last executing test programs: 37.655985318s ago: executing program 2 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) syz_usb_connect(0x1, 0x59f, &(0x7f0000000a40)=ANY=[@ANYBLOB="120100021631a7086311000232e10000000109028d0501000400000904"], 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002040), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) sendfile(r2, r2, 0x0, 0xc3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace80", 0x5e}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4000) add_key(&(0x7f0000002080)='big_key\x00', &(0x7f0000002100)={'syz', 0x2}, &(0x7f0000002140)="00000000000400000000000002007bdf27ba7262773505eb4ccdad00bfe75f238f0acffbcbf6a54077fcdf90efb8d7d69cdb925ad0cc9d2a03e4f01a6dfee230767bee56eb21e4c731fcb45a60e438bb971c65665eba04af4fce978cb5bf43b8953431aac31222542b06abfb02763703d7e9f3c732ab66f46cf1bca8034cc96b67292791a9d6476238b01a9b1fdf51b18b", 0x6d, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x312000, 0x400, 0x4000000, 0x5}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/rt_cache\x00') read$FUSE(r8, &(0x7f0000000000)={0x2020}, 0x2020) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000002300)) 32.544566081s ago: executing program 2 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000080)='add syz0 127.0.0.1\n\x00', 0x13) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, 0x0, 0x4000080) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/cells\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @empty}, {0x1}, 0x0, {0x2, 0x4e22, @empty}, 'lo\x00'}) read(r3, &(0x7f00000000a0)=""/256, 0x100) 32.390992495s ago: executing program 2 (id=38): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x800, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="fea7b5937488ec9a945eaa25f460c695522cef386d40914231436bf718f8ae45d28185d2ca999625b2d0bef5e53036a9a31a217c64ea2252668345e7279e4f7883022786890e50257a33dd7582a2345c8f3477086ac1854e7cb280dc161064f50d1f0366ce8e5e8b5907d77c830c18637c4bfd3ee0a9662926151736e7c053c5b73ab2949e0fea2100bd17ddd7a0444b336e3c3a6d6663473587e4de184bd6c3fdaee7a0ba1cc0c7fd541aca9ff5ea6b2ff364fe33dcc93c5727fe89cf9b3cca46bc34478895e5499482d585f6831ba7c41e5e15c8c7087ff2f91c72df611e979aa0378181a4b01792b8738b56879ce84cd5502e592a8b53167551d2d4f0a0ad5cc6cbd03cbcb2dbb1c6bd940b2fc8b09359286899403821cef73583f39c55f403c080df7c6e465a2176a9dc6f122cd3b7856924d5a26adcab342e9828b8193816888c014c2672198d504f02a25f0b466bc72b7fbaa010cb9332ca88f18fdc22e1e2e6d34754101bdc39ccfe7d24e761a57e03d621797960178c202f65d03deeb923dea39546c2684ce3b499096b618236c671bdad72824390758a88f6105a7826b7386299836adab0fe951465c8d9c240bba24756d70097e7c6f6eba78cbbbcfc80b15e81a984e0c95deeca97e7d9d680ed1ce4a3489ef5ea8d964f7b32b904ac3729bce7f55c5c1fcb39823f0aa87c6a326a83a3854b5ed95dfb6efbcd01cda448d9d32b8a6609cbf8a99c58b5cc18d8c7703d152231d1593581386fd309b4c0be2c669dd328dffaba4ebc0aa5f565be9c53b108026086a7ab0bb0cf578a2fccd3825c14bd8012641b29fc4b737ae03a73127343e5f98c3e5b7d82a3d8f50aee205ba008a63ba5293e58bfe9b8242f4ed01b5414d997425f4731e5f62b6abae32b50ce6fb79f2b31d58105609b7ae108dba0428eb79829ec91cadb3859e3e5845e4dfaccfe97fc766eeb0d2a2b6de9ac9dc0a3231ed1e78c30dbac25cabde6e2432270d6b5635a9fbe4279f8c0ef3708fabe9207e8d3aaf5e094d58aeaac91103382baf38e6a9fb2016a6defc07ded72e87296234a3d92e404a951ce15cea52b52d225a0634d48b2f3289b63e53831c008470daff4c7be30ca817937957f13d50c0ff8d2fb6bc5542eba77bb8a7bcdd21ed4f52da5521bd9162d2d1e293d9005f51ed555b91af33f1b3661376b40d7041d02dc879f119687b5edfdedec20d7a706444f30f6c0ab53fbf088b16b8888631789f4e041c8099d5ec24b5c3fac28efcfb097c35b33b8b80824a0f823ff21404c4f2671d9944a605f6daabd7ad4906995dced6901d126793b946c3b44a04facb0de079bdcc92b2f41f7dd9d074d4ecc937107f73439ae20592e58d10d2c6365e51943e94f157ae7bfeea84a35aea95ae69e54d8ca501f8daa7a9e40ec6de35882f12f2d75d1fa153d8a617e4a38a3a4ab4b0b198d24ed907a190f19a7d80e60cd9929fda1fb340fa8dfcf271ea235b17266c8b634d5901c1e941960116b0001f2f0b34171f05553ea7d36aa758f2705fcdbbbea8a0271e612996c37c6a5a8c27078c15aa017f3513a89312f3838e420def02d67eea8dc8f315246b3b905f99f1743597162c819e0d5335f5bbb1f48478f7d27c80920c2c4eb1bccf152a56ac44280b99a24e2db64c3b9f3f78352cbf5c3a963e4f1ecf865895cb91e385a0e047c0920d2628d1082f6be3744304e8e700850e6add682f36a8700e095c1369b1fe7e886e08e7698f5513f25833bc80f8eb6b489fb897a464f68c54f44c416b685fb282c0c71f33cb05886b3f724d1f242a57cbd2ec5724868014bb58ceb34e441654e6e29eb74b11e6b263ed9d78eba51823d6fde60fb9af25222d78f1756aa306f046eb18adecb71b0f41f030da27c3483ade441ab10a357be576df6276202107792fe05281ce67690646782056bd0fa95961925a7e9c9e779d6ed176769f9ed67eba0222eadd8a711aa8adb32cddb05ae0f1554dd281c489a4cefead688f2671b85abcc1a24f9d9f1183af62fe2aa5fe318d572b41721f69a25f05f385b57e8f89f3002f58874ae538649a53e0f011448cb3917920ee10c727f6fa3cdb9b2a6fafc312776df1f522cd35c2042ea256bd07fabe214472fa11af23748825d085cdddc25628fd4dba5bd1383c91855804b62e8912dde976d7744c4c1f797737ea220ac1799f7f0a1895fdfe8bcda3a0077b36c46a26399950a4dc4f74b053af3a06bc527bff3dae25ae1fa6d0d3ec0b090cec3dd3801a96c75ec4f350b70f1fafe25b2da5a13a626e1e220d6b72ecb07ae5b82ac8c2a15ad608f9f7e0f5a14cc9d94be93ba21dbf972c649fe0cb99d1a6b5430a2d4f7bfc9f73b2a0a9b4633cecdf661518645327b06c6d0f66579fd8dee43d76f35ce8c0b0c725e50019bd7a51bd8a4727689a8695c7fcc5429981d7b36d925071eabd217a500993903aa38ae1857a23d9bdfaceeb640d2da2ac31501422321c53a4838a40a6df9c5aec5adaf68eb891acfc4efacf35a0deabb9b4e52cb0541c1164e873964027631bb23265afc5483baf4bbee1a64357c08f24626e486f3065aed1cea5a29894074aaf37659e75f3a4dd519fb8fe7497247321315c9a954f4c0b03a3a2a4b1f303e3224f446acb9facf4e2c3e5ac4fb9f4659dd62339f7be3e19fcc5b0f272c97adc1eb130c6dfdc9ac9800dc341986ce78569d15664fdb049df3b6bcce4b959ed9156263cd8a6fc2e12cb3c2307aeb5b2d183ec268517adba2fc97e88a3a5e33c71ec87c0d048141dd9751b4039c70dae0566c6cd13ab2f2ca1a60538fe2326de3bc93910ae322794735cb8479284f8b746cd0853e5c286df71ac3fbf5890330bcb1b3b57d1dc7ceede05f42119622a7eff4916f0c9280c1fbcfe7e5e546184b6c2216f3374a6b3644b69ec2358ceb4b1b70cb253ba2c88e9a4d029cfb8ce3a520d5acf8ccde83252ed0cd3b3c86fce660b79418e12a670b1c611d489da9d981baca8f1c71a6857957508415e0e75ea3fa5787a440a8944a28ade699b69f89bd97decd5b05534c927dd8906de46f06145387fcec8ac0d9436c0f3296e681dd7e1a7e9090b5d11502c391ce9816af4602ac17d613f39b4e4dfbe3d520381cc920669e0938c18e045535b6a2bdca6c5b34ebf5e9cf2a69872ece07adfe14923befe93a6a390a66f945acebf559c5562c31799c59aefd5e14c44e3ff4957bb4525a27baa09e5334bd79f43c4d3f01bb5afa9536af41a4c0f43703bb6d6b4e84f472a98acb368be537f3378577514265126d74043f912911707254ef88b6673626254ec6a87a3e9345062a79faf1523b5ebed0e3ebad3af0ff485f76097145aa7fc19525644481ccb381dbe051c93bf7b7c43c5519e2e777e84790a6d7be7ae25e905f1e7ee2a1952b4e3fe39c00feeb1b91afdd05b1e1f95aa68099c3ea976eaf7bbe46fe56d4eafa2719850bc17d30f425b02e935a390ac6d6b3fdcbf9e436e08534d00b1dbfac961e9b27212fe534bc0f7a43003dd83c71e5f40111b1e5f60308f5d708f63c273233c6cee4e1179b61b4458750d088e56a963962a8c3a55af40547dbff27396c21f5f10102250f67108072657d09efce0f60768b25d77a5fee21185db2bd452602d1ce556f7007bf5fd4c815f79d713dd7020d98d8073375d2f62a08964a744b8ab7a8207302deb7c29a911e4ce6d767013c20ee75ef7a556c1b6f849869cb01bfec28bfb91b0768526eb6269571d6028eaf51c3c6360f544224e75249512d53ad2cfd2f690d4b652d79002b43b9846a23c59c427f988de1913b675cd5d28f651e88764dd4007194551032535fdf803bf6168936cea86b57b2aff0404a0501bf841e263813abe143dadadcbc754cc553f7bfcc82c1d7cf6ef254ee489f069024cfeebd846ff620ec0a578ff2c393") r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) prlimit64(r3, 0x7, &(0x7f0000001540)={0xffffffff, 0x809}, &(0x7f0000000200)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) close(0x3) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x2100, 0x4) r5 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x2000) read(r5, &(0x7f0000001840)=""/180, 0xb4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0xffff, 0x70bd2b}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bind$xdp(r5, &(0x7f0000000040)={0x2c, 0x0, r8, 0x35, r0}, 0x10) 31.792122559s ago: executing program 2 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r4, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) syz_emit_ethernet(0x14, &(0x7f0000000340)=ANY=[], 0x0) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, 0x0, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}, 0x1, 0x80969800}, 0x54) 30.622760413s ago: executing program 2 (id=42): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4c, 0x3, 0x0, 0x2, 0x1000000000000004, 0x7ff, 0xfa10, 0x3}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x4, 0x1) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000080)={0x200001}) listen(r2, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xc, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @private=0xa010102}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x4e22, @remote}}, 0x1, 0x8000}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e23, 0x205, @empty, 0xfffffff3}}, 0x1, 0x0, 0x20000, 0x85, 0x12, 0x0, 0x4}, 0x9c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = socket(0x27, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x2, &(0x7f0000000000)=0xffffffff, 0x4) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) 28.535685764s ago: executing program 2 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0xc, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4044004) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) bind$vsock_stream(r5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x20, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r7, 0x7cb, &(0x7f0000000040)={0x3, 0x2, 0x3}) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x20, 0x24, 0x3b, {0x3b, 0x22, "aeccfc56d9a64a9790ca2a36d4b682c06b5b9f18b14ef3e02cfaedcf03dd092a98bf6a3f6c2b48e5f4e67e7ad62122d39743c6adb2e8af145d"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)={0x40, 0x14, 0xd9, "c2799e9497d2a5b51fc570d96f57866183c73b7d2a2099ca8906e4e26955c4d41973bf104f63f0d472bf24a6492a0308bfbbaf7f68cdb25b38eb39bff84401aae06ce894edb487b5bf454c2b931496e0ad3e9c1944172bf9d2873e80ddd5298fabe42375f606c416e36c0f63d548922050768d1f4a0cbb84b00da9e7c0101f1b4265b4f303eb8440e2ff851503e40e0dbdb601d2e7be22984f4c177aa0c2841a74f18fa697376cede389f4ad100c4df3b1e4a96f32c40dedf7c18d2e52141fc6c99d71c15fa6c8688cec7a5a506c0795870c180f025a5657b1"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xab}, &(0x7f00000005c0)={0xc0, 0x5, 0x3, "fa74e4"}, &(0x7f0000000680)={0x40, 0x5, 0x5, "e1b2b86cd8"}}) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f0000000640)={0x2e, &(0x7f0000000640)}) 16.601744645s ago: executing program 4 (id=78): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000005c0)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 15.453255867s ago: executing program 0 (id=80): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000000000000000850000007b00000095"], 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x5, r1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa401020301090224000100000000090400"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) fstat(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) 13.672274778s ago: executing program 0 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x11, 0x3, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x1200, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 12.855893132s ago: executing program 32 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0xc, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4044004) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) bind$vsock_stream(r5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x20, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r7, 0x7cb, &(0x7f0000000040)={0x3, 0x2, 0x3}) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x20, 0x24, 0x3b, {0x3b, 0x22, "aeccfc56d9a64a9790ca2a36d4b682c06b5b9f18b14ef3e02cfaedcf03dd092a98bf6a3f6c2b48e5f4e67e7ad62122d39743c6adb2e8af145d"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)={0x40, 0x14, 0xd9, "c2799e9497d2a5b51fc570d96f57866183c73b7d2a2099ca8906e4e26955c4d41973bf104f63f0d472bf24a6492a0308bfbbaf7f68cdb25b38eb39bff84401aae06ce894edb487b5bf454c2b931496e0ad3e9c1944172bf9d2873e80ddd5298fabe42375f606c416e36c0f63d548922050768d1f4a0cbb84b00da9e7c0101f1b4265b4f303eb8440e2ff851503e40e0dbdb601d2e7be22984f4c177aa0c2841a74f18fa697376cede389f4ad100c4df3b1e4a96f32c40dedf7c18d2e52141fc6c99d71c15fa6c8688cec7a5a506c0795870c180f025a5657b1"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xab}, &(0x7f00000005c0)={0xc0, 0x5, 0x3, "fa74e4"}, &(0x7f0000000680)={0x40, 0x5, 0x5, "e1b2b86cd8"}}) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f0000000640)={0x2e, &(0x7f0000000640)}) 10.969664241s ago: executing program 0 (id=86): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000d40)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001400)="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", 0x7c4}], 0x1}, 0x0) r2 = io_uring_setup(0x38ef, &(0x7f0000000380)={0x0, 0x1d038, 0x100, 0xfefffffe, 0x3af}) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x13, &(0x7f0000001bc0), 