre0: entered promiscuous mode [ 197.898894][ T7331] ip6gre0: entered allmulticast mode [ 197.904915][ T7331] syz_tun: entered promiscuous mode [ 197.910114][ T7331] syz_tun: entered allmulticast mode [ 197.915810][ T7331] ip6gretap0: entered promiscuous mode [ 197.921248][ T7331] ip6gretap0: entered allmulticast mode [ 197.927160][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.934222][ T7331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.941583][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.948647][ T7331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.956228][ T7331] bridge0: entered promiscuous mode [ 197.962207][ T7331] vcan0: entered promiscuous mode [ 197.967225][ T7331] vcan0: entered allmulticast mode [ 197.972698][ T7331] bond0: entered promiscuous mode [ 197.977699][ T7331] bond_slave_0: entered promiscuous mode [ 197.983708][ T7331] bond_slave_1: entered promiscuous mode [ 197.989417][ T7331] bond0: entered allmulticast mode [ 197.994516][ T7331] bond_slave_0: entered allmulticast mode [ 198.000205][ T7331] bond_slave_1: entered allmulticast mode [ 198.006470][ T7331] team0: entered promiscuous mode [ 198.011484][ T7331] team_slave_0: entered promiscuous mode [ 198.017228][ T7331] team_slave_1: entered promiscuous mode [ 198.023021][ T7331] geneve1: entered promiscuous mode [ 198.028279][ T7331] team0: entered allmulticast mode [ 198.033639][ T7331] team_slave_0: entered allmulticast mode [ 198.039511][ T7331] team_slave_1: entered allmulticast mode [ 198.045240][ T7331] geneve1: entered allmulticast mode [ 198.051029][ T7331] dummy0: entered promiscuous mode [ 198.056308][ T7331] dummy0: entered allmulticast mode [ 198.061870][ T7331] nlmon0: entered promiscuous mode [ 198.066980][ T7331] nlmon0: entered allmulticast mode [ 198.082881][ T7330] comedi comedi3: comedi_config --init_data is deprecated [ 198.094339][ T30] audit: type=1400 audit(1759626473.347:605): avc: denied { bind } for pid=7326 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 198.120102][ T7331] caif0: entered promiscuous mode [ 198.125248][ T7331] caif0: entered allmulticast mode [ 198.130346][ T7331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.145862][ T30] audit: type=1400 audit(1759626473.347:606): avc: denied { write } for pid=7326 comm="syz.1.240" path="socket:[14739]" dev="sockfs" ino=14739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 198.589157][ T7333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.241'. [ 198.598826][ T7333] netlink: 'syz.1.241': attribute type 16 has an invalid length. [ 198.606552][ T7333] netlink: 'syz.1.241': attribute type 17 has an invalid length. [ 198.614276][ T7333] netlink: 'syz.1.241': attribute type 27 has an invalid length. [ 199.157395][ T7343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.392312][ T30] audit: type=1400 audit(1759626474.907:607): avc: denied { watch } for pid=7339 comm="syz.0.244" path="/50/file1" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 199.469690][ T7325] exFAT-fs (loop4): unable to read boot sector [ 199.475935][ T7325] exFAT-fs (loop4): failed to read boot sector [ 199.492735][ T7325] exFAT-fs (loop4): failed to recognize exfat type [ 200.375569][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.382710][ T7353] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.422857][ T7367] netlink: 120 bytes leftover after parsing attributes in process `syz.3.245'. [ 200.617811][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 200.617860][ T30] audit: type=1400 audit(1759626476.187:610): avc: denied { getopt } for pid=7356 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.124752][ T7353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.561694][ T5882] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 201.663185][ T7353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.792101][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 201.803489][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 201.812339][ T5882] usb 3-1: config 57 has an invalid interface number: 229 but max is 0 [ 201.821149][ T5882] usb 3-1: config 57 has no interface number 0 [ 201.836877][ T5882] usb 3-1: config 57 interface 229 has no altsetting 0 [ 201.849757][ T5882] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 201.859740][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.868396][ T5882] usb 3-1: Product: syz [ 201.875490][ T5882] usb 3-1: Manufacturer: syz [ 201.880158][ T5882] usb 3-1: SerialNumber: syz [ 201.905505][ T7378] vxcan1 speed is unknown, defaulting to 1000 [ 201.912678][ T7378] vxcan1 speed is unknown, defaulting to 1000 [ 201.919086][ T7378] vxcan1 speed is unknown, defaulting to 1000 [ 201.994227][ T7378] infiniband syz2: set active [ 201.998984][ T7378] infiniband syz2: added vxcan1 [ 202.008028][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 202.014533][ T5923] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.033893][ T5923] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.056956][ T7378] RDS/IB: syz2: added [ 202.095462][ T5923] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.104734][ T7378] vxcan1 speed is unknown, defaulting to 1000 [ 202.104739][ T5923] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.198788][ T7378] vxcan1 speed is unknown, defaulting to 1000 [ 202.281315][ T7378] vxcan1 speed is unknown, defaulting to 1000 [ 202.364297][ T7378] vxcan1 speed is unknown, defaulting to 1000 [ 202.445211][ T7378] vxcan1 speed is unknown, defaulting to 1000 [ 202.994020][ T30] audit: type=1400 audit(1759626478.527:611): avc: denied { unmount } for pid=7385 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 203.050602][ T5889] Process accounting resumed [ 204.273787][ T5882] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 204.299792][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 204.300130][ T5882] usb 3-1: USB disconnect, device number 9 [ 205.605129][ T7418] wg1: entered promiscuous mode [ 205.610012][ T7418] wg1: entered allmulticast mode [ 205.672979][ T7422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.256'. [ 205.692909][ T7422] netlink: 'syz.1.256': attribute type 16 has an invalid length. [ 205.700762][ T7422] netlink: 'syz.1.256': attribute type 17 has an invalid length. [ 205.708705][ T7422] netlink: 'syz.1.256': attribute type 27 has an invalid length. [ 208.009877][ T7444] lo speed is unknown, defaulting to 1000 [ 208.044479][ T7444] vxcan1 speed is unknown, defaulting to 1000 [ 208.096297][ T30] audit: type=1400 audit(1759626483.657:612): avc: denied { ioctl } for pid=7437 comm="syz.4.261" path="socket:[14202]" dev="sockfs" ino=14202 ioctlcmd=0x61d0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 208.614987][ T30] audit: type=1800 audit(1759626484.197:613): pid=7455 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.262" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 208.821379][ T7437] lec:lec_atm_close: lec0: Shut down! [ 208.977970][ T7461] netlink: 'syz.3.264': attribute type 11 has an invalid length. [ 208.993850][ T7458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.001458][ T7458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.014975][ T7461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.264'. [ 209.099245][ T7458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.109947][ T7458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.430470][ T7459] mkiss: ax0: crc mode is auto. [ 213.994033][ T30] audit: type=1326 audit(1759626489.167:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 214.018533][ T30] audit: type=1326 audit(1759626489.167:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 214.184919][ T30] audit: type=1326 audit(1759626489.167:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 214.226029][ T30] audit: type=1326 audit(1759626489.167:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 214.251234][ T30] audit: type=1326 audit(1759626489.167:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 214.275792][ T30] audit: type=1326 audit(1759626489.177:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 214.299155][ T30] audit: type=1326 audit(1759626489.177:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 214.386426][ T30] audit: type=1326 audit(1759626489.177:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 214.409995][ T30] audit: type=1326 audit(1759626489.197:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 214.467151][ T30] audit: type=1326 audit(1759626489.197:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 215.939573][ T5882] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 216.562029][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 216.581985][ T5882] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 216.591272][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.601577][ T5882] usb 5-1: Product: syz [ 216.605990][ T5882] usb 5-1: Manufacturer: syz [ 216.628799][ T5882] usb 5-1: SerialNumber: syz [ 216.708606][ T5882] usb 5-1: config 0 descriptor?? [ 216.730018][ T5882] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 218.382165][ T5882] gspca_ov534_9: reg_w failed -110 [ 218.740522][ T7597] lo speed is unknown, defaulting to 1000 [ 218.754174][ T7597] vxcan1 speed is unknown, defaulting to 1000 [ 219.185240][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 219.185255][ T30] audit: type=1400 audit(1759626494.765:691): avc: denied { bind } for pid=7592 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.260790][ T30] audit: type=1400 audit(1759626494.765:692): avc: denied { node_bind } for pid=7592 comm="syz.3.282" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 219.431955][ T5882] gspca_ov534_9: Unknown sensor 0000 [ 219.432009][ T5882] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 219.830667][ T7613] netlink: 'syz.3.282': attribute type 10 has an invalid length. [ 219.878031][ T30] audit: type=1400 audit(1759626495.405:693): avc: denied { ioctl } for pid=7592 comm="syz.3.282" path="socket:[15290]" dev="sockfs" ino=15290 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 219.950361][ T7613] veth0_vlan: left promiscuous mode [ 219.962081][ T7613] veth0_vlan: entered promiscuous mode [ 219.980098][ T7613] team0: Device veth0_vlan failed to register rx_handler [ 220.119513][ T5882] usb 5-1: USB disconnect, device number 4 [ 220.448779][ T7625] lo speed is unknown, defaulting to 1000 [ 220.455197][ T7625] vxcan1 speed is unknown, defaulting to 1000 [ 220.561719][ T7628] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 220.581099][ T7628] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 220.798885][ T7619] lec:lec_atm_close: lec0: Shut down! [ 221.289887][ T30] audit: type=1400 audit(1759626496.865:694): avc: denied { setopt } for pid=7641 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.146346][ T30] audit: type=1400 audit(1759626496.925:695): avc: denied { name_bind } for pid=7641 comm="syz.1.287" src=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 223.443652][ T7647] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 223.503867][ T7652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.288'. [ 223.542119][ T7648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.287'. [ 223.755395][ T7666] netlink: 'syz.2.288': attribute type 16 has an invalid length. [ 223.767912][ T7666] netlink: 'syz.2.288': attribute type 17 has an invalid length. [ 223.776258][ T7666] netlink: 'syz.2.288': attribute type 27 has an invalid length. [ 225.371619][ T7683] siw: device registration error -23 [ 226.209337][ T7691] capability: warning: `syz.1.293' uses 32-bit capabilities (legacy support in use) [ 226.426848][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 226.435736][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5640 ms [ 226.435845][ C0] lec:lec_tx_timeout: lec0 [ 226.572022][ T42] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 226.675307][ T7707] netlink: 'syz.0.295': attribute type 1 has an invalid length. [ 226.761194][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.791419][ T7711] gretap1: entered promiscuous mode [ 226.801812][ T5882] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 226.824079][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 226.849530][ T42] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 226.859922][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.912836][ T42] usb 2-1: config 0 descriptor?? [ 226.920193][ T42] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 226.927955][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 226.957913][ T30] audit: type=1400 audit(1759626502.525:696): avc: denied { getopt } for pid=7687 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 226.963935][ T42] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 227.132370][ T7695] dibusb: i2c wr: len=61 is too big! [ 227.132370][ T7695] [ 227.173865][ T42] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 227.185802][ T30] audit: type=1400 audit(1759626502.655:697): avc: denied { execute } for pid=7687 comm="syz.3.294" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 227.256642][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 227.296009][ T5882] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 227.317013][ T5882] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.471530][ T7716] SELinux: failed to load policy [ 227.476836][ T30] audit: type=1400 audit(1759626503.045:698): avc: denied { load_policy } for pid=7712 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 227.504947][ T42] usb 2-1: media controller created [ 227.510754][ T5882] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.526897][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.562158][ T5882] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.584272][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 227.614807][ T42] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 227.636364][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 227.766102][ T5882] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.794716][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 227.864737][ T7722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.297'. [ 227.897389][ T5882] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 227.991228][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.165158][ T42] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 228.323454][ T3089] dvb-usb: bulk message failed: -22 (1/0) [ 228.331090][ T3089] dvb-usb: error while querying for an remote control event. [ 228.551453][ T5882] usb 5-1: usb_control_msg returned -32 [ 228.600478][ T5882] usbtmc 5-1:16.0: can't read capabilities [ 228.681976][ T3089] dvb-usb: bulk message failed: -22 (1/0) [ 228.708007][ T3089] dvb-usb: error while querying for an remote control event. [ 228.854957][ T7734] lo speed is unknown, defaulting to 1000 [ 228.863860][ T7734] vxcan1 speed is unknown, defaulting to 1000 [ 228.875852][ T7732] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 228.917675][ T7732] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 229.052318][ T3089] dvb-usb: bulk message failed: -22 (1/0) [ 229.058768][ T3089] dvb-usb: error while querying for an remote control event. [ 229.421960][ T3089] dvb-usb: bulk message failed: -22 (1/0) [ 229.427779][ T3089] dvb-usb: error while querying for an remote control event. [ 229.433420][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 229.462037][ T7752] netlink: 'syz.4.292': attribute type 5 has an invalid length. [ 229.462418][ T7696] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 229.512746][ T7752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.292'. [ 229.601988][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 229.607762][ T5889] dvb-usb: error while querying for an remote control event. [ 229.757270][ T7752] geneve2: entered promiscuous mode [ 229.762624][ T7752] geneve2: entered allmulticast mode [ 229.772031][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 229.777858][ T5889] dvb-usb: error while querying for an remote control event. [ 230.012078][ T3089] dvb-usb: bulk message failed: -22 (1/0) [ 230.022785][ T3089] dvb-usb: error while querying for an remote control event. [ 230.145367][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 230.165375][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 230.191989][ T3089] dvb-usb: bulk message failed: -22 (1/0) [ 230.197739][ T3089] dvb-usb: error while querying for an remote control event. [ 230.268818][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 230.337897][ T3089] usb 2-1: USB disconnect, device number 4 [ 230.602585][ T3089] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 230.999915][ T7777] netlink: 14 bytes leftover after parsing attributes in process `syz.1.303'. [ 231.304747][ T7781] siw: device registration error -23 [ 231.608367][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 231.666343][ T3089] usb 5-1: USB disconnect, device number 5 [ 231.842119][ T932] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 231.971230][ T30] audit: type=1400 audit(1759626507.545:699): avc: denied { read write } for pid=7785 comm="syz.4.306" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 231.971276][ T30] audit: type=1400 audit(1759626507.545:700): avc: denied { open } for pid=7785 comm="syz.4.306" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 232.062949][ T7777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.065478][ T7777] bond_slave_0: left promiscuous mode [ 232.066123][ T7777] bond_slave_0: left allmulticast mode [ 232.084607][ T7777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.087273][ T7777] bond_slave_1: left promiscuous mode [ 232.088191][ T7777] bond_slave_1: left allmulticast mode [ 232.090155][ T7777] bond0 (unregistering): Released all slaves [ 232.320551][ T7786] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 232.355369][ T932] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.387785][ T30] audit: type=1400 audit(1759626507.965:701): avc: denied { ioctl } for pid=7785 comm="syz.4.306" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 232.434068][ T932] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 232.455714][ T7793] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 232.464760][ T7793] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 232.474470][ T932] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.483867][ T932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.501085][ T7793] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 232.511779][ T7779] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.528919][ T932] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.554795][ T7793] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 232.860366][ T42] usb 2-1: USB disconnect, device number 5 [ 232.999190][ T7799] bridge0: entered promiscuous mode [ 233.046265][ T7799] macsec1: entered promiscuous mode [ 233.062669][ T7799] bridge0: port 3(macsec1) entered blocking state [ 233.070515][ T7799] bridge0: port 3(macsec1) entered disabled state [ 233.084687][ T7799] macsec1: entered allmulticast mode [ 233.090124][ T7799] bridge0: entered allmulticast mode [ 233.147441][ T7799] macsec1: left allmulticast mode [ 233.244184][ T7799] bridge0: left allmulticast mode [ 233.329933][ T7804] ubi31: attaching mtd0 [ 233.342800][ T7804] ubi31: scanning is finished [ 233.347544][ T7804] ubi31: empty MTD device detected [ 