last executing test programs: 11m27.576040046s ago: executing program 3 (id=2195): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x3, 0x5002, 0x5, 0xb, 0x7, 0x0, 0x1}}) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x2, 0x0) 11m26.643667063s ago: executing program 3 (id=2197): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r3, 0x0, 0xd, 0xfffffffffffffffe) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="bf00000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000040), 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f0000000100), 0x2) 11m25.776962098s ago: executing program 3 (id=2202): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) mount$9p_fd(0x200000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11m25.707630701s ago: executing program 3 (id=2203): recvmmsg(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x101}, {{&(0x7f0000001600)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, 0x80, 0x0}, 0x9082}], 0x2, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00'}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a7042b10460d810082190102030109021b00010000000009040000018984aa0009050c7f"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="39e428982ac1f0c9c4e74be0b6de8c9eb8d9dc898f3b3d8c1a9395ac57ed0b75f01fdbca8943a35ca1ceb50c894d388fdca9629b119845cc8ef3e47fe15f9cab609043b4897997c6062a93788d319dfd12375cc3ec9f7b89d188d07ce3505708263a3a3e9d7b2bded4b14a2818a68e2e821a3918cdbd9613057cb765bd72efdc1655666f69a48dd72df347970966bd3f761ec908c81510e98cbeb99e5c62ee9b9c0495cfbacd2f8b9e847cb2f8d3c4ca", 0xb0}], 0x1}}], 0x1, 0x14) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 11m22.813223055s ago: executing program 3 (id=2213): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x300, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 11m22.379053171s ago: executing program 3 (id=2216): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f00000003c0)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f000001b000)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12001, &(0x7f0000000300)={0x77359400}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0) socket$inet(0x2, 0x801, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) (async, rerun: 32) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) (rerun: 32) socket$phonet(0x23, 0x2, 0x1) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) (async, rerun: 32) read(0xffffffffffffffff, &(0x7f0000000740)=""/384, 0x200008c0) (rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) (async) write$selinux_load(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="8c3290585fff7c0007000300"], 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async, rerun: 64) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 11m7.938394784s ago: executing program 32 (id=2216): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f00000003c0)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f000001b000)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12001, &(0x7f0000000300)={0x77359400}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0) socket$inet(0x2, 0x801, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) (async, rerun: 32) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) (rerun: 32) socket$phonet(0x23, 0x2, 0x1) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) (async, rerun: 32) read(0xffffffffffffffff, &(0x7f0000000740)=""/384, 0x200008c0) (rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) (async) write$selinux_load(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="8c3290585fff7c0007000300"], 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async, rerun: 64) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 6m18.835672755s ago: executing program 2 (id=3143): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x40010) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)={0xc4, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}]}, @NL80211_ATTR_SCAN_SSIDS={0x9c, 0x2d, 0x0, 0x1, [{0x24, 0x0, @random="3d169accd35dfaed678028f2e7a0cea76b1baec77e3497e9b89bdf9a458b68dd"}, {0x4}, {0xa, 0x0, @default_ap_ssid}, {0x14, 0x0, @random="b5ef3393dcd108696b16fd7cd01af056"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1e, 0x0, @random="d99aa2054cee12d18a9175bd9f6cd8b52e780c8f68336b8e87de"}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x4c, 0x0, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6435}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x8004) 6m18.635423366s ago: executing program 2 (id=3144): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 6m18.08780448s ago: executing program 2 (id=3147): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="100000000100000001"], 0x513300) 6m18.062427149s ago: executing program 2 (id=3148): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) setxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000440), &(0x7f00000002c0)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r8, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000000) 6m17.0858021s ago: executing program 2 (id=3151): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r0) mount$overlay(0xf0, &(0x7f0000000000)='./file0\x00', 0x0, 0xa40028, 0x0) 6m16.483672135s ago: executing program 2 (id=3152): openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x60080, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001240)={0x2d001100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x85, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x208042, 0x328) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4004743a, &(0x7f0000000300)=0x481852) 6m1.915546829s ago: executing program 33 (id=3152): openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x60080, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001240)={0x2d001100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x85, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x208042, 0x328) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4004743a, &(0x7f0000000300)=0x481852) 12.048379862s ago: executing program 6 (id=4359): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='\x00', 0xfffffffffffffffa) pipe2$watch_queue(&(0x7f0000000180), 0x80) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xffffffffffffffff) keyctl$unlink(0x9, r3, r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000080)={@mcast1}, 0x14) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62c0c3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r8 = socket$rxrpc(0x21, 0x2, 0xa) listen(r8, 0x2000000) 10.673170411s ago: executing program 6 (id=4362): mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000013000500000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0804000000c00000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=0x0, @ANYBLOB="04011980"], 0x40}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000000034"], 0x118}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100)) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "eb31b7d2"}]}}, 0x0}, 0x0) 9.230023199s ago: executing program 6 (id=4368): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) (async) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 8.591555295s ago: executing program 4 (id=4371): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f00002b0000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x4, 0xc) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f00000002c0)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup(r2) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(r0, &(0x7f0000000a00)={0x2020}, 0x2020) write$binfmt_script(r3, &(0x7f0000000540)={'#! ', './file0', [{0x20, '!\x9d,:-$!'}, {0x20, ')*-+\'\']]'}, {0x20, '/dev/swradio#\x00'}, {0x20, '/dev/swradio#\x00'}, {0x20, 'udp\x00'}, {0x20, '/dev/swradio#\x00'}, {0x20, 'cake\x00'}, {0x20, '(!}(]\\%'}, {0x20, 'fHeezer.parent_freezing\x00'}, {0x20, '/dev/cpu/#/msr\x00'}], 0xa, "230a0117446ad030b4429e04ac2409f251259307c5e2093898c06086383b9888bf576234daa1da7cb563de8f2b3b1da2f66195924e386cd28f4da11e69f118e97e462aa109068d54b09b7483e5ab8fdc79f3902d575b187787100f064a4dffa4311be6f9e100b3fada9f586ba0584e482f9112176144a9e195975c196eea8c"}, 0x159) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="020001000140fddbdf251400000024000380080001000e0000000800020080000000083d8e00feffffff0800020000002000480007800800010007000000080001005f0000000c00030001000000010000000c000400050000000000000008000200a3bb000008000100030d00000c000300b2b2183f00000000"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x4000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x19040) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="7c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x489820274248e815}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) r9 = socket$inet6(0xa, 0x80003, 0x6) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0x0) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000200)=0x81, 0x7, 0x0) 7.243825658s ago: executing program 0 (id=4375): r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='$.-+-[:)(%:--,-+\x00', &(0x7f0000000780)='utf8=0', 0x300) 7.243605695s ago: executing program 0 (id=4376): socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149882, 0x60) prlimit64(0x0, 0x1, 0x0, &(0x7f0000000300)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf000, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d102007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 7.174696719s ago: executing program 0 (id=4378): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES16=0x0, @ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xfffffffffffffd9d, 0x0}]}) r1 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000640)="fc8bc8089bb22442fa", 0x9) 7.153235494s ago: executing program 1 (id=4379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigaction(0x1f, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a7c441f92836a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x8000006, 0x0, {[0x4000]}}, 0x0, 0x8, &(0x7f00000000c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r4, 0xc048aeca, &(0x7f0000003680)={{0x3, 0x0, 0x1, {0x1, 0x3000, 0x2}}, "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", "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"}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r5, 0x9, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000020000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006005f7086d040e0af2e200000001090212000100000000090400000003000000aa864873963aafbbe7f7506d2baa30af206b81fcb7e931f00450f1dd2590830baa612ecc"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 5.776796717s ago: executing program 6 (id=4381): mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000013000500000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0804000000c00000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=0x0, @ANYBLOB="04011980"], 0x40}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000000034"], 0x118}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100)) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "eb31b7d2"}]}}, 0x0}, 0x0) 5.438059539s ago: executing program 4 (id=4382): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xde, &(0x7f0000000480)='\x03orou\x00\x00\xb6\xfe\x05\x00\x00\x00\x00\x00\x00\x00\x97C,\xbe\x88\x90\x15\xc7V\xbc\vRlJa.WC\x87\xd5m7k\b\xf14\x7f\x00\xbb3S\xf8\xe5\x0e;\x11q\f=_\x87\xda1|\xe4.$Q\b\x00\x00\x00\x87\xaaD\xbe\xb5\x94\xa6q\xc06\xdaY\x1d\xa6d\xc0\x83D\f\xbe\xae\".\xff\xe3\x90\x18\xbc<\xbfb?7-e\xab\xd7\xb4\x12DlZ\x03\xed7\x04u\x84z\x1b\x1b\x82\xa78\x94e\xf7\x19\xf6\x97\x17\xec\xfc\x13\xc8F\xcfq-?\xb7\xba\xabi\xca77\xff\x00z\x1e\xfdA\xdb\x05\xb8\xc4\x8f\x9d$\xd5\xfa\f*\xe5clb\x87\xf4\xf7\x06\x82\xd6F\xdem\xfd#&\xce\x15\x82bv\x97\'\x17x\x19\xe6\xb2\xe9\x03\xe3\xcf\xdc<2\x01\xb9M\x10-\xf9\xab\\\xd5l\x82\xba\x81\xb8\xb4\x9cP\xf1\x030\x8d+_\xd1'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pread64(r1, &(0x7f0000000200)=""/166, 0xa6, 0x8) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0x4}, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019780)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000101ac1414aa00"/55], 0x184}, 0x1, 0x0, 0x0, 0x44014}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x20003f) socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r2, 0x0, 0x0, 0x0) 4.741838123s ago: executing program 6 (id=4384): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4886) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$uhid(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_INPUT(r4, &(0x7f0000000480)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x44, &(0x7f0000000040), 0x5d) 4.353053034s ago: executing program 4 (id=4385): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000881}, 0x0) recvmmsg(r3, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) write$char_usb(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r6, r6, 0x0, 0x101) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x5, 0x1, 0x7, 0x80c0, r6, 0x4e7c, '\x00', 0x0, r6, 0x5, 0x0, 0x4, 0xd}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read(r0, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0xbf, @tick=0x9, 0x3, {0x7f, 0xfd}, 0x0, 0x1, 0xfd}) 4.336294682s ago: executing program 5 (id=4386): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x3d) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) preadv(0xffffffffffffffff, &(0x7f0000004300)=[{&(0x7f0000000040)=""/144, 0x90}], 0x1, 0x1a, 0xc) 3.967361884s ago: executing program 0 (id=4387): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xde, &(0x7f0000000480)='\x03orou\x00\x00\xb6\xfe\x05\x00\x00\x00\x00\x00\x00\x00\x97C,\xbe\x88\x90\x15\xc7V\xbc\vRlJa.WC\x87\xd5m7k\b\xf14\x7f\x00\xbb3S\xf8\xe5\x0e;\x11q\f=_\x87\xda1|\xe4.$Q\b\x00\x00\x00\x87\xaaD\xbe\xb5\x94\xa6q\xc06\xdaY\x1d\xa6d\xc0\x83D\f\xbe\xae\".\xff\xe3\x90\x18\xbc<\xbfb?7-e\xab\xd7\xb4\x12DlZ\x03\xed7\x04u\x84z\x1b\x1b\x82\xa78\x94e\xf7\x19\xf6\x97\x17\xec\xfc\x13\xc8F\xcfq-?\xb7\xba\xabi\xca77\xff\x00z\x1e\xfdA\xdb\x05\xb8\xc4\x8f\x9d$\xd5\xfa\f*\xe5clb\x87\xf4\xf7\x06\x82\xd6F\xdem\xfd#&\xce\x15\x82bv\x97\'\x17x\x19\xe6\xb2\xe9\x03\xe3\xcf\xdc<2\x01\xb9M\x10-\xf9\xab\\\xd5l\x82\xba\x81\xb8\xb4\x9cP\xf1\x030\x8d+_\xd1'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pread64(r1, &(0x7f0000000200)=""/166, 0xa6, 0x8) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0x4}, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019780)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000101ac1414aa00"/55], 0x184}, 0x1, 0x0, 0x0, 0x44014}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x20003f) socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r2, 0x0, 0x0, 0x0) 3.523366573s ago: executing program 1 (id=4388): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000ffffb703000008000000b70400000000000085000000010000009500"/65], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x800455c9, 0x1000000000000002) bind$bt_l2cap(r5, &(0x7f0000000900)={0x1f, 0x0, @none, 0x7, 0x1}, 0xe) membarrier(0x10, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x16, 0xc4, 0x9, 0x8, 0x46d, 0xc291, 0x68f2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x19, 0x5, 0x2, 0xdd, 0xb9, 0x9c, 0x0, [], [{{0x9, 0x5, 0x5, 0x4, 0x20, 0x8, 0xa, 0x4}}, {{0x9, 0x5, 0x87, 0x3, 0x400, 0x1, 0x6, 0x2}}]}}]}}]}}, 0x0) 3.317148025s ago: executing program 4 (id=4389): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) setrlimit(0xb, &(0x7f0000000080)={0xe, 0x45}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000680)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000003c0)="d2c44dfc4ea4783b10ab7aaaf7d0d779801269b947278feb76607556a9c8bbc87440ad6613935c4fbf8c276a666290c1ac90e79f0d3beec50aecf03ade377f21c0", 0x41}, {&(0x7f0000000440)="593f03166d03d5b565112a3e411ece0b14a6e4faedcc7ebc4579c9d0e35b2a16364157b9660893804b1ec85206295b1a7c116aad0a4d2b808c66aa7b9f7ec767ddad346283f4e27788264fb76122e525769d1e1defc544deaf8611b2603d0263c1be55ba6a38137a46bd0f6f56d9780e323ff94c890c693eff478fc30b", 0x7d}, {&(0x7f0000000040)="924b6f188891612bada0758b74522fcc9b186cc3901be72b83fdc29a29a2ed4d9e91572e97222c1d83f2ef738888d39a5ebbac93ac2d9c87ea69", 0x3a}], 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20c5c900"], 0x58, 0x4}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r6 = socket$inet(0x2, 0x80001, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r7, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) listen(r7, 0x3) listen(r6, 0x3) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r5, 0x50) pipe2$watch_queue(&(0x7f0000000000), 0x80) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 2.839701853s ago: executing program 0 (id=4390): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x50, 0x0, &(0x7f00000002c0)="51e9e17d1a6efcbf34565cf0795760882831543e04720fba8cda4cac14d25bd6c060e9a65fe8e8fd471fbdd3125c9be2a30c190501765e7e05e312bdf7bc9c13bb9c8233badb5e642aec9b380a58b158"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0}) 2.782313372s ago: executing program 0 (id=4391): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f000000b080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)="69b6304edd8673f47219b40446f8b1f3abee9e1a57be0bea185982ddeacd753d21216823beeb6af8dbec0913f5b5552bee863bba", 0x34}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="f71bc231c3b6c1072094102c4faf5ae5913f69c2c8baae386b541f090ac4f5c5070306d58019284f752998fc4c4f32e03aa8975c40ed012393ebc0443c5e7eb8f75a1f909f79510ae2ec1ad6ae0a734f83", 0x51}], 0x3, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r0, r0, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}], 0x128, 0x8000}}, {{&(0x7f0000000ac0)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000b40)="7419824d3d49fa8927bf7593d337b1312d5db25b085453c1147abec96e2817328859202cfaf580e83e3b10000ec9e98ab2f540a0963f291042fbed3ad2a6fac281c4003523b38871e2f2c0ef87846fdb267c4b7e4366cfb9cf16c954cb9bd836d4c869da49b05e39c29f93e2f15d0956b946416aba96ead0fbc8bba1636dcb865f08d148bae36ec6", 0x88}, {&(0x7f0000000d40)="328ce3dc5af38d54e7cff558b87e11338e940e25c4c6f6657dc5a228b3f883079eca1f1501ab9ed230f1b2084b3c4abce9a68c131bb494bee3b3dad09b2e2059a6784fe8d468c42677e4064db8b250ff0ae531bd00d2b00806e84d89c7c6057fc6f59ce3314c1792caba68918006ffe780706d6ca60d0a434f0270ba964e28c73c924b73d8aa5cd3db8284ff4678b027127478b36fe0b0b124e90b30e136ad306380dd899715070aa861a194274a7de07550fdab64e0622d15ca29ca438ebafeaf4aa7b8f1c18e35968aa3765d3df60b318f76bd", 0xd4}], 0x2, 0x0, 0x0, 0x800}}, {{&(0x7f0000000c00)=@abs={0x0, 0x0, 0xfff}, 0x6e, &(0x7f0000000e40), 0x0, &(0x7f0000000f00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40, 0x800}}, {{&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000009a00)=[{&(0x7f0000008880)="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", 0x1000}, {&(0x7f0000000fc0)="38b7fbba54d566d2aef0c164f288a8bc28368fdfb0b2faa320bd140f132e6a2e1aeb65a8c1b31ff47d747809d9020925b6147eeed331dfedbfc6e4dc4f910b58233cbee3c4683d472164a631507589ce5fefe5d9f9f328f78cb36fba7f8ad33d2ab2f90e110c7b7292ccfcec9cc1efbe1f99ec031600950a899c5b4d72aa4de2df4a6432a49e070542f9ba6a1873f42767fe2f632a525637e1e0", 