last executing test programs: 1m56.064371657s ago: executing program 0 (id=360): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000007c0)={0x52}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) io_setup(0x8, &(0x7f00000002c0)) 1m53.358268085s ago: executing program 0 (id=364): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='rcu_utilization\x00', r0, 0x0, 0x3}, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000028000000700000000000000", @ANYRES32, @ANYBLOB="000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_io_uring_setup(0x6440, 0x0, &(0x7f0000000040)=0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000000500)="9db575cb54762053a1ad11e5992d811f55379d1cc6fe5efd65177233de1951fb3b5b758996ae76f2e8abd5415ee03773748e8740cc36fe23eb7246daacc60bb3f65748e009043245eea59c2323bdc4f0e2a79fbe6bd6b734fe", 0x59}], 0x2, 0x0, 0x0, 0x8090}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = syz_io_uring_setup(0x1f84, &(0x7f0000000080)={0x0, 0xfffffffd, 0x13580, 0x80}, &(0x7f0000000100), &(0x7f0000000400)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x11, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./file0\x00', 0x2, 0x90280, 0x23456, {0x0, r9}}) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0xe, 0x0, @fd_index=0xa, 0x3, 0x0, 0xff, 0x4}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, &(0x7f000007a000/0x1000)=nil, &(0x7f0000a8c000/0xc000)=nil, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x4d}) 1m52.352159928s ago: executing program 0 (id=368): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x8, 0x1) getdents64(r0, &(0x7f0000000280)=""/158, 0x9e) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) fchown(r1, r3, r4) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x31, 0x26, {0x26, 0x10, "21940787ad11dda9b98cfe6d1b54f7204811af4fec4ef43a812c931bad6ea2f66035a46f"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}}, &(0x7f00000002c0)={0x34, &(0x7f0000000100)={0x2d03fd1b88ff044a, 0x14, 0x2b, "460e90c8f00ce93b90acf3a6406f94d94d293e7d73105df343f38ede9601069cdefa6794c988c4ddd602ad"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000001c0)={0x20, 0x0, 0x26, {0x24, "895eea9edbbab0ecd7b082eb8a1e29d14a9ebdd19e1a6cc8eaf38a3b0afacafa8bf710f1"}}, &(0x7f0000000200)={0x20, 0x1, 0x1, 0xf9}, &(0x7f0000000240)={0x20, 0x0, 0x1, 0x5}}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 1m47.061450517s ago: executing program 0 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f000024f000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x13, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x312409d, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = getpid() syz_pidfd_open(r5, 0x0) setns(0xffffffffffffffff, 0x8000000) umount2(&(0x7f0000000300)='./file1\x00', 0xa) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000006640)=[{{&(0x7f00000003c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000440)=""/236, 0xec}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f00000006c0)=""/16, 0x10}, {&(0x7f0000000700)=""/242, 0xf2}, {&(0x7f0000000800)=""/55, 0x37}, {&(0x7f0000000840)}], 0x6, &(0x7f0000000900)=""/223, 0xdf}, 0x5}, {{&(0x7f0000000a00)=@sco={0x1f, @none}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000a80)=""/192, 0xc0}, {&(0x7f0000000b40)=""/136, 0x88}, {&(0x7f0000000c00)=""/187, 0xbb}, {&(0x7f0000000cc0)=""/67, 0x43}, {&(0x7f0000000d40)=""/61, 0x3d}, {&(0x7f0000000d80)=""/24, 0x18}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/174, 0xae}, {&(0x7f0000001e80)}], 0x9, &(0x7f0000001f80)=""/109, 0x6d}, 0x319d}, {{&(0x7f0000002000)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000002080)=""/16, 0x10}], 0x1, &(0x7f0000002100)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003100)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000004340)=[{&(0x7f0000003180)=""/19, 0x13}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/24, 0x18}, {&(0x7f0000004200)=""/45, 0x2d}, {&(0x7f0000004240)=""/39, 0x27}, {&(0x7f0000004280)=""/135, 0x87}], 0x6, &(0x7f00000043c0)=""/4096, 0x1000}, 0x29e96ede}, {{0x0, 0x0, &(0x7f00000065c0)=[{&(0x7f00000053c0)=""/222, 0xde}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/220, 0xdc}], 0x3, &(0x7f0000006600)=""/57, 0x39}, 0x4}], 0x5, 0x40000042, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') r6 = fanotify_init(0x0, 0x40000) readv(r6, &(0x7f0000000180)=[{&(0x7f0000000600)=""/175, 0xaf}], 0x1) 1m45.167754866s ago: executing program 0 (id=387): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) personality(0x400000d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 1m42.459819265s ago: executing program 0 (id=390): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000ac0)='svcsock_tcp_recv_short\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_open_dev$evdev(0x0, 0x2, 0x862b01) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'syztnl0\x00', 0x0, 0x4, 0xd9, 0x7, 0x7fff, 0xa, @local, @mcast1, 0x10, 0x80, 0x7, 0x8}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newnexthop={0x24, 0x68, 0x1, 0x70bd2a, 0x80100000, {0x0, 0x0, 0x2}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_FDB={0x4}]}, 0x24}}, 0x4000) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x2b, 0x2, 0x8, 0x9, 0x79, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x40, 0xf}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0xf, &(0x7f00000006c0)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000540)='GPL\x00', 0x2, 0x6e, &(0x7f0000000740)=""/110, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x5, r3, 0x8, &(0x7f00000007c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x9, 0x7, 0x2}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[r3, r3, r3, r3, r3, r3, r3, r3, r3, r3], 0x0, 0x10, 0x2a51, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xf, &(0x7f0000000240)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x55}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @alu={0x4, 0x1, 0xd, 0x0, 0x2, 0xc, 0xffffffffffffffff}], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xb1, &(0x7f0000000600)=""/177, 0x41000, 0xa, '\x00', r7, @fallback=0x24, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x9, 0x0, 0x5787}, 0x10, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m41.821459515s ago: executing program 32 (id=390): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000ac0)='svcsock_tcp_recv_short\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_open_dev$evdev(0x0, 0x2, 0x862b01) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'syztnl0\x00', 0x0, 0x4, 0xd9, 0x7, 0x7fff, 0xa, @local, @mcast1, 0x10, 0x80, 0x7, 0x8}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newnexthop={0x24, 0x68, 0x1, 0x70bd2a, 0x80100000, {0x0, 0x0, 0x2}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_FDB={0x4}]}, 0x24}}, 0x4000) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x2b, 0x2, 0x8, 0x9, 0x79, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x40, 0xf}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0xf, &(0x7f00000006c0)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000540)='GPL\x00', 0x2, 0x6e, &(0x7f0000000740)=""/110, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x5, r3, 0x8, &(0x7f00000007c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x9, 0x7, 0x2}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[r3, r3, r3, r3, r3, r3, r3, r3, r3, r3], 0x0, 0x10, 0x2a51, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xf, &(0x7f0000000240)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x55}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @alu={0x4, 0x1, 0xd, 0x0, 0x2, 0xc, 0xffffffffffffffff}], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xb1, &(0x7f0000000600)=""/177, 0x41000, 0xa, '\x00', r7, @fallback=0x24, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x9, 0x0, 0x5787}, 0x10, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.654750632s ago: executing program 5 (id=654): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r1 = socket(0x848000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f72}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x100000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x28, r3, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x4ac6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x5}, 0x1c) syz_emit_ethernet(0x11, &(0x7f0000000300)=ANY=[], 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) 7.103868192s ago: executing program 5 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x50, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) pipe2$9p(0x0, 0x0) clock_nanosleep(0x4, 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 6.17787321s ago: executing program 2 (id=656): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000374000/0x1000)=nil, 0x1000, 0x14) personality(0x400000d) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 6.095878576s ago: executing program 4 (id=657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x1, 0x141000) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x2d, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000140)={0xc, 0x0, 0x0, 0x0, 'syz0\x00'}) 5.223412854s ago: executing program 2 (id=658): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd28, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x2}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x44}}, 0x40094) 5.217212197s ago: executing program 4 (id=659): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_dccp(0x2, 0x6, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000040)={0x0, 0x800}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001200)={0x0, @in6={{0xa, 0x4e21, 0x9, @mcast2, 0x8}}, 0xffff0001, 0x4, 0x1, 0x0, 0x61, 0x2, 0x6}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000040)=0x80000055, 0x4) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) clock_settime(0x1ed5d7403, &(0x7f00000008c0)={0x0, 0x3938700}) recvmmsg(r5, &(0x7f0000002600), 0xf2cbda7926bcf9fc, 0x40000102, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 4.964008828s ago: executing program 5 (id=660): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000a8db0000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0xf0b, 0x400004, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20060000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000110005000000000000030000070000008238cf1e670e850384ffcaf4e58634174f9a98fc48903f9ad0d9deacfe9ec7bed8ac3e1ba423078f094faf2b86ccfa382737f905ca47f499949b2670965ccdd038643ae4b2fda447d7d743fe6a4b6c0639e0c66a69a93b3719a29bc02abb17ac", @ANYRES32=r10, @ANYBLOB="01000000000000000c001a800800048004000680"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.920282308s ago: executing program 1 (id=661): mkdir(0x0, 0x0) chdir(0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 4.853506042s ago: executing program 3 (id=662): r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000640)={{0x5, 0x2, 0x3, 0x9, '\x00', 0xaac7}, 0x1, [0x6, 0x9, 0x101, 0x615, 0x5, 0x6, 0x7, 0x8, 0x80000000, 0x40, 0x0, 0x4, 0x200, 0x3, 0x5, 0xb, 0x100, 0x4, 0x8000, 0xf6, 0x3, 0x8, 0xa, 0x8, 0xfffffffffffffff8, 0x8, 0x97c, 0x401, 0x9, 0x5, 0x1, 0x1, 0xb3f, 0x1000, 0x45548e27, 0x10000000084c7, 0xfff, 0x100, 0x83, 0x3, 0x5, 0x3, 0x1, 0x80004, 0x219e, 0xfffffffffffffff7, 0xffffffffffffffff, 0x3, 0x9f, 0x2, 0x1000, 0xffffffffffffffff, 0xc, 0x60c, 0x401, 0x81, 0x7, 0x1, 0x1, 0xffffffffffffffff, 0x4f, 0x733f, 0x8, 0x1000, 0x4, 0x6, 0xf, 0x0, 0xb4, 0x400, 0x5, 0x3, 0x7a2, 0x8, 0x5, 0x81, 0xfffffffffffffffb, 0x8000, 0xfffffffffffffff9, 0xb, 0x8000000000000001, 0x7, 0xa, 0x7ff, 0x5, 0x9, 0x1, 0xd, 0x4, 0x3bd5, 0x4f, 0x4, 0x9d, 0x8000, 0x1, 0xae1, 0x100, 0xff, 0xe2, 0x1000, 0x8, 0x5, 0xffffffff, 0x3, 0x100, 0x0, 0x76d3, 0x2, 0xf25, 0x0, 0xfff, 0x7, 0xffffffff, 0x32e9, 0x1, 0xffffffffffffff80, 0x3, 0x7, 0xb9, 0x103, 0x81, 0x9, 0x40, 0x6781, 0x11e6, 0x6, 0x9, 0x7]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x70bd29, 0xa5dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) 4.772428001s ago: executing program 1 (id=663): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e001200280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00080306000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32], 0xb4}}, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x14) close(r1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x8, 0x2, 0x5, 0x3, 0x397}) 4.70404762s ago: executing program 3 (id=664): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x9, 0x2, 0x35315258, 0x6, 0xe, 0xd, 0xc, 0xf5e4, 0x0, 0x0, 0x2, 0x2}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$MSR(&(0x7f0000000300), 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x1000}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) utime(&(0x7f00000000c0)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x100000000000006, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x800006, 0x8000, 0x7fff, r2, r3, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000540)=@nullb, r2, &(0x7f0000000600)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) r5 = fcntl$dupfd(r4, 0x406, r4) read$rfkill(r5, 0x0, 0x0) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) ioctl$RNDADDENTROPY(r7, 0x5452, &(0x7f0000005300)=ANY=[]) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x141000) 4.575868202s ago: executing program 2 (id=665): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r1 = socket(0x848000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f72}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x28, r4, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x4ac6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x5}, 0x1c) syz_emit_ethernet(0x11, &(0x7f0000000300)=ANY=[], 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r5}, 0x18) 4.554683858s ago: executing program 5 (id=666): ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000800000000000000000700000411c30000000000000069702c6d61726b000000000500045d0f91216a1401030073797a30000000000c000780da0de1ba6af0180800124000000002050005000a00000005"], 0x58}}, 0x0) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x13) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc", 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r2 = timerfd_create(0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb442, 0x40, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000000)=0x3) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc800) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c81, 0x9) unshare(0x2010000) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 4.524830822s ago: executing program 3 (id=667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r0, 0x0, 0xb9b}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0x53, "3f480ccc2a341268d14350f02edacc06e6a642c09669a3b0f91acb1461285a66887d4abd50ba752d8cafa7f617a893a9546853b5f40dbca2a2dab308006f13de981f2d834bf9ac5ab63e323e83caa8657577af"}, &(0x7f0000000240)=0x5b) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 4.422658803s ago: executing program 2 (id=668): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000374000/0x1000)=nil, 0x1000, 0x14) personality(0x400000d) r3 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 3.996936734s ago: executing program 2 (id=669): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x2b4}, 0x1, 0x0, 0x0, 0x40}, 0x840) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x0) r5 = io_uring_setup(0x48ae, &(0x7f00000000c0)={0x0, 0xffffffff, 0x800, 0x3, 0x308}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0xf, &(0x7f0000000540)={0x1000, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 3.973057766s ago: executing program 3 (id=670): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x14, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r2 = openat2(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x484800, 0x0, 0x3}, 0x18) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x9) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x2, 0x1, 0x847, 0x0, 0x4}}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$SIOCPNENABLEPIPE(r5, 0x8905, 0x1000000000000) 3.282931109s ago: executing program 1 (id=671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14b101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffe, @empty, 0x10001}, 0x1c) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000030400000000ffdbdf2500007400", @ANYRES32, @ANYBLOB="0008000007500500240012800b0001006206006467650000140002"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) 2.569665782s ago: executing program 2 (id=672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0x0, 0xb0, 0x204, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0x3, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1000003) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket(0x28, 0x1, 0x0) r10 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r10, 0x47f6, 0xb277, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x29, &(0x7f0000000000), &(0x7f0000000040)=0x30) r13 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r13, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) 2.527113403s ago: executing program 3 (id=673): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24044880}, 0x0) 2.172072124s ago: executing program 4 (id=674): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.962648755s ago: executing program 4 (id=675): mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601801e13d080", @ANYRES32], 0x26c0}}, 0x4010) (async, rerun: 64) syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r1 = getpid() (rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x3c, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x4d, 0x0, 0x1, [@typed={0x9, 0x1, 0x0, 0x0, @binary="7b30242c13"}]}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async, rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r5) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbdf250600000000000e00bb076f8ea2b1c904004131423d3d4d795600000008000100", @ANYRES32=0x0, @ANYBLOB="08000d008c000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r10, &(0x7f0000000080)="240000001a007f0214f9f4070009040881ff0000000000050002000008000f40fe00000e", 0x24) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) (async, rerun: 32) connect$nfc_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x27, r8, 0xffffffffffffffff, 0x7}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x82, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400483a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005006050835900000000fc010000000000000000000000000000ff0200000000000000000000000000013a01000000000000070800000000000000000000000000006deeaa51"], 0x0) 1.894555186s ago: executing program 5 (id=676): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r2, 0x305, 0x0, 0xfffff000, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x20000000) 1.840087677s ago: executing program 3 (id=677): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4803}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 1.837862799s ago: executing program 1 (id=678): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r1 = socket(0x848000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f72}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x28, r4, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x4ac6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x5}, 0x1c) syz_emit_ethernet(0x11, &(0x7f0000000300)=ANY=[], 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r5}, 0x18) 941.151414ms ago: executing program 5 (id=679): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_fuse_handle_req(r1, &(0x7f0000001380)="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", 0x2000, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xd) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r2, 0x550c, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000000b0500000000000000000003000009080001007a3332000800024000000001080003"], 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) r5 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xcb, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x9, 0x2e, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5a, 0x84, 0x9}}]}}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x110, 0x8, 0x10, 0x7, 0x8, 0x4}, 0x5a, &(0x7f0000000e80)={0x5, 0xf, 0x5a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x1, 0x5, 0xf52e}, @generic={0x44, 0x10, 0xb, "7dbf3f814eeeb1a6a8528b7bc064af32464c7f56d62dcc1b50b963bd0a397d3d076a10a1dcd9edec241fe284cb818c82adc25ebbfa60f501cf284f6c492863da26"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0x6, 0x6}]}, 0x7, [{0x9c, &(0x7f0000000f00)=@string={0x9c, 0x3, "13cfe58a4c9217b853d7a09e65a7fbb60fe6e35ec9c9138e63dd9b76914ef0374647194dcaf751e9e15fccfc7131a04740a379623db14ec83ef24b1bb331ec2fc14a3d8594f63336e4190880e3d901d4a66c702f62d21c193d5b43c57b1e0a975a875cdeae8941a344129e0ff6adc8620b375d257bde113995a6d05b0cb9e88813677cda01220495701494de2c07df416b2dd7a25f59c2b3f806"}}, {0x80, &(0x7f0000000fc0)=@string={0x80, 0x3, "36d12ade10227c0ef953a590943d770984c0228a3362b3a247395b496b523e7eeb3d26ba83f8ca1581f997292b0d24c21ee6c293cb8901899761ee1021f9db1c7770bbcbafefcb729c1bab17c711e8a8bdb26dc78e90daf6945a069b6f1e90a9fb6e3e88b861196c9480feff794a8ca8473b43ee66629efa0ce4b7c81526"}}, {0x26, &(0x7f0000001040)=@string={0x26, 0x3, "e6d7f4d7f1c1a8eadf48a9f78b1c43d30d780e6227762dba2ba25894c0682b96371ea893"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x180c}}, {0xf6, &(0x7f0000001140)=@string={0xf6, 0x3, "f2412cd1d7b76f3653bc937ca3badd6e81667c51f7e74d8bf4e7d34d133cf3ed7f1e205d55e689021ee985dd9c386e1fc49861fe9beb15772eb97c61b26d07da985afb2b5000cafea4cb5eab18ddbb02bd1e11f22c6a2f7db35f85f9bdc1982d6409d792cd4a5fbf09ae62cd0b2901b8076b8143929ac55ba1df17025da56ebf84a1952496b3fddbbb03b1f35b373e43f46f04881dd5e4489cc5a53c4c8430d096f047b20d4849d0328a45c7280e9a3615a9f54d16c6e335762fa237eba766ebeb572ccb949b450c05467d6ba46a090badc190b5014a25ec1f5b67647684b32063e5403dabc6b46baf1d35dbe98959985d242da3"}}]}) syz_usb_control_io(r5, &(0x7f00000034c0)={0x2c, &(0x7f00000012c0)={0x0, 0x3, 0x90, {0x90, 0x30, "6cd15e01f3e245d784d23c0121180b8ddccedeeb1ccf8786d143c262e81a4d86365db7e37cb2ccd7443978f702f5a9a03ebfb2637b0f29029ea5103b8d0deaf9d43f1862d76e4a74c7d73bbb63a746023b7276a7e6897a12c1ca410c8849e93a3a4eae3bdd504c834d6e095bf2047faa0430993673519e933e46e9db5453b4faf13cfa345726250cb6727ad5c7b9"}}, &(0x7f0000003380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}, &(0x7f00000033c0)={0x0, 0xf, 0x4d, {0x5, 0xf, 0x4d, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "ca56d4915e15488b94b2215b31b29b02"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x5, 0x1800}, @ssp_cap={0x18, 0x10, 0xa, 0xc2, 0x3, 0x7, 0xff0f, 0x2, [0xff003f, 0x6000, 0xc0ff]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x4, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa0, 0x7, 0x1, 0x880, 0x8}, @ptm_cap={0x3}]}}, &(0x7f0000003440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x3, 0x1, 0x40, "a9c0b709", "add6c865"}}, &(0x7f0000003480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x4, 0x40, 0x4, 0x3, 0x2}}}, &(0x7f00000039c0)={0x84, &(0x7f0000003500)={0x0, 0x31, 0x6, "5d3f13a1a8e2"}, &(0x7f0000003600)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000003640)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000003680)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000036c0)={0x20, 0x0, 0x8, {0x120, 0x1, [0xf0]}}, &(0x7f0000003700)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000003740)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000003780)={0x40, 0xb, 0x2, "1dd5"}, &(0x7f00000037c0)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000003800)={0x40, 0x13, 0x6, @local}, &(0x7f0000003840)={0x40, 0x17, 0x6, @remote}, &(0x7f0000003880)={0x40, 0x19, 0x2, "9d8b"}, &(0x7f00000038c0)={0x40, 0x1a, 0x2, 0x8e10}, &(0x7f0000003900)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000003940)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000003980)={0x40, 0x21, 0x1, 0x3}}) syz_usb_connect$cdc_ncm(0x1, 0x88, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x8, 0x30, 0xf3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "497fbd0d"}, {0x5, 0x24, 0x0, 0xec8}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x3, 0xff, 0x76}, {0x6, 0x24, 0x1a, 0x9, 0xa}, [@mbim_extended={0x8, 0x24, 0x1c, 0x68a, 0x8, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x5e, 0xff, 0xf9}, @dmm={0x7, 0x24, 0x14, 0x7, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xc, 0x42}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x36, 0x2, 0x9}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x1, 0xc0, 0x5, 0x10, 0x6}, 0x127, &(0x7f0000000140)={0x5, 0xf, 0x127, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x7ffffab, 0xf00f, 0x8000, [0xc0, 0xff00c0]}, @generic={0xd1, 0x10, 0xa, "ac1b797b342ae67eaaa1e2717a765ae2de15460890d16f72065d4e601b1bed901045203827625940526e01494fc582942ad469d3b3aa7d7824f011f81acf041678f7213f494e3e1e540dddf159156f586a7f05a8f6769d44d876a4d07f2d3af3b7273b55ffd4c6dc78612777660614dc6dbfd89b961dd91b328b40bf4071b13e684e4e960a838faa95db7541b5f74895bce9dab0889bf2b6a3cefa9de09b0c25f3cf2eba3a67734b712c5af42ba52f32475ba94c6f3bd3c405cf406c5b8b22a0ec86865ddfe5f5db43aeda6b6a21"}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x3, 0xf000, 0x1, [0x1f40, 0xf, 0x0]}, @generic={0x25, 0x10, 0x1, "6fcd163709b7bb1bfbd203102ab826266d0b7b4f4077856d81874dbaa55515472313"}]}, 0x4, [{0x69, &(0x7f0000000280)=@string={0x69, 0x3, "83545dca1f49ea1eaf8576f8653dc2dec6984540a2a78a5663270fda78ae9eb83c913752c574ba2f66dc230f10357313c37766523113dd5775f900bf41a70b47adfed8160d97a9fddc268b1fd853d5ff76466ca9aadac62281fc199556add8c42bb194fb71b895"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42f}}, {0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="15035ccae5033ff3a47c215120267ac8b5ea4df2e79bc0a1302c8543f6cc1cdf36afa7e53ce491e1bd9460d8ac8fb7f206e409ce8393dca28825a8e9dcf474bb7a55b26fe438064beb80e69e341392a00136b1dae9b94858f1c612ece1309c39685291bab4fec915763da9b83c250b3dc8feb9bc390b7265ef471bc71c638dd842ea9a3fc2941be2d9ad18d254df58a7ce2c5ed5c04f844b8ff6de6e4520ee305251d946e36e3ef0ee594c5bcdb0f2a6ee8a1d5a4468771c6d29e46c061c8f0827629a8fe95b2dcfd1603566dd8eda9d24c5f9da967d14ad79ccff753d8667a5f3942fc70d"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x80c}}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_usb_ep_read(r3, 0xcc, 0x22, &(0x7f0000000dc0)=""/34) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x164}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000003a80)=0x816, 0x4) 887.869571ms ago: executing program 4 (id=680): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000374000/0x1000)=nil, 0x1000, 0x14) personality(0x400000d) r3 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 558.91604ms ago: executing program 4 (id=681): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000200), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) 101.440289ms ago: executing program 1 (id=682): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000016c0)="9dfd", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4040051) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) 0s ago: executing program 1 (id=683): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2c) socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120150ec84d5c2086004040031960154030109021b0001000310030904580801196621940905", @ANYBLOB="438773"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r1 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in, 0x0, 0x32}, @in=@rand_addr=0x64010100, {}, {}, {0x0, 0x0, 0xe13}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x184}}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) kernel console output (not intermixed with test programs): as an invalid descriptor for endpoint zero, skipping [ 159.046539][ T5872] usb 1-1: config 0 interface 12 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 159.090162][ T5872] usb 1-1: config 0 interface 12 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 159.101208][ T5872] usb 1-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 159.115826][ T5872] usb 1-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 159.128255][ T5872] usb 1-1: config 0 interface 114 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 159.139923][ T5872] usb 1-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0xA, skipping [ 159.225139][ T7003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.258762][ T5872] usb 1-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 159.269775][ T5872] usb 1-1: config 0 interface 244 has no altsetting 0 [ 159.276586][ T5872] usb 1-1: config 0 interface 162 has no altsetting 0 [ 159.295177][ T5872] usb 1-1: config 0 interface 12 has no altsetting 0 [ 159.296249][ T7006] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 159.302009][ T5872] usb 1-1: config 0 interface 114 has no altsetting 0 [ 159.324888][ T5872] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff52, bcdDevice=62.51 [ 159.516166][ T7007] netlink: 36 bytes leftover after parsing attributes in process `syz.1.293'. [ 160.138120][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.146180][ T5872] usb 1-1: Product: syz [ 160.150374][ T5872] usb 1-1: Manufacturer: syz [ 160.154959][ T5872] usb 1-1: SerialNumber: syz [ 160.229753][ T7013] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.266043][ T7015] tipc: Started in network mode [ 160.278648][ T7015] tipc: Node identity ac14140f, cluster identity 4711 [ 160.300296][ T7015] tipc: New replicast peer: 255.255.255.255 [ 160.317663][ T7015] tipc: Enabled bearer , priority 10 [ 160.323523][ T5872] usb 1-1: config 0 descriptor?? [ 160.333392][ T5872] usb 1-1: can't set config #0, error -71 [ 160.343176][ T5872] usb 1-1: USB disconnect, device number 8 [ 160.452078][ T7019] Invalid ELF header magic: != ELF [ 160.529247][ T30] audit: type=1400 audit(1744338170.111:355): avc: denied { module_load } for pid=7010 comm="syz.3.295" path="/60/bus" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 160.709209][ T5879] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 160.979291][ T5879] usb 4-1: device descriptor read/64, error -71 [ 161.022638][ T30] audit: type=1400 audit(1744338170.691:356): avc: denied { bind } for pid=7029 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.070751][ T30] audit: type=1400 audit(1744338170.731:357): avc: denied { append } for pid=7031 comm="syz.4.302" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.093391][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.170692][ T30] audit: type=1400 audit(1744338170.841:358): avc: denied { ioctl } for pid=7031 comm="syz.4.302" path="socket:[13362]" dev="sockfs" ino=13362 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.195300][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.260101][ T5879] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 161.272316][ T30] audit: type=1400 audit(1744338170.881:359): avc: denied { getopt } for pid=7035 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.768589][ T92] tipc: Node number set to 2886997007 [ 161.814598][ T7040] qrtr: Invalid version 0 [ 161.841557][ T5879] usb 4-1: device descriptor read/64, error -71 [ 162.490535][ T5879] usb usb4-port1: attempt power cycle [ 162.570920][ T5871] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.368053][ T92] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.416270][ T7061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.310'. [ 163.469220][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 163.489364][ T5871] usb 3-1: config 0 has an invalid interface number: 244 but max is 3 [ 163.506888][ T5871] usb 3-1: config 0 has an invalid interface number: 162 but max is 3 [ 163.518572][ T5871] usb 3-1: config 0 has an invalid interface number: 12 but max is 3 [ 163.531392][ T5871] usb 3-1: config 0 has an invalid interface number: 114 but max is 3 [ 163.539635][ T92] usb 5-1: Using ep0 maxpacket: 16 [ 163.540084][ T92] usb 5-1: no configurations [ 163.549415][ T5871] usb 3-1: config 0 has no interface number 0 [ 163.549433][ T5871] usb 3-1: config 0 has no interface number 1 [ 163.565060][ T5871] usb 3-1: config 0 has no interface number 2 [ 