0x2) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000080)='10 1\x00', 0x5) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r4) r6 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r6, @ANYBLOB="8c083617a130b56b9d32814184051ec5d5acb6386d40b02856bd8e5b5573871f0e2fbaa3fbf10992099f36204b6456e87e6363c201"], 0x3c}}, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='10\x00', 0x3) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r9 = dup(r8) mmap(&(0x7f0000879000/0x3000)=nil, 0x3000, 0x200000f, 0x28011, r9, 0x5ad3a000) 10.712111422s ago: executing program 4 (id=88): fsopen(0x0, 0x0) r0 = socket(0x2, 0x3, 0xff) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10, 0x40, 0x0, 0x0, 0x0, 0x1}, [@FRA_FLOW={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x2000200000000003, r2, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x5}, 0x2b) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)}, 0x40012143) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x38, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x68}, 0x1, 0x0, 0x0, 0x20008050}, 0x40805) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20004045, &(0x7f0000000300)={0xa, 0x4e23, 0x39b, @remote, 0xbf36}, 0x18) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) 8.896802873s ago: executing program 4 (id=91): r0 = syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09051b00200007039a0705d15b89f26d09050903"], &(0x7f0000000a40)={0x0, 0x0, 0xfffffffffffffe91, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@getchain={0x2c, 0x66, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x7}, {0x7, 0x10}, {0x0, 0x5}}, [{0x8, 0xb, 0x6c2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) sendmsg(0xffffffffffffffff, &(0x7f0000003740)={&(0x7f0000000940)=@ax25={{0x3, @bcast, 0x3}, [@null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000c00)="e160b1e651858f5ce79c073845ddd5f190f379daaf81ce9e39b71f835ffc3e19db90b66ef3271082d4abebfaaf43946b08a672e8ac0fd5655a4e8daeeb6a722b7dd2ef38e2b0f845bee3246d9528ef63b74cac9ac8981ba4da24160e646fe267dd5085b9000b4a66246f96ee484fa484603e27918eb4589bb18ebd1b35efb7a10c6fa25a6d5d1c772c0a0fe517718cd769ab3458dc4c691f97c2a3e0e89ecec530caa221db20edf8df84febb403a5deef0ca8680809e0e11af1537682db504a83a532d7da5e4de3e9654c7b438f8dc03cde282253bc19cd4f0ceb3d1c9728eef385ad8cdd25c8778aef153741af379c45509dedb", 0xf4}, {&(0x7f0000000d00)="620bc9c9e897004360a536bb922bd7a98f717acef46a99466068141b352bd938a48aa8a601a0f5c4023704e53ab11f351808f13db3ac452728fb575b946f08bea466a097203d671890dcfd3526eb98854f513e6f7cb3edb1c5688d6eb86ec749fa4ee74697160d84bc2c54894ddf1e81af54e23e9486bf9fd7f945f4cf4cc8c3a4a06ee36710cc80fc74849d2ed2fd51460868f5c99e234d5dd880b9de1c8d2e2aa50990f5eeca91be9f1e84073abbcc9627501264d64ebdb77250b5620d3f607614b898fb00be0537d336651a0330d6f0d77184ee34582793aa0f78e5449fb9b3081de1", 0xe4}], 0x2, &(0x7f0000002340)=[{0xa8, 0x103, 0xffff, "b4d319fd8d289a145383523ed74e668ec793e63bdc167570087375f6dfb84ff8607b98409c182a066fade11c67769d92d9889c8b68e4c9cd659b9f0deeb504573f6c96066284064069224966294ad85650ae1bb8e418424b112278bad3fd40e2484a0366796a508cedb1f729f65d782098dd5498e192251a73bf3efd23309756208c75ecfe14afa62e38cfadbdbb667365"}, {0x108, 0x117, 0x6, "5d4b974f8b6993aba43888a3e76c493ea862ab959617e034114fca2fc8b89c8e15d3ed0ec976261ddd2e480a4bb84da0555fa6ba3d5f76d3b9b69b07f70ab66d58a684e5aaa7e04ba5436676fbc8f3cf5ccb887f958cb9ddebfa34024d6ae6426016e6be1703f955e14c2b4fb1d0ddf968d6394870719d71e7c2bef23c352fa43f36b7d3654a08cd4329cce0fbf1881183078fcd87608d319de8d66c58841491bf5afeca64461181788f36c74cf3a15c3ce2df83b72909df25f69bdedf0d3c7fd0ded83b2bca6aa2957c3a222026da4b5c1cdfc60acbdf4a47c71ea10c1f1889a0b968d7471402769af94aa6414f9f9976a2aed83d58c0"}, {0x18, 0x112, 0x1, "c6c5ada4"}, {0xc8, 0x101, 0x23800000, "38e6aba6fbc4351585d90e58e1c3f7b3e90413cacee6d6b8579d812763d70f22d454618d33a29a5a9c9399986b2104b489f8d2e6357391afe0fcc7577e30fc46f3c911b7adcba2b8eb132a9bf120a3d4f0745e2add2b49d3b4bb2b8673708bbbef4e0cf1c4e69fec4ad4b90a98c5fefd8a5ad448eb2f9e350ea89e436e05b54a6f6b604bc6d37bfd034516f5b9e774de00527595e6583093e6e43dc8b44b73631cab489b87431c0daec8f9f358fec1ae70"}, {0x78, 0x118, 0x9, "607b561f446703beb1a57eabf2aa2b939bd02a146cd82786631fe65ff22510b90034f11656fab1cfb08edf7ec3180cdcefad872ca60518a9eec7e4bdf57682b72a46814f9e1bfd5342cac7d13020e3e6bcddc4b342948031af0d742e85a2738b0581"}, {0xe8, 0x115, 0x1, "cb5dbf258708a778f4e0d67931b74a00cbcb684628dd6a28ef9663ab0eeef95f94e4bfb4c9c84bd15d5cbd5ce654469f585d684353cb386b0755933b2cf5799b6c58ba9b465e998566752acff22ea9380221595ff86cb83be9d1a802a2caa62d195e0c9b14899bf5164cabf0093af1f8cc39e551856ff3748c0c5381e18c32e050ca7f29cb31317a1fa49e7cd36e6bbf7ea5f25b2f38091ee2d5fd29ca2a3fcde56107a0b10df2a9b10c8cf4cf4b8bee9cb3a41fd7b9e2f339b5b70007bdcb4aaa254ac08fefe1bb40c251291e15450f0bad"}, {0x1010, 0x0, 0x18, "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"}], 0x1400}, 0x4008080) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'gre0\x00', r4, 0x0, 0x20, 0xf3, 0x2, {{0x13, 0x4, 0x0, 0x4, 0x4c, 0x65, 0x0, 0xd, 0x4, 0x0, @multicast2, @loopback, {[@rr={0x7, 0xb, 0xf5, [@rand_addr=0x64010100, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0x73, 0x3, 0x1, [{@empty, 0x81}, {@local}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x9}]}, @rr={0x7, 0x7, 0x77, [@broadcast]}]}}}}}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x21, @string={0x21, 0x3, "16860bf8a2fbab7865b57217e555c55145ae6ea14b5ee00e04935fb337d4b4"}}, 0x0, 0x0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080), 0x4) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002040)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000000c0)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r7, &(0x7f0000000080)='4', 0x1) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x40, 0xb, 0x34, {0x34, 0x31, "59fb9d15fb9049666b29a9a0530ea0d215ccd0d8da0d93878b49c09a57ed6085d5e0c7a853b38b5237612ae7b457332bb874"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, &(0x7f0000000200)={0x0, 0xf, 0x9e, {0x5, 0xf, 0x9e, 0x5, [@generic={0x52, 0x10, 0x2, "5eac3b566c3e41d2fcdd8b4f16da405d3187cc20432e87a32dad8e270b1bda6e2c8fb4ebd734184b68dfde811a75c739bcfce2f68d7ee2982dcae90db839dcd2f5f6dc23ae4358349960063d81c6b1"}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x4, 0x7, 0x100, [0xf0, 0xc000, 0x3f00, 0xc0c0, 0x3fc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "8e0fe35879005dbba84e48cf41f165ac"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x0, 0xf000, 0xcaa}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x81, 0x8, "cf3ba3c2", "e4f0659b"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x1c23e310753aa0d3, 0x2, 0x7, 0x8, 0x8, 0xf23}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x20, 0x16, 0x77, "4029ed8069420cde92797c6a65f7452bf50b5576e261eea480730a818ca269a8ddf04413898585644824da21eef9a8445ca96251de1098782865d0dc171efeac792bb21e778e21a9db3f1911eb4be0b647e9abc9e70a496d12d2966a3d62191ccd6d5058940a66a75d86ff30b53a283ef92a42c2eae437"}, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480)={0x20, 0x0, 0x4}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0xa0, 0x8, [0xf1e0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x33}, &(0x7f0000000580)={0x40, 0xb, 0x2, "8757"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x1000}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, 'B\r'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x7ec0}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xca}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x8}}) write(r6, &(0x7f0000000080)='4', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000f40)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000e40)="cd0454ee00ccf85dd1e0d0d9f576aea30cc7f18b00b6b33f81030fa5e0e0e4b30b82cbcdf9de482040835ab08705918c25e356ec5f8c9afa2093c52e969b234cfc476376f7ed7477e3f67dde46619cf51a58fc80b45063ea6732266f60429df9e5c04228a964550be708f8d1c713aad72ab6f27db2bbfd02d7fbf475bd79fd419b0531185f7de16b2c30767f75a845d55450929fc0aad77fc3f4282e5547d2c8625f47e9e194cce5c9f0bd8eb6a3b32a42d4a22fc4623d3c17c1a1056dac7e08ee04bfa97b8ad382dd3a3b1c1c4b4f3b7af7faf754d1", 0xd6, r2}, 0x68) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x44, &(0x7f0000001e00)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.589663184s ago: executing program 1 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="257ed0f891e7"}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) 5.314044394s ago: executing program 1 (id=96): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000300)={0x4, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d0007", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x100, 0xb, 0x3, 0x2, 0x1, 0x102, 0x3, 0x20000000, 0x8, 0xb, 0xffffffff, 0xb51, 0x80000001, 0x400, 0x3, 0xe, 0x9, 0x1, 0xfe9, 0xff, 0x6, 0x2, 0x6, 0x8, 0x4c, 0x2, 0x6, 0x6a77, 0x8000005, 0x7fffffff, 0xa, 0xfffffffc]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r3, 0x0, 0x0) shutdown(r3, 0x1) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRES8=r3], 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x13000000, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r6, 0x0, &(0x7f0000001700)=""/4096}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6a521}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 4.694229831s ago: executing program 1 (id=98): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000300)=0x2) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7fa0ff00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) 4.686668048s ago: executing program 1 (id=99): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x800, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="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") r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) prlimit64(r4, 0x7, &(0x7f0000001540)={0xffffffff, 0x809}, &(0x7f0000000200)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) close(0x3) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x2100, 0x4) r5 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x2000) read(r5, &(0x7f0000001840)=""/180, 0xb4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0xffff, 0x70bd2b}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4.112766022s ago: executing program 1 (id=101): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) 3.981487502s ago: executing program 1 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x88002, 0x0) write(r0, &(0x7f0000000180)='12', 0x2) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x80042, 0x0, 0x1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1190, &(0x7f0000000040)={0x0, 0x42a6, 0xc000, 0x4, 0xde, 0x0, r0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x501, 0x60000000, 0x0, 0xfffffe80, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(r0, 0x0, 0x4004844) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x22, 0x3, 0x6) getpeername$l2tp6(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x5, {{0xa, 0x4e22, 0x3ff, @empty, 0x6}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfaa4}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3.117031505s ago: executing program 0 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0x1, &(0x7f0000000600)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r6) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0xfffffffffffffee7, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xf}, {0xd}}}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x20) ioctl$TIOCSPGRP(r9, 0x5410, &(0x7f0000000280)=r0) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 3.067473862s ago: executing program 3 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) r2 = getpid() (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r3, &(0x7f0000000080)="cf0df04c73b3", 0x6) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000002380)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000100)="023dd75a35f825cb6e5fb77b65b72e9a114679063b140081e3773b0404d478e79a8eb674df110cf255d85a3fbc0e1ba47797b5d32c86d15bda89a3", 0x3b}], 0x2, 0x0, 0x0, 0x4004040}}], 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) (async, rerun: 64) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) io_submit(r9, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_pgetevents(r7, 0x5, 0x1, &(0x7f0000000080)=[{}], 0x0, 0x0) shutdown(r6, 0x0) 2.195169063s ago: executing program 3 (id=105): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 2.03721973s ago: executing program 3 (id=106): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000080)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x5f9aaf05fcd530b6, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) ioctl(r1, 0xc138fd02, &(0x7f0000000000)="0400000000000000000000003801") sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) 2.035357714s ago: executing program 0 (id=107): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x800, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="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") r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) prlimit64(r4, 