0x9a}, {&(0x7f0000001080)="fc78338e4760fb1e54fc4f01433f8ed92a183cbe6b3097be69b31452942e168ac9227796245d77d773441564eb009926b15d3ece9345dc049a7891d71d151b6726cc2d29293a4da1fff6db7a944e62b712a470a5ec893bb596da86fa6242e3069e8868ee98b8ddcbe6924eea7fb189110a30448eca57e6cd57e30e65decb2699cc8ce28b1c5f8625f78f97f3f7f899ad07d03c7808ff94fea6bde7b56f1b2eedec173a46f04d289ea2763e832e4798ee1e1d4ad7cd25640d3fe6608f4a191259d08e7314d1c81ee30b85a1414304ad9245c70f9998f9b11e3649a6e9a1e9f71606735d32702ea1e8ce8c", 0xea}, {&(0x7f0000001180)="24f1f942b37d081d43a457c2e0a6287c157a54242f180c3812b1eab829014e4ed85b9f5dff9ac2131ae6c8e9f3094b363f8ef2f27623bd9f48e3126795f3710f1df1e2a21e425e9cef954cefe8ed355f2419e069c0411d3e1e4a63d1f5fe14cfaadbb73fd7969e22d14c1523a5d3185b6bbed85448f9c70a5b663d1fba3e14d8d3effb798825d24bda8782856ce91d8fc5cfc78d78223c1fa53cf6e6dbb6e1d08c29a9d160f63f98284404b93c1af842def14233cad4188601d5a08179fd", 0xbe}, {&(0x7f0000009880)="4fbcc340b17fffc43ce6fbd733ce27ee57221db95602d3877a397312945150ae0c9a028db7a9a3b079d1ddafa55e555318dcfd73e2fbfe40ba643e2bc71a61aac2fa202b2a71b15e02d3c8bc4b90be9a7382049ad7b9c600080c940a010acead66f0ddf38e07f2110ca513b0b6b5bd0958e6739b294dbc222cf3445c86d64822db50e1b195bda9a25fe3a8721e90cd5c8f9c3084fd8dc2ce943353f52ae7efc93c8cd590283f4ca2499db908d7dfb7ec94d82f7365defe1defa11173a71757ea44e8f0", 0xc3}, {&(0x7f0000001240)="f7a11acff0340dd343ee5db81ef11f4930c2b2fac69bd0d41e28ec8024cb46b581fcaad76e77b3d3f6ecf44f75fe8a1f7ae6c944fb95b7af46a49504e6a370c0a1c1b66b7a08745f9a1ec9ed452b2e4a38dd90237849c2b280b1ff61536148205ab954d1", 0x64}, {&(0x7f0000009980)="731d7748d927e518d3092ad6706074a39d57ee001fac39eceafa923f612125e036369097ae115a721abedafca44a063f79d8568892a04e72a4df2b0d47f2f59a4c23e006367e51085fd010f5182bb4f1fab96b9b9dad8334c2466d40623ceb4527bf3f39e1c33fe305ec4b8b2e6f724cdcb4be55d250ad8c", 0x78}], 0x7, &(0x7f00000041c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}], 0x20, 0x8000}}, {{&(0x7f0000009a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000acc0)=[{&(0x7f0000009b00)="6c8c827dd1a333260c9dacf1c7fcedeacfad131a057cea4cdf6a7b1c07ffd626b91d4d338a1943756afd7924c05f168f626752774f788cda769e67c597af3aadd36248ff4720193a1e25b1fc4d2f90ad7b6de57b483133ea805272ecd033c1db1f7d1bfa854d5aefc2da71dffac0f87c7dd467672f79a64cf651452c5964815a8747ebfb307b08c336fbac1049e1d2c7d113464dd14799108f7e320301d27f8d0405a7d18239590dedb09463ee1e53eabb020b7728415a6c2766531bd973bb611503eb54625afb544af58f725f", 0xcd}, {&(0x7f0000009c00)="7d70152f10f9ff8d0117f29a25d82b351af106003236bee8f4d1f7490dbe5df48274737a80d10184d5ee128acdf962970e9bc1f834c4dfe669a534271d6a1985a54c436e11aad3a68cea9bcae0680d6091e605fd5fed6d7a5344611d36d7f00a348c603b9042383594b42d3cd7bb25b15f37857b64d09d57202b2064706e1db260a75834f4969618c43e9f97c6922a25642ab38a114c18d65b41f434a33badc9507e173ac47292861e0c134e6f1e39413e", 0xb1}, {&(0x7f0000009cc0)="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", 0x1000}], 0x3, &(0x7f000000af80)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc8, 0x4000001}}], 0x5, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) r6 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x2, 0x1000, 0x1004003, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="b4060100000000003a73113c0000000000859500c200000000009500001200000022000000000000000000000000000000ae69b0bcd9f01d402ea42e6eaf89be15f6862d7f7b09f2e59574c5ebe71b508484b0e0bd3e775b9320b9d8376c4e75"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x18, 0x0, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=""/100, &(0x7f0000000500)=""/15, &(0x7f0000000540)=""/28, 0xeeef0000}) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x590, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_procfs(0x0, &(0x7f0000000040)='children\x00') syz_pidfd_open(0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r7, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000005b80)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 2.531249934s ago: executing program 5 (id=4392): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) setxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000440), &(0x7f00000002c0)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x12, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r8, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000000) 2.047489648s ago: executing program 1 (id=4393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYRES64=r0], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) rseq(0x0, 0x0, 0xfffffffffffffffd, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0a0018000313030303030000050024000200000054002380060004"], 0x84}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x80) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setuid(0xee00) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4000040) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 2.010889151s ago: executing program 1 (id=4394): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd0}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) dup3(0xffffffffffffffff, r0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x50, 0x0, &(0x7f00000002c0)="51e9e17d1a6efcbf34565cf0795760882831543e04720fba8cda4cac14d25bd6c060e9a65fe8e8fd471fbdd3125c9be2a30c190501765e7e05e312bdf7bc9c13bb9c8233badb5e642aec9b380a58b158"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0}) 1.849865132s ago: executing program 4 (id=4395): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) poll(&(0x7f00000000c0)=[{r6, 0xe7d4c009da6c19a5}], 0x1, 0x4) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f6", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e"], 0x6c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r7, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c1}) 1.565118878s ago: executing program 5 (id=4396): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xc3ff) 1.451454779s ago: executing program 5 (id=4397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) syz_emit_ethernet(0x12, &(0x7f00000001c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x7, 0x1, 0x4}}, {@generic={0x88fb}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x1000000, 0x800, 0x3, 0x5}, 0x20) r6 = getpgrp(r1) mq_notify(r5, &(0x7f00000001c0)={0x0, 0x2c, 0x0, @tid=r6}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa4, &(0x7f00000002c0)=""/164, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="7000000000a5010400000200000038001400018008000100e000000108000200ac1414aa06000340000300000c000280050001002f000000240001801400018008000100e000000108000200e00000010c00028005005a0000000000"], 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1.284870564s ago: executing program 5 (id=4398): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0x201, 0x0, &(0x7f0000000c40)="63ecedae46dc4314fbb9111a30ac", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 1.09982849s ago: executing program 1 (id=4399): mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000013000500000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0804000000c00000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=0x0, @ANYBLOB="04011980"], 0x40}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000000034"], 0x118}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100)) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "eb31b7d2"}]}}, 0x0}, 0x0) 633.232364ms ago: executing program 4 (id=4400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) r1 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$printer(r1, &(0x7f00000003c0)={0xffffffffffffff66, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}}, 0x0) r2 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r2, 0x0) ftruncate(r2, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000000)="93", 0xf5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 580.877505ms ago: executing program 6 (id=4401): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd0}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x0, @generic={0xb, "1309a5e98391392ee0634d6bd9d5"}, @can, @nl=@kern={0x10, 0x0, 0x0, 0x10000000}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100, 0x2, 0x6}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) dup3(r7, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x50, 0x0, &(0x7f00000002c0)="51e9e17d1a6efcbf34565cf0795760882831543e04720fba8cda4cac14d25bd6c060e9a65fe8e8fd471fbdd3125c9be2a30c190501765e7e05e312bdf7bc9c13bb9c8233badb5e642aec9b380a58b158"}) 35.734395ms ago: executing program 5 (id=4402): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f00000002c0)={0x20, 0x3, 0xc7, {0xc7, 0x22, "a848902f73a54ba2ecc20f558eab5c78fb088a8d3e64c238c64936ac2d61f4012f51e823da613afc2c5af0a6c7708d877b44317193138267f2b4bb2ba2239db82559f81e46923c4b53ac768b3db6217f64ffc2497bb5fd4c177e870bcd34501153ce3e6b755cfb65bbfb4baf9e15f84a6d25d5c17f8ed0400bb2cd3fb1b61f7fbe3e9a53cf30de23bd37209d67f9489d3b638ea90c6d8aaf078a24bdee976c97e557970fdf4b8a508e4b05a6aca51aefad762db155be7b1ef7188f7822ae23b2d7dcc0f30f"}}, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x3, 0x5, "f873e613", "5a013fb6"}}, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfffffffe, 0xffffbffe, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x90) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_usb_connect$cdc_ecm(0x2, 0x6d, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x2, 0x60, 0xfb, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, '#kf'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0x2, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x1, 0x5}, @country_functional={0xc, 0x24, 0x7, 0xfc, 0xcd, [0x9c3, 0x4, 0x101]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x48, 0x5, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x4, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x23, 0xf1, 0x9}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x2, 0x0, 0x4, 0x40, 0x30}, 0x8, &(0x7f00000005c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xf8ff}}]}) syz_usb_control_io(r2, &(0x7f0000000b40)={0x2c, &(0x7f0000000880)={0x40, 0x30, 0x3a, {0x3a, 0x22, "ecc35fd6530a781c3b951879c815d6f27443cfd872d45faa7e4d1333c837c90293e396c2582c5b62a49ddfacfafd2b155fb692c7ee5d11d1"}}, &(0x7f00000008c0)={0x0, 0x3, 0x43, @string={0x43, 0x3, "131e706a950b95e70fcf2356405f831afa9178f534772cce2bc7f72d2b14ae4b03d3440aef9c605b2ca0cc814063108bb036463a2fa57e6c0f27ff3bf8f8901182"}}, &(0x7f0000000940)={0x0, 0xf, 0x148, {0x5, 0xf, 0x148, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x10, 0xfb, 0x0, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "2eaaa6b282cddb5c0122401b819da67d"}, @generic={0xff, 0x10, 0x2, "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"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x8, 0x2}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x6b, 0x3, 0xc00, 0xf00, 0x90e, [0xff3f3f, 0x0, 0xff000f]}]}}, &(0x7f0000000ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x6, 0x9, "4b428ef3", "e523633e"}}, &(0x7f0000000b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x6, 0x6, 0xc, 0x59, 0x4e0}}}, &(0x7f0000001040)={0x84, &(0x7f0000000b80)={0x40, 0x0, 0xee, "a395ba8a4e9f9137425042a676b4438c3feafc10fde709b9f0d12e4270f1aec71b0c5bc61dea7715768df8f739900f5f337aff591a533a45746d4524442869f149e85b6c665dc2a7fcc761255fe6a1aadf6c53dbdca2970adfe2fa0468685ad50b32a935844778eb6b3a0ecf0672fb5e5e4c27a7e94bd5c76687c846f61f4d9c26adb17a9fc28777e6976862044cde6a38ee6baf5e2faae3e585f849c86bf5699a31cc5a777e994c0c34cbc5b65ec1ab4ee02180920e80f3b192318db0425f7107aec6aa0bc12da76092df207a9e664449d32cffb62e74b97948db1f373045258e6ab125519af1de7de3dc6bc0ad"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x8, 0x4, [0xf00]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000e00)={0x40, 0xb, 0x2, 'IL'}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @random="1bf1ffb86a36"}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f0000000f00)={0x40, 0x19, 0x2, "b8de"}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000f80)={0x40, 0x1c, 0x1}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0xd2}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x40}}) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x7, 0xcb, {0xcb, 0x2, "06ee962c9723447a5eb4f5c649ed93f985a5249b907f505f6d23fb7a79885446c63416209429c58ca649a3fe82bf93b7c2c4da7ddd9d0a4166141823b1973bfb654b1339e85e535a5caaec68a1f88b563afa9770f0917135884bed094b554d9735896d9c390093c98b120bf7d91dbb936dcc47e526bd787de192ff3cc38fbdbbbd8e88dc4d1724aa2037df96269b5038b409f4ada55b0ba4b49bcce46b2773d1ce89245cdd7b8033b2a73179f09302dc281d6275fb71dc8f54773edb97d88108955ccd83648f541f83"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000180)={0x40, 0x17, 0x56, "19eab089e28add7adc4e55adc49e7628591ab2d9f4b63a7d2aaaa8b77ccac08aeb42337ed408d696b9a14b5d3299232997a199db9b748a5c26037ac5c86adebae98457608aeb5c95ea264b3189ee6667d58a46169ac1"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x28}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000003c0)={0x20, 0x0, 0xa6, {0xa4, "976580a6e5c0bbc7b2b3225cb066ca02415cecb08de8ac470f3fa88ad3e5b45ddda5422e6840bc1eb3a03fc81f8b7621b06855f35685c86afd0e28e77de6919d7632d35f7cb89e816ccdbbc1507cb25f7b7bcab5e84d64aae1e404a88eedebaa896753d63c74ee0e0ed9470ef5385d92556e4eecc7a5c958aef006b365f3a85bf2eb4559c4b043ff5f6f8c80d8a4ee9746d01452bbaea5541a3cedec934cb78dc0656d7f"}}, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x9}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 1 (id=4403): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001f80)=[{&(0x7f0000000580)=""/4081, 0xff1}], 0x1, 0x7fff, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x5, 0x2) connect$inet6(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x4f27, 0x2, 0x10000, 0x4, 0xe, 0x0, 0x3, 0x7, 0xa, 0x1, 0x8001, 0x4, 0xff6b, 0x801, 0xfffffffe, 0xb4c, 0x0, 0x2, 0x3, 0x40000003, 0x89, 0xcaa7, 0x201ff, 0x20001e58, 0xb, 0xe6b, 0x3c, 0x8, 0x65c, 0x0, 0xfffffff8]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c00"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05000000000000000000220000000a0001007770796e310000008e160c252e06af056a8f9bbe0462b5f2a708b1010a877a1ebaba00b4d9ee200758f4"], 0x20}}, 0x2000c094) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012"], 0x50}}, 0x4008840) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r5) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r11, 0xa17, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x70, r11, 0x200, 0x70bd67, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x0, 0x4, 0xff}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) kernel console output (not intermixed with test programs): 34.553307][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1334.568092][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1334.581244][ T976] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1334.592282][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.601604][ T976] usb 6-1: Product: syz [ 1334.608619][ T976] usb 6-1: Manufacturer: syz [ 1334.615521][ T976] usb 6-1: SerialNumber: syz [ 1334.625673][ T976] usb 6-1: config 0 descriptor?? [ 1334.636223][ T976] kobil_sct 6-1:0.0: KOBIL USB smart card terminal converter detected [ 1334.651291][ T976] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1334.669659][ T5915] usb 2-1: device descriptor read/64, error -71 [ 1334.898145][ T5915] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1335.031832][ T5915] usb 2-1: device descriptor read/64, error -71 [ 1335.136749][ T5915] usb usb2-port1: attempt power cycle [ 1335.460338][ T5915] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1335.489567][ T5915] usb 2-1: device descriptor read/8, error -71 [ 1335.727389][ T5915] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1335.756002][ T5915] usb 2-1: device descriptor read/8, error -71 [ 1335.847534][ T976] usb 6-1: USB disconnect, device number 60 [ 1335.860975][ T5915] usb usb2-port1: unable to enumerate USB device [ 1335.872572][ T976] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1335.937267][ T976] kobil_sct 6-1:0.0: device disconnected [ 1336.092293][T21384] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3759'. [ 1336.259792][ T30] audit: type=1400 audit(2000000136.705:3995): avc: denied { unmount } for pid=15527 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1336.347108][T21389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.376847][T21389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.418794][ T30] audit: type=1400 audit(2000000136.873:3996): avc: denied { write } for pid=21392 comm="syz.4.3762" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1336.427232][T21393] binder_alloc: 21392: pid 21392 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1336.472889][ T30] audit: type=1400 audit(2000000136.883:3997): avc: denied { map } for pid=21392 comm="syz.4.3762" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1336.499634][ T30] audit: type=1400 audit(2000000136.883:3998): avc: denied { call } for pid=21392 comm="syz.4.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1336.549059][ T30] audit: type=1400 audit(2000000137.020:3999): avc: denied { append } for pid=21394 comm="syz.0.3763" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1336.549111][T21395] program syz.0.3763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1336.575172][ T5915] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1336.995163][T21408] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3764'. [ 1337.632161][ T5915] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 16 [ 1337.645731][ T5915] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1337.659832][ T5915] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1337.669072][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.687401][ T5915] usb 6-1: Product: 쨙㖊忁譁諷ᓥ≖৻隈޸惘Ÿ焈姶껹⢰ᢉサ咙づ纼䔴ɥ⌫검앴䗊र䊢敖툰緡翄⩶ﴃ丁辂Ǔᴦᗽ骻䲸ꙣ鬡랖뜬骄溺 [ 1337.718424][ T30] audit: type=1400 audit(2000000138.238:4000): avc: denied { shutdown } for pid=21411 comm="syz.0.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1337.745746][ T5915] usb 6-1: Manufacturer: Х [ 1337.778737][ T5915] usb 6-1: SerialNumber: ᐁ [ 1337.789510][T21390] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1337.836244][ T30] audit: type=1400 audit(2000000138.364:4001): avc: denied { bind } for pid=21418 comm="syz.1.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1337.903820][ T30] audit: type=1400 audit(2000000138.364:4002): avc: denied { name_bind } for pid=21418 comm="syz.1.3771" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1337.927919][ T30] audit: type=1400 audit(2000000138.364:4003): avc: denied { node_bind } for pid=21418 comm="syz.1.3771" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1337.972189][ T30] audit: type=1400 audit(2000000138.395:4004): avc: denied { create } for pid=21418 comm="syz.1.