163.571357][ T5871] usb 3-1: config 0 has no interface number 3 [ 163.587068][ T92] usb 5-1: can't read configurations, error -22 [ 163.591960][ T5871] usb 3-1: config 0 interface 244 altsetting 255 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 163.712663][ T7067] delete_channel: no stack [ 163.758062][ T5871] usb 3-1: config 0 interface 244 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 163.771906][ T5871] usb 3-1: config 0 interface 244 altsetting 255 endpoint 0xF has invalid wMaxPacketSize 0 [ 163.782105][ T5871] usb 3-1: config 0 interface 244 altsetting 255 bulk endpoint 0xF has invalid maxpacket 0 [ 163.785318][ T92] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 163.792435][ T5871] usb 3-1: config 0 interface 244 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 163.875402][ T7071] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 163.885444][ T7071] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 163.939627][ T30] audit: type=1400 audit(1744338173.481:360): avc: denied { write } for pid=7066 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 163.977149][ T5871] usb 3-1: config 0 interface 244 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.152672][ T5871] usb 3-1: config 0 interface 244 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.163412][ T30] audit: type=1400 audit(1744338173.551:361): avc: denied { firmware_load } for pid=7063 comm="syz.3.311" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 164.186704][ T5871] usb 3-1: config 0 interface 162 altsetting 129 has a duplicate endpoint with address 0x2, skipping [ 164.202757][ T5871] usb 3-1: config 0 interface 12 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 164.228596][ T5871] usb 3-1: config 0 interface 12 altsetting 7 endpoint 0xB has invalid maxpacket 112, setting to 64 [ 164.253103][ T5871] usb 3-1: config 0 interface 12 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 164.266587][ T5871] usb 3-1: config 0 interface 12 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 164.267398][ T7066] delete_channel: no stack [ 164.279524][ T5871] usb 3-1: config 0 interface 12 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 164.296510][ T5871] usb 3-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 164.329173][ T5871] usb 3-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 164.341288][ T92] usb 5-1: Using ep0 maxpacket: 16 [ 164.342984][ T5871] usb 3-1: config 0 interface 114 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 164.351424][ T92] usb 5-1: no configurations [ 164.378496][ T5871] usb 3-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0xA, skipping [ 164.393473][ T92] usb 5-1: can't read configurations, error -22 [ 164.395138][ T5871] usb 3-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 164.411193][ T92] usb usb5-port1: attempt power cycle [ 164.441945][ T5871] usb 3-1: config 0 interface 244 has no altsetting 0 [ 164.448940][ T5871] usb 3-1: config 0 interface 162 has no altsetting 0 [ 164.456477][ T5871] usb 3-1: config 0 interface 12 has no altsetting 0 [ 164.473097][ T5871] usb 3-1: config 0 interface 114 has no altsetting 0 [ 164.655430][ T5871] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff52, bcdDevice=62.51 [ 164.790987][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.809173][ T92] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 164.889254][ T5871] usb 3-1: Product: syz [ 164.893430][ T5871] usb 3-1: Manufacturer: syz [ 164.898010][ T5871] usb 3-1: SerialNumber: syz [ 164.947637][ T92] usb 5-1: device descriptor read/8, error -71 [ 164.964180][ T5871] usb 3-1: config 0 descriptor?? [ 165.050799][ T7079] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 165.057523][ T7079] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 165.123120][ T5871] usb 3-1: can't set config #0, error -71 [ 165.131121][ T5871] usb 3-1: USB disconnect, device number 9 [ 165.138127][ T7079] vhci_hcd vhci_hcd.0: Device attached [ 165.194850][ T7079] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 165.201465][ T7079] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 165.226157][ T7079] vhci_hcd vhci_hcd.0: Device attached [ 165.235510][ T7079] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.253443][ T7079] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 165.260052][ T7079] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 165.279533][ T52] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 165.289264][ T7079] vhci_hcd vhci_hcd.0: Device attached [ 165.299467][ T5872] vhci_hcd: vhci_device speed not set [ 165.379151][ T5872] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 165.443195][ T7094] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(20) [ 165.449799][ T7094] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 165.489251][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 165.559575][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.644539][ T7094] vhci_hcd vhci_hcd.0: Device attached [ 165.683353][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.703465][ T7079] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(19) [ 165.709058][ T52] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 165.710057][ T7079] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 165.733186][ T7079] vhci_hcd vhci_hcd.0: Device attached [ 165.736822][ T52] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 165.764527][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.795070][ T52] usb 4-1: config 0 descriptor?? [ 165.849867][ T7079] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.863126][ T7102] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 165.880658][ T7094] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(25) [ 165.887252][ T7094] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.911964][ T7094] vhci_hcd vhci_hcd.0: Device attached [ 165.935312][ T7102] bond1: entered promiscuous mode [ 166.052316][ T7109] Bluetooth: MGMT ver 1.23 [ 166.056804][ T30] audit: type=1400 audit(1744338175.721:362): avc: denied { write } for pid=7101 comm="syz.1.319" path="socket:[12701]" dev="sockfs" ino=12701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.087092][ T7095] vhci_hcd: connection closed [ 166.089405][ T7088] vhci_hcd: connection closed [ 166.089681][ T12] vhci_hcd: stop threads [ 166.094582][ T7083] vhci_hcd: connection reset by peer [ 166.098918][ T7091] vhci_hcd: connection closed [ 166.104803][ T7104] vhci_hcd: connection closed [ 166.115653][ T7097] vhci_hcd: connection closed [ 166.121288][ T12] vhci_hcd: release socket [ 166.137945][ T12] vhci_hcd: disconnect device [ 166.144222][ T12] vhci_hcd: stop threads [ 166.148661][ T12] vhci_hcd: release socket [ 166.153555][ T12] vhci_hcd: disconnect device [ 166.158771][ T12] vhci_hcd: stop threads [ 166.163480][ T12] vhci_hcd: release socket [ 166.168106][ T12] vhci_hcd: disconnect device [ 166.173908][ T12] vhci_hcd: stop threads [ 166.178158][ T12] vhci_hcd: release socket [ 166.182843][ T12] vhci_hcd: disconnect device [ 166.187899][ T12] vhci_hcd: stop threads [ 166.192476][ T12] vhci_hcd: release socket [ 166.196978][ T12] vhci_hcd: disconnect device [ 166.202613][ T12] vhci_hcd: stop threads [ 166.206898][ T12] vhci_hcd: release socket [ 166.213225][ T12] vhci_hcd: disconnect device [ 166.333786][ T52] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 166.349375][ T52] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 166.382930][ T92] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 166.384247][ T52] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 166.460492][ T52] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 166.460990][ T92] usb 5-1: Using ep0 maxpacket: 16 [ 166.471963][ T52] microsoft 0003:045E:07DA.000B: no inputs found [ 166.473623][ T52] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 166.510156][ T92] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.534718][ T92] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.598348][ T92] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.643935][ T92] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 166.654169][ T92] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 166.668139][ T92] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 166.699672][ T92] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 166.740141][ T92] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.750870][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 167.059368][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 167.087351][ T92] usb 5-1: SerialNumber: syz [ 167.118496][ T92] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 167.128951][ T7120] ipvlan2: entered promiscuous mode [ 167.158376][ T92] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 167.167065][ T7120] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 167.181690][ T7120] team0: Device ipvlan2 is already an upper device of the team interface [ 167.206899][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 167.268010][ T7124] ipvlan2: entered promiscuous mode [ 167.314900][ T5873] usb 4-1: USB disconnect, device number 13 [ 167.367837][ T92] usb 5-1: USB disconnect, device number 10 [ 167.446113][ T30] audit: type=1400 audit(1744338177.111:363): avc: denied { mount } for pid=7128 comm="syz.0.327" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 167.759121][ T52] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 168.019174][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 168.035457][ T52] usb 3-1: config 0 has an invalid interface number: 244 but max is 3 [ 168.045561][ T52] usb 3-1: config 0 has an invalid interface number: 162 but max is 3 [ 168.068760][ T52] usb 3-1: config 0 has an invalid interface number: 12 but max is 3 [ 168.087375][ T7146] netlink: 'syz.4.331': attribute type 21 has an invalid length. [ 168.091214][ T52] usb 3-1: config 0 has an invalid interface number: 114 but max is 3 [ 168.096087][ T7146] netlink: 'syz.4.331': attribute type 6 has an invalid length. [ 168.109177][ T52] usb 3-1: config 0 has no interface number 0 [ 168.117276][ T7146] netlink: 132 bytes leftover after parsing attributes in process `syz.4.331'. [ 168.126298][ T52] usb 3-1: config 0 has no interface number 1 [ 168.126317][ T52] usb 3-1: config 0 has no interface number 2 [ 168.126332][ T52] usb 3-1: config 0 has no interface number 3 [ 168.126387][ T52] usb 3-1: config 0 interface 244 altsetting 255 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 168.126409][ T52] usb 3-1: config 0 interface 244 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 168.230809][ T7154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.332'. [ 168.235673][ T52] usb 3-1: config 0 interface 244 altsetting 255 endpoint 0xF has invalid wMaxPacketSize 0 [ 168.240145][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 168.258559][ T52] usb 3-1: config 0 interface 244 altsetting 255 bulk endpoint 0xF has invalid maxpacket 0 [ 168.271573][ T52] usb 3-1: config 0 interface 244 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 168.282936][ T52] usb 3-1: config 0 interface 244 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.293181][ T52] usb 3-1: config 0 interface 244 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 168.304453][ T52] usb 3-1: config 0 interface 162 altsetting 129 has a duplicate endpoint with address 0x2, skipping [ 168.315602][ T52] usb 3-1: config 0 interface 12 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 168.323821][ T7155] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.333'. [ 168.326485][ T52] usb 3-1: config 0 interface 12 altsetting 7 endpoint 0xB has invalid maxpacket 112, setting to 64 [ 168.335825][ T92] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 168.346413][ T52] usb 3-1: config 0 interface 12 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 168.369188][ T52] usb 3-1: config 0 interface 12 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 168.377000][ T7155] netlink: zone id is out of range [ 168.384979][ T7155] netlink: zone id is out of range [ 168.385837][ T52] usb 3-1: config 0 interface 12 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 168.400853][ T7155] netlink: zone id is out of range [ 168.400957][ T52] usb 3-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 168.417042][ T7155] netlink: zone id is out of range [ 168.422225][ T52] usb 3-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 168.422266][ T52] usb 3-1: config 0 interface 114 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 168.422285][ T52] usb 3-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0xA, skipping [ 168.422362][ T52] usb 3-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 168.422381][ T52] usb 3-1: config 0 interface 244 has no altsetting 0 [ 168.422396][ T52] usb 3-1: config 0 interface 162 has no altsetting 0 [ 168.422410][ T52] usb 3-1: config 0 interface 12 has no altsetting 0 [ 168.422430][ T52] usb 3-1: config 0 interface 114 has no altsetting 0 [ 168.493577][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 168.507376][ T7155] netlink: zone id is out of range [ 168.508510][ T52] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff52, bcdDevice=62.51 [ 168.522926][ T7155] netlink: zone id is out of range [ 168.524079][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.528042][ T7155] netlink: zone id is out of range [ 168.528052][ T7155] netlink: zone id is out of range [ 168.547783][ T7155] netlink: zone id is out of range [ 168.548917][ T52] usb 3-1: Product: syz [ 168.561179][ T52] usb 3-1: Manufacturer: syz [ 168.567031][ T52] usb 3-1: SerialNumber: syz [ 168.598702][ T52] usb 3-1: config 0 descriptor?? [ 168.664839][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.679675][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 168.695718][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.712517][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.728420][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.739335][ T92] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 168.739539][ T7158] 8021q: VLANs not supported on ip6gre0 [ 168.748425][ T10] usb 5-1: Product: syz [ 168.758573][ T10] usb 5-1: Manufacturer: syz [ 168.765153][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.776593][ T10] usb 5-1: SerialNumber: syz [ 168.809843][ T92] usb 4-1: config 0 descriptor?? [ 168.815773][ T10] cdc_ncm 5-1:1.0: skipping garbage [ 169.019521][ T5873] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 169.183585][ T5873] usb 1-1: config 0 has an invalid interface number: 241 but max is 0 [ 169.192993][ T5873] usb 1-1: config 0 has no interface number 0 [ 169.199433][ T5873] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=97.be [ 169.208533][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.238153][ T5873] usb 1-1: config 0 descriptor?? [ 169.246553][ T5873] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 169.253736][ T92] isku 0003:1E7D:319C.