233.656784][ T7799] bridge0: left promiscuous mode [ 234.061990][ T30] audit: type=1326 audit(1759626509.625:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 234.209662][ T30] audit: type=1326 audit(1759626509.625:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 234.233086][ T30] audit: type=1326 audit(1759626509.625:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 234.520331][ T30] audit: type=1326 audit(1759626509.625:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 234.598678][ T7804] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 234.621951][ T932] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 234.679113][ T7804] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 234.713983][ T7804] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 234.721585][ T7804] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 234.730409][ T7804] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 234.751535][ T30] audit: type=1326 audit(1759626509.625:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 234.775614][ T7804] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 234.785512][ T7804] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3746029694 [ 234.802175][ T30] audit: type=1326 audit(1759626509.625:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 234.903908][ T932] usb 1-1: Using ep0 maxpacket: 8 [ 234.915786][ T932] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 234.931767][ T30] audit: type=1326 audit(1759626509.625:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.4.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb027f8ef03 code=0x7ffc0000 [ 234.958671][ T7804] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 234.959275][ T932] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 234.994541][ T7818] ubi31: background thread "ubi_bgt31d" started, PID 7818 [ 235.191701][ T932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.293156][ T932] usb 1-1: Product: syz [ 235.317011][ T932] usb 1-1: Manufacturer: syz [ 235.334449][ T932] usb 1-1: SerialNumber: syz [ 235.358685][ T932] usb 1-1: config 0 descriptor?? [ 235.395204][ T932] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 235.458467][ T932] usb 1-1: setting power ON [ 235.466224][ T5490] lec:lec_start_xmit: lec0:No lecd attached [ 235.473927][ T932] dvb-usb: bulk message failed: -22 (2/0) [ 235.499554][ T932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.543631][ T932] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 235.572113][ T932] usb 1-1: media controller created [ 235.607161][ T7813] dvb-usb: bulk message failed: -22 (3/0) [ 235.613136][ T7813] dvb-usb: bulk message failed: -22 (3/0) [ 236.046647][ T932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.434815][ T932] usb 1-1: selecting invalid altsetting 6 [ 236.631194][ T932] usb 1-1: digital interface selection failed (-22) [ 236.641923][ T932] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 236.778162][ T932] usb 1-1: setting power OFF [ 236.847785][ T932] dvb-usb: bulk message failed: -22 (2/0) [ 236.861700][ T932] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 236.871927][ T932] (NULL device *): no alternate interface [ 236.989134][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 236.989151][ T30] audit: type=1800 audit(1759626512.565:718): pid=7848 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.313" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 237.110104][ T932] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 237.413808][ T932] usb 1-1: USB disconnect, device number 7 [ 237.736912][ T7859] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 239.429744][ T30] audit: type=1326 audit(1759626515.005:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 240.453364][ T30] audit: type=1326 audit(1759626515.955:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 240.483314][ T7885] debugfs: '!' already exists in 'ieee80211' [ 240.491905][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 240.500092][ C0] lec:lec_tx_timeout: lec0 [ 240.504673][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 240.511112][ T30] audit: type=1326 audit(1759626515.955:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 240.541047][ T30] audit: type=1326 audit(1759626515.955:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 240.616141][ T30] audit: type=1326 audit(1759626516.045:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 240.639555][ T30] audit: type=1326 audit(1759626516.045:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 240.663509][ T30] audit: type=1326 audit(1759626516.055:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 240.689247][ T30] audit: type=1326 audit(1759626516.195:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 240.712788][ T30] audit: type=1326 audit(1759626516.195:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 240.994049][ T7901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.323'. [ 241.104880][ T7896] loop6: detected capacity change from 0 to 63 [ 241.158234][ T6061] Buffer I/O error on dev loop6, logical block 0, async page read [ 241.166694][ T6061] Buffer I/O error on dev loop6, logical block 0, async page read [ 241.580892][ T6061] Buffer I/O error on dev loop6, logical block 0, async page read [ 241.640171][ T6061] Buffer I/O error on dev loop6, logical block 0, async page read [ 241.664131][ T6061] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.297203][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 242.297218][ T30] audit: type=1326 audit(1759626517.875:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 242.634249][ T7922] netlink: 48 bytes leftover after parsing attributes in process `syz.3.324'. [ 242.665168][ T30] audit: type=1400 audit(1759626518.215:737): avc: denied { nlmsg_read } for pid=7916 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.702178][ T30] audit: type=1326 audit(1759626518.065:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91efd8eec9 code=0x7ffc0000 [ 242.839912][ T30] audit: type=1400 audit(1759626518.415:738): avc: denied { setopt } for pid=7926 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.036510][ T7933] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 243.336125][ T7933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.478698][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 244.146608][ T30] audit: type=1400 audit(1759626519.705:739): avc: denied { create } for pid=7943 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 244.186518][ T42] IPVS: starting estimator thread 0... [ 244.263347][ T30] audit: type=1400 audit(1759626519.715:740): avc: denied { getopt } for pid=7943 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 244.403099][ T7950] IPVS: using max 73 ests per chain, 175200 per kthread [ 244.429471][ T30] audit: type=1400 audit(1759626519.715:741): avc: denied { setopt } for pid=7943 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 244.520693][ T7940] bond0 (unregistering): Released all slaves [ 245.511903][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 245.519922][ C0] lec:lec_tx_timeout: lec0 [ 245.531953][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 245.826730][ T7961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.191271][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.330'. [ 246.209380][ T7966] netlink: 'syz.3.330': attribute type 16 has an invalid length. [ 246.217301][ T7966] netlink: 'syz.3.330': attribute type 17 has an invalid length. [ 246.225267][ T7966] netlink: 'syz.3.330': attribute type 27 has an invalid length. [ 247.253555][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 247.269149][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 248.846926][ T8000] netlink: 36 bytes leftover after parsing attributes in process `syz.3.337'. [ 248.857784][ T8000] netlink: 36 bytes leftover after parsing attributes in process `syz.3.337'. [ 249.377907][ T8014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.385191][ T8014] IPv6: NLM_F_CREATE should be set when creating new route [ 249.392538][ T8014] IPv6: NLM_F_CREATE should be set when creating new route [ 249.399768][ T8014] IPv6: NLM_F_CREATE should be set when creating new route [ 250.205941][ T30] audit: type=1326 audit(1759626525.788:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7c18eec9 code=0x7ffc0000 [ 250.551894][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 250.559900][ C0] lec:lec_tx_timeout: lec0 [ 250.571953][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 251.175603][ T30] audit: type=1326 audit(1759626525.788:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7c18eec9 code=0x7ffc0000 [ 251.252938][ T30] audit: type=1326 audit(1759626525.788:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b7c18eec9 code=0x7ffc0000 [ 251.574542][ T8036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.935369][ T30] audit: type=1326 audit(1759626525.788:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7c18eec9 code=0x7ffc0000 [ 251.961353][ T30] audit: type=1326 audit(1759626525.788:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f3b7c18eec9 code=0x7ffc0000 [ 252.239636][ T30] audit: type=1326 audit(1759626525.788:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7c18eec9 code=0x7ffc0000 [ 252.775494][ T30] audit: type=1326 audit(1759626525.788:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7c18eec9 code=0x7ffc0000 [ 253.079943][ T30] audit: type=1326 audit(1759626525.788:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3b7c18eec9 code=0x7ffc0000 [ 253.135080][ T8043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.356917][ T30] audit: type=1326 audit(1759626525.788:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7c18eec9 