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1338.046304][ T5915] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1338.060766][ T30] audit: type=1400 audit(2000000138.395:4005): avc: denied { read write } for pid=21418 comm="syz.1.3771" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1338.094749][ T5915] usb 6-1: USB disconnect, device number 61 [ 1338.114576][ T5915] usblp0: removed [ 1338.118380][ T30] audit: type=1400 audit(2000000138.395:4006): avc: denied { open } for pid=21418 comm="syz.1.3771" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1338.284555][ T30] audit: type=1400 audit(2000000138.657:4007): avc: denied { shutdown } for pid=21431 comm="syz.1.3773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1338.403641][T18952] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1338.588361][T18952] usb 2-1: Using ep0 maxpacket: 32 [ 1338.608308][T18952] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1338.627563][T18952] usb 2-1: config 0 has no interface number 0 [ 1338.641237][T18952] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1338.656574][T21443] tmpfs: Bad value for 'mpol' [ 1338.661359][ T30] audit: type=1400 audit(2000000139.224:4008): avc: denied { map } for pid=21440 comm="syz.5.3776" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1338.685785][T18952] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1338.708633][ T30] audit: type=1400 audit(2000000139.235:4009): avc: denied { ioctl } for pid=21440 comm="syz.5.3776" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1338.734706][ T30] audit: type=1400 audit(2000000139.235:4010): avc: denied { create } for pid=21440 comm="syz.5.3776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1338.755970][T18952] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1338.766552][T18952] usb 2-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 1338.774552][T18952] usb 2-1: Product: syz [ 1338.796120][T21443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3775'. [ 1338.822670][T18952] usb 2-1: Manufacturer: syz [ 1338.827317][T18952] usb 2-1: SerialNumber: syz [ 1338.843294][T18952] usb 2-1: config 0 descriptor?? [ 1338.889448][ T5908] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 1339.036222][ T5908] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1339.045702][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.066065][ T5908] usb 6-1: Product: syz [ 1339.171732][ T5908] usb 6-1: Manufacturer: syz [ 1339.192907][ T5908] usb 6-1: SerialNumber: syz [ 1339.501934][T21455] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3779'. [ 1339.598670][T21460] dlm: no local IP address has been set [ 1339.608333][T21460] dlm: cannot start dlm midcomms -107 [ 1341.231802][T21483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3784'. [ 1341.577405][T18952] appletouch 2-1:0.85: Failed to read mode from device. [ 1341.614716][T18952] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 1341.760344][T18952] usb 2-1: USB disconnect, device number 12 [ 1342.596185][ T5908] usb_8dev 6-1:229.0 can0: sending command message failed [ 1342.615272][ T5908] usb_8dev 6-1:229.0 can0: can't get firmware version [ 1342.648573][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1342.648589][ T30] audit: type=1400 audit(2000000143.392:4013): avc: denied { setopt } for pid=21479 comm="syz.6.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1342.674135][ C1] vkms_vblank_simulate: vblank timer overrun [ 1342.823351][ T5908] usb_8dev 6-1:229.0: probe with driver usb_8dev failed with error -22 [ 1342.850187][ T5908] usb 6-1: USB disconnect, device number 62 [ 1342.940913][ T30] audit: type=1400 audit(2000000143.718:4014): avc: denied { create } for pid=21503 comm="syz.1.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1342.961620][ C1] vkms_vblank_simulate: vblank timer overrun [ 1343.121061][ T30] audit: type=1400 audit(2000000143.802:4015): avc: denied { ioctl } for pid=21509 comm="syz.4.3793" path="socket:[77847]" dev="sockfs" ino=77847 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1343.380246][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3792'. [ 1344.057268][T21530] netlink: 'syz.0.3797': attribute type 4 has an invalid length. [ 1344.239808][ T30] audit: type=1400 audit(2000000145.009:4016): avc: denied { mount } for pid=21526 comm="syz.0.3797" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1344.269196][ T30] audit: type=1400 audit(2000000145.051:4017): avc: denied { setopt } for pid=21526 comm="syz.0.3797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1344.291275][T21533] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 1344.301579][ T30] audit: type=1400 audit(2000000145.114:4018): avc: denied { nlmsg_read } for pid=21520 comm="syz.4.3796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1344.322866][T21534] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 1 [ 1344.336660][T21529] binder: BINDER_SET_CONTEXT_MGR already set [ 1344.343062][T21529] binder: 21528:21529 ioctl 4018620d 200000000040 returned -16 [ 1344.354031][T21535] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 2 [ 1344.354908][T21536] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 3 [ 1344.400426][T21537] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 4 [ 1344.427470][ T30] audit: type=1400 audit(2000000145.261:4019): avc: denied { sqpoll } for pid=21528 comm="syz.5.3798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1344.449741][T21539] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 5 [ 1344.500302][T21541] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 6 [ 1344.513951][T21542] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 7 [ 1344.572801][T21544] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 8 [ 1344.646485][ T30] audit: type=1400 audit(2000000145.271:4020): avc: denied { block_suspend } for pid=21528 comm="syz.5.3798" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1344.677602][ C1] vkms_vblank_simulate: vblank timer overrun [ 1344.877693][T21545] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 9 [ 1344.887970][T21546] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 10 [ 1344.899266][T21547] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 11 [ 1344.918173][T21548] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 12 [ 1344.940260][T21549] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 13 [ 1344.950899][T21550] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 14 [ 1344.969496][T21551] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 15 [ 1344.989536][T21552] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 16 [ 1345.006741][T21553] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 17 [ 1345.054747][T21554] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 18 [ 1345.070373][T21555] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 19 [ 1345.080565][T21556] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 20 [ 1345.093166][T21557] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 21 [ 1345.113563][T21558] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 22 [ 1345.131788][T21559] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 23 [ 1345.142766][T21560] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 24 [ 1345.143197][T21561] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 25 [ 1345.175579][T21562] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 26 [ 1345.191861][T21563] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 27 [ 1345.212230][T21564] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 28 [ 1345.236701][T21567] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 29 [ 1345.329867][T21568] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 30 [ 1345.342364][T21569] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 31 [ 1345.357275][T21570] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 32 [ 1345.367555][T21571] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 33 [ 1345.378930][T21572] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 34 [ 1345.398466][T21575] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 36 [ 1345.409024][T21576] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 37 [ 1345.419250][T21573] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 35 [ 1345.474648][T21577] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 38 [ 1345.502058][T21578] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 39 [ 1345.531634][T21579] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 40 [ 1345.549190][T21580] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 41 [ 1345.574933][T21582] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 43 [ 1345.585504][T21583] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 44 [ 1345.606025][T21584] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 45 [ 1345.606052][T21581] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 42 [ 1345.634213][T21585] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 46 [ 1345.646688][T21586] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 47 [ 1345.664929][T21587] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 48 [ 1345.681975][T21588] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 49 [ 1345.692460][T21589] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 50 [ 1345.897037][T21590] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 51 [ 1345.909687][T21594] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 52 [ 1346.027497][T21598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3801'. [ 1346.064983][T21595] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 53 [ 1346.085760][T21600] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 55 [ 1346.086985][T21599] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 54 [ 1346.107121][T21601] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 56 [ 1346.121115][T21603] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 57 [ 1346.132191][T21604] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 58 [ 1346.132449][T21605] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 59 [ 1346.153894][T21606] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 60 [ 1346.164824][T21607] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 61 [ 1346.179319][T21608] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 62 [ 1346.194921][T21610] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 63 [ 1346.369805][T21609] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21609 comm=syz.4.3801 [ 1346.423404][ T30] audit: type=1400 audit(2000000147.371:4021): avc: denied { unmount } for pid=18298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1346.456309][T21598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3801'. [ 1346.477040][T21613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3802'. [ 1346.580083][T21602] : entered promiscuous mode [ 1346.600969][ T30] audit: type=1400 audit(2000000147.570:4022): avc: denied { create } for pid=21614 comm="syz.0.3803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1346.629712][T21613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21613 comm=syz.1.3802 [ 1346.664386][T21613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3802'. [ 1346.744606][T21623] input: syz1 as /devices/virtual/input/input99 [ 1347.043196][T21622] 9pnet_fd: Insufficient options for proto=fd [ 1348.143300][T21627] : entered promiscuous mode [ 1348.329633][T21629] nbd6: detected capacity change from 0 to 240 [ 1348.340721][T21631] block nbd6: Send control failed (result -89) [ 1348.369087][T21631] block nbd6: Request send failed, requeueing [ 1348.401792][T19083] block nbd6: Receive control failed (result -32) [ 1348.410580][T21634] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 1348.414764][T19616] block nbd6: Dead connection, failed to find a fallback [ 1348.430273][T19616] block nbd6: shutting down sockets [ 1348.436010][T19616] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1348.447159][T19616] buffer_io_error: 4 callbacks suppressed [ 1348.447168][T19616] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1348.463375][T21631] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1348.464450][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1348.464462][ T30] audit: type=1400 audit(2000000149.523:4030): avc: denied { setopt } for pid=21635 comm="syz.5.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1348.512823][T21636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3808'. [ 1348.535544][T21631] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1348.555429][T21631] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1348.574505][T21636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3808'. [ 1348.594155][T21631] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1348.632655][T21631] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1348.789356][T21631] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1348.876232][T21631] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1348.890812][ T30] audit: type=1400 audit(2000000149.974:4031): avc: denied { bind } for pid=21635 comm="syz.5.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1348.920210][T21631] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1348.938572][T21631] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1348.950338][T21631] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1348.962278][T21631] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1349.016408][T21631] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1349.076350][T21631] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1349.092740][T16427] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1349.138037][T21631] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1349.148625][T21631] ldm_validate_partition_table(): Disk read failed. [ 1349.243733][T16427] usb 2-1: device descriptor read/64, error -71 [ 1349.271127][T21631] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1349.314918][T21631] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1349.347279][T21631] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1349.380870][T21631] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1349.451591][T21631] Dev nbd6: unable to read RDB block 0 [ 1349.468964][T21631] nbd6: unable to read partition table [ 1349.511624][T16427] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1349.685869][T16427] usb 2-1: device descriptor read/64, error -71 [ 1349.799735][T16427] usb usb2-port1: attempt power cycle [ 1350.131874][T16427] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1350.170661][T16427] usb 2-1: device descriptor read/8, error -71 [ 1350.425316][T16427] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1350.495089][T16427] usb 2-1: device descriptor read/8, error -71 [ 1350.644504][T16427] usb usb2-port1: unable to enumerate USB device [ 1350.653523][ T5908] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1350.854988][ T5908] usb 6-1: Using ep0 maxpacket: 32 [ 1350.877757][ T5908] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1350.887458][ T5908] usb 6-1: config 0 has no interface number 0 [ 1350.894809][ T5908] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1350.935458][ T5908] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1350.948990][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.971418][ T5908] usb 6-1: Product: syz [ 1350.984727][ T5908] usb 6-1: Manufacturer: syz [ 1351.015457][ T5908] usb 6-1: SerialNumber: syz [ 1351.033819][ T5908] usb 6-1: config 0 descriptor?? [ 1352.863729][T21674] affs: No valid root block on device nullb0 [ 1353.000837][T21654] dlm: no local IP address has been set [ 1353.046303][T21654] dlm: cannot start dlm midcomms -107 [ 1353.114728][ T30] audit: type=1400 audit(2000000154.405:4032): avc: denied { create } for pid=21677 comm="syz.1.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1353.152812][ T30] audit: type=1400 audit(2000000154.426:4033): avc: denied { connect } for pid=21677 comm="syz.1.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1354.050164][T21685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3821'. [ 1354.118449][ T30] audit: type=1400 audit(2000000155.423:4034): avc: granted { setsecparam } for pid=21687 comm="syz.0.3823" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1354.766876][T21685] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21685 comm=syz.1.3821 [ 1354.803023][T21685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3821'. [ 1354.849894][ T5908] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1354.858210][ T5908] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1354.869208][ T5908] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1354.908831][ T5908] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1354.957077][ T5908] usb 6-1: USB disconnect, device number 63 [ 1356.177663][ T30] audit: type=1400 audit(2000000157.575:4035): avc: denied { append } for pid=21718 comm="syz.0.3830" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1356.760036][T21718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1356.937284][T21742] affs: No valid root block on device nullb0 [ 1358.745116][ T30] audit: type=1400 audit(2000000160.199:4036): avc: denied { create } for pid=21761 comm="syz.5.3840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1358.939673][T21776] binder: 21774:21776 ioctl 4004662b 200000000240 returned -22 [ 1359.824257][T21790] xt_limit: Overflow, try lower: 2498045675/2726951205 [ 1360.031490][T21796] trusted_key: encrypted_key: master key parameter 'xefault' is invalid [ 1360.045722][ T5908] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1360.120166][T21799] affs: No valid root block on device nullb0 [ 1360.217238][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 1360.264640][ T5908] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1360.343867][ T5908] usb 6-1: config 179 has no interface number 0 [ 1360.409726][ T5908] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1360.490658][ T5908] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1360.515705][ T5908] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 1360.536968][ T5908] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 1360.552886][ T5908] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1360.566883][ T5908] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1360.576563][ T5908] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1360.593125][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.611501][ T5908] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input100 [ 1360.655533][ T5204] input input100: unable to receive magic message: -110 [ 1360.664591][ T5204] input input100: unable to receive magic message: -32 [ 1360.679969][ T5204] input input100: unable to receive magic message: -32 [ 1360.693998][ T5204] input input100: unable to receive magic message: -32 [ 1360.800983][T21784] input input100: unable to receive magic message: -32 [ 1361.000920][T21784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.036968][T21784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.245753][ T30] audit: type=1400 audit(2000000162.939:4037): avc: denied { connect } for pid=21811 comm="syz.1.3854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1361.299625][ T30] audit: type=1400 audit(2000000162.992:4038): avc: denied { read } for pid=21811 comm="syz.1.3854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1361.334606][T21814] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3853'. [ 1361.343938][T21814] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3853'. [ 1361.353121][T21814] netlink: 'syz.6.3853': attribute type 1 has an invalid length. [ 1361.714571][ T30] audit: type=1400 audit(2000000163.107:4039): avc: denied { write } for pid=21811 comm="syz.1.3854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1362.141328][ T5908] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1362.379600][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 1362.631591][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.644844][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.655235][ T5908] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1362.665245][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.676338][ T5908] usb 2-1: config 0 descriptor?? [ 1362.716549][T18952] usb 6-1: USB disconnect, device number 64 [ 1362.716562][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1362.968804][ T30] audit: type=1400 audit(2000000164.651:4040): avc: denied { getopt } for pid=21823 comm="syz.6.3857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1363.200358][ T5908] aquacomputer_d5next 0003:0C70:F0B6.0011: hidraw0: USB HID v0.05 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 1363.264662][ T30] audit: type=1400 audit(2000000165.060:4041): avc: denied { setattr } for pid=21829 comm="syz.0.3858" name="L2TP/IPv6" dev="sockfs" ino=78343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1363.326630][T18952] IPVS: starting estimator thread 0... [ 1363.327377][ T30] audit: type=1400 audit(2000000165.123:4042): avc: denied { ioctl } for pid=21829 comm="syz.0.3858" path="socket:[78345]" dev="sockfs" ino=78345 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1363.436782][T21835] IPVS: using max 74 ests per chain, 177600 per kthread [ 1364.214920][ T30] audit: type=1400 audit(2000000166.057:4043): avc: denied { create } for pid=21840 comm="syz.4.