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 169.278615][ T7160] netlink: 'syz.1.335': attribute type 5 has an invalid length. [ 169.449267][ T5873] gspca_sunplus: reg_w_riv err -71 [ 169.456375][ T5873] sunplus 1-1:0.241: probe with driver sunplus failed with error -71 [ 169.476593][ T5873] usb 1-1: USB disconnect, device number 9 [ 169.559131][ T5871] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 169.711788][ T5871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.722069][ T5871] usb 2-1: config 0 has no interfaces? [ 169.729879][ T5871] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 169.742062][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.751580][ T5871] usb 2-1: Product: syz [ 169.755778][ T5871] usb 2-1: Manufacturer: syz [ 169.760475][ T5871] usb 2-1: SerialNumber: syz [ 169.767049][ T5871] usb 2-1: config 0 descriptor?? [ 169.815510][ T10] cdc_ncm 5-1:1.0: bind() failure [ 169.824934][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 169.832412][ T10] cdc_ncm 5-1:1.1: bind() failure [ 170.174542][ T92] usb 5-1: USB disconnect, device number 11 [ 170.377109][ T52] option 3-1:0.244: GSM modem (1-port) converter detected [ 170.387364][ T5879] usb 2-1: USB disconnect, device number 10 [ 170.446114][ T52] usb 3-1: USB disconnect, device number 10 [ 170.447692][ T7165] netlink: 'syz.0.337': attribute type 4 has an invalid length. [ 170.458582][ T52] option 3-1:0.244: device disconnected [ 170.635706][ T5872] vhci_hcd: vhci_device speed not set [ 170.862437][ T30] audit: type=1400 audit(1744338180.531:364): avc: denied { connect } for pid=7169 comm="syz.0.340" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.884598][ T7171] syz.0.340: attempt to access beyond end of device [ 170.884598][ T7171] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 170.921016][ T30] audit: type=1400 audit(1744338180.531:365): avc: denied { ioctl } for pid=7169 comm="syz.0.340" path="socket:[13750]" dev="sockfs" ino=13750 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.965673][ T5879] usb 4-1: USB disconnect, device number 14 [ 171.033449][ T7179] netlink: 36 bytes leftover after parsing attributes in process `syz.3.341'. [ 171.066778][ T30] audit: type=1400 audit(1744338180.731:366): avc: denied { ioctl } for pid=7178 comm="syz.3.341" path="socket:[13758]" dev="sockfs" ino=13758 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.067036][ T7179] netlink: 44 bytes leftover after parsing attributes in process `syz.3.341'. [ 171.119191][ T7179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.341'. [ 171.128978][ T7179] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.139373][ T7179] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.146570][ T7179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.219356][ T52] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 171.389155][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 171.389966][ T92] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 171.455818][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.479818][ T30] audit: type=1400 audit(1744338181.111:367): avc: denied { bind } for pid=7190 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 171.584750][ T5879] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 171.595242][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.606586][ T52] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.639263][ T30] audit: type=1400 audit(1744338181.111:368): avc: denied { name_bind } for pid=7190 comm="syz.4.346" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 171.668815][ T52] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 171.668846][ T30] audit: type=1400 audit(1744338181.121:369): avc: denied { node_bind } for pid=7190 comm="syz.4.346" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 171.727796][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 171.744754][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.754810][ T92] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 171.755343][ T30] audit: type=1400 audit(1744338181.281:370): avc: denied { listen } for pid=7190 comm="syz.4.346" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 171.774076][ T92] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 171.784549][ T52] usb 3-1: config 0 descriptor?? [ 171.798496][ T30] audit: type=1400 audit(1744338181.351:371): avc: denied { accept } for pid=7190 comm="syz.4.346" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 171.829455][ T30] audit: type=1400 audit(1744338181.351:372): avc: denied { write } for pid=7190 comm="syz.4.346" laddr=::ffff:172.20.20.0 lport=20000 faddr=::ffff:172.20.20.10 fport=45350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 171.858472][ T92] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 171.881121][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 172.029390][ T92] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 172.040466][ T92] usb 1-1: config 250 has no interface number 0 [ 172.049794][ T92] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.080644][ T92] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 172.092110][ T5879] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 172.149090][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.170476][ T92] usb 1-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 172.184078][ T5879] usb 4-1: Product: syz [ 172.188979][ T5879] usb 4-1: Manufacturer: syz [ 172.196546][ T5879] usb 4-1: SerialNumber: syz [ 172.204512][ T92] usb 1-1: config 250 interface 228 has no altsetting 0 [ 172.300125][ T7207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.363059][ T52] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 172.370549][ T52] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 172.380952][ T52] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 172.381327][ T92] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 172.411438][ T52] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 172.420930][ T5879] r8152-cfgselector 4-1: Unknown version 0x0000 [ 172.468840][ T5879] r8152-cfgselector 4-1: config 0 descriptor?? [ 172.483221][ T7172] tmpfs: Bad value for 'mpol' [ 172.498055][ T92] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 172.553242][ T92] usb 1-1: Product: syz [ 173.159984][ T52] microsoft 0003:045E:07DA.000D: no inputs found [ 173.166414][ T52] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 173.193375][ T92] usb 1-1: SerialNumber: syz [ 173.237755][ T52] usb 3-1: USB disconnect, device number 11 [ 173.322832][ T92] hub 1-1:250.228: bad descriptor, ignoring hub [ 173.350832][ T92] hub 1-1:250.228: probe with driver hub failed with error -5 [ 174.347206][ T7181] netlink: 57 bytes leftover after parsing attributes in process `syz.0.342'. [ 174.380106][ T92] usblp 1-1:250.228: usblp0: USB Unidirectional printer dev 10 if 228 alt 255 proto 1 vid 0x0525 pid 0xD292 [ 174.416465][ T7218] trusted_key: syz.2.349 sent an empty control message without MSG_MORE. [ 174.696568][ T5872] r8152-cfgselector 4-1: USB disconnect, device number 15 [ 174.969208][ T92] usb 1-1: USB disconnect, device number 10 [ 175.117483][ T92] usblp0: removed [ 175.674005][ T7236] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 175.697281][ T7236] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 175.745074][ T7234] mmap: syz.2.357 (7234) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 175.893891][ T7247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.166623][ T7251] xfrm0: entered promiscuous mode [ 179.458654][ T30] audit: type=1400 audit(1744338189.121:373): avc: denied { create } for pid=7266 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 179.494870][ T7269] lo speed is unknown, defaulting to 1000 [ 179.581082][ T30] audit: type=1400 audit(1744338189.181:374): avc: denied { shutdown } for pid=7267 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.635831][ T30] audit: type=1400 audit(1744338189.181:375): avc: denied { getopt } for pid=7267 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 179.864541][ T7286] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 180.385522][ T30] audit: type=1400 audit(1744338190.041:376): avc: denied { shutdown } for pid=7267 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.419124][ T52] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 180.464733][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 180.471324][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 180.472436][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 180.477440][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 180.590431][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 180.722130][ T52] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 180.791614][ T7291] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 181.137615][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.175510][ T52] usb 1-1: Product: syz [ 181.599100][ T52] usb 1-1: Manufacturer: syz [ 181.617807][ T52] usb 1-1: SerialNumber: syz [ 181.658449][ T52] usb 1-1: config 0 descriptor?? [ 182.071851][ T30] audit: type=1400 audit(1744338191.741:377): avc: denied { setattr } for pid=7278 comm="syz.0.368" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.100054][ T52] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 182.426795][ T7307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.583064][ T5834] Bluetooth: hci2: command 0x0405 tx timeout [ 184.733376][ T52] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 184.856693][ T52] usb 1-1: USB disconnect, device number 11 [ 185.515859][ T30] audit: type=1400 audit(1744338195.181:378): avc: denied { write } for pid=7330 comm="syz.3.382" path="socket:[14235]" dev="sockfs" ino=14235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.532601][ T7331] loop6: detected capacity change from 0 to 524287999 [ 185.621906][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.631167][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.639197][ T30] audit: type=1400 audit(1744338195.181:379): avc: denied { append } for pid=7330 comm="syz.3.382" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.682758][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.691891][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.712021][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.721465][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.094276][ T7329] netlink: 304 bytes leftover after parsing attributes in process `syz.4.381'. [ 186.128893][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.138122][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.560712][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.569890][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.577868][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.587012][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.595628][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.604794][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.613518][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.622716][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.630807][ T7331] ldm_validate_partition_table(): Disk read failed. [ 186.637862][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.647073][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.655954][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.665167][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.676892][ T7331] Dev loop6: unable to read RDB block 0 [ 186.686169][ T7331] loop6: unable to read partition table [ 186.695591][ T7331] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 186.803896][ T5879] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 187.216102][ T5879] usb 4-1: device descriptor read/64, error -71 [ 188.909301][ T5879] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 189.647356][ T7323] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.437002][ T7323] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.525817][ T7365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.633693][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.641793][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.649345][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.667589][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.680517][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.937420][ T30] audit: type=1400 audit(1744338200.521:380): avc: denied { mounton } for pid=7368 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 191.361227][ T7323] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.738522][ T7368] lo speed is unknown, defaulting to 1000 [ 191.834413][ T7323] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.053484][ T7368] chnl_net:caif_netlink_parms(): no params data found [ 192.889158][ T55] Bluetooth: hci3: command tx timeout [ 193.764867][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.771305][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.568505][ T7368] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.592785][ T7368] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.604622][ T7368] bridge_slave_0: entered allmulticast mode [ 194.612527][ T7368] bridge_slave_0: entered promiscuous mode [ 194.621864][ T7368] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.628984][ T7368] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.638263][ T7368] bridge_slave_1: entered allmulticast mode [ 194.647285][ T7368] bridge_slave_1: entered promiscuous mode [ 194.686475][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 194.720574][ T30] audit: type=1400 audit(1744338204.391:381): avc: denied { search } for pid=5490 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.750774][ T30] audit: type=1400 audit(1744338204.391:382): avc: denied { read } for pid=5490 comm="dhcpcd" name="n101" dev="tmpfs" ino=2961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.782219][ T7421] ipvlan2: entered promiscuous mode [ 194.805556][ T30] audit: type=1400 audit(1744338204.391:383): avc: denied { open } for pid=5490 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.832259][ T30] audit: type=1400 audit(1744338204.391:384): avc: denied { getattr } for pid=5490 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.949218][ T55] Bluetooth: hci3: command tx timeout [ 195.006349][ T7368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.166884][ T7368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.797281][ T30] audit: type=1400 audit(1744338205.461:385): avc: denied { read } for pid=7444 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.815222][ T7368] team0: Port device team_slave_0 added [ 195.887300][ T7446] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 196.038714][ T30] audit: type=1400 audit(1744338205.461:386): avc: denied { open } for pid=7444 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.109818][ T5871] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 196.238412][ T30] audit: type=1400 audit(1744338205.461:387): avc: denied { getattr } for pid=7444 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.292733][ T7323] bridge_slave_1: left allmulticast mode [ 196.303791][ T7323] bridge_slave_1: left promiscuous mode [ 196.320068][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.345766][ T7323] bridge_slave_0: left allmulticast mode [ 196.359066][ T7323] bridge_slave_0: left promiscuous mode [ 196.364767][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.494752][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 196.511889][ T5871] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 196.529081][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.565658][ T5871] usb 3-1: config 0 descriptor?? [ 196.587108][ T7441] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 196.663484][ T30] audit: type=1400 audit(1744338206.331:388): avc: denied { write } for pid=7432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.738098][ T30] audit: type=1400 audit(1744338206.331:389): avc: denied { add_name } for pid=7432 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.964883][ T30] audit: type=1400 audit(1744338206.331:390): avc: denied { create } for pid=7432 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.039224][ T55] Bluetooth: hci3: command tx timeout [ 197.051107][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 197.094013][ T30] audit: type=1400 audit(1744338206.331:391): avc: denied { write } for pid=7432 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2982 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.325897][ T5871] elan 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 197.447493][ T30] audit: type=1400 audit(1744338206.331:392): avc: denied { append } for pid=7432 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2982 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 197.890327][ T30] audit: type=1400 audit(1744338206.741:393): avc: denied { remove_name } for pid=7463 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2982 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.986884][ T30] audit: type=1400 audit(1744338206.741:394): avc: denied { unlink } for pid=7463 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2982 