code=0x7ffc0000 [ 253.382304][ T30] audit: type=1326 audit(1759626525.788:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8015 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7c18eec9 code=0x7ffc0000 [ 254.483369][ T3089] libceph: connect (1)[c::]:6789 error -101 [ 254.489382][ T3089] libceph: mon0 (1)[c::]:6789 connect error [ 254.529707][ T932] libceph: connect (1)[c::]:6789 error -101 [ 254.540300][ T932] libceph: mon0 (1)[c::]:6789 connect error [ 254.582074][ T8068] ceph: No mds server is up or the cluster is laggy [ 254.589545][ T8063] ceph: No mds server is up or the cluster is laggy [ 255.144251][ T8083] pim6reg: entered allmulticast mode [ 255.581982][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 255.589985][ C0] lec:lec_tx_timeout: lec0 [ 255.601996][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 255.673211][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.679534][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.051783][ T8076] pim6reg: left allmulticast mode [ 257.364157][ T8096] ceph: No mds server is up or the cluster is laggy [ 257.805103][ T8113] netlink: 'syz.4.358': attribute type 8 has an invalid length. [ 257.847821][ T8113] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 257.858761][ T8113] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 257.868361][ T8113] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 257.876137][ T8113] UDF-fs: Scanning with blocksize 512 failed [ 257.887632][ T8113] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 257.898299][ T8113] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 257.907893][ T8113] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 257.915600][ T8113] UDF-fs: Scanning with blocksize 1024 failed [ 257.924925][ T8113] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 257.935189][ T8113] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 257.944774][ T8113] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 257.952476][ T8113] UDF-fs: Scanning with blocksize 2048 failed [ 257.961162][ T8113] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 257.971518][ T8113] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 257.981162][ T8113] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 257.988848][ T8113] UDF-fs: Scanning with blocksize 4096 failed [ 257.995005][ T8113] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 258.005307][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 258.005320][ T30] audit: type=1400 audit(1759626533.408:768): avc: denied { setopt } for pid=8107 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.390480][ T8114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.359'. [ 259.380470][ T8136] lo speed is unknown, defaulting to 1000 [ 259.449749][ T8136] vxcan1 speed is unknown, defaulting to 1000 [ 260.094687][ T8155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.122131][ T8126] lec:lec_atm_close: lec0: Shut down! [ 260.372005][ T3089] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 260.522127][ T3089] usb 2-1: Using ep0 maxpacket: 32 [ 260.535690][ T3089] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 260.547330][ T3089] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 260.556635][ T3089] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 260.564930][ T3089] usb 2-1: Product: syz [ 260.569065][ T3089] usb 2-1: Manufacturer: syz [ 260.580300][ T3089] usb 2-1: SerialNumber: syz [ 260.591211][ T3089] usb 2-1: config 0 descriptor?? [ 260.601976][ T8156] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 260.610480][ T3089] hub 2-1:0.0: bad descriptor, ignoring hub [ 260.619214][ T3089] hub 2-1:0.0: probe with driver hub failed with error -5 [ 260.862670][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'. [ 262.338558][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.374292][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.621075][ T8181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.650100][ T3089] usb 2-1: USB disconnect, device number 6 [ 263.017639][ T8199] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 263.025971][ T8199] cramfs: wrong magic [ 263.043258][ T30] audit: type=1400 audit(1759626538.598:769): avc: denied { read append } for pid=8195 comm="syz.0.374" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 263.199276][ T30] audit: type=1400 audit(1759626538.598:770): avc: denied { ioctl open } for pid=8195 comm="syz.0.374" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 263.230754][ T30] audit: type=1400 audit(1759626538.658:771): avc: denied { name_bind } for pid=8191 comm="syz.4.373" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 263.252673][ T30] audit: type=1400 audit(1759626538.808:772): avc: denied { mounton } for pid=8195 comm="syz.0.374" path="/76/file1" dev="autofs" ino=18435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 263.882773][ T8211] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 263.911986][ T8211] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 265.363465][ T8233] lo speed is unknown, defaulting to 1000 [ 265.381009][ T8235] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 265.392287][ T8235] netlink: 148 bytes leftover after parsing attributes in process `syz.0.382'. [ 265.401907][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5280 ms [ 265.409894][ C0] lec:lec_tx_timeout: lec0 [ 265.415409][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 265.459090][ T8235] syz.0.382 (8235): drop_caches: 2 [ 265.546264][ T8233] vxcan1 speed is unknown, defaulting to 1000 [ 266.050038][ T8226] lec:lec_atm_close: lec0: Shut down! [ 266.371960][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 266.706232][ T30] audit: type=1400 audit(1759626541.948:773): avc: denied { nlmsg_write } for pid=8244 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 267.026389][ T30] audit: type=1400 audit(1759626542.308:774): avc: denied { write } for pid=8245 comm="syz.4.385" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 267.059463][ T8250] bridge0: entered allmulticast mode [ 267.408660][ T8257] bridge0: left allmulticast mode [ 267.418927][ T8257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.441953][ T5936] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 269.565129][ T8274] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 269.652036][ T8274] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 269.711334][ T5936] usb 2-1: unable to get BOS descriptor or descriptor too short [ 269.768536][ T5936] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 269.797771][ T5936] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 269.810174][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.834701][ T5936] usb 2-1: Product: syz [ 269.885754][ T8281] netlink: 120 bytes leftover after parsing attributes in process `syz.3.392'. [ 269.970948][ T5936] usb 2-1: Manufacturer: syz [ 269.976416][ T5936] usb 2-1: SerialNumber: syz [ 271.332307][ T8289] netlink: 72 bytes leftover after parsing attributes in process `syz.4.395'. [ 271.375689][ T30] audit: type=1400 audit(1759626546.928:775): avc: denied { shutdown } for pid=8288 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.395695][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 271.395726][ C0] lec:lec_tx_timeout: lec0 [ 271.404175][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 271.618090][ T8295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.983904][ T5936] usb 2-1: USB disconnect, device number 7 [ 273.170597][ T8312] lo speed is unknown, defaulting to 1000 [ 273.303947][ T8312] vxcan1 speed is unknown, defaulting to 1000 [ 274.082432][ T30] audit: type=1400 audit(1759626549.498:776): avc: denied { map } for pid=8320 comm="syz.0.402" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 274.239462][ T8309] lec:lec_atm_close: lec0: Shut down! [ 274.606173][ T8335] mkiss: ax0: crc mode is auto. [ 274.620654][ T8335] tipc: Can't bind to reserved service type 0 [ 274.651992][ T30] audit: type=1400 audit(1759626550.178:777): avc: denied { map } for pid=8328 comm="syz.0.405" path="socket:[18779]" dev="sockfs" ino=18779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.729243][ T30] audit: type=1400 audit(1759626550.198:778): avc: denied { bind } for pid=8328 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 275.167648][ T8348] lo: left promiscuous mode [ 275.172265][ T8348] lo: left allmulticast mode [ 275.180797][ T8348] tunl0: left promiscuous mode [ 275.185638][ T8348] tunl0: left allmulticast mode [ 275.191287][ T8348] gre0: left promiscuous mode [ 275.196114][ T8348] gre0: left allmulticast mode [ 275.203980][ T8348] gretap0: left promiscuous mode [ 275.208920][ T8348] gretap0: left allmulticast mode [ 275.215476][ T8348] erspan0: left promiscuous mode [ 275.220442][ T8348] erspan0: left allmulticast mode [ 275.227006][ T8348] ip_vti0: left promiscuous mode [ 275.232000][ T8348] ip_vti0: left allmulticast mode [ 275.238141][ T8348] ip6_vti0: left promiscuous mode [ 275.243241][ T8348] ip6_vti0: left allmulticast mode [ 275.249759][ T8348] sit0: left promiscuous mode [ 275.254501][ T8348] sit0: left allmulticast mode [ 275.269129][ T8348] ip6tnl0: left promiscuous mode [ 275.274197][ T8348] ip6tnl0: left allmulticast mode [ 275.280710][ T8348] ip6gre0: left promiscuous mode [ 275.287851][ T8348] ip6gre0: left allmulticast mode [ 275.382228][ T8348] syz_tun: left promiscuous mode [ 275.389188][ T8348] syz_tun: left allmulticast mode [ 275.400381][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.408'. [ 275.414844][ T8348] ip6gretap0: left promiscuous mode [ 275.420061][ T8348] ip6gretap0: left allmulticast mode [ 275.574012][ T8348] bridge0: left promiscuous mode [ 275.578976][ T8348] bridge0: left allmulticast mode [ 275.584556][ T8348] vcan0: left promiscuous mode [ 275.589296][ T8348] vcan0: left allmulticast mode [ 275.594709][ T8348] team0: left promiscuous mode [ 275.599450][ T8348] team_slave_0: left promiscuous mode [ 275.604916][ T8348] team_slave_1: left promiscuous mode [ 275.610349][ T8348] geneve1: left promiscuous mode [ 275.615510][ T8348] team0: left allmulticast mode [ 275.620346][ T8348] team_slave_0: left allmulticast mode [ 275.625794][ T8348] team_slave_1: left allmulticast mode [ 275.631233][ T8348] geneve1: left allmulticast mode [ 275.636723][ T8348] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.643829][ T8348] dummy0: left promiscuous mode [ 275.648667][ T8348] dummy0: left allmulticast mode [ 275.654543][ T8348] nlmon0: left promiscuous mode [ 275.659381][ T8348] nlmon0: left allmulticast mode [ 275.693958][ T8348] caif0: left promiscuous mode [ 275.699268][ T8348] caif0: left allmulticast mode [ 275.704164][ T8348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.045387][ T8355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.101952][ T5889] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 276.250438][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 276.297867][ T5889] usb 4-1: device descriptor read/64, error -71 [ 277.038394][ T30] audit: type=1400 audit(1759626552.238:779): avc: denied { getopt } for pid=8361 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 277.122018][ T5889] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 277.264449][ T5889] usb 4-1: device descriptor read/64, error -71 [ 277.382315][ T5889] usb usb4-port1: attempt power cycle [ 277.617744][ T8375] netlink: 68 bytes leftover after parsing attributes in process `syz.1.414'. [ 278.177857][ T8382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58728 sclass=netlink_route_socket pid=8382 comm=syz.0.413 [ 278.202523][ T8382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.413'. [ 278.488034][ T8390] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 278.495831][ T8390] CPU: 0 UID: 0 PID: 8390 Comm: syz.1.416 Not tainted syzkaller #0 PREEMPT(full) [ 278.495858][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 278.495871][ T8390] Call Trace: [ 278.495878][ T8390] [ 278.495885][ T8390] dump_stack_lvl+0x16c/0x1f0 [ 278.495917][ T8390] sysfs_warn_dup+0x7f/0xa0 [ 278.495943][ T8390] sysfs_do_create_link_sd+0x124/0x140 [ 278.495972][ T8390] sysfs_create_link+0x61/0xc0 [ 278.496000][ T8390] device_add+0x62c/0x1aa0 [ 278.496023][ T8390] ? __pfx_device_add+0x10/0x10 [ 278.496040][ T8390] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 278.496070][ T8390] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 278.496102][ T8390] wiphy_register+0x1eb0/0x2b20 [ 278.496128][ T8390] ? netdev_run_todo+0x864/0x1320 [ 278.496153][ T8390] ? __dev_printk+0x1c0/0x270 [ 278.496184][ T8390] ? __pfx_wiphy_register+0x10/0x10 [ 278.496219][ T8390] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 278.496250][ T8390] ieee80211_register_hw+0x253d/0x4120 [ 278.496289][ T8390] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 278.496316][ T8390] ? __pfx___debug_object_init+0x10/0x10 [ 278.496350][ T8390] ? find_held_lock+0x2b/0x80 [ 278.496378][ T8390] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 278.496406][ T8390] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 278.496432][ T8390] ? __hrtimer_setup+0x176/0x280 [ 278.496459][ T8390] mac80211_hwsim_new_radio+0x32c7/0x5650 [ 278.496497][ T8390] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 278.496521][ T8390] ? __asan_memcpy+0x3c/0x60 [ 278.496544][ T8390] hwsim_new_radio_nl+0xba2/0x1330 [ 278.496569][ T8390] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 278.496605][ T8390] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 278.496636][ T8390] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 278.496671][ T8390] genl_family_rcv_msg_doit+0x206/0x2f0 [ 278.496703][ T8390] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 278.496742][ T8390] ? bpf_lsm_capable+0x9/0x10 [ 278.496766][ T8390] ? security_capable+0x7e/0x260 [ 278.496799][ T8390] ? ns_capable+0xd7/0x110 [ 278.496828][ T8390] genl_rcv_msg+0x55c/0x800 [ 278.496859][ T8390] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.496889][ T8390] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 278.496921][ T8390] netlink_rcv_skb+0x155/0x420 [ 278.496947][ T8390] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.496977][ T8390] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.497014][ T8390] ? netlink_deliver_tap+0x1ae/0xd30 [ 278.497043][ T8390] genl_rcv+0x28/0x40 [ 278.497068][ T8390] netlink_unicast+0x5aa/0x870 [ 278.497098][ T8390] ? __pfx_netlink_unicast+0x10/0x10 [ 278.497123][ T8390] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 278.497154][ T8390] netlink_sendmsg+0x8c8/0xdd0 [ 278.497180][ T8390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.497208][ T8390] ____sys_sendmsg+0xa95/0xc70 [ 278.497231][ T8390] ? copy_msghdr_from_user+0x10a/0x160 [ 278.497249][ T8390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.497281][ T8390] ___sys_sendmsg+0x134/0x1d0 [ 278.497299][ T8390] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.497344][ T8390] __sys_sendmsg+0x16d/0x220 [ 278.497363][ T8390] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.497389][ T8390] ? __secure_computing+0x28e/0x3b0 [ 278.497409][ T8390] do_syscall_64+0xcd/0x4e0 [ 278.497429][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.497444][ T8390] RIP: 0033:0x7fc46e98eec9 [ 278.497457][ T8390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.497471][ T8390] RSP: 002b:00007fc46cbd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.497486][ T8390] RAX: ffffffffffffffda RBX: 00007fc46ebe6180 RCX: 00007fc46e98eec9 [ 278.497495][ T8390] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 278.497504][ T8390] RBP: 00007fc46ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 278.497512][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.497521][ T8390] R13: 00007fc46ebe6218 R14: 00007fc46ebe6180 R15: 00007ffc0186b668 [ 278.497542][ T8390] [ 278.888382][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.899332][ T30] audit: type=1326 audit(1759626554.058:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 278.922718][ T30] audit: type=1326 audit(1759626554.058:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 278.946127][ T30] audit: type=1326 audit(1759626554.058:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 278.969401][ T30] audit: type=1326 audit(1759626554.058:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 278.992679][ T30] audit: type=1326 audit(1759626554.058:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 279.015864][ T30] audit: type=1326 audit(1759626554.058:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 279.039138][ T30] audit: type=1326 audit(1759626554.068:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 279.342142][ T30] audit: type=1326 audit(1759626554.818:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 279.391904][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5160 ms [ 279.391931][ C0] lec:lec_tx_timeout: lec0 [ 279.401986][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 279.529474][ T30] audit: type=1326 audit(1759626554.928:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 279.555752][ T8396] lo speed is unknown, defaulting to 1000 [ 279.612973][ T8396] vxcan1 speed is unknown, defaulting to 1000 [ 279.924573][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'. [ 280.383969][ T8391] lec:lec_atm_close: lec0: Shut down! [ 280.980831][ T8411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.190088][ T8413] syz.2.419 (8413): drop_caches: 2 [ 281.201472][ T8413] syz.2.419 (8413): drop_caches: 2 [ 281.692227][ T8416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.834694][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 282.834710][ T30] audit: type=1326 audit(1759626558.358:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 282.912896][ T30] audit: type=1326 audit(1759626558.358:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 283.007517][ T8434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8434 comm=syz.4.424 [ 283.132765][ T8439] binder: 8432:8439 ioctl c0306201 200000000080 returned -14 [ 283.391459][ T30] audit: type=1326 audit(1759626558.358:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 283.588255][ T30] audit: type=1326 audit(1759626558.358:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 283.722944][ T42] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 283.792290][ T30] audit: type=1326 audit(1759626558.358:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 284.014586][ T30] audit: type=1326 audit(1759626558.358:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 284.065018][ T42] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 284.073120][ T42] usb 3-1: config 0 has no interface number 0 [ 284.102034][ T30] audit: type=1326 audit(1759626558.368:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 284.111301][ T42] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=87.f7 [ 284.226777][ T30] audit: type=1326 audit(1759626558.368:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 284.355306][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 284.392294][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 284.432688][ T8448] geneve2: entered promiscuous mode [ 284.437958][ T8448] geneve2: entered allmulticast mode [ 284.462407][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.560217][ T30] audit: type=1326 audit(1759626558.368:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 284.592086][ T30] audit: type=1326 audit(1759626558.368:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb027f8eec9 code=0x7ffc0000 [ 284.615185][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.631599][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.682094][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.690165][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.701980][ T42] usb 3-1: Product: syz [ 284.712040][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.720741][ T42] usb 3-1: Manufacturer: syz [ 284.734280][ T42] usb 3-1: SerialNumber: syz [ 284.756621][ T42] usb 3-1: config 0 descriptor?? [ 284.768894][ T42] ttusb_dec_send_command: command bulk message failed: error -22 [ 284.783523][ T42] ttusb-dec 3-1:0.50: probe with driver ttusb-dec failed with error -22 [ 285.391878][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 285.391907][ C0] lec:lec_tx_timeout: lec0 [ 285.395448][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 285.582648][ T8454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.161944][ T42] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 286.791918][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 286.798594][ T42] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.841925][ T42] usb 2-1: config 1 interface 0 has no altsetting 0 [ 286.901034][ T42] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 286.946427][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.026014][ T42] usb 2-1: Product: syz [ 287.038721][ T42] usb 2-1: Manufacturer: syz [ 287.070191][ T8471] lo speed is unknown, defaulting to 1000 [ 287.076151][ T42] usb 2-1: SerialNumber: syz [ 287.085550][ T8471] vxcan1 speed is unknown, defaulting to 1000 [ 287.207250][ T932] usb 3-1: USB disconnect, device number 10 [ 287.413718][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.422458][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.589565][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.598155][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.614897][ T42] usbhid 2-1:1.0: can't add hid device: -71 [ 287.621240][ T42] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 287.825727][ T42] usb 2-1: USB disconnect, device number 8 [ 288.090433][ T8483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.436'. [ 288.746708][ T8486] C: renamed from team_slave_0 (while UP) [ 289.286187][ T8486] netlink: 'syz.2.437': attribute type 3 has an invalid length. [ 289.325985][ T8486] netlink: 152 bytes leftover after parsing attributes in process `syz.2.437'. [ 289.353730][ T8486] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 289.409909][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 289.409924][ T30] audit: type=1400 audit(1759626564.988:847): avc: denied { map } for pid=8488 comm="syz.1.438" path="/95/file0" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 289.449823][ T30] audit: type=1400 audit(1759626565.018:848): avc: denied { execute } for pid=8488 comm="syz.1.438" path="/95/file0" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 290.294918][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 290.401236][ T8504] lo speed is unknown, defaulting to 1000 [ 290.407758][ T8504] vxcan1 speed is unknown, defaulting to 1000 [ 290.431900][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 290.439933][ C0] lec:lec_tx_timeout: lec0 [ 290.444541][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 290.567749][ T8506] bridge_slave_1: left allmulticast mode [ 290.582010][ T8506] bridge_slave_1: left promiscuous mode [ 290.761271][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.843013][ T8506] bridge_slave_0: left allmulticast mode [ 290.849882][ T8506] bridge_slave_0: left promiscuous mode [ 290.975163][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.611598][ T8515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.636449][ T8518] syzkaller0: entered promiscuous mode [ 291.642452][ T8518] syzkaller0: entered allmulticast mode [ 291.985444][ T8522] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.445'. [ 291.995302][ T8522] netlink: zone id is out of range [ 292.001036][ T8522] netlink: zone id is out of range [ 292.006508][ T8522] netlink: get zone limit has 8 unknown bytes [ 292.657156][ T30] audit: type=1326 audit(1759626568.228:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 292.952955][ T30] audit: type=1326 audit(1759626568.228:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 292.976162][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.994180][ T30] audit: type=1326 audit(1759626568.228:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 293.064216][ T8533] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 293.071969][ T8532] mkiss: ax0: crc mode is auto. [ 293.128291][ T8533] CPU: 1 UID: 0 PID: 8533 Comm: syz.1.446 Not tainted syzkaller #0 PREEMPT(full) [ 293.128317][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.128328][ T8533] Call Trace: [ 293.128334][ T8533] [ 293.128340][ T8533] dump_stack_lvl+0x16c/0x1f0 [ 293.128367][ T8533] sysfs_warn_dup+0x7f/0xa0 [ 293.128393][ T8533] sysfs_do_create_link_sd+0x124/0x140 [ 293.128420][ T8533] sysfs_create_link+0x61/0xc0 [ 293.128447][ T8533] device_add+0x62c/0x1aa0 [ 293.128469][ T8533] ? __pfx_device_add+0x10/0x10 [ 293.128484][ T8533] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 293.128512][ T8533] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 293.128542][ T8533] wiphy_register+0x1eb0/0x2b20 [ 293.128569][ T8533] ? netdev_run_todo+0x864/0x1320 [ 293.128593][ T8533] ? __dev_printk+0x1c0/0x270 [ 293.128621][ T8533] ? __pfx_wiphy_register+0x10/0x10 [ 293.128656][ T8533] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 293.128685][ T8533] ieee80211_register_hw+0x253d/0x4120 [ 293.128720][ T8533] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 293.128746][ T8533] ? __pfx___debug_object_init+0x10/0x10 [ 293.128782][ T8533] ? find_held_lock+0x2b/0x80 [ 293.128807][ T8533] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 293.128831][ T8533] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 293.128854][ T8533] ? __hrtimer_setup+0x176/0x280 [ 293.128877][ T8533] mac80211_hwsim_new_radio+0x32c7/0x5650 [ 293.128907][ T8533] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 293.128925][ T8533] ? __asan_memcpy+0x3c/0x60 [ 293.128943][ T8533] hwsim_new_radio_nl+0xba2/0x1330 [ 293.128961][ T8533] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 293.128989][ T8533] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 293.129012][ T8533] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 293.129040][ T8533] genl_family_rcv_msg_doit+0x206/0x2f0 [ 293.129064][ T8533] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 293.129094][ T8533] ? bpf_lsm_capable+0x9/0x10 [ 293.129111][ T8533] ? security_capable+0x7e/0x260 [ 293.129135][ T8533] ? ns_capable+0xd7/0x110 [ 293.129156][ T8533] genl_rcv_msg+0x55c/0x800 [ 293.129181][ T8533] ? __pfx_genl_rcv_msg+0x10/0x10 [ 293.129203][ T8533] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 293.129228][ T8533] netlink_rcv_skb+0x155/0x420 [ 293.129248][ T8533] ? __pfx_genl_rcv_msg+0x10/0x10 [ 293.129271][ T8533] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 293.129313][ T8533] genl_rcv+0x28/0x40 [ 293.129333][ T8533] netlink_unicast+0x5aa/0x870 [ 293.129357][ T8533] ? __pfx_netlink_unicast+0x10/0x10 [ 293.129378][ T8533] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 293.129406][ T8533] netlink_sendmsg+0x8c8/0xdd0 [ 293.129431][ T8533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.129461][ T8533] ____sys_sendmsg+0xa95/0xc70 [ 293.129486][ T8533] ? copy_msghdr_from_user+0x10a/0x160 [ 293.129504][ T8533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.129536][ T8533] ___sys_sendmsg+0x134/0x1d0 [ 293.129555][ T8533] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.129601][ T8533] __sys_sendmsg+0x16d/0x220 [ 293.129618][ T8533] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.129645][ T8533] ? __secure_computing+0x28e/0x3b0 [ 293.129664][ T8533] do_syscall_64+0xcd/0x4e0 [ 293.129684][ T8533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.129699][ T8533] RIP: 0033:0x7fc46e98eec9 [ 293.129712][ T8533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.129725][ T8533] RSP: 002b:00007fc46cbd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.129740][ T8533] RAX: ffffffffffffffda RBX: 00007fc46ebe6180 RCX: 00007fc46e98eec9 [ 293.129749][ T8533] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 293.129758][ T8533] RBP: 00007fc46ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 293.129766][ T8533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.129775][ T8533] R13: 00007fc46ebe6218 R14: 00007fc46ebe6180 R15: 00007ffc0186b668 [ 293.129798][ T8533] [ 293.232157][ T30] audit: type=1326 audit(1759626568.228:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 293.234236][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.239842][ T30] audit: type=1326 audit(1759626568.228:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 293.602747][ T8541] netlink: 'syz.3.449': attribute type 11 has an invalid length. [ 294.392288][ T30] audit: type=1326 audit(1759626568.228:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 294.415752][ T30] audit: type=1400 audit(1759626569.158:855): avc: denied { connect } for pid=8537 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 294.435226][ T30] audit: type=1800 audit(1759626569.638:856): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.447" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 294.459541][ T30] audit: type=1400 audit(1759626569.658:857): avc: denied { map } for pid=8544 comm="syz.0.450" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 