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1364.241619][ T30] audit: type=1400 audit(2000000166.089:4044): avc: denied { ioctl } for pid=21840 comm="syz.4.3860" path="socket:[79170]" dev="sockfs" ino=79170 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1364.269779][T18952] usb 2-1: USB disconnect, device number 17 [ 1364.458967][ T30] audit: type=1400 audit(2000000166.141:4045): avc: denied { ioctl } for pid=21840 comm="syz.4.3860" path="socket:[79167]" dev="sockfs" ino=79167 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1365.612638][T21857] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3864'. [ 1366.186877][T21864] dummy0: left allmulticast mode [ 1366.209472][T21864] bridge0: port 1(dummy0) entered disabled state [ 1366.218869][T21862] Bluetooth: MGMT ver 1.23 [ 1366.223722][ T30] audit: type=1400 audit(2000000168.125:4046): avc: denied { name_bind } for pid=21856 comm="syz.0.3864" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1366.276195][T21869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3867'. [ 1366.484486][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3866'. [ 1366.605242][ T30] audit: type=1400 audit(2000000168.230:4047): avc: denied { write } for pid=21865 comm="syz.1.3867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1366.852352][T21864] bond0: (slave wlan1): Releasing backup interface [ 1367.031803][T21871] team0: Unable to change to the same mode the team is in [ 1367.210637][T21877] nbd4: detected capacity change from 0 to 63 [ 1367.226760][T21879] bond2: entered promiscuous mode [ 1367.245128][T21879] bond2: entered allmulticast mode [ 1367.305886][T21879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1367.561996][T21878] block nbd4: NBD_DISCONNECT [ 1367.575551][T21878] block nbd4: Disconnected due to user request. [ 1367.583487][T21878] block nbd4: shutting down sockets [ 1369.191419][T21907] bond0: entered promiscuous mode [ 1369.550856][T21910] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3876'. [ 1371.182243][T21924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3879'. [ 1371.308145][ T30] audit: type=1400 audit(2000000173.500:4048): avc: denied { read } for pid=21928 comm="syz.0.3881" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1371.365419][ T30] audit: type=1400 audit(2000000173.500:4049): avc: denied { open } for pid=21928 comm="syz.0.3881" path="/173/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1371.482953][T21924] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21924 comm=syz.4.3879 [ 1371.945918][ T30] audit: type=1400 audit(2000000173.500:4050): avc: denied { open } for pid=21928 comm="syz.0.3881" path="/dev/ttyq4" dev="devtmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1371.983371][T21924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3879'. [ 1372.486729][T21937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.902274][T11592] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1372.952058][ T30] audit: type=1400 audit(2000000175.222:4051): avc: denied { create } for pid=21952 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1373.165918][T11592] usb 2-1: Using ep0 maxpacket: 16 [ 1373.177388][T11592] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1373.190179][T11592] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1373.204540][T11592] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1373.214147][T11592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.239031][T11592] usb 2-1: Product: syz [ 1373.243587][T11592] usb 2-1: Manufacturer: syz [ 1373.248230][T11592] usb 2-1: SerialNumber: syz [ 1373.262549][T11592] usb 2-1: config 0 descriptor?? [ 1373.278625][T11592] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected [ 1373.401016][T11592] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1373.557934][ T30] audit: type=1400 audit(2000000175.862:4052): avc: denied { create } for pid=21952 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1373.915089][T14628] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1374.233157][T14628] usb 6-1: Using ep0 maxpacket: 32 [ 1374.245647][T14628] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1374.265699][T14628] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1374.307762][ T30] audit: type=1400 audit(2000000176.660:4053): avc: denied { setopt } for pid=21970 comm="syz.6.3891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1374.348013][T14628] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1374.381816][T14628] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1374.406315][T14628] usb 6-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 1374.437465][T14628] usb 6-1: Product: syz [ 1374.446846][T14628] usb 6-1: Manufacturer: syz [ 1374.457779][T14628] usb 6-1: SerialNumber: syz [ 1374.471966][T14628] usb 6-1: config 0 descriptor?? [ 1374.634779][ T5908] usb 2-1: USB disconnect, device number 18 [ 1374.646319][ T5908] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1374.658323][ T5908] kobil_sct 2-1:0.0: device disconnected [ 1375.384547][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1375.406224][T14628] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1375.419338][ T30] audit: type=1326 audit(2000000177.815:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.0.3893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2f158eba9 code=0x0 [ 1375.734679][T14628] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1375.768752][T14628] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 1375.784683][ T30] audit: type=1400 audit(2000000178.193:4055): avc: denied { write } for pid=21989 comm="syz.1.3895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1375.818624][T11592] usb 6-1: USB disconnect, device number 65 [ 1376.648979][ T30] audit: type=1400 audit(2000000178.959:4056): avc: denied { connect } for pid=22000 comm="syz.6.3899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1376.668948][ C0] vkms_vblank_simulate: vblank timer overrun [ 1377.020609][ T30] audit: type=1400 audit(2000000178.959:4057): avc: denied { write } for pid=22000 comm="syz.6.3899" path="socket:[79640]" dev="sockfs" ino=79640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1377.380935][T22017] dlm: no local IP address has been set [ 1377.388731][T22017] dlm: cannot start dlm midcomms -107 [ 1382.795892][T22041] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1383.106312][T22048] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3912'. [ 1383.140107][ T30] audit: type=1400 audit(2000000185.930:4058): avc: denied { connect } for pid=22049 comm="syz.4.3913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1383.196118][T22052] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3914'. [ 1383.228754][T22053] team0: Unable to change to the same mode the team is in [ 1383.329112][T22052] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22052 comm=syz.5.3914 [ 1383.352192][T22052] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3914'. [ 1383.472662][T22055] : entered promiscuous mode [ 1384.099962][ T30] audit: type=1400 audit(2000000186.938:4059): avc: denied { lock } for pid=22059 comm="syz.5.3916" path="socket:[79906]" dev="sockfs" ino=79906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1386.354985][T22060] syz.5.3916 (22060): drop_caches: 1 [ 1386.623529][ T30] audit: type=1400 audit(2000000189.573:4060): avc: denied { connect } for pid=22080 comm="syz.5.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1389.602403][ T30] audit: type=1400 audit(2000000192.691:4061): avc: denied { bind } for pid=22110 comm="syz.6.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1390.917838][T22120] block nbd0: Attempted send on invalid socket [ 1391.094956][T22120] blk_print_req_error: 6 callbacks suppressed [ 1391.094975][T22120] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1391.157068][ T30] audit: type=1400 audit(2000000194.339:4062): avc: denied { ioctl } for pid=22116 comm="syz.0.3931" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1392.629357][T22126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3931'. [ 1392.671001][T22126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3931'. [ 1393.005285][T22144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3936'. [ 1393.084469][T22144] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3936'. [ 1393.093800][T22144] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3936'. [ 1393.486602][ T30] audit: type=1400 audit(2000000196.785:4063): avc: denied { read } for pid=22147 comm="syz.1.3939" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1394.188492][ T30] audit: type=1400 audit(2000000196.785:4064): avc: denied { open } for pid=22147 comm="syz.1.3939" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1394.653607][T18952] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1394.719496][T11592] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1394.731749][T22171] hub 9-0:1.0: USB hub found [ 1394.738710][T22171] hub 9-0:1.0: 1 port detected [ 1394.862263][T18952] usb 2-1: Using ep0 maxpacket: 8 [ 1394.869129][T18952] usb 2-1: config 0 has an invalid interface number: 140 but max is 0 [ 1394.877536][T18952] usb 2-1: config 0 has no interface number 0 [ 1394.888404][T18952] usb 2-1: config 0 interface 140 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.894276][ T30] audit: type=1400 audit(2000000198.265:4065): avc: denied { watch } for pid=22165 comm="syz.0.3942" path="/185" dev="tmpfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1394.900345][T18952] usb 2-1: config 0 interface 140 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.931919][T11592] usb 6-1: Using ep0 maxpacket: 8 [ 1394.937098][T18952] usb 2-1: config 0 interface 140 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1394.951920][T11592] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1394.960604][T11592] usb 6-1: config 179 has no interface number 0 [ 1394.967286][T11592] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1394.978715][T18952] usb 2-1: config 0 interface 140 has no altsetting 0 [ 1394.979280][ T30] audit: type=1400 audit(2000000198.360:4066): avc: denied { read write } for pid=22173 comm="syz.6.3945" name="mouse0" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1394.985493][T11592] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1394.985523][T11592] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 1394.985544][T11592] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 1394.985566][T11592] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1394.985591][T11592] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1395.009340][ C0] vkms_vblank_simulate: vblank timer overrun [ 1395.069906][T18952] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1395.083780][T18952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.110601][T18952] usb 2-1: config 0 descriptor?? [ 1395.130311][T11592] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1395.141977][ T30] audit: type=1400 audit(2000000198.360:4067): avc: denied { open } for pid=22173 comm="syz.6.3945" path="/dev/input/mouse0" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1395.147960][T11592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.194974][ T30] audit: type=1400 audit(2000000198.570:4068): avc: denied { ioctl } for pid=22173 comm="syz.6.3945" path="/dev/input/mouse0" dev="devtmpfs" ino=961 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1395.243460][T11592] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input101 [ 1395.301937][ T5204] input input101: unable to receive magic message: -110 [ 1395.306800][ T5204] input input101: unable to receive magic message: -32 [ 1395.316770][ T5204] input input101: unable to receive magic message: -32 [ 1395.317804][ T5204] input input101: unable to receive magic message: -32 [ 1395.385045][T22181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3946'. [ 1395.454623][T22168] input input101: unable to receive magic message: -32 [ 1395.710856][T22168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.711183][T22168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.735257][T18952] usbhid 2-1:0.140: can't add hid device: -71 [ 1395.735369][T18952] usbhid 2-1:0.140: probe with driver usbhid failed with error -71 [ 1395.738865][T18952] usb 2-1: USB disconnect, device number 19 [ 1396.194827][ T30] audit: type=1400 audit(2000000199.273:4069): avc: denied { mount } for pid=22193 comm="syz.0.3947" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1396.763749][T22213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3950'. [ 1398.005567][ T30] audit: type=1326 audit(2000000201.530:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22215 comm="syz.1.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf178eba9 code=0x7ffc0000 [ 1398.005601][ T30] audit: type=1326 audit(2000000201.541:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22215 comm="syz.1.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf178eba9 code=0x7ffc0000 [ 1398.011903][ T30] audit: type=1326 audit(2000000201.541:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22215 comm="syz.1.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f5bf178eba9 code=0x7ffc0000 [ 1398.094333][ T30] audit: type=1326 audit(2000000201.541:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22215 comm="syz.1.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf178eba9 code=0x7ffc0000 [ 1398.094375][ T30] audit: type=1326 audit(2000000201.541:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22215 comm="syz.1.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf178eba9 code=0x7ffc0000 [ 1398.376009][ C0] vkms_vblank_simulate: vblank timer overrun [ 1398.408267][ C0] vkms_vblank_simulate: vblank timer overrun [ 1398.414408][ T5922] usb 6-1: USB disconnect, device number 66 [ 1398.414449][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1398.640748][T22226] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1398.640814][T22226] ref_ctr increment failed for inode: 0x410 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807a9bd600 [ 1398.728272][ C0] vkms_vblank_simulate: vblank timer overrun [ 1400.810313][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1400.810334][ T30] audit: type=1400 audit(2000000204.449:4077): avc: denied { bind } for pid=22248 comm="syz.4.3960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1401.475219][ T30] audit: type=1400 audit(2000000204.449:4078): avc: denied { write } for pid=22248 comm="syz.4.3960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1401.736926][ T30] audit: type=1400 audit(2000000204.459:4079): avc: denied { watch } for pid=22248 comm="syz.4.3960" path="/178/file0" dev="tmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1402.406422][ T30] audit: type=1400 audit(2000000204.459:4080): avc: denied { watch_sb watch_reads } for pid=22248 comm="syz.4.3960" path="/178/file0" dev="tmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1402.466316][T22261] syz_tun: entered allmulticast mode [ 1402.765039][T22264] dvmrp8: entered allmulticast mode [ 1403.759073][ T30] audit: type=1400 audit(2000000207.430:4081): avc: denied { mounton } for pid=22263 comm="syz.6.3963" path=2F70726F632F3533382F7461736B2F353430202864656C6574656429 dev="proc" ino=80223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1404.674069][T22288] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3971'. [ 1404.839090][ T5922] vxcan1 speed is unknown, defaulting to 1000 [ 1404.845318][T22295] team0: Unable to change to the same mode the team is in [ 1404.904236][ T30] audit: type=1400 audit(2000000208.753:4082): avc: denied { read } for pid=22289 comm="syz.6.