0x7, &(0x7f0000001540)={0xffffffff, 0x809}, &(0x7f0000000200)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) close(0x3) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x2100, 0x4) r6 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x2000) read(r6, &(0x7f0000001840)=""/180, 0xb4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0xffff, 0x70bd2b}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bind$xdp(r6, &(0x7f0000000040)={0x2c, 0x0, r9, 0x35, r0}, 0x10) getsockopt$MRT6(r6, 0x29, 0xce, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 1.606272771s ago: executing program 3 (id=108): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7fa0ff00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) 1.393832464s ago: executing program 3 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) setresgid(0xee00, 0x0, 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x49940, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='net/mcfilter\x00') bpf$PROG_LOAD(0x2, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$midi(r6, &(0x7f00000001c0)=""/70, 0xffffffd8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r7, &(0x7f0000000380)='100000', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) 361.181865ms ago: executing program 4 (id=110): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) 217.960669ms ago: executing program 4 (id=111): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) 99.131535ms ago: executing program 4 (id=112): socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r0 = syz_io_uring_setup(0xf0a, &(0x7f0000000400)={0x0, 0xdde5, 0x800, 0x1, 0x203}, &(0x7f0000000180)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x3208}, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) pause() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0xa) fchdir(r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0xffffffffffffbfff) sched_setscheduler(r6, 0x3, &(0x7f0000000240)=0x57) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000000400000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000004000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0xfffffffffffffdd8, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r9, &(0x7f0000000040)=0x800000000001e8, 0x12) r10 = socket$inet(0x2, 0x2, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r11, 0x4b47, 0x0) sendmsg$inet(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x24008004) ioctl$BLKTRACESETUP(r9, 0xc0481273, 0x0) socket(0x10, 0x3, 0x0) 89.886548ms ago: executing program 3 (id=113): r0 = socket(0x1e, 0x4, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x4f8f1592, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={r5, 0xffff, 0x30}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={r5, 0x0, &(0x7f0000000140)}, &(0x7f0000000180)=0x10) setuid(0xee01) utime(&(0x7f0000000200)='.\x00', 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x4, 0x2, 0xd, 0xfd, 0x200, 0x6f43}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) read$alg(r1, &(0x7f0000000280)=""/55, 0x37) sendto$inet6(r6, &(0x7f0000000040)="03", 0xffe0, 0x1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) 0s ago: executing program 0 (id=114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x334) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x40000000, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 60.934717][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 60.934732][ T29] audit: type=1400 audit(1786070652.033:129): avc: denied { mounton } for pid=5582 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.964816][ T29] audit: type=1400 audit(1786070652.063:130): avc: denied { mount } for pid=5582 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.967417][ T5582] cgroup: Unknown subsys name 'net' [ 60.993670][ T29] audit: type=1400 audit(1786070652.093:131): avc: denied { unmount } for pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.128870][ T5582] cgroup: Unknown subsys name 'cpuset' [ 61.137470][ T5582] cgroup: Unknown subsys name 'rlimit' [ 61.255099][ T29] audit: type=1400 audit(1786070652.353:132): avc: denied { setattr } for pid=5582 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.288646][ T29] audit: type=1400 audit(1786070652.363:133): avc: denied { create } for pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.320921][ T29] audit: type=1400 audit(1786070652.363:134): avc: denied { write } for pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.341569][ T29] audit: type=1400 audit(1786070652.363:135): avc: denied { read } for pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.362133][ T29] audit: type=1400 audit(1786070652.373:136): avc: denied { mounton } for pid=5582 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 61.387232][ T29] audit: type=1400 audit(1786070652.373:137): avc: denied { mount } for pid=5582 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 61.411653][ T5584] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 61.420951][ T29] audit: type=1400 audit(1786070652.533:138): avc: denied { relabelto } for pid=5584 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.402150][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.556658][ T5601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.567376][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.574673][ T5607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.585962][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.594115][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.601225][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.608059][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.608469][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.616301][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.624437][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.632121][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.640847][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.648327][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.657611][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.658050][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.666814][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.679861][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.688117][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.696297][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.705577][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.712964][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.722049][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.737394][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.752935][ T5601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.762664][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.898525][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.905569][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.962944][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.970753][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.978068][ T5596] bridge_slave_0: entered allmulticast mode [ 65.984788][ T5596] bridge_slave_0: entered promiscuous mode [ 65.996223][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.003305][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.012957][ T5595] bridge_slave_0: entered allmulticast mode [ 66.019910][ T5595] bridge_slave_0: entered promiscuous mode [ 66.043978][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.051210][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.058387][ T5596] bridge_slave_1: entered allmulticast mode [ 66.065080][ T5596] bridge_slave_1: entered promiscuous mode [ 66.077905][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.085014][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.092180][ T5595] bridge_slave_1: entered allmulticast mode [ 66.098930][ T5595] bridge_slave_1: entered promiscuous mode [ 66.157600][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.164781][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.172188][ T5594] bridge_slave_0: entered allmulticast mode [ 66.178926][ T5594] bridge_slave_0: entered promiscuous mode [ 66.187973][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.207196][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.218410][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.227683][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.235258][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.242542][ T5594] bridge_slave_1: entered allmulticast mode [ 66.249422][ T5594] bridge_slave_1: entered promiscuous mode [ 66.257564][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.341347][ T5596] team0: Port device team_slave_0 added [ 66.349075][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.359735][ T5595] team0: Port device team_slave_0 added [ 66.365870][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.373058][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.380333][ T5597] bridge_slave_0: entered allmulticast mode [ 66.387299][ T5597] bridge_slave_0: entered promiscuous mode [ 66.394154][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.401445][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.408731][ T5608] bridge_slave_0: entered allmulticast mode [ 66.415386][ T5608] bridge_slave_0: entered promiscuous mode [ 66.423798][ T5596] team0: Port device team_slave_1 added [ 66.431003][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.448433][ T5595] team0: Port device team_slave_1 added [ 66.454276][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.461889][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.469230][ T5597] bridge_slave_1: entered allmulticast mode [ 66.476026][ T5597] bridge_slave_1: entered promiscuous mode [ 66.482720][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.489992][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.497191][ T5608] bridge_slave_1: entered allmulticast mode [ 66.503878][ T5608] bridge_slave_1: entered promiscuous mode [ 66.548078][ T5594] team0: Port device team_slave_0 added [ 66.573297][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.580345][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.606684][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.619494][ T5594] team0: Port device team_slave_1 added [ 66.625856][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.632903][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.658833][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.671636][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.683009][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.692620][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.699717][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.726451][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.726476][ T5605] Bluetooth: hci2: command tx timeout [ 66.753735][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.760771][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.775675][ T5601] Bluetooth: hci0: command tx timeout [ 66.786961][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.792818][ T5605] Bluetooth: hci3: command tx timeout [ 66.808823][ T5612] Bluetooth: hci1: command tx timeout [ 66.811009][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.825836][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.856150][ T5601] Bluetooth: hci4: command tx timeout [ 66.856446][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.868663][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.894753][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.920314][ T5608] team0: Port device team_slave_0 added [ 66.933361][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.940351][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.966545][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.986052][ T5597] team0: Port device team_slave_0 added [ 66.993148][ T5608] team0: Port device team_slave_1 added [ 67.018342][ T5597] team0: Port device team_slave_1 added [ 67.034807][ T5595] hsr_slave_0: entered promiscuous mode [ 67.041408][ T5595] hsr_slave_1: entered promiscuous mode [ 67.053315][ T5596] hsr_slave_0: entered promiscuous mode [ 67.059618][ T5596] hsr_slave_1: entered promiscuous mode [ 67.065535][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 67.071302][ T5596] Cannot create hsr debugfs directory [ 67.115938][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.122960][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.148919][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.174578][ T5594] hsr_slave_0: entered promiscuous mode [ 67.180997][ T5594] hsr_slave_1: entered promiscuous mode [ 67.187055][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 67.192770][ T5594] Cannot create hsr debugfs directory [ 