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.162232][ T30] audit: type=1400 audit(1744338207.451:395): avc: denied { create } for pid=7439 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.875241][ T874] usb 3-1: reset full-speed USB device number 12 using dummy_hcd [ 199.099271][ T55] Bluetooth: hci3: command tx timeout [ 199.252850][ T7323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.294307][ T7323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.330286][ T7323] bond0 (unregistering): Released all slaves [ 199.357509][ T7368] team0: Port device team_slave_1 added [ 199.560702][ T7484] vivid-001: ================= START STATUS ================= [ 199.568480][ T7484] vivid-001: Radio HW Seek Mode: Bounded [ 199.616426][ T7368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.636949][ T7368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.669895][ T7484] vivid-001: Radio Programmable HW Seek: false [ 199.676121][ T7484] vivid-001: RDS Rx I/O Mode: Block I/O [ 199.719831][ T7484] vivid-001: Generate RBDS Instead of RDS: false [ 199.729064][ T7484] vivid-001: RDS Reception: true [ 199.762776][ T7484] vivid-001: RDS Program Type: 0 inactive [ 199.768549][ T7484] vivid-001: RDS PS Name: inactive [ 199.773973][ T7368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.801658][ T7323] tipc: Disabling bearer [ 199.812451][ T7323] tipc: Left network mode [ 199.829692][ T7368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.836646][ T7368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.869321][ T7484] vivid-001: RDS Radio Text: inactive [ 199.895806][ T7484] vivid-001: RDS Traffic Announcement: false inactive [ 199.918607][ T7368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.932388][ T7484] vivid-001: RDS Traffic Program: false inactive [ 199.947016][ T7484] vivid-001: RDS Music: false inactive [ 199.963988][ T7484] vivid-001: ================== END STATUS ================== [ 199.999181][ T5903] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 200.128741][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 200.172192][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 200.180713][ T7368] hsr_slave_0: entered promiscuous mode [ 200.194953][ T7368] hsr_slave_1: entered promiscuous mode [ 200.208656][ T7368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.211643][ T5903] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 200.237310][ T7368] Cannot create hsr debugfs directory [ 200.246691][ T5903] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 200.288247][ T7498] ipvlan2: entered promiscuous mode [ 200.311065][ T5903] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 200.347032][ T5903] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 200.386825][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 200.403728][ T5903] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 200.422717][ T5903] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 200.441385][ T5903] usb 5-1: Product: syz [ 200.458525][ T5903] usb 5-1: Manufacturer: syz [ 201.306399][ T5903] usb 5-1: SerialNumber: syz [ 201.324536][ T5871] usb 3-1: USB disconnect, device number 12 [ 201.343648][ T5903] usb 5-1: config 0 descriptor?? [ 201.358598][ T5903] ldusb 5-1:0.0: Interrupt in endpoint not found [ 201.563990][ T7323] hsr_slave_0: left promiscuous mode [ 201.582238][ T7323] hsr_slave_1: left promiscuous mode [ 201.590436][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.598024][ T7323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.607929][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.623097][ T7323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.656443][ T7323] veth1_macvtap: left promiscuous mode [ 201.667365][ T7323] veth0_macvtap: left promiscuous mode [ 201.682637][ T7323] veth1_vlan: left promiscuous mode [ 201.695293][ T7323] veth0_vlan: left promiscuous mode [ 201.829366][ T7518] siw: device registration error -23 [ 202.892543][ T7323] team0 (unregistering): Port device team_slave_1 removed [ 203.287663][ T874] usb 5-1: USB disconnect, device number 12 [ 206.619732][ T7323] team0 (unregistering): Port device team_slave_0 removed [ 207.374827][ T5903] lo speed is unknown, defaulting to 1000 [ 207.382706][ T5903] infiniband syz0: ib_query_port failed (-19) [ 207.413378][ T7543] xfrm0: entered promiscuous mode [ 207.498627][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 207.759731][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 207.759745][ T30] audit: type=1400 audit(1744338217.431:402): avc: denied { read } for pid=7558 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.974505][ T30] audit: type=1400 audit(1744338217.641:403): avc: denied { mounton } for pid=7558 comm="syz.1.432" path=2F39352FE91F7189591E9233614B dev="tmpfs" ino=519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 208.058156][ T30] audit: type=1400 audit(1744338217.691:404): avc: denied { append } for pid=7566 comm="syz.3.435" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.273119][ T7368] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 208.372281][ T30] audit: type=1400 audit(1744338217.691:405): avc: denied { ioctl } for pid=7566 comm="syz.3.435" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.432475][ T7368] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 208.462392][ T30] audit: type=1326 audit(1744338217.791:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.3.435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e0778d169 code=0x0 [ 208.523402][ T7368] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 208.732776][ T30] audit: type=1326 audit(1744338218.371:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7578 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a458d169 code=0x7ffc0000 [ 208.755991][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.884575][ T30] audit: type=1326 audit(1744338218.371:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7578 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a458d169 code=0x7ffc0000 [ 208.907782][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.956685][ T7368] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 208.972461][ T30] audit: type=1326 audit(1744338218.371:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7578 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66a458bad0 code=0x7ffc0000 [ 209.165380][ T30] audit: type=1326 audit(1744338218.371:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7578 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a458d169 code=0x7ffc0000 [ 209.188580][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.299308][ T30] audit: type=1326 audit(1744338218.371:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7578 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a458d169 code=0x7ffc0000 [ 209.322539][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.567783][ T7596] netlink: 'syz.1.438': attribute type 21 has an invalid length. [ 209.878122][ T7596] netlink: 156 bytes leftover after parsing attributes in process `syz.1.438'. [ 209.996519][ T7368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.145372][ T7368] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.203020][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.210165][ T6438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.335714][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.342848][ T6438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.639399][ T5903] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 210.904134][ T7368] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.917695][ T7368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.960490][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 211.130502][ T5903] usb 2-1: config 0 has an invalid interface number: 244 but max is 3 [ 211.138836][ T5903] usb 2-1: config 0 has an invalid interface number: 162 but max is 3 [ 211.278825][ T5903] usb 2-1: config 0 has an invalid interface number: 12 but max is 3 [ 211.386826][ T5903] usb 2-1: config 0 has an invalid interface number: 114 but max is 3 [ 211.405763][ T5903] usb 2-1: config 0 has no interface number 0 [ 211.419057][ T5903] usb 2-1: config 0 has no interface number 1 [ 211.430526][ T92] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 211.463555][ T5903] usb 2-1: config 0 has no interface number 2 [ 211.481138][ T5903] usb 2-1: config 0 has no interface number 3 [ 211.503238][ T5903] usb 2-1: config 0 interface 244 altsetting 255 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 211.533499][ T5903] usb 2-1: config 0 interface 244 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 211.577461][ T5903] usb 2-1: config 0 interface 244 altsetting 255 endpoint 0xF has invalid wMaxPacketSize 0 [ 211.598453][ T5903] usb 2-1: config 0 interface 244 altsetting 255 bulk endpoint 0xF has invalid maxpacket 0 [ 211.622775][ T92] usb 4-1: New USB device found, idVendor=2770, idProduct=934c, bcdDevice=8d.6a [ 211.639105][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.647184][ T5903] usb 2-1: config 0 interface 244 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 211.678497][ T92] usb 4-1: Product: syz [ 211.697228][ T5903] usb 2-1: config 0 interface 244 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 211.707835][ T92] usb 4-1: Manufacturer: syz [ 211.714959][ T92] usb 4-1: SerialNumber: syz [ 211.717157][ T7368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.721939][ T5903] usb 2-1: config 0 interface 244 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 211.750822][ T5903] usb 2-1: config 0 interface 162 altsetting 129 has a duplicate endpoint with address 0x2, skipping [ 211.763131][ T92] usb 4-1: config 0 descriptor?? [ 211.823807][ T5903] usb 2-1: config 0 interface 12 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 211.873437][ T5903] usb 2-1: config 0 interface 12 altsetting 7 endpoint 0xB has invalid maxpacket 112, setting to 64 [ 211.888290][ T5903] usb 2-1: config 0 interface 12 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 211.922671][ T5903] usb 2-1: config 0 interface 12 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 211.950423][ T5903] usb 2-1: config 0 interface 12 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 212.001721][ T5903] usb 2-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 212.032056][ T5903] usb 2-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 212.069241][ T5903] usb 2-1: config 0 interface 114 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 212.089403][ T5903] usb 2-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0xA, skipping [ 212.116004][ T5903] usb 2-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 212.140634][ T5903] usb 2-1: config 0 interface 244 has no altsetting 0 [ 212.157852][ T5903] usb 2-1: config 0 interface 162 has no altsetting 0 [ 212.168969][ T5903] usb 2-1: config 0 interface 12 has no altsetting 0 [ 212.188081][ T5903] usb 2-1: config 0 interface 114 has no altsetting 0 [ 212.210265][ T5903] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff52, bcdDevice=62.51 [ 212.230552][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.248984][ T5903] usb 2-1: Product: syz [ 212.253478][ T5903] usb 2-1: Manufacturer: syz [ 212.258072][ T5903] usb 2-1: SerialNumber: syz [ 212.278062][ T5903] usb 2-1: config 0 descriptor?? [ 212.326090][ T7368] veth0_vlan: entered promiscuous mode [ 212.342984][ T7368] veth1_vlan: entered promiscuous mode [ 212.394720][ T7368] veth0_macvtap: entered promiscuous mode [ 212.411340][ T7368] veth1_macvtap: entered promiscuous mode [ 212.432677][ T7368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.446015][ T7368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.458629][ T7368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.476926][ T7368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.488740][ T7368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.544424][ T7368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.559326][ T7368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.570543][ T7368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.583250][ T7368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.627684][ T7368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.640727][ T7368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.650617][ T7368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.661212][ T7368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.671088][ T7368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.681869][ T7368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.693465][ T7368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.711178][ T7368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.725333][ T7368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.768660][ T7368] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.776011][ T5864] usb 4-1: USB disconnect, device number 18 [ 212.817670][ T7368] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.842628][ T7368] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.863938][ T7368] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.877339][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 213.074108][ T7667] ipvlan2: entered promiscuous mode [ 213.143138][ T7671] xt_hashlimit: size too large, truncated to 1048576 [ 213.379239][ T7675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.449'. [ 213.634205][ T5903] option 2-1:0.244: GSM modem (1-port) converter detected [ 213.648211][ T7675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.449'. [ 213.719366][ T5903] usb 2-1: USB disconnect, device number 11 [ 213.734259][ T5903] option 2-1:0.244: device disconnected [ 214.403276][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 214.403290][ T30] audit: type=1400 audit(1744338224.071:459): avc: denied { create } for pid=7689 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 214.435342][ T6438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.496529][ T6438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.566022][ T30] audit: type=1400 audit(1744338224.141:460): avc: denied { sys_admin } for pid=7689 comm="syz.4.452" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 214.586791][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.981881][ T6438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.015818][ T30] audit: type=1400 audit(1744338224.681:461): avc: denied { load_policy } for pid=7698 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 215.041325][ T92] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 215.042147][ T6438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.121509][ T7699] SELinux: ebitmap: truncated map [ 215.212487][ T92] usb 3-1: Using ep0 maxpacket: 32 [ 215.250404][ T30] audit: type=1400 audit(1744338224.881:462): avc: denied { mount } for pid=7698 comm="syz.1.453" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 215.357908][ T92] usb 3-1: config 0 interface 0 altsetting 56 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.488430][ T92] usb 3-1: config 0 interface 0 altsetting 56 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.524618][ T30] audit: type=1400 audit(1744338224.891:463): avc: denied { mounton } for pid=7698 comm="syz.1.453" path="/99/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 215.624619][ T92] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.679164][ T92] usb 3-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 215.688227][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.688373][ T30] audit: type=1400 audit(1744338224.911:464): avc: denied { read } for pid=7698 comm="syz.1.453" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 215.717881][ T30] audit: type=1400 audit(1744338224.911:465): avc: denied { open } for pid=7698 comm="syz.1.453" path="/99/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 215.739935][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.746237][ T30] audit: type=1400 audit(1744338225.281:466): avc: denied { mounton } for pid=7368 comm="syz-executor" path="/root/syzkaller.i9pMtK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 215.772818][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.781947][ T92] usb 3-1: config 0 descriptor?? [ 215.836162][ T7699] SELinux: failed to load policy [ 215.857647][ T30] audit: type=1400 audit(1744338225.521:467): avc: denied { mount } for pid=7368 comm="syz-executor" name="/" dev="gadgetfs" ino=6453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 215.958202][ T30] audit: type=1400 audit(1744338225.591:468): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 216.074616][ T92] usbhid 3-1:0.0: can't add hid device: -71 [ 216.091360][ T92] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 216.164747][ T92] usb 3-1: USB disconnect, device number 13 [ 216.575108][ T7727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.679069][ T5903] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 216.937536][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 217.333009][ T55] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 219.639934][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 219.654669][ T5903] usb 6-1: device descriptor read/all, error -71 [ 220.291858][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 220.291873][ T30] audit: type=1400 audit(1744338229.961:470): avc: denied { kexec_image_load } for pid=7738 comm="syz.5.