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1404.968831][T22297] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3972'. [ 1405.132760][T22298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3970'. [ 1405.872082][T22302] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1406.276694][ T30] audit: type=1400 audit(2000000210.191:4083): avc: denied { append } for pid=22308 comm="syz.0.3975" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1406.634843][ T30] audit: type=1400 audit(2000000210.590:4084): avc: denied { bind } for pid=22324 comm="syz.6.3980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1406.792643][T22328] block nbd6: Attempted send on invalid socket [ 1406.799948][T22328] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1406.813437][T22328] block nbd6: Attempted send on invalid socket [ 1406.820581][T22328] I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1406.831328][T22328] Mount JFS Failure: -5 [ 1407.093267][T22333] binder: 22331:22333 ioctl 4018620d 0 returned -22 [ 1407.132494][T22332] binder: 22331:22332 ioctl 4018620d 0 returned -22 [ 1407.168511][T22334] binder: 22331:22334 ioctl c0046209 200000000000000 returned -22 [ 1407.370759][T22336] netlink: 'syz.1.3982': attribute type 10 has an invalid length. [ 1407.385287][T22336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3982'. [ 1407.405754][T22336] team0: entered promiscuous mode [ 1407.420129][T22336] team0: entered allmulticast mode [ 1407.453582][T22336] bridge0: port 1(team0) entered blocking state [ 1407.461367][T22336] bridge0: port 1(team0) entered disabled state [ 1407.543975][T22344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22344 comm=syz.0.3984 [ 1407.792449][T22357] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3985'. [ 1408.289307][T22365] 9pnet_fd: Insufficient options for proto=fd [ 1408.292620][ T30] audit: type=1400 audit(2000000212.322:4085): avc: denied { mounton } for pid=22363 comm="syz.6.3988" path="/146/file0" dev="tmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1408.901311][ T30] audit: type=1400 audit(2000000212.942:4086): avc: denied { remount } for pid=22369 comm="syz.1.3990" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1409.844383][ T30] audit: type=1400 audit(2000000213.960:4087): avc: denied { setopt } for pid=22383 comm="syz.5.3994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1410.303136][ T30] audit: type=1400 audit(2000000213.960:4088): avc: denied { connect } for pid=22383 comm="syz.5.3994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1410.475325][T22391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1412.179327][T18952] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1412.449697][T22415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4002'. [ 1412.864869][T18952] usb 6-1: Using ep0 maxpacket: 16 [ 1412.872382][T18952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1412.902126][T18952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1412.932062][T18952] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1412.976357][T18952] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1412.994050][T18952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.035475][T18952] usb 6-1: config 0 descriptor?? [ 1413.050343][T22426] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4006'. [ 1413.223093][T22429] netlink: 'syz.6.4007': attribute type 1 has an invalid length. [ 1413.247794][T22429] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.4007'. [ 1413.270427][T22430] team0: Unable to change to the same mode the team is in [ 1413.571679][T18952] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 1413.697246][T18952] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0012/input/input102 [ 1414.227479][T18952] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1414.687851][T22444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4010'. [ 1415.160814][T18952] usb 6-1: reset high-speed USB device number 67 using dummy_hcd [ 1415.386414][T22451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1415.396544][ T30] audit: type=1400 audit(2000000219.786:4089): avc: denied { accept } for pid=22449 comm="syz.1.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1416.162811][T11592] usb 6-1: USB disconnect, device number 67 [ 1417.144559][T22481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4020'. [ 1417.201198][T22481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4020'. [ 1417.480010][ T5915] IPVS: starting estimator thread 0... [ 1417.582901][T22492] IPVS: using max 44 ests per chain, 105600 per kthread [ 1418.074522][T22504] FAULT_INJECTION: forcing a failure. [ 1418.074522][T22504] name failslab, interval 1, probability 0, space 0, times 0 [ 1418.120803][T22504] CPU: 0 UID: 0 PID: 22504 Comm: syz.4.4026 Not tainted syzkaller #0 PREEMPT(full) [ 1418.120828][T22504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1418.120837][T22504] Call Trace: [ 1418.120842][T22504] [ 1418.120849][T22504] dump_stack_lvl+0x16c/0x1f0 [ 1418.120874][T22504] should_fail_ex+0x512/0x640 [ 1418.120894][T22504] ? fs_reclaim_acquire+0xae/0x150 [ 1418.120916][T22504] ? tomoyo_encode2+0x100/0x3e0 [ 1418.120940][T22504] should_failslab+0xc2/0x120 [ 1418.120957][T22504] __kmalloc_noprof+0xd2/0x510 [ 1418.120974][T22504] ? d_absolute_path+0x136/0x1a0 [ 1418.120999][T22504] tomoyo_encode2+0x100/0x3e0 [ 1418.121033][T22504] tomoyo_encode+0x29/0x50 [ 1418.121060][T22504] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1418.121092][T22504] tomoyo_mount_acl+0x1ae/0x850 [ 1418.121115][T22504] ? bpf_ksym_find+0x127/0x1c0 [ 1418.121140][T22504] ? is_bpf_text_address+0x94/0x1a0 [ 1418.121160][T22504] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1418.121183][T22504] ? __kernel_text_address+0xd/0x40 [ 1418.121203][T22504] ? unwind_get_return_address+0x59/0xa0 [ 1418.121224][T22504] ? arch_stack_walk+0xa6/0x100 [ 1418.121266][T22504] ? tomoyo_domain+0xbb/0x150 [ 1418.121284][T22504] ? tomoyo_profile+0x47/0x60 [ 1418.121304][T22504] tomoyo_mount_permission+0x16d/0x420 [ 1418.121328][T22504] ? tomoyo_mount_permission+0x14f/0x420 [ 1418.121353][T22504] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1418.121393][T22504] security_sb_mount+0x9b/0x260 [ 1418.121418][T22504] path_mount+0x15f/0x2000 [ 1418.121446][T22504] ? __pfx_path_mount+0x10/0x10 [ 1418.121469][T22504] ? kmem_cache_free+0x2d1/0x4d0 [ 1418.121485][T22504] ? putname+0x154/0x1a0 [ 1418.121511][T22504] ? putname+0x154/0x1a0 [ 1418.121537][T22504] ? __x64_sys_mount+0x28d/0x310 [ 1418.121557][T22504] __x64_sys_mount+0x28d/0x310 [ 1418.121579][T22504] ? __pfx___x64_sys_mount+0x10/0x10 [ 1418.121609][T22504] do_syscall_64+0xcd/0x4c0 [ 1418.121634][T22504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1418.121652][T22504] RIP: 0033:0x7f69d438eba9 [ 1418.121667][T22504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1418.121684][T22504] RSP: 002b:00007f69d51a6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1418.121701][T22504] RAX: ffffffffffffffda RBX: 00007f69d45d5fa0 RCX: 00007f69d438eba9 [ 1418.121712][T22504] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 1418.121724][T22504] RBP: 00007f69d51a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1418.121733][T22504] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 1418.121744][T22504] R13: 00007f69d45d6038 R14: 00007f69d45d5fa0 R15: 00007ffee629ec08 [ 1418.121768][T22504] [ 1418.123284][T22504] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1418.651744][ T30] audit: type=1400 audit(2000000223.177:4090): avc: denied { unlink } for pid=22505 comm="syz.1.4027" name="#2a" dev="tmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1418.952452][ T30] audit: type=1400 audit(2000000223.188:4091): avc: denied { mount } for pid=22505 comm="syz.1.4027" name="/" dev="overlay" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1419.150034][T22514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4023'. [ 1419.272606][ T30] audit: type=1400 audit(2000000223.859:4092): avc: denied { unmount } for pid=19012 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1419.525578][T22517] FAULT_INJECTION: forcing a failure. [ 1419.525578][T22517] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.538596][T22517] CPU: 1 UID: 0 PID: 22517 Comm: syz.1.4029 Not tainted syzkaller #0 PREEMPT(full) [ 1419.538620][T22517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1419.538630][T22517] Call Trace: [ 1419.538636][T22517] [ 1419.538640][T22517] dump_stack_lvl+0x16c/0x1f0 [ 1419.538658][T22517] should_fail_ex+0x512/0x640 [ 1419.538671][T22517] ? __kvmalloc_node_noprof+0x124/0x620 [ 1419.538683][T22517] should_failslab+0xc2/0x120 [ 1419.538695][T22517] __kvmalloc_node_noprof+0x137/0x620 [ 1419.538706][T22517] ? __nf_hook_entries_try_shrink+0x15f/0x400 [ 1419.538723][T22517] ? __nf_hook_entries_try_shrink+0x15f/0x400 [ 1419.538735][T22517] __nf_hook_entries_try_shrink+0x15f/0x400 [ 1419.538751][T22517] __nf_unregister_net_hook+0x2e5/0x680 [ 1419.538767][T22517] nf_unregister_net_hooks+0x11b/0x160 [ 1419.538781][T22517] ip_vs_unregister_hooks+0xd8/0x140 [ 1419.538797][T22517] ip_vs_unlink_service+0x9a4/0xbf0 [ 1419.538816][T22517] ip_vs_flush+0x1c0/0x230 [ 1419.538832][T22517] do_ip_vs_set_ctl+0xe9a/0x11d0 [ 1419.538845][T22517] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1419.538856][T22517] ? __pfx___might_resched+0x10/0x10 [ 1419.538871][T22517] ? rcu_is_watching+0x12/0xc0 [ 1419.538887][T22517] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1419.538902][T22517] ? find_held_lock+0x2b/0x80 [ 1419.538916][T22517] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1419.538942][T22517] ? nf_setsockopt+0x8d/0xf0 [ 1419.538955][T22517] nf_setsockopt+0x8d/0xf0 [ 1419.538971][T22517] ip_setsockopt+0xcb/0xf0 [ 1419.538982][T22517] sctp_setsockopt+0x16c/0xb870 [ 1419.538998][T22517] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1419.539017][T22517] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1419.539032][T22517] ? find_held_lock+0x2b/0x80 [ 1419.539047][T22517] ? selinux_socket_setsockopt+0x6a/0x80 [ 1419.539064][T22517] ? sock_common_setsockopt+0x2e/0xf0 [ 1419.539080][T22517] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1419.539096][T22517] do_sock_setsockopt+0xf3/0x1d0 [ 1419.539113][T22517] __sys_setsockopt+0x1a0/0x230 [ 1419.539128][T22517] __x64_sys_setsockopt+0xbd/0x160 [ 1419.539139][T22517] ? do_syscall_64+0x91/0x4c0 [ 1419.539153][T22517] ? lockdep_hardirqs_on+0x7c/0x110 [ 1419.539166][T22517] do_syscall_64+0xcd/0x4c0 [ 1419.539180][T22517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.539192][T22517] RIP: 0033:0x7f5bf178eba9 [ 1419.539201][T22517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1419.539211][T22517] RSP: 002b:00007f5bef9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1419.539222][T22517] RAX: ffffffffffffffda RBX: 00007f5bf19d5fa0 RCX: 00007f5bf178eba9 [ 1419.539228][T22517] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000005 [ 1419.539234][T22517] RBP: 00007f5bef9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1419.539240][T22517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1419.539246][T22517] R13: 00007f5bf19d6038 R14: 00007f5bf19d5fa0 R15: 00007ffdff8ab7b8 [ 1419.539260][T22517] [ 1420.155031][T22522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4030'. [ 1420.228646][T22522] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4030'. [ 1420.238351][T22522] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4030'. [ 1420.612683][T22529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4034'. [ 1420.691606][ T30] audit: type=1400 audit(2000000225.350:4093): avc: denied { ioctl } for pid=22531 comm="syz.5.4032" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1421.195060][T22529] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22529 comm=syz.0.4034 [ 1421.242842][T22529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4034'. [ 1421.320161][T22541] input: syz1 as /devices/virtual/input/input104 [ 1421.400313][T22533] : entered promiscuous mode [ 1421.434868][T22544] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4036'. [ 1421.539643][ T30] audit: type=1400 audit(2000000226.232:4094): avc: denied { connect } for pid=22545 comm="syz.6.4037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1421.594493][T22544] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22544 comm=syz.5.4036 [ 1421.623205][T22544] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4036'. [ 1421.877368][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4038'. [ 1421.895771][T22556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1422.640963][T22546] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1423.322926][T22564] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4040'. [ 1423.326775][T22566] netlink: 'syz.6.4041': attribute type 19 has an invalid length. [ 1423.350254][ T9178] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.360038][ T9178] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.369237][T22566] netlink: 'syz.6.4041': attribute type 19 has an invalid length. [ 1423.377452][ T9178] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.482066][ T9178] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.651285][T22583] team0: Unable to change to the same mode the team is in [ 1424.806240][T22588] dlm: no local IP address has been set [ 1424.821951][T22588] dlm: cannot start dlm midcomms -107 [ 1425.024184][T22594] __nla_validate_parse: 2 callbacks suppressed [ 1425.024216][T22594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4049'. [ 1425.122070][T22594] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4049'. [ 1425.131237][T22594] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4049'. [ 1425.358113][T22598] mkiss: ax0: crc mode is auto. [ 1425.788555][T22609] ipvlan2: entered promiscuous mode [ 1425.869971][ T30] audit: type=1400 audit(2000000230.704:4095): avc: denied { bind } for pid=22604 comm="syz.6.4051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1426.720228][ T30] audit: type=1400 audit(2000000231.681:4096): avc: denied { ioctl } for pid=22620 comm="syz.6.4056" path="socket:[81734]" dev="sockfs" ino=81734 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1427.316373][T22632] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4058'. [ 1427.329883][T22632] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4058'. [ 1427.334639][ T5915] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1427.477933][ T5915] usb 2-1: device descriptor read/64, error -71 [ 1427.715522][ T5915] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1427.839626][ T5915] usb 2-1: device descriptor read/64, error -71 [ 1427.945591][ T5915] usb usb2-port1: attempt power cycle [ 1428.049948][T22648] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4062'. [ 1428.277661][ T5915] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1428.315184][ T5915] usb 2-1: device descriptor read/8, error -71 [ 1428.362140][T22650] FAULT_INJECTION: forcing a failure. [ 1428.362140][T22650] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.391563][T22650] CPU: 0 UID: 0 PID: 22650 Comm: syz.0.4063 Not tainted syzkaller #0 PREEMPT(full) [ 1428.391591][T22650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1428.391602][T22650] Call Trace: [ 1428.391608][T22650] [ 1428.391616][T22650] dump_stack_lvl+0x16c/0x1f0 [ 1428.391643][T22650] should_fail_ex+0x512/0x640 [ 1428.391664][T22650] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1428.391687][T22650] should_failslab+0xc2/0x120 [ 1428.391707][T22650] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1428.391728][T22650] ? nlmon_xmit+0xa5/0xe0 [ 1428.391748][T22650] ? dev_hard_start_xmit+0x94/0x740 [ 1428.391765][T22650] ? __alloc_skb+0x2b2/0x380 [ 1428.391785][T22650] ? ____sys_sendmsg+0xa98/0xc70 [ 1428.391813][T22650] __alloc_skb+0x2b2/0x380 [ 1428.391832][T22650] ? __pfx___alloc_skb+0x10/0x10 [ 1428.391861][T22650] tipc_nl_compat_dumpit+0x15d/0x820 [ 1428.391893][T22650] tipc_nl_compat_recv+0x537/0xc50 [ 1428.391925][T22650] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1428.391950][T22650] ? __pfx_tipc_nl_bearer_dump+0x10/0x10 [ 1428.391968][T22650] ? __pfx_tipc_nl_compat_bearer_dump+0x10/0x10 [ 1428.391993][T22650] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1428.392024][T22650] ? rcu_is_watching+0x12/0xc0 [ 1428.392046][T22650] ? trace_contention_end+0xdd/0x130 [ 1428.392064][T22650] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1428.392094][T22650] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1428.392121][T22650] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1428.392145][T22650] ? genl_get_cmd+0x194/0x580 [ 1428.392177][T22650] ? __radix_tree_lookup+0x21f/0x2c0 [ 1428.392202][T22650] genl_rcv_msg+0x55c/0x800 [ 1428.392230][T22650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1428.392256][T22650] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1428.392292][T22650] netlink_rcv_skb+0x155/0x420 [ 1428.392314][T22650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1428.392340][T22650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1428.392374][T22650] ? netlink_deliver_tap+0x1ae/0xd30 [ 1428.392400][T22650] genl_rcv+0x28/0x40 [ 1428.392422][T22650] netlink_unicast+0x5aa/0x870 [ 1428.392448][T22650] ? __pfx_netlink_unicast+0x10/0x10 [ 1428.392471][T22650] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1428.392503][T22650] netlink_sendmsg+0x8d1/0xdd0 [ 1428.392530][T22650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1428.392563][T22650] ____sys_sendmsg+0xa98/0xc70 [ 1428.392590][T22650] ? copy_msghdr_from_user+0x10a/0x160 [ 1428.392611][T22650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1428.392648][T22650] ___sys_sendmsg+0x134/0x1d0 [ 1428.392671][T22650] ? __pfx____sys_sendmsg+0x10/0x10 [ 1428.392726][T22650] __sys_sendmsg+0x16d/0x220 [ 1428.392747][T22650] ? __pfx___sys_sendmsg+0x10/0x10 [ 1428.392787][T22650] do_syscall_64+0xcd/0x4c0 [ 1428.392812][T22650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.392829][T22650] RIP: 0033:0x7fd2f158eba9 [ 1428.392844][T22650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1428.392861][T22650] RSP: 002b:00007fd2f23a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1428.392878][T22650] RAX: ffffffffffffffda RBX: 00007fd2f17d5fa0 RCX: 00007fd2f158eba9 [ 1428.392890][T22650] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1428.392900][T22650] RBP: 00007fd2f23a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1428.392910][T22650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1428.392927][T22650] R13: 00007fd2f17d6038 R14: 00007fd2f17d5fa0 R15: 00007ffe9ae7df48 [ 1428.392952][T22650] [ 1429.038139][T22660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1429.377274][ T5915] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1429.475666][ T5915] usb 2-1: device descriptor read/8, error -71 [ 1429.726495][ T5915] usb usb2-port1: unable to enumerate USB device [ 1431.401264][ T30] audit: type=1400 audit(2000000236.583:4097): avc: denied { setopt } for pid=22677 comm="syz.6.