67.199090][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.206089][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.232010][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.243336][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.250502][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.276681][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.307564][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.314594][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.341192][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.432530][ T5608] hsr_slave_0: entered promiscuous mode [ 67.438786][ T5608] hsr_slave_1: entered promiscuous mode [ 67.444646][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 67.450608][ T5608] Cannot create hsr debugfs directory [ 67.469844][ T5597] hsr_slave_0: entered promiscuous mode [ 67.476046][ T5597] hsr_slave_1: entered promiscuous mode [ 67.481941][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 67.487827][ T5597] Cannot create hsr debugfs directory [ 67.766300][ T5595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.776724][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.790338][ T5595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.800220][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.808231][ T5595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.818322][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.837554][ T5595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.847389][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.895404][ T5596] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.906920][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.920446][ T5596] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.930209][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.942130][ T5596] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.951867][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.961878][ T5596] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.970485][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.039725][ T5594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.049407][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.057743][ T5594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.066975][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.074802][ T5594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.084178][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.091967][ T5594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.100764][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.178762][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.189748][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.198823][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.208381][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.223195][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.231674][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.248227][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.257158][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.266822][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.344077][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.353528][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.361590][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.370514][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.380132][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.394143][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.401041][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.411132][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.419101][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.427866][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.438408][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.445799][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.469456][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.476588][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.527255][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.553233][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.560326][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.570246][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.577348][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.592370][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.621690][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.655298][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.662419][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.672306][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.679414][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.724884][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 68.724900][ T29] audit: type=1400 audit(1786070659.823:153): avc: denied { sys_module } for pid=5595 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.730322][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.777874][ T5601] Bluetooth: hci2: command tx timeout [ 68.834275][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.855886][ T5601] Bluetooth: hci3: command tx timeout [ 68.855905][ T5605] Bluetooth: hci1: command tx timeout [ 68.861360][ T5601] Bluetooth: hci0: command tx timeout [ 68.873161][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.893398][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.900600][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.932554][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.939734][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.946407][ T5601] Bluetooth: hci4: command tx timeout [ 68.969950][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.008571][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.015726][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.043839][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.050997][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.328889][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.707200][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.819266][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.874632][ T5596] veth0_vlan: entered promiscuous mode [ 69.958029][ T5596] veth1_vlan: entered promiscuous mode [ 69.969074][ T5595] veth0_vlan: entered promiscuous mode [ 69.982541][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.004613][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.019345][ T5595] veth1_vlan: entered promiscuous mode [ 70.028108][ T5594] veth0_vlan: entered promiscuous mode [ 70.050058][ T5594] veth1_vlan: entered promiscuous mode [ 70.074961][ T5596] veth0_macvtap: entered promiscuous mode [ 70.100738][ T5596] veth1_macvtap: entered promiscuous mode [ 70.111064][ T5597] veth0_vlan: entered promiscuous mode [ 70.131423][ T5597] veth1_vlan: entered promiscuous mode [ 70.151048][ T5595] veth0_macvtap: entered promiscuous mode [ 70.167566][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.178889][ T5595] veth1_macvtap: entered promiscuous mode [ 70.201954][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.218877][ T5594] veth0_macvtap: entered promiscuous mode [ 70.229754][ T5608] veth0_vlan: entered promiscuous mode [ 70.246097][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.253766][ T5594] veth1_macvtap: entered promiscuous mode [ 70.265052][ T5608] veth1_vlan: entered promiscuous mode [ 70.277102][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.313216][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.325782][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.336804][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.357775][ T5597] veth0_macvtap: entered promiscuous mode [ 70.379144][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.388154][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.398894][ T5597] veth1_macvtap: entered promiscuous mode [ 70.415956][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.442834][ T5608] veth0_macvtap: entered promiscuous mode [ 70.453170][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.464997][ T3347] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.470531][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.479830][ T5608] veth1_macvtap: entered promiscuous mode [ 70.502429][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.543804][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.555749][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.563301][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.568494][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.595661][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.606189][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.617974][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.636879][ T29] audit: type=1400 audit(1786070661.743:154): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.1dGokq/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.665133][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.678148][ T29] audit: type=1400 audit(1786070661.743:155): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.683605][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.703821][ T29] audit: type=1400 audit(1786070661.743:156): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.1dGokq/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.716861][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.735268][ T29] audit: type=1400 audit(1786070661.743:157): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.744556][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.789312][ T1037] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.800599][ T29] audit: type=1400 audit(1786070661.773:158): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.1dGokq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.829007][ T677] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.843927][ T5596] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.846697][ T677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.872429][ T5601] Bluetooth: hci2: command tx timeout [ 70.875667][ T29] audit: type=1400 audit(1786070661.773:159): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.1dGokq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 70.877984][ T677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.908606][ T29] audit: type=1400 audit(1786070661.823:160): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.932860][ T29] audit: type=1400 audit(1786070661.883:161): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.955852][ T5601] Bluetooth: hci1: command tx timeout [ 70.955879][ T5601] Bluetooth: hci3: command tx timeout [ 70.966841][ T5605] Bluetooth: hci0: command tx timeout [ 70.967955][ T29] audit: type=1400 audit(1786070661.883:162): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="gadgetfs" ino=7634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.016390][ T5605] Bluetooth: hci4: command tx timeout [ 71.029627][ T677] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.110106][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.119060][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.134037][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.136412][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.167588][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.179573][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.196802][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.228922][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.238088][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.307611][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.347245][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.373603][ T3347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.387588][ T3347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.466600][ T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.493169][ T3347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.509202][ T3347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.536336][ T5793] file system registered [ 71.547948][ T78] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.569529][ T5795] macsec1: entered promiscuous mode [ 71.597550][ T3347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.620819][ T3347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.825933][ T5707] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.827886][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.028505][ T5707] usb 1-1: Using ep0 maxpacket: 8 [ 72.053799][ T5707] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 72.081370][ T5707] usb 1-1: config 0 has no interface number 0 [ 72.094154][ T5707] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 72.108719][ T5707] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.120361][ T5707] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 72.139036][ T5707] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 72.152320][ T5707] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 72.167593][ T5707] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.201784][ T5707] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 72.211767][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.237431][ T5707] usb 1-1: Product: syz [ 72.242454][ T5707] usb 1-1: Manufacturer: syz [ 72.242549][ T5707] usb 1-1: SerialNumber: syz [ 72.292519][ T5707] usb 1-1: config 0 descriptor?? [ 72.294602][ T5330] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.377598][ T5793] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 72.474720][ T5816] macsec1: entered promiscuous mode [ 72.697777][ T5599] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.706942][ T5330] usb 4-1: Using ep0 maxpacket: 32 [ 72.719596][ T5330] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 72.732243][ T5330] usb 4-1: config 0 has no interface number 0 [ 72.733298][ T5793] read descriptors [ 72.755008][ T5330] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 72.773854][ T5330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.786155][ T5793] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 72.809239][ T5330] usb 4-1: Product: syz [ 72.813956][ T5330] usb 4-1: Manufacturer: syz [ 72.843004][ T5822] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12'. [ 72.972152][ T5823] macsec1: entered promiscuous mode [ 73.045941][ T5599] usb 5-1: Using ep0 maxpacket: 8 [ 73.052309][ T5605] Bluetooth: hci2: command tx timeout [ 73.052557][ T5601] Bluetooth: hci0: command tx timeout [ 73.053051][ T5612] Bluetooth: hci3: command tx timeout [ 73.058708][ T5605] Bluetooth: hci1: command tx timeout [ 73.061110][ T5330] usb 4-1: SerialNumber: syz [ 73.103462][ T5612] Bluetooth: hci4: command tx timeout [ 73.104621][ T5599] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 73.234633][ T5330] usb 4-1: config 0 descriptor?? [ 73.247064][ T5599] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.309241][ T5599] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.360189][ T5599] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.387557][ T5599] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.421686][ T5599] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.461670][ T5707] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 73.492057][ T5599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.549365][ T5707] usb 1-1: USB disconnect, device number 2 [ 73.755686][ T5714] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.763023][ T5599] usb 5-1: usb_control_msg returned -32 [ 73.791578][ T5833] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14'. [ 73.866482][ T5599] usbtmc 5-1:16.0: can't read capabilities [ 73.916983][ T5714] usb 3-1: Using ep0 maxpacket: 8 [ 73.959031][ T5714] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 73.975373][ T5714] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 73.997779][ T5714] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 74.008925][ T5714] usb 3-1: config 250 has no interface number 0 [ 74.029646][ T5714] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 74.033208][ T5833] macsec1: entered promiscuous mode [ 74.094113][ T5714] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 74.106176][ T5714] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.114818][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 74.114832][ T29] audit: type=1400 audit(1786070665.213:216): avc: denied { write } for pid=5814 comm="syz.4.11" name="usbtmc0" dev="devtmpfs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 74.116854][ T5714] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 74.205951][ T29] audit: type=1400 audit(1786070665.303:217): avc: denied { read write } for pid=5808 comm="syz.3.8" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 74.235991][ T5596] ffs_data_put(): freeing [ 74.322132][ T5714] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 74.431257][ T5714] usb 3-1: config 250 interface 228 has no altsetting 0 [ 74.446252][ T5330] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 74.499085][ T5714] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 74.542844][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 74.559219][ T5842] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 74.607291][ T5714] usb 3-1: Product: syz [ 74.630092][ T5714] usb 3-1: SerialNumber: syz [ 74.699749][ T5714] hub 3-1:250.228: bad descriptor, ignoring hub [ 74.715900][ T5714] hub 3-1:250.228: probe with driver hub failed with error -5 [ 74.941809][ T5714] usblp 3-1:250.228: usblp1: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 75.614063][ T29] audit: type=1400 audit(1786070665.303:218): avc: denied { open } for pid=5808 comm="syz.3.8" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 75.919910][ T29] audit: type=1400 audit(1786070665.333:219): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 76.108725][ T29] audit: type=1400 audit(1786070665.353:220): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 76.312283][ T29] audit: type=1400 audit(1786070665.353:221): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.470850][ T5330] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 76.484508][ T29] audit: type=1400 audit(1786070665.353:222): avc: denied { allowed } for pid=5814 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.614535][ T29] audit: type=1400 audit(1786070665.353:223): avc: denied { create } for pid=5814 comm="syz.4.11" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.731312][ T29] audit: type=1400 audit(1786070665.413:224): avc: denied { write } for pid=5814 comm="syz.4.11" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 76.892214][ T29] audit: type=1400 audit(1786070665.413:225): avc: denied { open } for pid=5814 comm="syz.4.11" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.231427][ T5330] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 77.247398][ T5330] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 77.274415][ T5330] usb 4-1: USB disconnect, device number 2 [ 77.317509][ T5786] usb 5-1: USB disconnect, device number 2 [ 77.479485][ T5857] tipc: Started in network mode [ 77.510934][ T5857] tipc: Node identity ac14140f, cluster identity 4711 [ 77.549721][ T5857] tipc: New replicast peer: 255.255.255.255 [ 77.586736][ T5857] tipc: Enabled bearer , priority 10 [ 77.999952][ T5866] rt1719 0-0049: probe with driver rt1719 failed with error -5 [ 78.021222][ T5866] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 78.050083][ T5868] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 78.351877][ T5858] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 78.559117][ T5870] bond1: entered promiscuous mode [ 78.587043][ T5714] tipc: Node number set to 2886997007 [ 79.014099][ T5880] netlink: 156 bytes leftover after parsing attributes in process `syz.2.26'. [ 79.136631][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 79.136645][ T29] audit: type=1400 audit(1786070670.193:253): avc: denied { open } for pid=5873 comm="syz.3.24" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.244324][ T5880] macsec1: entered promiscuous mode [ 79.311173][ T5868] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 79.330799][ T29] audit: type=1400 audit(1786070670.433:254): avc: denied { ioctl } for pid=5873 comm="syz.3.24" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.380852][ T5881] input: syz0 as /devices/virtual/input/input5 [ 79.439621][ T187] usb 3-1: USB disconnect, device number 2 [ 79.448249][ T29] audit: type=1400 audit(1786070670.463:255): avc: denied { name_bind } for pid=5873 comm="syz.3.24" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 79.482033][ T187] usblp1: removed [ 79.546093][ T5330] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.553720][ T5786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.706537][ T5786] usb 2-1: Using ep0 maxpacket: 8 [ 79.711645][ T5330] usb 5-1: Using ep0 maxpacket: 8 [ 79.730070][ T5786] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 79.746732][ T5786] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.757567][ T5330] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 79.767805][ T5330] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.782147][ T29] audit: type=1400 audit(1786070670.873:256): avc: denied { mount } for pid=5873 comm="syz.3.24" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 79.804897][ T5786] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.819509][ T5330] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.833458][ T5786] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.844760][ T5330] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.858982][ T5786] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.872632][ T5330] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.896802][ T5786] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.912174][ T5893] netlink: 156 bytes leftover after parsing attributes in process `syz.0.30'. [ 79.929701][ T5330] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.938989][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.947194][ T5330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.052992][ T5728] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.177227][ T5714] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 80.179341][ T5893] macsec1: entered promiscuous mode [ 80.279150][ T5728] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 80.302775][ T5728] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 80.305260][ T5786] usb 2-1: usb_control_msg returned -32 [ 80.313930][ T5728] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 80.328625][ T5786] usbtmc 2-1:16.0: can't read capabilities [ 80.340100][ T5728] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 80.364873][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.371749][ T5330] usb 5-1: usb_control_msg returned -32 [ 80.386685][ T5330] usbtmc 5-1:16.0: can't read capabilities [ 80.400904][ T5714] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.414765][ T5874] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.439343][ T5728] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 80.450845][ T5714] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 80.465547][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.479185][ T5728] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 80.501834][ T5714] usb 3-1: config 0 descriptor?? [ 80.662170][ T1210] usb 4-1: USB disconnect, device number 3 [ 80.678535][ T1210] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 80.690450][ T1210] cyberjack 4-1:1.0: device disconnected [ 80.838757][ T29] audit: type=1400 audit(1786070671.923:257): avc: denied { ioctl } for pid=5894 comm="syz.2.31" path="ipc:[4026532797]" dev="nsfs" ino=4026532797 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 80.997059][ T5904] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 82.936427][ T10] cfg80211: failed to load regulatory.db [ 83.704407][ T29] audit: type=1400 audit(1786070674.803:258): avc: denied { setopt } for pid=5894 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.350172][ T29] audit: type=1400 audit(1786070675.453:259): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 84.423343][ T5714] usb 3-1: string descriptor 0 read error: -71 [ 84.436675][ T5714] cypress_m8 3-1:0.0: DeLorme Earthmate USB converter detected [ 84.463558][ T5714] earthmate ttyUSB0: required endpoint is missing [ 84.488806][ T5714] usb 3-1: USB disconnect, device number 3 [ 84.500080][ T5714] cypress_m8 3-1:0.0: device disconnected [ 84.631741][ T29] audit: type=1400 audit(1786070675.733:260): avc: denied { append } for pid=5915 comm="syz.0.35" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.694995][ T29] audit: type=1400 audit(1786070675.763:261): avc: denied { ioctl } for pid=5915 comm="syz.0.35" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.797141][ T29] audit: type=1400 audit(1786070675.903:262): avc: denied { create } for pid=5915 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.830554][ T29] audit: type=1400 audit(1786070675.903:263): avc: denied { read } for pid=5915 comm="syz.0.35" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.857258][ T29] audit: type=1400 audit(1786070675.903:264): avc: denied { open } for pid=5915 comm="syz.0.35" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.881952][ T29] audit: type=1400 audit(1786070675.903:265): avc: denied { ioctl } for pid=5915 comm="syz.0.35" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.022621][ T29] audit: type=1400 audit(1786070676.123:266): avc: denied { setopt } for pid=5922 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.046730][ T29] audit: type=1400 audit(1786070676.153:267): avc: denied { map } for pid=5922 comm="syz.0.37" path="socket:[8162]" dev="sockfs" ino=8162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.071888][ T29] audit: type=1400 audit(1786070676.153:268): avc: denied { read } for pid=5922 comm="syz.0.37" path="socket:[8162]" dev="sockfs" ino=8162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.104544][ T5699] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.276537][ T5699] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 85.290213][ T5699] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65535, setting to 1024 [ 85.318885][ T5926] macsec1: entered promiscuous mode [ 85.325073][ T5699] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 85.350526][ T5699] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.380818][ T5699] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 85.391691][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.498747][ T5914] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.866806][ T5933] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 85.879281][ T5933] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 85.964913][ T5933] bond1: entered promiscuous mode [ 86.142131][ T5906] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 86.252753][ T5786] usb 2-1: USB disconnect, device number 2 [ 86.597862][ T5919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.813104][ T10] usb 5-1: USB disconnect, device number 3 [ 86.833777][ T5919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.983788][ T5938] binder: BINDER_SET_CONTEXT_MGR already set [ 87.032632][ T5938] binder: 5937:5938 ioctl 4018620d 200000004a80 returned -16 [ 87.155174][ T5948] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20002 [ 87.351699][ T5699] gud 4-1:1.0: probe with driver gud failed with error -71 [ 87.386892][ T5699] usb 4-1: USB disconnect, device number 4 [ 87.416979][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.545084][ T5961] input: syz0 as /devices/virtual/input/input7 [ 87.556303][ T10] usb 5-1: device descriptor read/64, error -71 [ 87.571316][ T5963] syz.1.46 uses obsolete (PF_INET,SOCK_PACKET) [ 87.671235][ T5963] syzkaller0: entered promiscuous mode [ 87.691913][ T5963] syzkaller0: entered allmulticast mode [ 87.825700][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.986940][ T10] usb 5-1: device descriptor read/64, error -71 [ 88.116669][ T10] usb usb5-port1: attempt power cycle [ 88.145819][ T5714] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.317892][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 88.330557][ T5714] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 88.362070][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 88.380236][ T5714] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 88.395518][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.437283][ T5959] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.447731][ T5714] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 88.475687][ T5714] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 88.475760][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 88.556274][ T10] usb 5-1: device descriptor read/8, error -71 [ 88.692315][ T5714] usb 1-1: USB disconnect, device number 3 [ 88.719518][ T5714] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 88.750428][ T5714] cyberjack 1-1:1.0: device disconnected [ 88.805731][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 88.841059][ T10] usb 5-1: device descriptor read/8, error -71 [ 88.957602][ T10] usb usb5-port1: unable to enumerate USB device [ 89.535532][ T5727] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.718239][ T5727] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 89.728280][ T5727] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 89.737485][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.757694][ T5977] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 89.769293][ T5727] opticon 3-1:1.0: opticon converter detected [ 89.784017][ T5727] usb 3-1: opticon converter now attached to ttyUSB0 [ 89.795540][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 89.810883][ T5983] lo speed is unknown, defaulting to 1000 [ 89.823472][ T5983] lo speed is unknown, defaulting to 1000 [ 89.839041][ T5983] lo speed is unknown, defaulting to 1000 [ 90.046021][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 90.053311][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 90.053729][ T29] audit: type=1400 audit(1786070681.113:350): avc: denied { ioctl } for pid=5988 comm="syz.1.53" path="socket:[9294]" dev="sockfs" ino=9294 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.100041][ T5990] netlink: 156 bytes leftover after parsing attributes in process `syz.1.53'. [ 90.123444][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 90.132008][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.147244][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.170796][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.193171][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.211169][ T5990] macsec1: entered promiscuous mode [ 90.229281][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.246789][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.570394][ T10] usb 4-1: usb_control_msg returned -32 [ 90.586986][ T10] usbtmc 4-1:16.0: can't read capabilities [ 90.611761][ T5714] lo speed is unknown, defaulting to 1000 [ 90.619500][ T5983] infiniband syz0: set active [ 90.641982][ T5983] infiniband syz0: added lo [ 90.673230][ T5983] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 90.706076][ T29] audit: type=1400 audit(1786070681.813:351): avc: denied { bind } for pid=5976 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.842094][ T5997] netlink: 164 bytes leftover after parsing attributes in process `syz.4.54'. [ 90.873995][ T5997] macsec1: entered promiscuous mode [ 90.935373][ T5983] infiniband syz0: Couldn't open port 1 [ 91.251024][ T5983] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 91.271281][ T5983] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 91.290874][ T5983] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 91.440589][ T5977] lo speed is unknown, defaulting to 1000 [ 91.558170][ T6004] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 91.920879][ T5983] RDS/IB: syz0: added [ 91.985051][ T5983] smc: adding ib device syz0 with port count 1 [ 91.995812][ T29] audit: type=1400 audit(1786070683.033:352): avc: denied { setopt } for pid=6005 comm="syz.1.56" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.105107][ T5983] smc: ib device syz0 port 1 has no pnetid [ 92.199246][ T10] lo speed is unknown, defaulting to 1000 [ 92.329235][ T6008] comedi comedi3: comedi_config --init_data is deprecated [ 92.388685][ T29] audit: type=1400 audit(1786070683.493:353): avc: denied { connect } for pid=6007 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.485697][ T6009] Zero length message leads to an empty skb [ 92.654382][ T29] audit: type=1400 audit(1786070683.533:354): avc: denied { shutdown } for pid=6007 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.206729][ T6012] netlink: 156 bytes leftover after parsing attributes in process `syz.1.58'. [ 93.285269][ T6012] macsec1: entered promiscuous mode [ 94.142175][ T6017] netlink: 156 bytes leftover after parsing attributes in process `syz.4.59'. [ 94.170092][ T6017] macsec1: entered promiscuous mode [ 94.595669][ T1210] usb 4-1: USB disconnect, device number 5 [ 94.792219][ T29] audit: type=1400 audit(1786070685.893:355): avc: denied { create } for pid=6018 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.826969][ T5983] lo speed is unknown, defaulting to 1000 [ 94.849411][ T29] audit: type=1400 audit(1786070685.893:356): avc: denied { create } for pid=6018 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.926954][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 94.982926][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'. [ 95.135157][ T29] audit: type=1400 audit(1786070685.893:357): avc: denied { create } for pid=6018 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.284334][ T29] audit: type=1400 audit(1786070685.893:358): avc: denied { write } for pid=6018 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.325639][ T29] audit: type=1400 audit(1786070685.923:359): avc: denied { write } for pid=6018 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.419696][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.428011][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.488532][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.499393][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.775754][ T73] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.832399][ T29] audit: type=1400 audit(1786070686.933:360): avc: denied { write } for pid=6033 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.967596][ T73] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.993013][ T73] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.018598][ T6020] lo speed is unknown, defaulting to 1000 [ 96.035681][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.076634][ T29] audit: type=1400 audit(1786070687.173:361): avc: denied { node_bind } for pid=6038 comm="syz.1.64" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 96.118734][ T29] audit: type=1400 audit(1786070687.173:362): avc: denied { prog_run } for pid=6038 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 96.147884][ T29] audit: type=1400 audit(1786070687.243:363): avc: denied { connect } for pid=6037 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.185639][ T29] audit: type=1400 audit(1786070687.253:364): avc: denied { bind } for pid=6037 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.206433][ T29] audit: type=1400 audit(1786070687.273:365): avc: denied { read } for pid=6037 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.227203][ T29] audit: type=1400 audit(1786070687.293:366): avc: denied { read write } for pid=6038 comm="syz.1.64" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.320716][ T5983] lo speed is unknown, defaulting to 1000 [ 96.426269][ T5700] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.565516][ T5700] usb 2-1: device descriptor read/64, error -71 [ 96.655489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 96.824774][ T5700] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.975970][ T5700] usb 2-1: device descriptor read/64, error -71 [ 97.013428][ T5983] lo speed is unknown, defaulting to 1000 [ 97.097796][ T5700] usb usb2-port1: attempt power cycle [ 97.159448][ T6053] netlink: 156 bytes leftover after parsing attributes in process `syz.4.69'. [ 97.187552][ T6053] macsec1: entered promiscuous mode [ 97.555659][ T5700] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 97.687694][ T5700] usb 2-1: device descriptor read/8, error -71 [ 98.085557][ T5700] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 98.096530][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 98.111481][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.70'. [ 98.127322][ T5700] usb 2-1: device descriptor read/8, error -71 [ 98.165923][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.173449][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.223019][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.236745][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.245765][ T5700] usb usb2-port1: unable to enumerate USB device [ 98.396242][ T3333] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.412641][ T5983] lo speed is unknown, defaulting to 1000 [ 98.422961][ T6066] netlink: 156 bytes leftover after parsing attributes in process `syz.3.71'. [ 98.437183][ T3333] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.467748][ T3333] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.500093][ T3333] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.586216][ T6066] macsec1: entered promiscuous mode [ 99.386527][ T5983] lo speed is unknown, defaulting to 1000 [ 99.879183][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 99.915090][ T6077] netlink: 156 bytes leftover after parsing attributes in process `syz.3.75'. [ 99.963681][ T6077] macsec1: entered promiscuous mode [ 100.411704][ T10] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 100.453715][ T10] usb 2-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 100.515596][ T10] usb 2-1: Product: syz [ 100.527527][ T10] usb 2-1: Manufacturer: syz [ 100.538329][ T10] usb 2-1: SerialNumber: syz [ 100.546301][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 100.546316][ T29] audit: type=1400 audit(1786070691.653:372): avc: denied { read } for pid=6081 comm="syz.4.76" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 100.587880][ T10] usb 2-1: config 0 descriptor?? [ 100.604793][ T10] usb 2-1: selecting invalid altsetting 3 [ 100.613673][ T29] audit: type=1400 audit(1786070691.683:373): avc: denied { allowed } for pid=6081 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.639728][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 101.783558][ T10] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 101.799170][ T10] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 101.819271][ T10] usb 2-1: USB disconnect, device number 7 [ 102.047079][ T5786] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.158769][ T29] audit: type=1400 audit(1786070693.263:374): avc: denied { append } for pid=6088 comm="syz.1.79" name="cec0" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.228126][ T6089] syzkaller0: entered promiscuous mode [ 102.245523][ T5786] usb 5-1: Using ep0 maxpacket: 16 [ 102.265594][ T6089] syzkaller0: entered allmulticast mode [ 102.284108][ T5786] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 102.311053][ T5786] usb 5-1: config 1 has no interface number 0 [ 102.330962][ T5786] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 102.374049][ T5786] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 102.425535][ T5786] usb 5-1: config 1 interface 105 has no altsetting 0 [ 102.452747][ T5786] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 102.494088][ T5786] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 102.515533][ T5786] usb 5-1: Product: syz [ 102.522539][ T5786] usb 5-1: Manufacturer: syz [ 102.527736][ T5786] usb 5-1: SerialNumber: syz [ 102.548447][ T6087] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 102.563819][ T6087] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 102.656069][ T5727] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 102.810538][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.826193][ T5727] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.842171][ T5727] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 102.854859][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.863448][ T5727] usb 1-1: Product: syz [ 102.868251][ T5727] usb 1-1: Manufacturer: syz [ 102.879115][ T5727] usb 1-1: SerialNumber: syz [ 102.897698][ T5727] usb 1-1: config 0 descriptor?? [ 102.988987][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.013517][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.043519][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.057763][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.075195][ T10] usb 4-1: config 0 descriptor?? [ 103.189448][ T29] audit: type=1400 audit(1786070694.283:375): avc: denied { mounton } for pid=6092 comm="syz.0.80" path="/15/file0" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.209719][ T5700] usb 1-1: USB disconnect, device number 4 [ 103.305634][ T29] audit: type=1400 audit(1786070694.393:376): avc: denied { kexec_image_load } for pid=6097 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 103.325746][ T29] audit: type=1400 audit(1786070694.403:377): avc: denied { write } for pid=6097 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.357275][ T29] audit: type=1400 audit(1786070694.403:378): avc: denied { read } for pid=6097 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.720793][ T6098] binder: 6097:6098 ioctl c018620b 0 returned -14 [ 103.727496][ T29] audit: type=1400 audit(1786070694.823:379): avc: denied { setopt } for pid=6097 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.027550][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.038624][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.105358][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 104.111737][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 104.124167][ T10] usb 4-1: USB disconnect, device number 6 [ 104.517763][ T29] audit: type=1400 audit(1786070695.313:380): avc: denied { mmap_zero } for pid=6107 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 104.553707][ T29] audit: type=1400 audit(1786070695.333:381): avc: denied { map } for pid=6107 comm="syz.0.83" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.868166][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.883900][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 104.900529][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 104.915657][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 104.923840][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 106.287398][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 106.287415][ T29] audit: type=1400 audit(1786070697.393:385): avc: denied { relabelfrom } for pid=6086 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 106.323420][ T29] audit: type=1400 audit(1786070697.413:386): avc: denied { relabelto } for pid=6086 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 106.746593][ T6139] netlink: 200 bytes leftover after parsing attributes in process `syz.3.87'. [ 106.804103][ T6139] macsec1: entered promiscuous mode [ 106.805625][ T5727] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.845063][ T5786] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 107.043629][ T50] Bluetooth: hci5: command tx timeout [ 107.059105][ T5786] usb 5-1: USB disconnect, device number 8 [ 107.147400][ T5727] usb 1-1: Using ep0 maxpacket: 8 [ 107.206135][ T5727] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 107.292902][ T5727] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.505514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.515510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 107.555491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 107.635520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 107.735510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 107.755484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 107.805485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 107.815528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 107.885511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 108.273192][ T29] audit: type=1400 audit(1786070699.333:387): avc: denied { write } for pid=6141 comm="syz.4.88" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 108.365810][ T5727] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.401975][ T5727] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.448400][ T6146] netlink: 14 bytes leftover after parsing attributes in process `syz.1.89'. [ 108.462833][ T6148] netlink: 20 bytes leftover after parsing attributes in process `syz.3.90'. [ 108.473815][ T6115] lo speed is unknown, defaulting to 1000 [ 108.545041][ T29] audit: type=1400 audit(1786070699.353:388): avc: denied { name_bind } for pid=6141 comm="syz.4.88" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 108.566210][ T5727] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.582850][ T5727] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.592079][ T29] audit: type=1400 audit(1786070699.563:389): avc: denied { ioctl } for pid=6147 comm="syz.3.90" path="socket:[10752]" dev="sockfs" ino=10752 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.617028][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.861209][ T5727] usb 1-1: usb_control_msg returned -32 [ 108.894770][ T29] audit: type=1400 audit(1786070699.983:390): avc: denied { write } for pid=6152 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.917685][ T5727] usbtmc 1-1:16.0: can't read capabilities [ 109.096416][ T50] Bluetooth: hci5: command tx timeout [ 109.613218][ T29] audit: type=1400 audit(1786070700.583:391): avc: denied { execute } for pid=6133 comm="syz.0.86" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 111.185749][ T50] Bluetooth: hci5: command tx timeout [ 111.252048][ T6157] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.713526][ T6157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.813229][ T29] audit: type=1400 audit(1786070702.913:392): avc: denied { nlmsg_write } for pid=6163 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.992711][ T6157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.025243][ T6166] warning: `syz.1.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.098904][ T5707] usb 3-1: USB disconnect, device number 4 [ 112.112705][ T5707] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 112.128178][ T5707] opticon 3-1:1.0: device disconnected [ 112.152153][ T6157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.216547][ T6172] comedi comedi3: comedi_config --init_data is deprecated [ 112.335280][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.355623][ T5700] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 112.539730][ T5700] usb 5-1: Using ep0 maxpacket: 32 [ 112.634247][ T5700] usb 5-1: unable to get BOS descriptor or descriptor too short [ 112.647704][ T5700] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 112.665023][ T5700] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 112.687964][ T5700] usb 5-1: config 14 has no interface number 0 [ 112.696391][ T29] audit: type=1400 audit(1786070703.803:393): avc: denied { execute } for pid=6175 comm="syz.3.97" dev="tmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.696755][ T6176] process 'syz.3.97' launched '/dev/fd/4' with NULL argv: empty string added [ 112.736494][ T5700] usb 5-1: config 14 has no interface number 1 [ 112.751670][ T5700] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 112.779141][ T5700] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 112.812270][ T5700] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 112.831414][ T29] audit: type=1400 audit(1786070703.933:394): avc: denied { execute_no_trans } for pid=6175 comm="syz.3.97" path=2F6D656D66643A2D42D54F34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.834830][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.877321][ T5700] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 112.892679][ T5700] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 112.910765][ T5700] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 112.941305][ T5700] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 113.113399][ T6181] netlink: 200 bytes leftover after parsing attributes in process `syz.1.99'. [ 113.187994][ T5700] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.203498][ T5700] usb 5-1: config 14 interface 57 has no altsetting 0 [ 113.210329][ T48] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.238492][ T6180] macsec1: entered promiscuous mode [ 113.245673][ T5700] usb 5-1: config 14 interface 228 has no altsetting 0 [ 113.266824][ T50] Bluetooth: hci5: command tx timeout [ 113.277762][ T5700] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 113.302900][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.315770][ T5700] usb 5-1: Product: syz [ 113.320491][ T5700] usb 5-1: Manufacturer: syz [ 113.324015][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.325133][ T5700] usb 5-1: SerialNumber: syz [ 113.425648][ T3347] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.441238][ T6185] i2c i2c-0: new_device: Instantiated device tps6598x at 0x38 [ 113.474341][ T29] audit: type=1400 audit(1786070704.573:395): avc: denied { mount } for pid=6187 comm="syz.1.101" name="/" dev="autofs" ino=10875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 114.063648][ T5700] legousbtower 5-1:14.57: interrupt endpoints not found [ 114.219535][ T29] audit: type=1400 audit(1786070704.573:396): avc: denied { read } for pid=6187 comm="syz.1.101" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 114.243360][ T29] audit: type=1400 audit(1786070704.573:397): avc: denied { open } for pid=6187 comm="syz.1.101" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 114.268348][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.285524][ T29] audit: type=1400 audit(1786070704.573:398): avc: denied { ioctl } for pid=6187 comm="syz.1.101" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 114.355126][ T5699] usb 1-1: USB disconnect, device number 5 [ 114.407611][ T5700] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 114.431420][ T29] audit: type=1400 audit(1786070704.573:399): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 114.487891][ T5700] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 114.488170][ T29] audit: type=1400 audit(1786070704.773:400): avc: denied { ioctl } for pid=6169 comm="syz.4.91" path="socket:[10882]" dev="sockfs" ino=10882 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.523016][ T29] audit: type=1400 audit(1786070705.533:401): avc: denied { create } for pid=6192 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 114.582899][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.599962][ T6115] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.665848][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 114.719993][ T6115] bridge_slave_0: entered allmulticast mode [ 114.778442][ T6115] bridge_slave_0: entered promiscuous mode [ 115.021860][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.029412][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.157117][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.169425][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.277907][ T48] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.291856][ T1210] lo speed is unknown, defaulting to 1000 [ 115.293968][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.303902][ T1210] syz0: Port: 1 Link DOWN [ 115.319875][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.327500][ T6115] bridge_slave_1: entered allmulticast mode [ 115.334840][ T6115] bridge_slave_1: entered promiscuous mode [ 115.375062][ T5727] lo speed is unknown, defaulting to 1000 [ 115.484783][ T6115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.534876][ T6115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.705516][ T6221] netlink: 156 bytes leftover after parsing attributes in process `syz.0.107'. [ 115.891386][ T6115] team0: Port device team_slave_0 added [ 115.918272][ T6115] team0: Port device team_slave_1 added [ 116.082261][ T12] bridge_slave_1: left allmulticast mode [ 116.100422][ T12] bridge_slave_1: left promiscuous mode [ 116.115275][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.167509][ T12] bridge_slave_0: left allmulticast mode [ 116.191402][ T12] bridge_slave_0: left promiscuous mode [ 116.209442][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.041269][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.063438][ T5728] usb 5-1: USB disconnect, device number 9 [ 117.127395][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.143691][ T5728] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 117.165889][ T12] bond0 (unregistering): Released all slaves [ 117.182116][ T12] bond1 (unregistering): Released all slaves [ 117.215558][ T677] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.261044][ T6222] macsec1: entered promiscuous mode [ 117.491013][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 117.491028][ T29] audit: type=1400 audit(1786070708.593:407): avc: denied { read } for pid=6236 comm="syz.3.113" name="video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 117.540013][ T6115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.548367][ T6115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.575240][ T29] audit: type=1400 audit(1786070708.633:408): avc: denied { open } for pid=6236 comm="syz.3.113" path="/dev/video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 117.601282][ T12] rxrpc: Leaked peer c2 {1} 127.0.0.1:7003 [ 117.627292][ T12] ================================================================== [ 117.635381][ T12] BUG: KASAN: slab-use-after-free in rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 117.643792][ T12] Read of size 8 at addr ffff888022306020 by task kworker/u8:0/12 [ 117.651592][ T12] [ 117.654004][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 117.654023][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.654032][ T12] Workqueue: netns cleanup_net [ 117.654053][ T12] Call Trace: [ 117.654059][ T12] [ 117.654064][ T12] dump_stack_lvl+0x100/0x190 [ 117.654084][ T12] print_report+0x13d/0x4b0 [ 117.654107][ T12] ? __virt_addr_valid+0x239/0x430 [ 117.654127][ T12] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 117.654143][ T12] kasan_report+0xdf/0x1c0 [ 117.654163][ T12] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 117.654182][ T12] rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 117.654200][ T12] rxrpc_exit_net+0x83/0xc0 [ 117.654223][ T12] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 117.654246][ T12] ops_undo_list+0x2ee/0xab0 [ 117.654265][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 117.654282][ T12] ? cleanup_net+0x332/0x920 [ 117.654303][ T12] ? idr_destroy+0x62/0x2e0 [ 117.654326][ T12] cleanup_net+0x499/0x920 [ 117.654345][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 117.654372][ T12] ? rcu_is_watching+0x12/0xc0 [ 117.654396][ T12] process_one_work+0xa23/0x1940 [ 117.654416][ T12] ? __pfx_process_one_work+0x10/0x10 [ 117.654434][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 117.654453][ T12] worker_thread+0x5ef/0xe50 [ 117.654471][ T12] ? kthread+0x13a/0x450 [ 117.654490][ T12] ? __pfx_worker_thread+0x10/0x10 [ 117.654505][ T12] kthread+0x370/0x450 [ 117.654518][ T12] ? __pfx_kthread+0x10/0x10 [ 117.654532][ T12] ret_from_fork+0x72b/0xd50 [ 117.654552][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 117.654572][ T12] ? __switch_to+0x800/0x10f0 [ 117.654586][ T12] ? __pfx_kthread+0x10/0x10 [ 117.654600][ T12] ret_from_fork_asm+0x1a/0x30 [ 117.654624][ T12] [ 117.654630][ T12] [ 117.829623][ T12] Allocated by task 5890: [ 117.833929][ T12] kasan_save_stack+0x30/0x50 [ 117.838591][ T12] kasan_save_track+0x14/0x30 [ 117.843245][ T12] __kasan_kmalloc+0xaa/0xb0 [ 117.847820][ T12] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 117.853176][ T12] rxrpc_alloc_peer+0xa7/0x400 [ 117.857920][ T12] rxrpc_lookup_peer+0x168/0x680 [ 117.862833][ T12] rxrpc_kernel_lookup_peer+0xa8/0xe0 [ 117.868189][ T12] afs_merge_fs_addr4+0x1cd/0x4c0 [ 117.873195][ T12] afs_parse_text_addrs+0x655/0xa10 [ 117.878372][ T12] afs_lookup_cell+0xbb6/0x1940 [ 117.883205][ T12] afs_proc_cells_write+0x2a3/0x3a0 [ 117.888392][ T12] proc_simple_write+0x10e/0x1a0 [ 117.893313][ T12] proc_reg_write+0x240/0x330 [ 117.898076][ T12] vfs_write+0x2aa/0x1050 [ 117.902388][ T12] ksys_write+0x12a/0x250 [ 117.906719][ T12] do_syscall_64+0x115/0x870 [ 117.911291][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.917161][ T12] [ 117.919464][ T12] Freed by task 6243: [ 117.923418][ T12] kasan_save_stack+0x30/0x50 [ 117.928076][ T12] kasan_save_track+0x14/0x30 [ 117.932728][ T12] kasan_save_free_info+0x3b/0x70 [ 117.937734][ T12] __kasan_slab_free+0x5f/0x80 [ 117.942479][ T12] __rcu_free_sheaf_prepare+0x5d/0x2f0 [ 117.947918][ T12] rcu_free_sheaf+0x1a/0xe0 [ 117.952485][ T12] rcu_core+0x5a2/0x10d0 [ 117.956707][ T12] handle_softirqs+0x1ea/0x9b0 [ 117.961449][ T12] __irq_exit_rcu+0x162/0x210 [ 117.966192][ T12] irq_exit_rcu+0x9/0x30 [ 117.970506][ T12] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 117.976123][ T12] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 117.982103][ T12] [ 117.984408][ T12] The buggy address belongs to the object at ffff888022306000 [ 117.984408][ T12] which belongs to the cache kmalloc-512 of size 512 [ 117.998447][ T12] The buggy address is located 32 bytes inside of [ 117.998447][ T12] freed 512-byte region [ffff888022306000, ffff888022306200) [ 118.012222][ T12] [ 118.014526][ T12] The buggy address belongs to the physical page: [ 118.020923][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22304 [ 118.029671][ T12] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 118.038145][ T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 118.045755][ T12] page_type: f5(slab) [ 118.049734][ T12] raw: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 118.058298][ T12] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 118.066861][ T12] head: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 118.075525][ T12] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 118.084261][ T12] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 118.092999][ T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 118.101740][ T12] page dumped because: kasan: bad access detected [ 118.108141][ T12] page_owner tracks the page as allocated [ 118.113844][ T12] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4967, tgid 4967 (udevd), ts 39017753030, free_ts 32466673699 [ 118.134590][ T12] post_alloc_hook+0xfd/0x120 [ 118.139259][ T12] get_page_from_freelist+0xf48/0x3530 [ 118.144696][ T12] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 118.150581][ T12] new_slab+0xa2/0x640 [ 118.154638][ T12] refill_objects+0xe3/0x410 [ 118.159206][ T12] __pcs_replace_empty_main+0x376/0x680 [ 118.164737][ T12] __kmalloc_cache_noprof+0x479/0x6c0 [ 118.170107][ T12] kernfs_fop_open+0x23d/0xd50 [ 118.174852][ T12] do_dentry_open+0x6ab/0x14d0 [ 118.179699][ T12] vfs_open+0x82/0x3f0 [ 118.183755][ T12] path_openat+0x2873/0x4280 [ 118.188343][ T12] do_file_open+0x20e/0x430 [ 118.192825][ T12] do_sys_openat2+0x10f/0x1e0 [ 118.197489][ T12] __x64_sys_openat+0x12d/0x210 [ 118.202325][ T12] do_syscall_64+0x115/0x870 [ 118.206894][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.212766][ T12] page last free pid 5118 tgid 5118 stack trace: [ 118.219156][ T12] __free_frozen_pages+0x79f/0x1090 [ 118.224340][ T12] qlist_free_all+0x47/0xf0 [ 118.228839][ T12] kasan_quarantine_reduce+0x1a0/0x1f0 [ 118.234277][ T12] __kasan_slab_alloc+0x69/0x90 [ 118.239284][ T12] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 118.244720][ T12] vm_area_alloc+0x1f/0x160 [ 118.249205][ T12] __mmap_region+0x1033/0x2db0 [ 118.253955][ T12] mmap_region+0x35d/0x620 [ 118.258367][ T12] do_mmap+0xc63/0x12f0 [ 118.262507][ T12] vm_mmap_pgoff+0x29e/0x470 [ 118.267079][ T12] ksys_mmap_pgoff+0x3cb/0x610 [ 118.271825][ T12] __x64_sys_mmap+0x125/0x190 [ 118.276485][ T12] do_syscall_64+0x115/0x870 [ 118.281058][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.286928][ T12] [ 118.289231][ T12] Memory state around the buggy address: [ 118.294834][ T12] ffff888022305f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.302871][ T12] ffff888022305f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.310921][ T12] >ffff888022306000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.318969][ T12] ^ [ 118.324054][ T12] ffff888022306080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.332095][ T12] ffff888022306100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 118.340131][ T12] ================================================================== [ 118.349175][ T6115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.355594][ T29] audit: type=1400 audit(1786070708.633:409): avc: denied { write } for pid=6236 comm="syz.3.113" name="video9" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 118.413681][ T6245] block device autoloading is deprecated and will be removed. [ 118.470471][ T6245] capability: warning: `syz.4.112' uses deprecated v2 capabilities in a way that may be insecure [ 118.476878][ T29] audit: type=1400 audit(1786070708.713:410): avc: denied { setopt } for pid=6236 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.526323][ T6115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.604499][ T29] audit: type=1400 audit(1786070708.713:411): avc: denied { name_bind } for pid=6236 comm="syz.3.113" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 118.685629][ T6115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.726585][ T6115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.791610][ T29] audit: type=1400 audit(1786070708.713:412): avc: denied { node_bind } for pid=6236 comm="syz.3.113" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 118.940441][ T29] audit: type=1400 audit(1786070708.713:413): avc: denied { write } for pid=6236 comm="syz.3.113" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.061648][ T29] audit: type=1400 audit(1786070708.733:414): avc: denied { mount } for pid=6238 comm="syz.4.112" name="/" dev="ramfs" ino=11028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 119.125062][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 119.132284][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 119.141550][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.151590][ T12] Workqueue: netns cleanup_net [ 119.156366][ T12] Call Trace: [ 119.159626][ T12] [ 119.162540][ T12] dump_stack_lvl+0x100/0x190 [ 119.167213][ T12] vpanic+0x552/0x970 [ 119.171176][ T12] ? __pfx_vpanic+0x10/0x10 [ 119.175659][ T12] ? mark_held_locks+0x40/0x70 [ 119.180409][ T12] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 119.186034][ T12] panic+0xd1/0xe0 [ 119.189749][ T12] ? __pfx_panic+0x10/0x10 [ 119.194143][ T12] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 119.199757][ T12] ? preempt_schedule_common+0x42/0xc0 [ 119.205205][ T12] ? check_panic_on_warn+0x1f/0x90 [ 119.210397][ T12] check_panic_on_warn.cold+0x19/0x34 [ 119.215762][ T12] end_report.part.0+0x3a/0x90 [ 119.220533][ T12] kasan_report.cold+0xe/0x18 [ 119.225195][ T12] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 119.230827][ T12] rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 119.236270][ T12] rxrpc_exit_net+0x83/0xc0 [ 119.240758][ T12] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 119.245953][ T12] ops_undo_list+0x2ee/0xab0 [ 119.250532][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 119.255622][ T12] ? cleanup_net+0x332/0x920 [ 119.260193][ T12] ? idr_destroy+0x62/0x2e0 [ 119.264682][ T12] cleanup_net+0x499/0x920 [ 119.269082][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 119.274000][ T12] ? rcu_is_watching+0x12/0xc0 [ 119.278751][ T12] process_one_work+0xa23/0x1940 [ 119.283679][ T12] ? __pfx_process_one_work+0x10/0x10 [ 119.289046][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 119.293975][ T12] worker_thread+0x5ef/0xe50 [ 119.298547][ T12] ? kthread+0x13a/0x450 [ 119.302783][ T12] ? __pfx_worker_thread+0x10/0x10 [ 119.307884][ T12] kthread+0x370/0x450 [ 119.311932][ T12] ? __pfx_kthread+0x10/0x10 [ 119.316514][ T12] ret_from_fork+0x72b/0xd50 [ 119.321089][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 119.326200][ T12] ? __switch_to+0x800/0x10f0 [ 119.330867][ T12] ? __pfx_kthread+0x10/0x10 [ 119.335439][ T12] ret_from_fork_asm+0x1a/0x30 [ 119.340206][ T12] [ 119.343446][ T12] Kernel Offset: disabled [ 119.347745][ T12] Rebooting in 86400 seconds..