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 220.810220][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 221.327945][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.465'. [ 221.362778][ T7764] ipvlan2: entered promiscuous mode [ 221.383583][ T7764] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 221.404089][ T7764] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 222.369127][ T30] audit: type=1400 audit(1744338231.751:471): avc: denied { read } for pid=7773 comm="syz.1.468" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 222.744129][ T30] audit: type=1800 audit(1744338232.411:472): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.466" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 224.036227][ T7797] mkiss: ax0: crc mode is auto. [ 224.046004][ T7804] delete_channel: no stack [ 224.229119][ T30] audit: type=1400 audit(1744338233.781:473): avc: denied { ioctl } for pid=7792 comm="syz.4.473" path="socket:[16853]" dev="sockfs" ino=16853 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 224.650914][ T30] audit: type=1400 audit(1744338234.061:474): avc: denied { mounton } for pid=7805 comm="syz.2.477" path="/86/file0" dev="proc" ino=4026533413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 224.673852][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.815749][ T7792] delete_channel: no stack [ 224.836494][ T30] audit: type=1400 audit(1744338234.501:475): avc: denied { module_request } for pid=7815 comm="syz.3.478" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 224.858552][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.044783][ T30] audit: type=1400 audit(1744338234.711:476): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 225.158475][ T55] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 225.239048][ T30] audit: type=1400 audit(1744338234.821:477): avc: denied { watch_reads } for pid=7828 comm="syz.2.479" path="/87" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 226.465018][ T7838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.617166][ T30] audit: type=1400 audit(1744338236.281:478): avc: denied { listen } for pid=7832 comm="syz.4.480" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 227.982932][ T30] audit: type=1400 audit(1744338237.651:479): avc: denied { bind } for pid=7848 comm="syz.5.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.070345][ T30] audit: type=1400 audit(1744338237.651:480): avc: denied { read } for pid=7848 comm="syz.5.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 228.175975][ T30] audit: type=1400 audit(1744338237.841:481): avc: denied { map } for pid=7850 comm="syz.5.484" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 228.931538][ T30] audit: type=1400 audit(1744338238.601:482): avc: denied { setopt } for pid=7869 comm="syz.5.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.942628][ T7872] netlink: 36 bytes leftover after parsing attributes in process `syz.5.489'. [ 229.139565][ T30] audit: type=1326 audit(1744338238.811:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947c58d169 code=0x7ffc0000 [ 229.180532][ T55] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 229.260112][ T55] Bluetooth: hci4: Injecting HCI hardware error event [ 229.268201][ T5834] Bluetooth: hci4: hardware error 0x00 [ 229.279069][ T30] audit: type=1326 audit(1744338238.811:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947c58d169 code=0x7ffc0000 [ 229.310022][ T30] audit: type=1326 audit(1744338238.811:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f947c58d169 code=0x7ffc0000 [ 229.333716][ T30] audit: type=1326 audit(1744338238.811:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947c58d169 code=0x7ffc0000 [ 229.357368][ T30] audit: type=1326 audit(1744338238.811:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947c58d169 code=0x7ffc0000 [ 229.522187][ T7892] FAULT_INJECTION: forcing a failure. [ 229.522187][ T7892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.535501][ T7892] CPU: 1 UID: 0 PID: 7892 Comm: syz.4.493 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 229.535523][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.535533][ T7892] Call Trace: [ 229.535539][ T7892] [ 229.535545][ T7892] dump_stack_lvl+0x16c/0x1f0 [ 229.535572][ T7892] should_fail_ex+0x512/0x640 [ 229.535593][ T7892] strncpy_from_user+0x3b/0x2e0 [ 229.535613][ T7892] getname_flags.part.0+0x8b/0x540 [ 229.535637][ T7892] getname_flags+0x93/0xf0 [ 229.535661][ T7892] do_sys_openat2+0xb8/0x1d0 [ 229.535681][ T7892] ? __pfx_do_sys_openat2+0x10/0x10 [ 229.535704][ T7892] ? __fget_files+0x20e/0x3c0 [ 229.535724][ T7892] __x64_sys_openat+0x174/0x210 [ 229.535744][ T7892] ? __pfx___x64_sys_openat+0x10/0x10 [ 229.535764][ T7892] ? ksys_write+0x1b9/0x240 [ 229.535788][ T7892] do_syscall_64+0xcd/0x260 [ 229.535812][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.535833][ T7892] RIP: 0033:0x7f947c58d169 [ 229.535847][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.535862][ T7892] RSP: 002b:00007f947d369038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 229.535878][ T7892] RAX: ffffffffffffffda RBX: 00007f947c7a6160 RCX: 00007f947c58d169 [ 229.535888][ T7892] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 00000000ffffff9c [ 229.535897][ T7892] RBP: 00007f947d369090 R08: 0000000000000000 R09: 0000000000000000 [ 229.535907][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.535916][ T7892] R13: 0000000000000000 R14: 00007f947c7a6160 R15: 00007ffc7ea413c8 [ 229.535937][ T7892] [ 229.769337][ T5864] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 230.929134][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 230.967788][ T5864] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 230.999421][ T5864] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 231.022345][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.049221][ T5864] usb 4-1: Product: syz [ 231.056301][ T5864] usb 4-1: Manufacturer: syz [ 231.061616][ T5864] usb 4-1: SerialNumber: syz [ 231.101618][ T5864] usb 4-1: config 0 descriptor?? [ 231.126782][ T5864] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 231.149982][ T5864] usb 4-1: Detected FT232R [ 231.413004][ T7926] netlink: 20 bytes leftover after parsing attributes in process `syz.5.500'. [ 231.539269][ T5834] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 231.959773][ T7930] 9pnet_fd: Insufficient options for proto=fd [ 232.294623][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 232.294640][ T30] audit: type=1400 audit(1744338241.961:504): avc: denied { ioctl } for pid=7935 comm="syz.4.505" path="socket:[17672]" dev="sockfs" ino=17672 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 234.089424][ T5864] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 234.178543][ T7959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7959 comm=syz.2.507 [ 234.617170][ T5864] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 234.709153][ T5864] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 234.775972][ T7959] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 234.785092][ T7959] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 234.790478][ T5864] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 234.879215][ T5864] usb 4-1: USB disconnect, device number 19 [ 234.973956][ T5864] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 235.042112][ T5864] ftdi_sio 4-1:0.0: device disconnected [ 235.662701][ T5903] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 235.839384][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 235.873943][ T5903] usb 3-1: config 0 has an invalid interface number: 244 but max is 3 [ 235.911799][ T5903] usb 3-1: config 0 has an invalid interface number: 162 but max is 3 [ 235.957051][ T5903] usb 3-1: config 0 has an invalid interface number: 12 but max is 3 [ 235.983815][ T5903] usb 3-1: config 0 has an invalid interface number: 114 but max is 3 [ 236.023876][ T5903] usb 3-1: config 0 has no interface number 0 [ 236.044116][ T5903] usb 3-1: config 0 has no interface number 1 [ 236.069058][ T5903] usb 3-1: config 0 has no interface number 2 [ 236.104271][ T5903] usb 3-1: config 0 has no interface number 3 [ 236.132130][ T5903] usb 3-1: config 0 interface 244 altsetting 255 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 236.219669][ T5903] usb 3-1: config 0 interface 244 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 236.497728][ T5903] usb 3-1: config 0 interface 244 altsetting 255 endpoint 0xF has invalid wMaxPacketSize 0 [ 236.545417][ T5903] usb 3-1: config 0 interface 244 altsetting 255 bulk endpoint 0xF has invalid maxpacket 0 [ 236.632722][ T5903] usb 3-1: config 0 interface 244 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 236.679067][ T5903] usb 3-1: config 0 interface 244 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 236.697118][ T5903] usb 3-1: config 0 interface 244 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 236.739219][ T5903] usb 3-1: config 0 interface 162 altsetting 129 has a duplicate endpoint with address 0x2, skipping [ 236.759850][ T5903] usb 3-1: config 0 interface 12 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 236.774725][ T5903] usb 3-1: config 0 interface 12 altsetting 7 endpoint 0xB has invalid maxpacket 112, setting to 64 [ 236.788025][ T5903] usb 3-1: config 0 interface 12 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 236.799371][ T5903] usb 3-1: config 0 interface 12 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 236.810479][ T5903] usb 3-1: config 0 interface 12 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 236.821528][ T5903] usb 3-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 236.833048][ T5903] usb 3-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 236.844860][ T5903] usb 3-1: config 0 interface 114 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 236.857170][ T5903] usb 3-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0xA, skipping [ 236.869586][ T5903] usb 3-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 236.888938][ T5903] usb 3-1: config 0 interface 244 has no altsetting 0 [ 236.899241][ T5903] usb 3-1: config 0 interface 162 has no altsetting 0 [ 236.907153][ T5903] usb 3-1: config 0 interface 12 has no altsetting 0 [ 236.916162][ T5903] usb 3-1: config 0 interface 114 has no altsetting 0 [ 236.938606][ T5903] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff52, bcdDevice=62.51 [ 236.949318][ T52] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 236.958129][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.979212][ T5903] usb 3-1: Product: syz [ 236.993614][ T5903] usb 3-1: Manufacturer: syz [ 237.003730][ T5903] usb 3-1: SerialNumber: syz [ 237.016704][ T5903] usb 3-1: config 0 descriptor?? [ 237.022026][ T7995] 9pnet_fd: Insufficient options for proto=fd [ 237.109284][ T52] usb 6-1: Using ep0 maxpacket: 16 [ 237.121391][ T52] usb 6-1: unable to get BOS descriptor or descriptor too short [ 237.136615][ T52] usb 6-1: config 5 has an invalid interface number: 29 but max is 0 [ 237.144835][ T52] usb 6-1: config 5 has no interface number 0 [ 237.151294][ T52] usb 6-1: config 5 interface 29 altsetting 15 endpoint 0xA has an invalid bInterval 255, changing to 11 [ 237.163384][ T52] usb 6-1: config 5 interface 29 altsetting 15 endpoint 0xA has invalid maxpacket 59391, setting to 1024 [ 237.176359][ T52] usb 6-1: config 5 interface 29 has no altsetting 0 [ 237.185722][ T52] usb 6-1: New USB device found, idVendor=05ac, idProduct=8601, bcdDevice= 0.00 [ 237.194897][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.203052][ T52] usb 6-1: SerialNumber: syz [ 237.242027][ T7988] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 237.501717][ T52] usb 6-1: Found UVC 0.00 device (05ac:8601) [ 237.508794][ T52] usb 6-1: No valid video chain found. [ 237.536231][ T52] usb 6-1: USB disconnect, device number 4 [ 237.900672][ T8005] veth0_vlan: entered allmulticast mode [ 237.953668][ T8005] veth0_vlan: left promiscuous mode [ 237.962877][ T8005] veth0_vlan: entered promiscuous mode [ 238.413116][ T5903] option 3-1:0.244: GSM modem (1-port) converter detected [ 238.475271][ T5903] usb 3-1: USB disconnect, device number 14 [ 238.503119][ T5903] option 3-1:0.244: device disconnected [ 238.686169][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.521'. [ 238.804653][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'. [ 238.810978][ T8018] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 238.813602][ T30] audit: type=1400 audit(1744338248.471:505): avc: denied { relabelfrom } for pid=8009 comm="syz.2.519" name="" dev="pipefs" ino=17772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 238.888050][ T30] audit: type=1400 audit(1744338248.521:506): avc: denied { relabelto } for pid=8009 comm="syz.2.519" name="" dev="pipefs" ino=17772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:man_t:s0" [ 239.163179][ T8044] netlink: 44 bytes leftover after parsing attributes in process `syz.3.526'. [ 239.991104][ T8047] syz.4.525 (8047) used greatest stack depth: 21256 bytes left [ 240.099083][ T30] audit: type=1400 audit(1744338249.761:507): avc: denied { connect } for pid=8043 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 240.198821][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.527'. [ 240.211003][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 240.216472][ T8051] ipvlan2: entered promiscuous mode [ 240.226950][ T30] audit: type=1400 audit(1744338249.901:508): avc: denied { write } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.228909][ T8051] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 240.256226][ T8051] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 240.277026][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'. [ 240.322251][ T30] audit: type=1400 audit(1744338249.901:509): avc: denied { remove_name } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.348729][ T30] audit: type=1400 audit(1744338249.901:510): avc: denied { add_name } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.789332][ T5872] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 240.964929][ T30] audit: type=1400 audit(1744338250.631:511): avc: denied { append } for pid=8064 comm="syz.3.530" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 241.081637][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 241.463980][ T5872] usb 6-1: config 0 has an invalid interface number: 244 but max is 3 [ 242.318730][ T5872] usb 6-1: config 0 has an invalid interface number: 162 but max is 3 [ 242.333644][ T5872] usb 6-1: config 0 has an invalid interface number: 12 but max is 3 [ 242.345727][ T5872] usb 6-1: config 0 has an