294.483531][ T30] audit: type=1326 audit(1759626569.688:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 295.290067][ T30] audit: type=1326 audit(1759626569.688:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e98eec9 code=0x7ffc0000 [ 295.451907][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 295.459913][ C0] lec:lec_tx_timeout: lec0 [ 295.465607][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 295.521997][ T30] audit: type=1400 audit(1759626571.078:860): avc: denied { bind } for pid=8544 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 296.626245][ T8567] lo speed is unknown, defaulting to 1000 [ 296.663117][ T8567] vxcan1 speed is unknown, defaulting to 1000 [ 296.726384][ T8580] netlink: 16 bytes leftover after parsing attributes in process `syz.4.456'. [ 296.735741][ T8580] netlink: 'syz.4.456': attribute type 16 has an invalid length. [ 296.743964][ T8580] netlink: 'syz.4.456': attribute type 17 has an invalid length. [ 296.751670][ T8580] netlink: 'syz.4.456': attribute type 27 has an invalid length. [ 298.248156][ T8604] syz.0.460(8604): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 298.294412][ T30] audit: type=1400 audit(1759626573.848:861): avc: denied { create } for pid=8600 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 299.312230][ T30] audit: type=1400 audit(1759626573.868:862): avc: denied { getopt } for pid=8600 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 299.586300][ T8596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.594134][ T8596] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.604584][ T8596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.678796][ T932] vxcan1 speed is unknown, defaulting to 1000 [ 299.679082][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.686003][ T932] syz2: Port: 1 Link DOWN [ 299.700410][ T24] lo speed is unknown, defaulting to 1000 [ 299.712285][ T24] syz0: Port: 1 Link ACTIVE [ 299.761214][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.787477][ T60] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.798705][ T60] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.825136][ T30] audit: type=1400 audit(1759626575.408:863): avc: denied { append } for pid=8610 comm="syz.4.462" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 300.415331][ T8621] debugfs: '!' already exists in 'ieee80211' [ 300.445716][ T30] audit: type=1326 audit(1759626575.938:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414b98eec9 code=0x7ffc0000 [ 300.472668][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 300.480682][ C0] lec:lec_tx_timeout: lec0 [ 300.485241][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 301.494676][ T30] audit: type=1326 audit(1759626575.938:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f414b98eec9 code=0x7ffc0000 [ 301.520402][ T30] audit: type=1326 audit(1759626575.938:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414b98eec9 code=0x7ffc0000 [ 301.543630][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.550093][ T30] audit: type=1326 audit(1759626575.948:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f414b98eec9 code=0x7ffc0000 [ 301.573196][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.579803][ T30] audit: type=1326 audit(1759626575.948:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414b98eec9 code=0x7ffc0000 [ 301.642000][ T30] audit: type=1326 audit(1759626575.968:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f414b98eec9 code=0x7ffc0000 [ 301.678442][ T8631] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 301.701161][ T8631] CPU: 0 UID: 0 PID: 8631 Comm: syz.2.464 Not tainted syzkaller #0 PREEMPT(full) [ 301.701191][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 301.701203][ T8631] Call Trace: [ 301.701210][ T8631] [ 301.701218][ T8631] dump_stack_lvl+0x16c/0x1f0 [ 301.701247][ T8631] sysfs_warn_dup+0x7f/0xa0 [ 301.701277][ T8631] sysfs_do_create_link_sd+0x124/0x140 [ 301.701306][ T8631] sysfs_create_link+0x61/0xc0 [ 301.701334][ T8631] device_add+0x62c/0x1aa0 [ 301.701356][ T8631] ? __pfx_device_add+0x10/0x10 [ 301.701375][ T8631] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.701403][ T8631] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 301.701434][ T8631] wiphy_register+0x1eb0/0x2b20 [ 301.701460][ T8631] ? netdev_run_todo+0x864/0x1320 [ 301.701485][ T8631] ? __dev_printk+0x1c0/0x270 [ 301.701516][ T8631] ? __pfx_wiphy_register+0x10/0x10 [ 301.701552][ T8631] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 301.701583][ T8631] ieee80211_register_hw+0x253d/0x4120 [ 301.701621][ T8631] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 301.701648][ T8631] ? __pfx___debug_object_init+0x10/0x10 [ 301.701685][ T8631] ? __hrtimer_setup+0x66/0x280 [ 301.701710][ T8631] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.701737][ T8631] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 301.701765][ T8631] ? __hrtimer_setup+0x176/0x280 [ 301.701791][ T8631] mac80211_hwsim_new_radio+0x32c7/0x5650 [ 301.701833][ T8631] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 301.701856][ T8631] ? __asan_memcpy+0x3c/0x60 [ 301.701879][ T8631] hwsim_new_radio_nl+0xba2/0x1330 [ 301.701902][ T8631] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 301.701941][ T8631] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 301.701974][ T8631] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 301.702013][ T8631] genl_family_rcv_msg_doit+0x206/0x2f0 [ 301.702046][ T8631] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 301.702087][ T8631] ? bpf_lsm_capable+0x9/0x10 [ 301.702112][ T8631] ? security_capable+0x7e/0x260 [ 301.702143][ T8631] ? ns_capable+0xd7/0x110 [ 301.702172][ T8631] genl_rcv_msg+0x55c/0x800 [ 301.702204][ T8631] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.702233][ T8631] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 301.702258][ T8631] ? __lock_acquire+0x62e/0x1ce0 [ 301.702284][ T8631] netlink_rcv_skb+0x155/0x420 [ 301.702309][ T8631] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.702339][ T8631] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.702377][ T8631] ? netlink_deliver_tap+0x1ae/0xd30 [ 301.702400][ T8631] ? selinux_netlink_send+0x578/0x830 [ 301.702418][ T8631] ? is_vmalloc_addr+0x86/0xa0 [ 301.702451][ T8631] genl_rcv+0x28/0x40 [ 301.702476][ T8631] netlink_unicast+0x5aa/0x870 [ 301.702506][ T8631] ? __pfx_netlink_unicast+0x10/0x10 [ 301.702532][ T8631] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 301.702566][ T8631] netlink_sendmsg+0x8c8/0xdd0 [ 301.702597][ T8631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.702634][ T8631] ____sys_sendmsg+0xa95/0xc70 [ 301.702665][ T8631] ? copy_msghdr_from_user+0x10a/0x160 [ 301.702687][ T8631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.702727][ T8631] ___sys_sendmsg+0x134/0x1d0 [ 301.702749][ T8631] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.702795][ T8631] __sys_sendmsg+0x16d/0x220 [ 301.702813][ T8631] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.702830][ T8631] ? __x64_sys_futex+0x1e0/0x4c0 [ 301.702859][ T8631] do_syscall_64+0xcd/0x4e0 [ 301.702879][ T8631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.702894][ T8631] RIP: 0033:0x7f91efd8eec9 [ 301.702906][ T8631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.702921][ T8631] RSP: 002b:00007f91f0c51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.702942][ T8631] RAX: ffffffffffffffda RBX: 00007f91effe6270 RCX: 00007f91efd8eec9 [ 301.702951][ T8631] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 301.702960][ T8631] RBP: 00007f91efe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 301.702968][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.702977][ T8631] R13: 00007f91effe6308 R14: 00007f91effe6270 R15: 00007ffcb0cac338 [ 301.702998][ T8631] [ 302.106044][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.114134][ T30] audit: type=1326 audit(1759626576.078:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414b98eec9 code=0x7ffc0000 [ 302.142000][ T30] audit: type=1326 audit(1759626576.078:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414b98eec9 code=0x7ffc0000 [ 302.171879][ T30] audit: type=1326 audit(1759626576.088:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f414b98eec9 code=0x7ffc0000 [ 302.195096][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.753735][ T8635] vivid-007: kernel_thread() failed [ 302.953866][ T8633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.465'. [ 303.428572][ T8648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.469'. [ 303.447158][ T8648] netlink: 'syz.0.469': attribute type 16 has an invalid length. [ 303.455106][ T8648] netlink: 'syz.0.469': attribute type 17 has an invalid length. [ 303.462824][ T8648] netlink: 'syz.0.469': attribute type 27 has an invalid length. [ 303.648101][ T8650] ================================================================== [ 303.656188][ T8650] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 303.663400][ T8650] Read of size 8 at addr ffff888032aa2b88 by task syz.3.468/8650 [ 303.671129][ T8650] [ 303.671140][ T8650] CPU: 1 UID: 0 PID: 8650 Comm: syz.3.468 Not tainted syzkaller #0 PREEMPT(full) [ 303.671160][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 303.671170][ T8650] Call Trace: [ 303.671175][ T8650] [ 303.671182][ T8650] dump_stack_lvl+0x116/0x1f0 [ 303.671206][ T8650] print_report+0xcd/0x630 [ 303.671223][ T8650] ? __virt_addr_valid+0x81/0x610 [ 303.671246][ T8650] ? __phys_addr+0xe8/0x180 [ 303.671269][ T8650] ? __cpa_addr+0x1d3/0x220 [ 303.671285][ T8650] kasan_report+0xe0/0x110 [ 303.671302][ T8650] ? __cpa_addr+0x1d3/0x220 [ 303.671319][ T8650] __cpa_addr+0x1d3/0x220 [ 303.671335][ T8650] cpa_flush+0x28b/0x8a0 [ 303.671353][ T8650] ? __pfx_cpa_flush+0x10/0x10 [ 303.671371][ T8650] ? pgprot2cachemode+0x9a/0x130 [ 303.671392][ T8650] ? __pfx_pgprot2cachemode+0x10/0x10 [ 303.671413][ T8650] ? drm_gem_get_pages+0x6a0/0xa10 [ 303.671432][ T8650] change_page_attr_set_clr+0x34e/0x4a0 [ 303.671452][ T8650] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 303.671477][ T8650] _set_pages_array+0x1ab/0x2c0 [ 303.671496][ T8650] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 303.671512][ T8650] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 303.671527][ T8650] ? __pfx___might_resched+0x10/0x10 [ 303.671550][ T8650] drm_gem_shmem_mmap+0xc9/0x550 [ 303.671564][ T8650] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 303.671579][ T8650] drm_gem_mmap_obj+0x1b5/0x560 [ 303.671596][ T8650] drm_gem_mmap+0x40b/0x620 [ 303.671612][ T8650] ? __pfx_drm_gem_mmap+0x10/0x10 [ 303.671631][ T8650] __mmap_region+0x1306/0x27a0 [ 303.671646][ T8650] ? __pfx___mmap_region+0x10/0x10 [ 303.671659][ T8650] ? lock_acquire+0x179/0x350 [ 303.671674][ T8650] ? find_held_lock+0x2b/0x80 [ 303.671697][ T8650] ? rcu_is_watching+0x12/0xc0 [ 303.671736][ T8650] mmap_region+0x1ab/0x3f0 [ 303.671763][ T8650] ? __get_unmapped_area+0x267/0x440 [ 303.671783][ T8650] do_mmap+0xa3e/0x1210 [ 303.671802][ T8650] ? __pfx_do_mmap+0x10/0x10 [ 303.671820][ T8650] ? __pfx_down_write_killable+0x10/0x10 [ 303.671845][ T8650] vm_mmap_pgoff+0x29e/0x470 [ 303.671866][ T8650] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 303.671893][ T8650] ? __fget_files+0x20e/0x3c0 [ 303.671914][ T8650] ksys_mmap_pgoff+0x32c/0x5c0 [ 303.671934][ T8650] __x64_sys_mmap+0x125/0x190 [ 303.671950][ T8650] do_syscall_64+0xcd/0x4e0 [ 303.671971][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.671987][ T8650] RIP: 0033:0x7f3b7c18eec9 [ 303.672000][ T8650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.672015][ T8650] RSP: 002b:00007f3b79b8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 303.672030][ T8650] RAX: ffffffffffffffda RBX: 00007f3b7c3e6360 RCX: 00007f3b7c18eec9 [ 303.672041][ T8650] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 303.672051][ T8650] RBP: 00007f3b7c211f91 R08: 0000000000000008 R09: 0000000100000000 [ 303.672060][ T8650] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 303.672068][ T8650] R13: 00007f3b7c3e63f8 R14: 00007f3b7c3e6360 R15: 00007ffec0b9ebd8 [ 303.672082][ T8650] [ 303.672087][ T8650] [ 303.672091][ T8650] Allocated by task 8650: [ 303.672098][ T8650] kasan_save_stack+0x33/0x60 [ 303.672113][ T8650] kasan_save_track+0x14/0x30 [ 303.672126][ T8650] __kasan_kmalloc+0xaa/0xb0 [ 303.672140][ T8650] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 303.672154][ T8650] drm_gem_get_pages+0x144/0xa10 [ 303.672171][ T8650] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 303.672186][ T8650] drm_gem_shmem_mmap+0xc9/0x550 [ 303.672198][ T8650] drm_gem_mmap_obj+0x1b5/0x560 [ 303.672213][ T8650] drm_gem_mmap+0x40b/0x620 [ 303.672228][ T8650] __mmap_region+0x1306/0x27a0 [ 303.672239][ T8650] mmap_region+0x1ab/0x3f0 [ 303.672250][ T8650] do_mmap+0xa3e/0x1210 [ 303.672265][ T8650] vm_mmap_pgoff+0x29e/0x470 [ 303.672279][ T8650] ksys_mmap_pgoff+0x32c/0x5c0 [ 303.672294][ T8650] __x64_sys_mmap+0x125/0x190 [ 303.672307][ T8650] do_syscall_64+0xcd/0x4e0 [ 303.672322][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.672336][ T8650] [ 303.672339][ T8650] The buggy address belongs to the object at ffff888032aa2b00 [ 303.672339][ T8650] which belongs to the cache kmalloc-192 of size 192 [ 303.672351][ T8650] The buggy address is located 0 bytes to the right of [ 303.672351][ T8650] allocated 136-byte region [ffff888032aa2b00, ffff888032aa2b88) [ 303.672365][ T8650] [ 303.672369][ T8650] The buggy address belongs to the physical page: [ 303.672375][ T8650] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32aa2 [ 303.672389][ T8650] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 303.672401][ T8650] page_type: f5(slab) [ 303.672413][ T8650] raw: 00fff00000000000 ffff88801b0263c0 ffffea0000c31640 dead000000000005 [ 303.672426][ T8650] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 303.672434][ T8650] page dumped because: kasan: bad access detected [ 303.672441][ T8650] page_owner tracks the page as allocated [ 303.672446][ T8650] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 14261146192, free_ts 14252829581 [ 303.672470][ T8650] post_alloc_hook+0x1c0/0x230 [ 303.672489][ T8650] get_page_from_freelist+0x10a3/0x3a30 [ 303.672510][ T8650] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 303.672531][ T8650] alloc_pages_mpol+0x1fb/0x550 [ 303.672547][ T8650] new_slab+0x24a/0x360 [ 303.672564][ T8650] ___slab_alloc+0xdc4/0x1ae0 [ 303.672583][ T8650] __slab_alloc.constprop.0+0x63/0x110 [ 303.672602][ T8650] __kmalloc_node_track_caller_noprof+0x4db/0x8a0 [ 303.672618][ T8650] krealloc_node_align_noprof+0x1b6/0x470 [ 303.672632][ T8650] add_sysfs_param+0xde/0xa10 [ 303.672652][ T8650] param_sysfs_builtin_init+0x307/0x4c0 [ 303.672672][ T8650] do_one_initcall+0x120/0x6e0 [ 303.672690][ T8650] kernel_init_freeable+0x5c2/0x910 [ 303.672705][ T8650] kernel_init+0x1c/0x2b0 [ 303.672724][ T8650] ret_from_fork+0x56d/0x730 [ 303.672737][ T8650] ret_from_fork_asm+0x1a/0x30 [ 303.672754][ T8650] page last free pid 978 tgid 978 stack trace: [ 303.672762][ T8650] __free_frozen_pages+0x7df/0x1160 [ 303.672779][ T8650] vfree+0x1fd/0xb50 [ 303.672795][ T8650] delayed_vfree_work+0x56/0x70 [ 303.672811][ T8650] process_one_work+0x9cc/0x1b70 [ 303.672827][ T8650] worker_thread+0x6c8/0xf10 [ 303.672843][ T8650] kthread+0x3c5/0x780 [ 303.672856][ T8650] ret_from_fork+0x56d/0x730 [ 303.672869][ T8650] ret_from_fork_asm+0x1a/0x30 [ 303.672893][ T8650] [ 303.672897][ T8650] Memory state around the buggy address: [ 303.672905][ T8650] ffff888032aa2a80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 303.672916][ T8650] ffff888032aa2b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.672927][ T8650] >ffff888032aa2b80: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 303.672935][ T8650] ^ [ 303.672943][ T8650] ffff888032aa2c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.672954][ T8650] ffff888032aa2c80: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc [ 303.672962][ T8650] ================================================================== [ 303.755454][ T8650] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 303.755476][ T8650] CPU: 1 UID: 0 PID: 8650 Comm: syz.3.468 Not tainted syzkaller #0 PREEMPT(full) [ 303.755502][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 303.755514][ T8650] Call Trace: [ 303.755521][ T8650] [ 303.755530][ T8650] dump_stack_lvl+0x3d/0x1f0 [ 303.755558][ T8650] vpanic+0x640/0x6f0 [ 303.755579][ T8650] panic+0xca/0xd0 [ 303.755598][ T8650] ? __pfx_panic+0x10/0x10 [ 303.755617][ T8650] ? __cpa_addr+0x1d3/0x220 [ 303.755639][ T8650] ? preempt_schedule_common+0x44/0xc0 [ 303.755661][ T8650] ? preempt_schedule_thunk+0x16/0x30 [ 303.755694][ T8650] check_panic_on_warn+0xab/0xb0 [ 303.755716][ T8650] end_report+0x107/0x170 [ 303.755738][ T8650] kasan_report+0xee/0x110 [ 303.755761][ T8650] ? __cpa_addr+0x1d3/0x220 [ 303.755784][ T8650] __cpa_addr+0x1d3/0x220 [ 303.755806][ T8650] cpa_flush+0x28b/0x8a0 [ 303.755828][ T8650] ? __pfx_cpa_flush+0x10/0x10 [ 303.755850][ T8650] ? pgprot2cachemode+0x9a/0x130 [ 303.755878][ T8650] ? __pfx_pgprot2cachemode+0x10/0x10 [ 303.755905][ T8650] ? drm_gem_get_pages+0x6a0/0xa10 [ 303.755928][ T8650] change_page_attr_set_clr+0x34e/0x4a0 [ 303.755953][ T8650] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 303.755993][ T8650] _set_pages_array+0x1ab/0x2c0 [ 303.756018][ T8650] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 303.756038][ T8650] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 303.756057][ T8650] ? __pfx___might_resched+0x10/0x10 [ 303.756088][ T8650] drm_gem_shmem_mmap+0xc9/0x550 [ 303.756107][ T8650] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 303.756128][ T8650] drm_gem_mmap_obj+0x1b5/0x560 [ 303.756152][ T8650] drm_gem_mmap+0x40b/0x620 [ 303.756175][ T8650] ? __pfx_drm_gem_mmap+0x10/0x10 [ 303.756201][ T8650] __mmap_region+0x1306/0x27a0 [ 303.756223][ T8650] ? __pfx___mmap_region+0x10/0x10 [ 303.756244][ T8650] ? lock_acquire+0x179/0x350 [ 303.756263][ T8650] ? find_held_lock+0x2b/0x80 [ 303.756292][ T8650] ? rcu_is_watching+0x12/0xc0 [ 303.756343][ T8650] mmap_region+0x1ab/0x3f0 [ 303.756360][ T8650] ? __get_unmapped_area+0x267/0x440 [ 303.756384][ T8650] do_mmap+0xa3e/0x1210 [ 303.756409][ T8650] ? __pfx_do_mmap+0x10/0x10 [ 303.756431][ T8650] ? __pfx_down_write_killable+0x10/0x10 [ 303.756459][ T8650] vm_mmap_pgoff+0x29e/0x470 [ 303.756483][ T8650] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 303.756507][ T8650] ? __fget_files+0x20e/0x3c0 [ 303.756530][ T8650] ksys_mmap_pgoff+0x32c/0x5c0 [ 303.756555][ T8650] __x64_sys_mmap+0x125/0x190 [ 303.756576][ T8650] do_syscall_64+0xcd/0x4e0 [ 303.756601][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.756621][ T8650] RIP: 0033:0x7f3b7c18eec9 [ 303.756637][ T8650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.756656][ T8650] RSP: 002b:00007f3b79b8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 303.756676][ T8650] RAX: ffffffffffffffda RBX: 00007f3b7c3e6360 RCX: 00007f3b7c18eec9 [ 303.756689][ T8650] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 303.756701][ T8650] RBP: 00007f3b7c211f91 R08: 0000000000000008 R09: 0000000100000000 [ 303.756712][ T8650] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 303.756724][ T8650] R13: 00007f3b7c3e63f8 R14: 00007f3b7c3e6360 R15: 00007ffec0b9ebd8 [ 303.756743][ T8650] [ 303.756940][ T8650] Kernel Offset: disabled