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1433.176272][ T30] audit: type=1400 audit(2000000238.431:4098): avc: denied { execmod } for pid=22691 comm="syz.0.4074" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=82982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1433.236275][ T30] audit: type=1400 audit(2000000238.431:4099): avc: denied { execute } for pid=22691 comm="syz.0.4074" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=82982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1433.717626][T22708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4078'. [ 1433.912956][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.291573][T11592] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1434.840823][T11592] usb 6-1: Using ep0 maxpacket: 8 [ 1434.851597][T11592] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1434.860018][T11592] usb 6-1: config 179 has no interface number 0 [ 1434.866283][T11592] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1434.882183][T11592] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1434.897971][T11592] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 1434.995999][T11592] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 1435.031379][T11592] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1435.050734][T11592] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1435.062771][T11592] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1435.075968][T11592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.326739][T11592] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input105 [ 1435.383952][ T5204] input input105: unable to receive magic message: -110 [ 1435.453839][ T5204] input input105: unable to receive magic message: -32 [ 1435.492970][ T5204] input input105: unable to receive magic message: -32 [ 1435.714191][T22710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.723001][T22710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.056525][T22733] kvm: kvm [22730]: vcpu2, guest rIP: 0x912c Unhandled WRMSR(0x11e) = 0xfffffc18 [ 1436.231632][T22733] kvm: kvm [22730]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x11e) = 0xfffffc18 [ 1436.356250][T22733] kvm: kvm [22730]: vcpu2, guest rIP: 0x912c Unhandled WRMSR(0x186) = 0xfffffc18 [ 1436.384959][T22733] kvm: kvm [22730]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x186) = 0xfffffc18 [ 1436.412860][T22733] kvm: kvm [22730]: vcpu2, guest rIP: 0x912c Unhandled WRMSR(0x187) = 0xfffffc18 [ 1436.849542][ T976] usb 6-1: USB disconnect, device number 68 [ 1436.849680][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1437.025899][ T30] audit: type=1400 audit(2000000242.493:4100): avc: denied { name_connect } for pid=22755 comm="syz.0.4091" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1437.134941][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4090'. [ 1437.144411][T22759] bridge_slave_1: left allmulticast mode [ 1437.151552][T22759] bridge_slave_1: left promiscuous mode [ 1437.160462][T22759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.195073][T22760] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4090'. [ 1437.204616][T22760] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4090'. [ 1437.516378][ T30] audit: type=1400 audit(2000000243.008:4101): avc: denied { accept } for pid=22755 comm="syz.0.4091" lport=54672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1437.844556][T22771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4092'. [ 1438.585971][T22775] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1438.766028][T22774] mmap: syz.1.4094 (22774): VmData 37728256 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1439.046111][T22782] dlm: no local IP address has been set [ 1439.068591][T22782] dlm: cannot start dlm midcomms -107 [ 1439.368225][T22786] FAULT_INJECTION: forcing a failure. [ 1439.368225][T22786] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.416339][T22786] CPU: 1 UID: 0 PID: 22786 Comm: syz.0.4097 Not tainted syzkaller #0 PREEMPT(full) [ 1439.416365][T22786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1439.416376][T22786] Call Trace: [ 1439.416381][T22786] [ 1439.416387][T22786] dump_stack_lvl+0x16c/0x1f0 [ 1439.416412][T22786] should_fail_ex+0x512/0x640 [ 1439.416433][T22786] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1439.416459][T22786] should_failslab+0xc2/0x120 [ 1439.416479][T22786] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1439.416502][T22786] ? __pfx_ip_dst_mtu_maybe_forward.constprop.0+0x10/0x10 [ 1439.416529][T22786] ? ip_setup_cork+0x63b/0xa30 [ 1439.416552][T22786] ip_setup_cork+0x63b/0xa30 [ 1439.416577][T22786] ip_append_data+0x163/0x1a0 [ 1439.416599][T22786] ? __pfx_raw_getfrag+0x10/0x10 [ 1439.416617][T22786] raw_sendmsg+0xeee/0x37e0 [ 1439.416643][T22786] ? __pfx_raw_sendmsg+0x10/0x10 [ 1439.416659][T22786] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1439.416680][T22786] ? avc_has_perm+0x144/0x1f0 [ 1439.416708][T22786] ? sock_has_perm+0x259/0x2f0 [ 1439.416741][T22786] ? __import_iovec+0x1dd/0x650 [ 1439.416766][T22786] ? __pfx_raw_sendmsg+0x10/0x10 [ 1439.416783][T22786] inet_sendmsg+0x11c/0x140 [ 1439.416800][T22786] ____sys_sendmsg+0x973/0xc70 [ 1439.416830][T22786] ? copy_msghdr_from_user+0x10a/0x160 [ 1439.416849][T22786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1439.416876][T22786] ? __pfx__kstrtoull+0x10/0x10 [ 1439.416898][T22786] ___sys_sendmsg+0x134/0x1d0 [ 1439.416919][T22786] ? __pfx____sys_sendmsg+0x10/0x10 [ 1439.416949][T22786] ? find_held_lock+0x2b/0x80 [ 1439.416985][T22786] __sys_sendmmsg+0x200/0x420 [ 1439.417007][T22786] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1439.417034][T22786] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1439.417064][T22786] ? fput+0x9b/0xd0 [ 1439.417085][T22786] ? ksys_write+0x1ac/0x250 [ 1439.417100][T22786] ? __pfx_ksys_write+0x10/0x10 [ 1439.417120][T22786] __x64_sys_sendmmsg+0x9c/0x100 [ 1439.417138][T22786] ? lockdep_hardirqs_on+0x7c/0x110 [ 1439.417157][T22786] do_syscall_64+0xcd/0x4c0 [ 1439.417178][T22786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.417194][T22786] RIP: 0033:0x7fd2f158eba9 [ 1439.417207][T22786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1439.417222][T22786] RSP: 002b:00007fd2f2380038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1439.417238][T22786] RAX: ffffffffffffffda RBX: 00007fd2f17d6090 RCX: 00007fd2f158eba9 [ 1439.417248][T22786] RDX: 0000000000068000 RSI: 0000200000000f40 RDI: 000000000000000a [ 1439.417258][T22786] RBP: 00007fd2f2380090 R08: 0000000000000000 R09: 0000000000000000 [ 1439.417266][T22786] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 1439.417276][T22786] R13: 00007fd2f17d6128 R14: 00007fd2f17d6090 R15: 00007ffe9ae7df48 [ 1439.417297][T22786] [ 1439.696061][ C1] vkms_vblank_simulate: vblank timer overrun [ 1439.861161][T22786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4097'. [ 1439.955940][ T30] audit: type=1400 audit(2000000245.569:4102): avc: denied { setopt } for pid=22789 comm="syz.6.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1439.975934][ C1] vkms_vblank_simulate: vblank timer overrun [ 1439.982233][ T30] audit: type=1400 audit(2000000245.590:4103): avc: denied { read } for pid=22789 comm="syz.6.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1440.480310][T22791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4098'. [ 1440.493377][T22798] netlink: 'syz.4.4101': attribute type 1 has an invalid length. [ 1440.508415][T22802] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4102'. [ 1440.933435][T22807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4101'. [ 1441.387476][T22819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4105'. [ 1441.711321][T22821] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4106'. [ 1441.830974][T22823] bridge0: port 1(team0) entered disabled state [ 1442.177348][T22826] team0: Unable to change to the same mode the team is in [ 1442.362479][T22833] dlm: no local IP address has been set [ 1442.368417][T22833] dlm: cannot start dlm midcomms -107 [ 1442.955793][T22841] qnx6: unable to read the first superblock [ 1443.742517][T22847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.758353][T22847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.087506][T22882] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4119'. [ 1446.357656][T22881] dlm: no local IP address has been set [ 1446.371984][T22881] dlm: cannot start dlm midcomms -107 [ 1446.392360][ T30] audit: type=1400 audit(2000000252.330:4104): avc: denied { read } for pid=22883 comm="syz.6.4123" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1446.450449][ T30] audit: type=1400 audit(2000000252.330:4105): avc: denied { open } for pid=22883 comm="syz.6.4123" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1447.123541][T22893] comedi comedi0: pcmda12: I/O port conflict (0x8,16) [ 1447.262915][ T30] audit: type=1400 audit(2000000253.243:4106): avc: denied { listen } for pid=22894 comm="syz.4.4127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1447.287794][ T30] audit: type=1400 audit(2000000253.243:4107): avc: denied { connect } for pid=22894 comm="syz.4.4127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1448.139123][T22897] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4126'. [ 1448.328816][T22910] tc_dump_action: action bad kind [ 1448.421933][T22911] syz_tun: entered allmulticast mode [ 1448.462612][T22911] dvmrp8: entered allmulticast mode [ 1448.776233][T22910] netlink: 'syz.1.4128': attribute type 10 has an invalid length. [ 1448.785449][T22910] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4128'. [ 1448.800184][T22910] dummy0: entered promiscuous mode [ 1448.936827][T22910] bridge0: port 1(dummy0) entered blocking state [ 1449.498430][T22922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4133'. [ 1449.551647][T22910] bridge0: port 1(dummy0) entered disabled state [ 1449.562014][T22910] dummy0: entered allmulticast mode [ 1449.708428][T22921] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4133'. [ 1449.717758][T22921] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4133'. [ 1449.789001][T22910] bridge0: port 1(dummy0) entered blocking state [ 1449.795595][T22910] bridge0: port 1(dummy0) entered forwarding state [ 1449.886650][T22906] syz_tun: left allmulticast mode [ 1450.568886][ T30] audit: type=1400 audit(2000000256.319:4108): avc: denied { getopt } for pid=22932 comm="syz.6.4135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1451.020606][T22948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4138'. [ 1452.082831][ T30] audit: type=1400 audit(2000000258.304:4109): avc: denied { getopt } for pid=22950 comm="syz.4.4139" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1452.242462][T22956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1453.050901][T22963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4142'. [ 1453.884087][T22980] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4145'. [ 1454.111247][ T5915] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1454.274885][T22985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4147'. [ 1454.332553][T22985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4147'. [ 1454.349417][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 1454.380159][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1454.394837][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1454.551430][T22983] team0: Unable to change to the same mode the team is in [ 1454.981559][ T5915] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1454.991036][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.003332][ T5915] usb 6-1: Product: syz [ 1455.107455][ T5915] usb 6-1: Manufacturer: syz [ 1455.112982][ T5915] usb 6-1: SerialNumber: syz [ 1455.125485][ T5915] usb 6-1: config 0 descriptor?? [ 1455.133375][ T5915] kobil_sct 6-1:0.0: KOBIL USB smart card terminal converter detected [ 1455.289789][ T5915] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1456.426388][T16427] usb 6-1: USB disconnect, device number 69 [ 1456.493670][T16427] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1456.505894][T16427] kobil_sct 6-1:0.0: device disconnected [ 1456.545386][ T30] audit: type=1400 audit(2000000262.975:4110): avc: denied { read } for pid=23004 comm="syz.6.4153" path="socket:[82830]" dev="sockfs" ino=82830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1457.400475][ T30] audit: type=1400 audit(2000000263.888:4111): avc: denied { setopt } for pid=23027 comm="syz.1.4158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1457.825520][ T30] audit: type=1400 audit(2000000263.909:4112): avc: denied { ioctl } for pid=23027 comm="syz.1.4158" path="socket:[82884]" dev="sockfs" ino=82884 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1459.672508][ T30] audit: type=1400 audit(2000000266.261:4113): avc: denied { name_connect } for pid=23037 comm="syz.0.4161" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1460.217232][T14628] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1460.256620][ T30] audit: type=1400 audit(2000000266.765:4114): avc: denied { write } for pid=23050 comm="syz.0.4163" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1460.359868][T14628] usb 2-1: Using ep0 maxpacket: 8 [ 1460.379645][T14628] usb 2-1: config 8 has an invalid interface number: 49 but max is 0 [ 1460.388088][T14628] usb 2-1: config 8 has no interface number 0 [ 1460.404241][T14628] usb 2-1: config 8 interface 49 has no altsetting 0 [ 1460.518450][T14628] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice=ba.d7 [ 1460.871813][T23059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4164'. [ 1461.252923][T14628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.261106][T14628] usb 2-1: Product: syz [ 1461.265335][T14628] usb 2-1: Manufacturer: syz [ 1461.269986][T14628] usb 2-1: SerialNumber: syz [ 1461.298705][T23064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4166'. [ 1461.481640][T23064] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23064 comm=syz.4.4166 [ 1461.734400][ T30] audit: type=1400 audit(2000000268.424:4115): avc: denied { getopt } for pid=23070 comm="syz.6.4169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1462.157762][T23079] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4169'. [ 1462.526578][T14628] uvcvideo 2-1:8.49: probe with driver uvcvideo failed with error -22 [ 1462.544889][T14628] usb 2-1: USB disconnect, device number 24 [ 1462.913128][T23095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4172'. [ 1462.937282][T23095] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4172'. [ 1462.946665][T23095] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4172'. [ 1463.551178][T23110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4176'. [ 1464.747802][T23120] IPVS: set_ctl: invalid protocol: 12078 108.101.49.0:0 [ 1465.075425][ T5915] usb 6-1: new low-speed USB device number 70 using dummy_hcd [ 1465.219686][ T5915] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1465.227866][ T5915] usb 6-1: config 0 has no interface number 0 [ 1465.234025][ T5915] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1465.246531][ T5915] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1465.319932][T23134] binder: 23131:23134 ioctl c0306201 200000000080 returned -14 [ 1465.608023][ T5915] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1465.623303][ T5915] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1465.653045][ T5915] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1465.664547][ T5915] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1465.678042][ T5915] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1465.687270][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.841057][ T5915] usb 6-1: config 0 descriptor?? [ 1465.857698][T23124] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1466.029470][T23124] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1466.196752][ T5915] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1466.242833][T23147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4187'. [ 1466.269498][ T5915] usb 6-1: USB disconnect, device number 70 [ 1466.280775][ T5915] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1466.381707][ T30] audit: type=1400 audit(2000000273.318:4116): avc: denied { getopt } for pid=23150 comm="syz.6.4189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1468.094166][T23175] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4193'. [ 1468.375942][T23176] lo speed is unknown, defaulting to 1000 [ 1469.827112][T23192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4197'. [ 1469.846263][T23192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4197'. [ 1470.120023][T23199] binder: 23195:23199 ioctl c0306201 200000000080 returned -14 [ 1470.120173][T23176] vxcan1 speed is unknown, defaulting to 1000 [ 1471.808910][T23226] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4206'. [ 1472.124771][T23230] team0: Unable to change to the same mode the team is in [ 1473.173537][T23239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4210'. [ 1473.619962][ T30] audit: type=1400 audit(2000000280.824:4117): avc: denied { create } for pid=23236 comm="syz.4.4209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1474.048722][T23247] binder: 23244:23247 ioctl c0306201 200000000080 returned -14 [ 1474.191332][T23239] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23239 comm=syz.1.4210 [ 1475.385501][T23256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4215'. [ 1475.561162][T23265] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4214'. [ 1475.781651][T14628] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1476.048463][T14628] usb 2-1: device descriptor read/64, error -71 [ 1476.183876][T16427] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1476.305860][T14628] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1476.315867][T16427] usb 6-1: device descriptor read/64, error -71 [ 1476.467646][T14628] usb 2-1: device descriptor read/64, error -71 [ 1476.936403][T14628] usb usb2-port1: attempt power cycle [ 1476.944819][T16427] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1477.101569][T16427] usb 6-1: device descriptor read/64, error -71 [ 1477.155266][T23284] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4222'. [ 1477.286780][T14628] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1477.316341][T14628] usb 2-1: device descriptor read/8, error -71 [ 1477.416039][T16427] usb usb6-port1: attempt power cycle [ 1477.452955][T23285] team0: Unable to change to the same mode the team is in [ 1477.553903][T14628] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1477.586415][T14628] usb 2-1: device descriptor read/8, error -71 [ 1477.698330][T14628] usb usb2-port1: unable to enumerate USB device [ 1478.434690][T16427] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1478.973194][T16427] usb 6-1: device not accepting address 73, error -71 [ 1479.107789][T23292] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1479.114314][T23292] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1479.132127][T23292] vhci_hcd vhci_hcd.0: Device attached [ 1479.297235][T16427] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1479.308756][ T5915] vhci_hcd: vhci_device speed not set [ 1479.401854][ T5915] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1479.592006][ T5922] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1479.694661][T16427] usb 6-1: Using ep0 maxpacket: 16 [ 1479.753951][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 1479.763927][ T5922] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1479.778392][ T5922] usb 2-1: config 2 has an invalid interface number: 37 but max is 0 [ 1479.787844][ T5922] usb 2-1: config 2 has no interface number 0 [ 1479.797529][ T5922] usb 2-1: config 2 interface 37 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1479.809663][ T5922] usb 2-1: config 2 interface 37 altsetting 5 endpoint 0xC has invalid maxpacket 959, setting to 64 [ 1479.825744][ T5922] usb 2-1: config 2 interface 37 has no altsetting 0 [ 1479.836229][ T5922] usb 2-1: New USB device found, idVendor=0ccd, idProduct=008e, bcdDevice=6d.58 [ 1479.863252][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.872261][ T5922] usb 2-1: Product: syz [ 1479.876811][ T5922] usb 2-1: Manufacturer: syz [ 1479.889997][T16427] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1479.898915][T16427] usb 6-1: config 229 has an invalid interface number: 152 but max is 1 [ 1479.907519][T16427] usb 6-1: config 229 has an invalid interface number: 12 but max is 1 [ 1479.943103][ T5922] usb 2-1: SerialNumber: syz [ 1480.023187][T16427] usb 6-1: config 229 has no interface number 0 [ 1480.030108][T16427] usb 6-1: config 229 has no interface number 1 [ 1480.049608][T16427] usb 6-1: config 229 interface 152 has no altsetting 0 [ 1480.056593][T16427] usb 6-1: config 229 interface 12 has no altsetting 0 [ 1480.065357][T16427] usb 6-1: New USB device found, idVendor=413c, idProduct=81a3, bcdDevice=25.ca [ 1480.075811][T16427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.085775][T16427] usb 6-1: Product: syz [ 1480.093984][T16427] usb 6-1: Manufacturer: syz [ 1480.098743][T16427] usb 6-1: SerialNumber: syz [ 1480.226242][ T5922] usb 2-1: USB disconnect, device number 29 [ 1480.330328][T23289] block nbd5: Attempted send on invalid socket [ 1480.343025][T16427] usb 6-1: USB disconnect, device number 74 [ 1480.350877][T23289] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1480.373342][ T30] audit: type=1400 audit(2000000287.931:4118): avc: denied { write } for pid=23288 comm="syz.5.4224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1480.397250][T23289] block nbd5: Attempted send on invalid socket [ 1480.404003][T23289] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1480.417803][ T30] audit: type=1400 audit(2000000287.942:4119): avc: denied { write } for pid=23288 comm="syz.5.4224" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1480.424546][T23289] Mount JFS Failure: -5 [ 1480.727206][T23310] lo speed is unknown, defaulting to 1000 [ 1480.831252][T23310] vxcan1 speed is unknown, defaulting to 1000 [ 1480.970760][ T30] audit: type=1400 audit(2000000288.624:4120): avc: denied { watch } for pid=23308 comm="syz.1.4231" path="/214/bus/net_prio.prioidx" dev="overlay" ino=1178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1480.997870][ T30] audit: type=1400 audit(2000000288.624:4121): avc: denied { watch_sb watch_reads } for pid=23308 comm="syz.1.4231" path="/214/bus/net_prio.prioidx" dev="overlay" ino=1178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1481.023403][ C1] vkms_vblank_simulate: vblank timer overrun [ 1481.029896][ T30] audit: type=1400 audit(2000000288.624:4122): avc: denied { watch_mount } for pid=23308 comm="syz.1.4231" path="/214/bus" dev="overlay" ino=1169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1481.052973][ C1] vkms_vblank_simulate: vblank timer overrun [ 1481.932666][T23293] vhci_hcd: connection reset by peer [ 1481.946245][ T9176] vhci_hcd: stop threads [ 1481.964074][ T9176] vhci_hcd: release socket [ 1481.992475][ T9176] vhci_hcd: disconnect device [ 1482.440184][T18952] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1482.594165][T18952] usb 2-1: Using ep0 maxpacket: 8 [ 1482.603662][T18952] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1482.616898][T18952] usb 2-1: config 179 has no interface number 0 [ 1482.626863][T18952] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1482.646234][T18952] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1482.713799][T18952] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 1482.725635][T18952] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 1482.737547][T18952] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1482.751159][T18952] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1482.758103][T18952] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1482.767241][T18952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.781204][T18952] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input106 [ 1482.840627][ T5204] input input106: unable to receive magic message: -110 [ 1482.848471][ T5204] input input106: unable to receive magic message: -32 [ 1482.856718][ T5204] input input106: unable to receive magic message: -32 [ 1482.864867][ T5204] input input106: unable to receive magic message: -32 [ 1482.962795][T23337] netlink: 'syz.6.4239': attribute type 10 has an invalid length. [ 1482.972696][T23337] batman_adv: batadv0: Adding interface: wlan0 [ 1482.979427][T23337] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1482.982018][T23331] input input106: unable to receive magic message: -32 [ 1483.004600][ C1] vkms_vblank_simulate: vblank timer overrun [ 1483.025286][T23337] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 1483.043921][ T30] audit: type=1400 audit(2000000290.808:4123): avc: denied { mounton } for pid=23336 comm="syz.6.4239" path="/199/file0" dev="tmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1483.067215][ C1] vkms_vblank_simulate: vblank timer overrun [ 1483.078802][ T30] audit: type=1400 audit(2000000290.839:4124): avc: denied { mounton } for pid=23336 comm="syz.6.4239" path="/199/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1483.101236][ C1] vkms_vblank_simulate: vblank timer overrun [ 1483.112256][ T30] audit: type=1400 audit(2000000290.871:4125): avc: denied { read write } for pid=23336 comm="syz.6.4239" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1483.133473][ C1] vkms_vblank_simulate: vblank timer overrun [ 1483.141044][ T30] audit: type=1400 audit(2000000290.871:4126): avc: denied { open } for pid=23336 comm="syz.6.4239" path="/199/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1483.163332][ C1] vkms_vblank_simulate: vblank timer overrun [ 1483.233350][T23331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.247174][T23331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.716786][ T5915] vhci_hcd: vhci_device speed not set [ 1485.102016][T16427] usb 2-1: USB disconnect, device number 30 [ 1485.108157][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1486.467140][ T30] audit: type=1400 audit(2000000294.241:4127): avc: denied { create } for pid=23361 comm="syz.1.4244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1486.685253][ T30] audit: type=1400 audit(2000000294.629:4128): avc: denied { read } for pid=23368 comm="syz.6.4245" path="socket:[84790]" dev="sockfs" ino=84790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1488.012621][ T5922] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1488.165065][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 1488.231060][ T5922] usb 6-1: config 0 has no interfaces? [ 1488.238273][ T5922] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1488.257668][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.271388][ T5922] usb 6-1: config 0 descriptor?? [ 1488.341225][T23403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1488.365997][T23403] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1488.384137][ T976] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1488.566601][ T976] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1488.578970][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.615238][ T976] usb 2-1: config 0 descriptor?? [ 1488.655666][T23417] binder: 23413:23417 ioctl c0306201 200000000080 returned -14 [ 1488.657026][ T976] cp210x 2-1:0.0: cp210x converter detected [ 1489.386815][T23425] binder: 23420:23425 ioctl c0306201 200000000080 returned -14 [ 1489.475691][ T976] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1489.920198][T16427] usb 2-1: USB disconnect, device number 31 [ 1489.928136][T16427] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1489.937595][T16427] cp210x 2-1:0.0: device disconnected [ 1490.174750][T23438] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3895927331 (249339349184 ns) > initial count (19337907712 ns). Using initial count to start timer. [ 1490.199546][T23438] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1491.244489][ T5915] usb 6-1: USB disconnect, device number 75 [ 1491.403285][T23459] binder: 23456:23459 ioctl c0306201 200000000080 returned -14 [ 1491.617165][T11592] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1491.767200][T11592] usb 2-1: device descriptor read/64, error -71 [ 1491.997248][T11592] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1492.138411][T11592] usb 2-1: device descriptor read/64, error -71 [ 1492.335447][T11592] usb usb2-port1: attempt power cycle [ 1492.426852][T23467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4267'. [ 1492.435046][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1492.479748][T23467] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4267'. [ 1492.489084][T23467] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4267'. [ 1492.794535][T11592] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1492.814163][T11592] usb 2-1: device descriptor read/8, error -71 [ 1493.109050][T11592] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1493.122455][T23478] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4270'. [ 1493.146879][T11592] usb 2-1: device descriptor read/8, error -71 [ 1493.262073][T11592] usb usb2-port1: unable to enumerate USB device [ 1493.839676][T23482] batman_adv: batadv0: Removing interface: wlan0 [ 1494.137872][T23482] team0: Unable to change to the same mode the team is in [ 1494.315042][T23490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4273'. [ 1494.762581][T23490] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23490 comm=syz.1.4273 [ 1494.783909][T23490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4273'. [ 1495.087380][T23497] block nbd0: Attempted send on invalid socket [ 1495.309964][T23497] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1495.382766][T23500] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1495.389316][T23500] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1495.397329][T23500] vhci_hcd vhci_hcd.0: Device attached [ 1495.623669][T14628] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1495.642821][ T5922] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1495.677294][T23509] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1495.814072][T14628] usb 6-1: Using ep0 maxpacket: 16 [ 1495.826318][T14628] usb 6-1: config 0 has no interfaces? [ 1495.832011][T14628] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1495.893444][T14628] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.954576][T14628] usb 6-1: config 0 descriptor?? [ 1496.425819][ T5922] usb 43-1: device descriptor read/64, error -71 [ 1496.637912][ T30] audit: type=1400 audit(2000000305.074:4129): avc: denied { write } for pid=23523 comm="syz.6.4281" lport=42011 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1496.711569][ T5922] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 1496.824003][ T30] audit: type=1400 audit(2000000305.106:4130): avc: denied { setopt } for pid=23523 comm="syz.6.4281" lport=42011 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1497.433511][T23534] loop7: detected capacity change from 0 to 16384 [ 1497.476996][ T30] audit: type=1400 audit(2000000305.914:4131): avc: denied { getopt } for pid=23533 comm="syz.6.4283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1497.541882][ T30] audit: type=1400 audit(2000000305.914:4132): avc: denied { ioctl } for pid=23533 comm="syz.6.4283" path="socket:[86166]" dev="sockfs" ino=86166 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1497.590064][T23501] vhci_hcd: connection closed [ 1497.601748][ T9178] vhci_hcd: stop threads [ 1497.620757][ T9178] vhci_hcd: release socket [ 1497.637442][ T5977] usb 6-1: USB disconnect, device number 76 [ 1497.640032][ T9178] vhci_hcd: disconnect device [ 1497.689670][T23540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1497.758541][T23540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23540 comm=syz.6.4285 [ 1497.865886][T14628] IPVS: starting estimator thread 0... [ 1498.015686][T23542] IPVS: using max 71 ests per chain, 170400 per kthread [ 1498.135232][T23547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4286'. [ 1498.182282][T23547] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4286'. [ 1498.191444][T23547] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4286'. [ 1498.367142][T23545] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4287'. [ 1498.411170][T23552] dlm: Unknown command passed to DLM device : 0 [ 1498.411170][T23552] [ 1498.581862][T23545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4287'. [ 1499.740998][T23569] lo speed is unknown, defaulting to 1000 [ 1499.964257][T23569] vxcan1 speed is unknown, defaulting to 1000 [ 1501.701124][ T5922] vhci_hcd: vhci_device speed not set [ 1502.005900][ T30] audit: type=1400 audit(2000000310.701:4133): avc: denied { append } for pid=23598 comm="syz.6.4299" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1502.365777][ T30] audit: type=1400 audit(2000000311.090:4134): avc: denied { accept } for pid=23604 comm="syz.4.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1502.399697][ T30] audit: type=1400 audit(2000000311.111:4135): avc: denied { read } for pid=23604 comm="syz.4.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1502.663413][ T30] audit: type=1400 audit(2000000311.405:4136): avc: denied { write } for pid=23604 comm="syz.4.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1502.779815][T23616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4300'. [ 1503.083380][T23612] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4300'. [ 1503.092656][T23612] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4300'. [ 1503.993092][ T30] audit: type=1400 audit(2000000312.791:4137): avc: denied { write } for pid=23630 comm="syz.0.4306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1504.113198][ T30] audit: type=1400 audit(2000000312.917:4138): avc: denied { associate } for pid=23628 comm="syz.5.4305" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1504.134351][ C1] vkms_vblank_simulate: vblank timer overrun [ 1504.370787][T23641] v: renamed from ipvlan1 [ 1505.021881][T23659] binder: 23653:23659 ioctl c0306201 200000000080 returned -14 [ 1505.313180][T23660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4311'. [ 1505.590926][ T30] audit: type=1400 audit(2000000314.407:4139): avc: denied { write } for pid=23652 comm="syz.5.4311" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1505.614272][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.666349][T23667] tmpfs: Bad value for 'mpol' [ 1506.092375][T10382] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1506.403726][T10382] usb 2-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 1506.418487][T10382] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1506.922892][T10382] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1506.932374][T10382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1506.943384][T10382] usb 2-1: SerialNumber: syz [ 1507.150420][T10382] usb 2-1: 0:2 : does not exist [ 1507.155412][T10382] usb 2-1: unit 5: unexpected type 0x09 [ 1507.390412][T10382] usb 2-1: USB disconnect, device number 36 [ 1507.917701][T23690] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4318'. [ 1509.305324][T23721] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1509.315143][T23721] block device autoloading is deprecated and will be removed. [ 1510.117652][T23724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1510.359294][T23724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23724 comm=syz.4.4327 [ 1510.376603][T23731] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1510.383116][T23731] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1510.402006][T23729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1510.496184][T23731] vhci_hcd vhci_hcd.0: Device attached [ 1510.676836][T18952] vhci_hcd: vhci_device speed not set [ 1510.796771][T23738] vhci_hcd: connection closed [ 1510.797018][T19416] vhci_hcd: stop threads [ 1510.834126][T19416] vhci_hcd: release socket [ 1510.845873][T18952] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 1510.915866][T19416] vhci_hcd: disconnect device [ 1511.509809][T23750] kvm: pic: non byte write [ 1511.590002][T23762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4336'. [ 1511.636080][T23762] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4336'. [ 1511.645315][T23762] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4336'. [ 1511.953494][T23763] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4335'. [ 1513.068344][ T30] audit: type=1400 audit(2000000321.924:4140): avc: denied { bind } for pid=23782 comm="syz.0.4340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1513.213882][ T30] audit: type=1400 audit(2000000321.976:4141): avc: denied { map } for pid=23782 comm="syz.0.4340" path="/269/file0" dev="tmpfs" ino=1475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1513.338148][T23788] netlink: 'syz.5.4341': attribute type 10 has an invalid length. [ 1513.348668][T23788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1513.368940][ T30] audit: type=1400 audit(2000000322.606:4142): avc: denied { setopt } for pid=23786 comm="syz.5.4341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1513.418084][T23788] batadv0: entered promiscuous mode [ 1513.423536][T23788] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1513.481354][T23791] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1513.514410][ T30] audit: type=1400 audit(2000000322.795:4143): avc: denied { ioctl } for pid=23789 comm="syz.0.4342" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1513.960803][ T5915] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1514.104887][ T5915] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1514.119560][ T5915] usb 6-1: config 1 has no interface number 0 [ 1514.129486][ T5915] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1514.147753][T23802] fuse: Bad value for 'rootmode' [ 1514.171462][ T5915] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1514.178471][ T30] audit: type=1400 audit(2000000323.488:4144): avc: denied { mount } for pid=23798 comm="syz.4.4346" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1514.181656][ T5915] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.203384][ C0] vkms_vblank_simulate: vblank timer overrun [ 1514.238769][T23802] overlay: Unknown parameter '/' [ 1514.243824][ T30] audit: type=1400 audit(2000000323.551:4145): avc: denied { mounton } for pid=23798 comm="syz.4.4346" path="/249/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1514.266180][ C0] vkms_vblank_simulate: vblank timer overrun [ 1514.285882][T23802] overlay: Unknown parameter '/' [ 1514.291693][ T5915] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1514.301069][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.309305][ T5915] usb 6-1: Product: syz [ 1514.313675][ T5915] usb 6-1: Manufacturer: syz [ 1514.323375][ T5915] usb 6-1: SerialNumber: syz [ 1514.339003][T23796] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1514.398692][T16427] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1514.544974][T16427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.564114][T23796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.572601][T16427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.573868][T23796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1514.583038][T16427] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1514.599422][T16427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.671140][T16427] usb 2-1: config 0 descriptor?? [ 1514.695216][T23796] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1514.738333][ T30] audit: type=1400 audit(2000000324.076:4146): avc: denied { unmount } for pid=18662 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1514.758342][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.026604][ T5915] usb 6-1: Incompatible driver and firmware versions [ 1515.132679][ T5915] usb 6-1: USB disconnect, device number 77 [ 1515.369226][T16427] usbhid 2-1:0.0: can't add hid device: -71 [ 1515.377277][T16427] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1515.393569][T16427] usb 2-1: USB disconnect, device number 37 [ 1515.410903][T23819] netlink: 'syz.0.4352': attribute type 4 has an invalid length. [ 1515.646905][T23828] netlink: 'syz.0.4352': attribute type 4 has an invalid length. [ 1515.751494][T18952] vhci_hcd: vhci_device speed not set [ 1516.662416][T23836] comedi comedi3: no devices specified [ 1516.722599][T23838] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1516.765629][T23838] block device autoloading is deprecated and will be removed. [ 1516.834206][ T30] audit: type=1400 audit(2000000326.280:4147): avc: denied { write } for pid=23835 comm="syz.1.4357" path="socket:[86864]" dev="sockfs" ino=86864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1518.485623][T18952] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1518.554185][T23853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4362'. [ 1518.565511][T23853] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4362'. [ 1518.574512][T23853] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4362'. [ 1518.641737][T23861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4366'. [ 1518.749356][T18952] usb 6-1: Using ep0 maxpacket: 8 [ 1518.756029][T18952] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1518.764883][T18952] usb 6-1: config 179 has no interface number 0 [ 1518.771692][T18952] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1518.783325][T18952] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1518.795019][T18952] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 1518.806543][T18952] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 1518.818094][T18952] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1518.883786][T23861] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23861 comm=syz.4.4366 [ 1518.906552][T18952] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1518.914221][T18952] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1518.924113][T18952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.928480][T23861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4366'. [ 1519.249644][T18952] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input107 [ 1519.313961][ T5204] input input107: unable to receive magic message: -110 [ 1519.324793][ T5204] input input107: unable to receive magic message: -32 [ 1519.334504][ T5204] input input107: unable to receive magic message: -32 [ 1519.342551][ T5204] input input107: unable to receive magic message: -32 [ 1519.380014][T23851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.389447][T23851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.348678][T23884] dlm: no local IP address has been set [ 1520.357959][T23884] dlm: cannot start dlm midcomms -107 [ 1520.964343][T23892] netlink: 'syz.0.4372': attribute type 12 has an invalid length. [ 1521.355645][T10382] usb 6-1: USB disconnect, device number 78 [ 1521.355768][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1521.468334][T23898] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4374'. [ 1521.493506][T23898] kvm: pic: level sensitive irq not supported [ 1521.494099][T23898] kvm: pic: single mode not supported [ 1521.500721][T23898] kvm: pic: level sensitive irq not supported [ 1521.506411][T23898] kvm: pic: single mode not supported [ 1521.512482][T23898] kvm: pic: level sensitive irq not supported [ 1521.740796][ T30] audit: type=1400 audit(2000000331.424:4148): avc: denied { mount } for pid=23908 comm="syz.1.4379" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1521.769612][ T30] audit: type=1400 audit(2000000331.435:4149): avc: denied { unmount } for pid=23908 comm="syz.1.4379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1522.247203][T23916] netlink: 'syz.1.4379': attribute type 4 has an invalid length. [ 1522.263257][ T30] audit: type=1400 audit(2000000331.865:4150): avc: denied { read } for pid=23908 comm="syz.1.4379" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1522.914481][T18952] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1523.069249][T18952] usb 2-1: Using ep0 maxpacket: 8 [ 1523.093511][T18952] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 1523.121924][T18952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.133286][T18952] usb 2-1: config 0 descriptor?? [ 1523.266018][T23926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4381'. [ 1523.295448][T23926] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4381'. [ 1523.304599][T23926] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4381'. [ 1524.421438][T18952] video4linux radio48: keene_cmd_set failed (-110) [ 1524.437086][T18952] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 1525.257873][T18952] usb 2-1: USB disconnect, device number 38 [ 1525.762791][T18952] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1525.920268][T18952] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 1525.938802][T18952] usb 2-1: config 0 has no interface number 0 [ 1525.953006][T18952] usb 2-1: config 0 interface 25 altsetting 5 endpoint 0x87 has invalid maxpacket 1024, setting to 64 [ 1525.977172][T18952] usb 2-1: config 0 interface 25 has no altsetting 0 [ 1526.000233][T18952] usb 2-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=68.f2 [ 1526.017735][T18952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.034484][T18952] usb 2-1: Product: syz [ 1526.039599][T18952] usb 2-1: Manufacturer: syz [ 1526.044307][T18952] usb 2-1: SerialNumber: syz [ 1526.052203][T18952] usb 2-1: config 0 descriptor?? [ 1526.059260][T23964] binder: 23963:23964 ioctl c0306201 200000000080 returned -14 [ 1526.060853][T23959] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1526.276737][T18952] usb 2-1: USB disconnect, device number 39 [ 1526.456936][T23960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1527.342099][T23980] bond0: entered promiscuous mode [ 1527.349054][T23980] bond_slave_0: entered promiscuous mode [ 1527.355441][T23980] bond_slave_1: entered promiscuous mode [ 1527.675431][T23989] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4395'. [ 1527.982433][T23997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4399'. [ 1528.021127][T23997] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4399'. [ 1528.030381][T23997] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4399'. [ 1528.433251][T24004] binder: 24001:24004 ioctl c0306201 200000000080 returned -14 [ 1528.887649][ T30] audit: type=1400 audit(2000000338.931:4151): avc: denied { view } for pid=24007 comm="syz.1.4403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1529.029996][ T5922] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1529.031743][T24011] ================================================================== [ 1529.045611][T24011] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 1529.053573][T24011] Read of size 8 at addr ffff88801f2a6e30 by task syz.1.4403/24011 [ 1529.061438][T24011] [ 1529.063755][T24011] CPU: 0 UID: 0 PID: 24011 Comm: syz.1.4403 Not tainted syzkaller #0 PREEMPT(full) [ 1529.063769][T24011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1529.063777][T24011] Call Trace: [ 1529.063783][T24011] [ 1529.063788][T24011] dump_stack_lvl+0x116/0x1f0 [ 1529.063804][T24011] print_report+0xcd/0x630 [ 1529.063818][T24011] ? __virt_addr_valid+0x81/0x610 [ 1529.063833][T24011] ? __phys_addr+0xe8/0x180 [ 1529.063848][T24011] ? sysfs_remove_file_ns+0x63/0x70 [ 1529.063861][T24011] kasan_report+0xe0/0x110 [ 1529.063873][T24011] ? sysfs_remove_file_ns+0x63/0x70 [ 1529.063886][T24011] sysfs_remove_file_ns+0x63/0x70 [ 1529.063897][T24011] driver_remove_file+0x4a/0x60 [ 1529.063912][T24011] bus_remove_driver+0x224/0x2c0 [ 1529.063924][T24011] driver_unregister+0x76/0xb0 [ 1529.063938][T24011] comedi_device_detach_locked+0x12f/0xa50 [ 1529.063961][T24011] do_devconfig_ioctl+0x555/0x710 [ 1529.063985][T24011] ? __mutex_lock+0x1c5/0x1060 [ 1529.064010][T24011] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1529.064038][T24011] ? find_held_lock+0x2b/0x80 [ 1529.064052][T24011] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1529.064064][T24011] ? futex_wake+0x1ad/0x530 [ 1529.064075][T24011] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1529.064087][T24011] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1529.064099][T24011] ? do_vfs_ioctl+0x128/0x14f0 [ 1529.064114][T24011] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1529.064129][T24011] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1529.064147][T24011] ? hook_file_ioctl_common+0x145/0x410 [ 1529.064160][T24011] ? selinux_file_ioctl+0x180/0x270 [ 1529.064174][T24011] ? selinux_file_ioctl+0xb4/0x270 [ 1529.064188][T24011] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1529.064200][T24011] __x64_sys_ioctl+0x18b/0x210 [ 1529.064216][T24011] do_syscall_64+0xcd/0x4c0 [ 1529.064231][T24011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.064242][T24011] RIP: 0033:0x7f5bf178eba9 [ 1529.064252][T24011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1529.064262][T24011] RSP: 002b:00007f5bef9b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1529.064274][T24011] RAX: ffffffffffffffda RBX: 00007f5bf19d6180 RCX: 00007f5bf178eba9 [ 1529.064282][T24011] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000008 [ 1529.064290][T24011] RBP: 00007f5bf1811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1529.064296][T24011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1529.064302][T24011] R13: 00007f5bf19d6218 R14: 00007f5bf19d6180 R15: 00007ffdff8ab7b8 [ 1529.064312][T24011] [ 1529.064316][T24011] [ 1529.319887][T24011] Allocated by task 23803: [ 1529.324273][T24011] kasan_save_stack+0x33/0x60 [ 1529.328926][T24011] kasan_save_track+0x14/0x30 [ 1529.333575][T24011] __kasan_kmalloc+0xaa/0xb0 [ 1529.338142][T24011] __kmalloc_noprof+0x223/0x510 [ 1529.342989][T24011] security_inode_init_security+0x13f/0x390 [ 1529.348854][T24011] shmem_symlink+0x135/0x9f0 [ 1529.353417][T24011] vfs_symlink+0x400/0x680 [ 1529.357821][T24011] do_symlinkat+0x261/0x310 [ 1529.362296][T24011] __x64_sys_symlinkat+0x93/0xc0 [ 1529.367203][T24011] do_syscall_64+0xcd/0x4c0 [ 1529.371682][T24011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.377544][T24011] [ 1529.379841][T24011] Freed by task 23803: [ 1529.383875][T24011] kasan_save_stack+0x33/0x60 [ 1529.388522][T24011] kasan_save_track+0x14/0x30 [ 1529.393171][T24011] kasan_save_free_info+0x3b/0x60 [ 1529.398176][T24011] __kasan_slab_free+0x60/0x70 [ 1529.402910][T24011] kfree+0x2b4/0x4d0 [ 1529.406800][T24011] security_inode_init_security+0x2eb/0x390 [ 1529.412664][T24011] shmem_symlink+0x135/0x9f0 [ 1529.417225][T24011] vfs_symlink+0x400/0x680 [ 1529.421618][T24011] do_symlinkat+0x261/0x310 [ 1529.426094][T24011] __x64_sys_symlinkat+0x93/0xc0 [ 1529.431014][T24011] do_syscall_64+0xcd/0x4c0 [ 1529.435496][T24011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.441375][T24011] [ 1529.443672][T24011] The buggy address belongs to the object at ffff88801f2a6e00 [ 1529.443672][T24011] which belongs to the cache kmalloc-256 of size 256 [ 1529.457695][T24011] The buggy address is located 48 bytes inside of [ 1529.457695][T24011] freed 256-byte region [ffff88801f2a6e00, ffff88801f2a6f00) [ 1529.471377][T24011] [ 1529.473681][T24011] The buggy address belongs to the physical page: [ 1529.480071][T24011] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801f2a6400 pfn:0x1f2a6 [ 1529.490122][T24011] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1529.498589][T24011] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1529.507055][T24011] page_type: f5(slab) [ 1529.511018][T24011] raw: 00fff00000000240 ffff88801b841b40 ffffea0001cf5f90 ffffea0001162c90 [ 1529.519575][T24011] raw: ffff88801f2a6400 000000000010000e 00000000f5000000 0000000000000000 [ 1529.528142][T24011] head: 00fff00000000240 ffff88801b841b40 ffffea0001cf5f90 ffffea0001162c90 [ 1529.536785][T24011] head: ffff88801f2a6400 000000000010000e 00000000f5000000 0000000000000000 [ 1529.545435][T24011] head: 00fff00000000001 ffffea00007ca981 00000000ffffffff 00000000ffffffff [ 1529.554073][T24011] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1529.562708][T24011] page dumped because: kasan: bad access detected [ 1529.569089][T24011] page_owner tracks the page as allocated [ 1529.574770][T24011] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 19526, tgid 19526 (syz-executor), ts 1187677483455, free_ts 1184368272257 [ 1529.595847][T24011] post_alloc_hook+0x1c0/0x230 [ 1529.600601][T24011] get_page_from_freelist+0x132b/0x38e0 [ 1529.606128][T24011] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1529.611994][T24011] alloc_pages_mpol+0x1fb/0x550 [ 1529.616834][T24011] new_slab+0x247/0x330 [ 1529.620971][T24011] ___slab_alloc+0xcf2/0x1750 [ 1529.625636][T24011] __slab_alloc.constprop.0+0x56/0xb0 [ 1529.630991][T24011] __kmalloc_noprof+0x2f2/0x510 [ 1529.635823][T24011] security_inode_init_security+0x13f/0x390 [ 1529.641701][T24011] shmem_symlink+0x135/0x9f0 [ 1529.646262][T24011] vfs_symlink+0x400/0x680 [ 1529.650653][T24011] do_symlinkat+0x261/0x310 [ 1529.655127][T24011] __x64_sys_symlinkat+0x93/0xc0 [ 1529.660047][T24011] do_syscall_64+0xcd/0x4c0 [ 1529.664523][T24011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.670398][T24011] page last free pid 23 tgid 23 stack trace: [ 1529.676347][T24011] __free_frozen_pages+0x7d5/0x10f0 [ 1529.681520][T24011] rcu_core+0x799/0x1530 [ 1529.685732][T24011] handle_softirqs+0x219/0x8e0 [ 1529.690476][T24011] run_ksoftirqd+0x3a/0x60 [ 1529.694863][T24011] smpboot_thread_fn+0x3f7/0xae0 [ 1529.699774][T24011] kthread+0x3c2/0x780 [ 1529.703812][T24011] ret_from_fork+0x5d4/0x6f0 [ 1529.708373][T24011] ret_from_fork_asm+0x1a/0x30 [ 1529.713109][T24011] [ 1529.715412][T24011] Memory state around the buggy address: [ 1529.721021][T24011] ffff88801f2a6d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1529.729053][T24011] ffff88801f2a6d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1529.737094][T24011] >ffff88801f2a6e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1529.745129][T24011] ^ [ 1529.750737][T24011] ffff88801f2a6e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1529.758785][T24011] ffff88801f2a6f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1529.766815][T24011] ================================================================== [ 1529.775399][T24011] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1529.782592][T24011] CPU: 0 UID: 0 PID: 24011 Comm: syz.1.4403 Not tainted syzkaller #0 PREEMPT(full) [ 1529.791969][T24011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1529.802005][T24011] Call Trace: [ 1529.805269][T24011] [ 1529.808355][T24011] dump_stack_lvl+0x3d/0x1f0 [ 1529.812933][T24011] vpanic+0x6e8/0x7a0 [ 1529.816905][T24011] ? __pfx_vpanic+0x10/0x10 [ 1529.821410][T24011] ? __pfx_vprintk_emit+0x10/0x10 [ 1529.826416][T24011] ? sysfs_remove_file_ns+0x63/0x70 [ 1529.831618][T24011] panic+0xca/0xd0 [ 1529.835342][T24011] ? __pfx_panic+0x10/0x10 [ 1529.839753][T24011] ? sysfs_remove_file_ns+0x63/0x70 [ 1529.844943][T24011] ? preempt_schedule_common+0x44/0xc0 [ 1529.850383][T24011] ? preempt_schedule_thunk+0x16/0x30 [ 1529.855738][T24011] check_panic_on_warn+0xab/0xb0 [ 1529.860651][T24011] end_report+0x107/0x170 [ 1529.864961][T24011] kasan_report+0xee/0x110 [ 1529.869359][T24011] ? sysfs_remove_file_ns+0x63/0x70 [ 1529.874537][T24011] sysfs_remove_file_ns+0x63/0x70 [ 1529.879541][T24011] driver_remove_file+0x4a/0x60 [ 1529.884374][T24011] bus_remove_driver+0x224/0x2c0 [ 1529.889294][T24011] driver_unregister+0x76/0xb0 [ 1529.894040][T24011] comedi_device_detach_locked+0x12f/0xa50 [ 1529.899832][T24011] do_devconfig_ioctl+0x555/0x710 [ 1529.904841][T24011] ? __mutex_lock+0x1c5/0x1060 [ 1529.909589][T24011] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1529.915127][T24011] ? find_held_lock+0x2b/0x80 [ 1529.919790][T24011] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1529.925245][T24011] ? futex_wake+0x1ad/0x530 [ 1529.929728][T24011] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1529.935529][T24011] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1529.941403][T24011] ? do_vfs_ioctl+0x128/0x14f0 [ 1529.946154][T24011] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1529.951164][T24011] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1529.958010][T24011] ? hook_file_ioctl_common+0x145/0x410 [ 1529.963554][T24011] ? selinux_file_ioctl+0x180/0x270 [ 1529.968742][T24011] ? selinux_file_ioctl+0xb4/0x270 [ 1529.973847][T24011] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1529.979637][T24011] __x64_sys_ioctl+0x18b/0x210 [ 1529.984391][T24011] do_syscall_64+0xcd/0x4c0 [ 1529.988894][T24011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.994783][T24011] RIP: 0033:0x7f5bf178eba9 [ 1529.999194][T24011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1530.018787][T24011] RSP: 002b:00007f5bef9b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1530.027183][T24011] RAX: ffffffffffffffda RBX: 00007f5bf19d6180 RCX: 00007f5bf178eba9 [ 1530.035133][T24011] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000008 [ 1530.043085][T24011] RBP: 00007f5bf1811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1530.051035][T24011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1530.058983][T24011] R13: 00007f5bf19d6218 R14: 00007f5bf19d6180 R15: 00007ffdff8ab7b8 [ 1530.066942][T24011] [ 1530.070162][T24011] Kernel Offset: disabled [ 1530.074462][T24011] Rebooting in 86400 seconds..