invalid interface number: 114 but max is 3 [ 242.359093][ T5872] usb 6-1: config 0 has no interface number 0 [ 242.365250][ T5872] usb 6-1: config 0 has no interface number 1 [ 242.372303][ T5872] usb 6-1: config 0 has no interface number 2 [ 242.379279][ T5872] usb 6-1: config 0 has no interface number 3 [ 242.389791][ T5872] usb 6-1: config 0 interface 244 altsetting 255 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 242.401424][ T5872] usb 6-1: config 0 interface 244 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 242.457605][ T5872] usb 6-1: config 0 interface 244 altsetting 255 endpoint 0xF has invalid wMaxPacketSize 0 [ 242.515561][ T5872] usb 6-1: config 0 interface 244 altsetting 255 bulk endpoint 0xF has invalid maxpacket 0 [ 242.527172][ T5872] usb 6-1: config 0 interface 244 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 242.589407][ T5872] usb 6-1: config 0 interface 244 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.653274][ T5872] usb 6-1: config 0 interface 244 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 242.799435][ T5903] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 242.843467][ T5872] usb 6-1: config 0 interface 162 altsetting 129 has a duplicate endpoint with address 0x2, skipping [ 242.906971][ T5872] usb 6-1: config 0 interface 12 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 242.962548][ T5903] usb 4-1: config 0 has no interfaces? [ 242.974149][ T5903] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 242.983641][ T5872] usb 6-1: config 0 interface 12 altsetting 7 endpoint 0xB has invalid maxpacket 112, setting to 64 [ 242.984042][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.016830][ T5872] usb 6-1: config 0 interface 12 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 243.024609][ T5903] usb 4-1: Product: syz [ 243.053675][ T5872] usb 6-1: config 0 interface 12 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 243.055445][ T5903] usb 4-1: Manufacturer: syz [ 243.070884][ T5872] usb 6-1: config 0 interface 12 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 243.099358][ T5872] usb 6-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 243.130624][ T5872] usb 6-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 243.160925][ T5872] usb 6-1: config 0 interface 114 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 243.189034][ T5903] usb 4-1: SerialNumber: syz [ 243.214079][ T5903] usb 4-1: config 0 descriptor?? [ 243.235098][ T5872] usb 6-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0xA, skipping [ 243.260642][ T5872] usb 6-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 243.271624][ T5872] usb 6-1: config 0 interface 244 has no altsetting 0 [ 243.280544][ T5872] usb 6-1: config 0 interface 162 has no altsetting 0 [ 243.289287][ T5872] usb 6-1: config 0 interface 12 has no altsetting 0 [ 243.301051][ T5872] usb 6-1: config 0 interface 114 has no altsetting 0 [ 243.371075][ T5872] usb 6-1: string descriptor 0 read error: -71 [ 243.377558][ T5872] usb 6-1: New USB device found, idVendor=19d2, idProduct=ff52, bcdDevice=62.51 [ 243.399069][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.433542][ T5872] usb 6-1: config 0 descriptor?? [ 243.440682][ T5872] usb 6-1: can't set config #0, error -71 [ 243.450257][ T5872] usb 6-1: USB disconnect, device number 5 [ 243.526104][ T8097] libceph: resolve '.' (ret=-3): failed [ 243.764782][ T30] audit: type=1400 audit(1744338253.221:512): avc: denied { setopt } for pid=8094 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 244.719556][ T30] audit: type=1400 audit(1744338254.391:513): avc: denied { execute } for pid=8103 comm="syz.1.536" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 244.954527][ T8117] netlink: 'syz.5.537': attribute type 1 has an invalid length. [ 245.137569][ T30] audit: type=1400 audit(1744338254.801:514): avc: denied { connect } for pid=8126 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.219164][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.540'. [ 245.667688][ T30] audit: type=1400 audit(1744338255.331:515): avc: denied { create } for pid=8134 comm="syz.4.542" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 245.723900][ T30] audit: type=1400 audit(1744338255.341:516): avc: denied { write } for pid=8134 comm="syz.4.542" name="file0" dev="tmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 245.785260][ T30] audit: type=1400 audit(1744338255.341:517): avc: denied { open } for pid=8134 comm="syz.4.542" path="/130/file0" dev="tmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 245.828436][ T30] audit: type=1400 audit(1744338255.441:518): avc: denied { setopt } for pid=8134 comm="syz.4.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 246.259043][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 246.416787][ T5903] usb 4-1: USB disconnect, device number 20 [ 246.439238][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 246.455294][ T10] usb 6-1: config 0 has an invalid interface number: 244 but max is 3 [ 246.469080][ T10] usb 6-1: config 0 has an invalid interface number: 162 but max is 3 [ 246.477276][ T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 3 [ 246.498721][ T10] usb 6-1: config 0 has an invalid interface number: 114 but max is 3 [ 246.626443][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'. [ 246.826109][ T10] usb 6-1: config 0 has no interface number 0 [ 246.882238][ T10] usb 6-1: config 0 has no interface number 1 [ 246.888391][ T10] usb 6-1: config 0 has no interface number 2 [ 246.920575][ T10] usb 6-1: config 0 has no interface number 3 [ 246.935973][ T10] usb 6-1: config 0 interface 244 altsetting 255 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 246.964209][ T10] usb 6-1: config 0 interface 244 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 246.990951][ T10] usb 6-1: config 0 interface 244 altsetting 255 endpoint 0xF has invalid wMaxPacketSize 0 [ 247.039317][ T10] usb 6-1: config 0 interface 244 altsetting 255 bulk endpoint 0xF has invalid maxpacket 0 [ 247.090577][ T10] usb 6-1: config 0 interface 244 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 247.135126][ T10] usb 6-1: config 0 interface 244 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.158788][ T10] usb 6-1: config 0 interface 244 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.173241][ T10] usb 6-1: config 0 interface 162 altsetting 129 has a duplicate endpoint with address 0x2, skipping [ 247.184515][ T10] usb 6-1: config 0 interface 12 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 247.233931][ T10] usb 6-1: config 0 interface 12 altsetting 7 endpoint 0xB has invalid maxpacket 112, setting to 64 [ 247.246630][ T10] usb 6-1: config 0 interface 12 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 247.276737][ T10] usb 6-1: config 0 interface 12 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 247.308674][ T10] usb 6-1: config 0 interface 12 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 247.343153][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.351469][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.365673][ T10] usb 6-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 247.387953][ T10] usb 6-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 247.432581][ T10] usb 6-1: config 0 interface 114 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 247.460713][ T10] usb 6-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0xA, skipping [ 247.471991][ T10] usb 6-1: config 0 interface 114 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 247.497891][ T10] usb 6-1: config 0 interface 244 has no altsetting 0 [ 247.523484][ T10] usb 6-1: config 0 interface 162 has no altsetting 0 [ 247.527180][ T8168] can0: slcan on ptm0. [ 247.535539][ T10] usb 6-1: config 0 interface 12 has no altsetting 0 [ 247.543416][ T10] usb 6-1: config 0 interface 114 has no altsetting 0 [ 247.594823][ T30] audit: type=1400 audit(1744338257.261:519): avc: denied { listen } for pid=8172 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 247.653039][ T10] usb 6-1: New USB device found, idVendor=19d2, idProduct=ff52, bcdDevice=62.51 [ 247.669876][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.688372][ T30] audit: type=1400 audit(1744338257.351:520): avc: denied { accept } for pid=8172 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 247.718481][ T10] usb 6-1: Product: syz [ 247.729372][ T10] usb 6-1: Manufacturer: syz [ 247.751154][ T10] usb 6-1: SerialNumber: syz [ 247.807080][ T30] audit: type=1400 audit(1744338257.421:521): avc: denied { write } for pid=8172 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 247.852279][ T10] usb 6-1: config 0 descriptor?? [ 247.910334][ T8167] can0 (unregistered): slcan off ptm0. [ 248.154616][ T8186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.550'. [ 248.166338][ T8186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.550'. [ 248.717128][ T8192] FAULT_INJECTION: forcing a failure. [ 248.717128][ T8192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.736894][ T8192] CPU: 1 UID: 0 PID: 8192 Comm: syz.2.552 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 248.736919][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 248.736929][ T8192] Call Trace: [ 248.736935][ T8192] [ 248.736941][ T8192] dump_stack_lvl+0x16c/0x1f0 [ 248.736967][ T8192] should_fail_ex+0x512/0x640 [ 248.736990][ T8192] _copy_from_user+0x2e/0xd0 [ 248.737010][ T8192] copy_msghdr_from_user+0x98/0x160 [ 248.737032][ T8192] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 248.737063][ T8192] ___sys_sendmsg+0xfe/0x1d0 [ 248.737083][ T8192] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.737131][ T8192] __sys_sendmsg+0x16d/0x220 [ 248.737151][ T8192] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.737178][ T8192] ? rcu_is_watching+0x12/0xc0 [ 248.737205][ T8192] do_syscall_64+0xcd/0x260 [ 248.737228][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.737244][ T8192] RIP: 0033:0x7f66a458d169 [ 248.737257][ T8192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.737272][ T8192] RSP: 002b:00007f66a5457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.737287][ T8192] RAX: ffffffffffffffda RBX: 00007f66a47a5fa0 RCX: 00007f66a458d169 [ 248.737298][ T8192] RDX: 0000000000000004 RSI: 0000200000000440 RDI: 0000000000000004 [ 248.737307][ T8192] RBP: 00007f66a5457090 R08: 0000000000000000 R09: 0000000000000000 [ 248.737322][ T8192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.737331][ T8192] R13: 0000000000000000 R14: 00007f66a47a5fa0 R15: 00007fffb8bf6578 [ 248.737353][ T8192] [ 249.153106][ T10] option 6-1:0.244: GSM modem (1-port) converter detected [ 249.293885][ T8197] syz.3.551 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 249.309134][ T5871] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 249.555526][ T5871] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.570703][ T10] usb 6-1: USB disconnect, device number 6 [ 250.494055][ T10] option 6-1:0.244: device disconnected [ 250.601675][ T5871] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 250.611856][ T5871] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 250.621052][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.655371][ T8196] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 250.677090][ T5871] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 250.747944][ T8209] xfrm0: entered promiscuous mode [ 250.840504][ T30] audit: type=1400 audit(1744338260.501:522): avc: denied { search } for pid=5490 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=18439 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 250.929713][ T5903] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 251.059391][ T92] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 251.110600][ T5871] usb 3-1: USB disconnect, device number 15 [ 251.115422][ T5903] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.149070][ T5903] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.205556][ T5903] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 251.233794][ T92] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.264236][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.279155][ T92] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.319295][ T92] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 251.348780][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.457407][ T8240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.527464][ T5903] usb 2-1: usb_control_msg returned -32 [ 251.548350][ T5903] usbtmc 2-1:16.0: can't read capabilities [ 251.589568][ T10] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 251.682402][ T92] usb 5-1: usb_control_msg returned -32 [ 251.734424][ T92] usbtmc 5-1:16.0: can't read capabilities [ 251.799261][ T10] usb 4-1: device descriptor read/64, error -71 [ 252.069199][ T10] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 252.383739][ T10] usb 4-1: device descriptor read/64, error -71 [ 252.433020][ T30] audit: type=1400 audit(1744338262.011:523): avc: denied { read } for pid=8218 comm="syz.4.557" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 252.606237][ T10] usb usb4-port1: attempt power cycle [ 253.069360][ T10] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 253.108339][ T10] usb 4-1: device descriptor read/8, error -71 [ 253.454971][ T10] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 253.963369][ T10] usb 4-1: device descriptor read/8, error -71 [ 254.012816][ T92] usb 5-1: USB disconnect, device number 13 [ 254.125504][ T10] usb usb4-port1: unable to enumerate USB device [ 254.834587][ T5871] usb 2-1: USB disconnect, device number 12 [ 255.011696][ T8274] syz.4.563: attempt to access beyond end of device [ 255.011696][ T8274] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 255.029486][ T8274] hfsplus: unable to find HFS+ superblock [ 255.269118][ T30] audit: type=1400 audit(1744338264.701:524): avc: denied { setattr } for pid=8265 comm="syz.4.563" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 255.294880][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.301669][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.382410][ T92] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 255.403286][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.566'. [ 255.429653][ T8286] xfrm0: entered promiscuous mode [ 255.456361][ T30] audit: type=1400 audit(1744338265.091:525): avc: denied { allowed } for pid=8282 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 255.597608][ T30] audit: type=1400 audit(1744338265.121:526): avc: denied { create } for pid=8282 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 255.619678][ T92] usb 4-1: Using ep0 maxpacket: 32 [ 255.671068][ T92] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 256.484228][ T92] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 256.537379][ T30] audit: type=1400 audit(1744338265.331:527): avc: denied { connect } for pid=8288 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 257.073527][ T92] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 257.083734][ T92] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 257.099192][ T92] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.109506][ T92] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 257.122593][ T92] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 257.148781][ T92] usb 4-1: Product: syz [ 257.177123][ T92] usb 4-1: Manufacturer: syz [ 257.201537][ T92] usb 4-1: SerialNumber: syz [ 257.301950][ T92] usb 4-1: config 0 descriptor?? [ 257.309122][ T92] ldusb 4-1:0.0: Interrupt in endpoint not found [ 257.737909][ T8314] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 257.758101][ T92] usb 4-1: USB disconnect, device number 25 [ 258.949290][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 258.957039][ T92] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 259.130220][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.159068][ T92] usb 5-1: Using ep0 maxpacket: 8 [ 259.178600][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.201904][ T92] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 259.220582][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 259.231283][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.249118][ T92] usb 5-1: Product: syz [ 259.259634][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.305009][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.577'. [ 259.319261][ T92] usb 5-1: Manufacturer: syz [ 259.325288][ T92] usb 5-1: SerialNumber: syz [ 259.346094][ T10] usb 3-1: config 0 descriptor?? [ 259.429382][ T92] usb 5-1: config 0 descriptor?? [ 259.663877][ T92] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 259.828136][ T10] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 259.838490][ T10] arvo 0003:1E7D:30D4.000F: item fetching failed at offset 6/7 [ 259.865664][ T92] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 259.877032][ T10] arvo 0003:1E7D:30D4.000F: parse failed [ 259.886050][ T10] arvo 0003:1E7D:30D4.000F: probe with driver arvo failed with error -22 [ 259.983583][ T8367] FAULT_INJECTION: forcing a failure. [ 259.983583][ T8367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.000976][ T8367] CPU: 0 UID: 0 PID: 8367 Comm: syz.3.580 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 260.001000][ T8367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.001010][ T8367] Call Trace: [ 260.001015][ T8367] [ 260.001021][ T8367] dump_stack_lvl+0x16c/0x1f0 [ 260.001052][ T8367] should_fail_ex+0x512/0x640 [ 260.001074][ T8367] _copy_from_user+0x2e/0xd0 [ 260.001094][ T8367] copy_msghdr_from_user+0x98/0x160 [ 260.001114][ T8367] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 260.001146][ T8367] ___sys_sendmsg+0xfe/0x1d0 [ 260.001166][ T8367] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.001214][ T8367] __sys_sendmsg+0x16d/0x220 [ 260.001239][ T8367] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.001266][ T8367] ? rcu_is_watching+0x12/0xc0 [ 260.001294][ T8367] do_syscall_64+0xcd/0x260 [ 260.001317][ T8367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.001334][ T8367] RIP: 0033:0x7f9e0778d169 [ 260.001346][ T8367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.001362][ T8367] RSP: 002b:00007f9e0850a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.001379][ T8367] RAX: ffffffffffffffda RBX: 00007f9e079a5fa0 RCX: 00007f9e0778d169 [ 260.001389][ T8367] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 260.001398][ T8367] RBP: 00007f9e0850a090 R08: 0000000000000000 R09: 0000000000000000 [ 260.001408][ T8367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.001417][ T8367] R13: 0000000000000000 R14: 00007f9e079a5fa0 R15: 00007fff8d69a748 [ 260.001438][ T8367] [ 260.196352][ T5864] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 260.547194][ T8329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.820308][ T8329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.846640][ T8379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.932627][ T5864] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 260.944723][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.980584][ T8379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.008373][ T5864] usb 6-1: Product: syz [ 261.016725][ T5864] usb 6-1: Manufacturer: syz [ 261.033534][ T5864] usb 6-1: SerialNumber: syz [ 261.042834][ T10] usb 3-1: USB disconnect, device number 16 [ 261.140307][ T8386] xfrm0: entered promiscuous mode [ 261.172855][ T5864] usb 6-1: config 0 descriptor?? [ 261.271678][ T30] audit: type=1400 audit(1744338270.941:528): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 261.996601][ T5864] usb 6-1: Firmware version (0.0) predates our first public release. [ 262.045966][ T5864] usb 6-1: Please update to version 0.2 or newer [ 262.159725][ T5864] usb 6-1: Firmware: build [ 262.611677][ T92] usb 5-1: USB disconnect, device number 14 [ 263.331085][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 264.417189][ T5864] usb 6-1: USB disconnect, device number 7 [ 264.512146][ T30] audit: type=1400 audit(1744338274.181:529): avc: denied { watch } for pid=8407 comm="syz.4.587" path="/138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 264.931478][ T30] audit: type=1400 audit(1744338274.181:530): avc: denied { watch_sb watch_reads } for pid=8407 comm="syz.4.587" path="/138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 265.330104][ T30] audit: type=1400 audit(1744338274.431:531): avc: denied { write } for pid=8414 comm="syz.5.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 265.350263][ T30] audit: type=1400 audit(1744338274.491:532): avc: denied { create } for pid=8407 comm="syz.4.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 265.369659][ T30] audit: type=1400 audit(1744338274.491:533): avc: denied { ioctl } for pid=8407 comm="syz.4.587" path="socket:[18820]" dev="sockfs" ino=18820 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 265.403384][ T30] audit: type=1326 audit(1744338274.801:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.5.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c91d8d169 code=0x7fc00000 [ 266.520357][ T30] audit: type=1326 audit(1744338275.071:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.5.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7c91d8d169 code=0x7fc00000 [ 266.545971][ T30] audit: type=1326 audit(1744338275.071:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.5.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c91d8d169 code=0x7fc00000 [ 266.570128][ T30] audit: type=1326 audit(1744338275.071:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.5.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c91d8d169 code=0x7fc00000 [ 266.593928][ T30] audit: type=1326 audit(1744338275.071:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.5.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c91d8d169 code=0x7fc00000 [ 266.680456][ T8433] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 266.905061][ T8440] tipc: Started in network mode [ 266.910056][ T8440] tipc: Node identity ac14140f, cluster identity 4711 [ 266.917782][ T8440] tipc: New replicast peer: 255.255.255.255 [ 266.924623][ T8440] tipc: Enabled bearer , priority 10 [ 268.077295][ T5873] tipc: Node number set to 2886997007 [ 268.659101][ T5873] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 268.819181][ T5873] usb 4-1: device descriptor read/64, error -71 [ 269.130585][ T5873] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 269.309304][ T8473] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 269.315838][ T8473] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 269.372012][ T8473] vhci_hcd vhci_hcd.0: Device attached [ 269.495176][ T5873] usb 4-1: device descriptor read/64, error -71 [ 269.576818][ T8485] @: renamed from vlan0 (while UP) [ 270.044512][ T5903] vhci_hcd: vhci_device speed not set [ 270.109218][ T92] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 270.133486][ T5903] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 270.249328][ T5873] usb usb4-port1: attempt power cycle [ 270.600722][ T5873] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 270.719853][ T5873] usb 4-1: device descriptor read/8, error -71 [ 270.795905][ T8495] use of bytesused == 0 is deprecated and will be removed in the future, [ 270.815865][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.612'. [ 270.849335][ T8495] use the actual size instead. [ 270.872579][ T8498] ipvlan2: entered promiscuous mode [ 270.888972][ T8498] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 270.911560][ T8498] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 270.971912][ T5873] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 271.209509][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 271.216304][ T92] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 271.236311][ T92] usb 2-1: config 0 has no interface number 0 [ 271.268729][ T92] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 271.277948][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.301884][ T5873] usb 4-1: device descriptor read/8, error -71 [ 271.317567][ T92] usb 2-1: Product: syz [ 271.329043][ T92] usb 2-1: Manufacturer: syz [ 271.333647][ T92] usb 2-1: SerialNumber: syz [ 271.626815][ T52] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 271.636182][ T5873] usb usb4-port1: unable to enumerate USB device [ 271.789560][ T92] usb 2-1: config 0 descriptor?? [ 271.820750][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 272.263821][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 272.279159][ T8519] 9pnet_fd: Insufficient options for proto=fd [ 272.291256][ T92] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 272.305932][ T92] usb 2-1: No streaming interface found for terminal 6. [ 272.309902][ T52] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 272.381353][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.395744][ T52] usb 3-1: Product: syz [ 272.400050][ T52] usb 3-1: Manufacturer: syz [ 272.431018][ T52] usb 3-1: SerialNumber: syz [ 272.442525][ T52] usb 3-1: config 0 descriptor?? [ 272.454551][ T52] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 272.609226][ T8473] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 272.647081][ T5871] usb 2-1: USB disconnect, device number 13 [ 273.421754][ T8474] vhci_hcd: connection reset by peer [ 273.479078][ T1160] vhci_hcd: stop threads [ 273.483350][ T1160] vhci_hcd: release socket [ 273.527742][ T1160] vhci_hcd: disconnect device [ 274.976244][ T52] usb 3-1: USB disconnect, device number 17 [ 275.339203][ T5903] vhci_hcd: vhci_device speed not set [ 275.737371][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.828476][ T8555] batadv_slave_1: entered promiscuous mode [ 275.977287][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 277.138841][ T8555] team0: Port device team_slave_1 removed [ 277.228284][ T92] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 277.780263][ T8554] batadv_slave_1: left promiscuous mode [ 277.786910][ T8578] syz.4.628: attempt to access beyond end of device [ 277.786910][ T8578] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 278.140103][ T92] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 278.193688][ T92] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.209809][ T92] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 278.232159][ T92] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.245792][ T92] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 278.263599][ T5903] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 278.274281][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.282781][ T8591] capability: warning: `syz.4.631' uses 32-bit capabilities (legacy support in use) [ 278.296781][ T8591] sg_read: process 520 (syz.4.631) changed security contexts after opening file descriptor, this is not allowed. [ 278.311713][ T92] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 278.320268][ T92] usb 4-1: invalid MIDI out EP 0 [ 278.329264][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.632'. [ 278.354060][ T8593] vxcan3: entered promiscuous mode [ 278.401849][ T92] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 278.441757][ T5903] usb 6-1: Using ep0 maxpacket: 8 [ 278.455213][ T5903] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 278.471425][ T5903] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 278.476441][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.486654][ T5903] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.594825][ T5871] usb 4-1: USB disconnect, device number 30 [ 278.948863][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 278.948878][ T30] audit: type=1400 audit(1744338288.611:567): avc: denied { read write } for pid=8600 comm="syz.1.635" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.044953][ T8603] tipc: Disabling bearer [ 279.063154][ T30] audit: type=1400 audit(1744338288.611:568): avc: denied { open } for pid=8600 comm="syz.1.635" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.110723][ T8603] sp0: Synchronizing with TNC [ 279.175957][ T30] audit: type=1400 audit(1744338288.661:569): avc: denied { map } for pid=8600 comm="syz.1.635" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.355540][ T8610] fuseblk: Bad value for 'user_id' [ 279.461110][ T5903] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.463502][ T30] audit: type=1400 audit(1744338289.131:570): avc: denied { append } for pid=8600 comm="syz.1.635" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.472852][ T5903] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.508378][ T5903] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 279.546771][ T5903] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 279.559243][ T5903] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.571310][ T5903] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.585403][ T5903] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.598491][ T8610] fuseblk: Bad value for 'user_id' [ 279.605534][ T5903] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 279.637316][ T5903] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 279.696604][ T8610] xt_hashlimit: size too large, truncated to 1048576 [ 279.718150][ T5903] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.741127][ T8610] xt_hashlimit: max too large, truncated to 1048576 [ 279.843584][ T5903] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.949443][ T5903] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 280.094811][ T5903] usb 6-1: string descriptor 0 read error: -22 [ 280.140935][ T5903] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 280.225721][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.292946][ T5903] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 280.519147][ T5903] kernel write not supported for file /input/event2 (pid: 5903 comm: kworker/0:5) [ 281.017810][ T5871] usb 6-1: USB disconnect, device number 8 [ 282.598889][ T30] audit: type=1400 audit(1744338292.251:571): avc: denied { write } for pid=8647 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 282.619067][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.904523][ T30] audit: type=1400 audit(1744338292.251:572): avc: denied { nlmsg_read } for pid=8647 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 282.925350][ T30] audit: type=1400 audit(1744338292.401:573): avc: denied { write } for pid=8647 comm="syz.1.647" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 284.012213][ T30] audit: type=1400 audit(1744338293.681:574): avc: denied { map } for pid=8657 comm="syz.3.652" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 284.036042][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.049315][ T30] audit: type=1400 audit(1744338293.681:575): avc: denied { execute } for pid=8657 comm="syz.3.652" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 284.739408][ T30] audit: type=1400 audit(1744338294.381:576): avc: denied { map_create } for pid=8659 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 284.798484][ T30] audit: type=1400 audit(1744338294.381:577): avc: denied { prog_load } for pid=8659 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 284.817381][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.849940][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 284.861866][ T30] audit: type=1400 audit(1744338294.381:578): avc: denied { bpf } for pid=8659 comm="syz.2.650" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 284.883260][ T30] audit: type=1400 audit(1744338294.381:579): avc: denied { write } for pid=8667 comm="syz.1.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 284.906383][ T30] audit: type=1400 audit(1744338294.391:580): avc: denied { read write } for pid=7368 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.939562][ T30] audit: type=1400 audit(1744338294.391:581): avc: denied { open } for pid=7368 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.941119][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 284.968246][ T30] audit: type=1400 audit(1744338294.391:582): avc: denied { ioctl } for pid=7368 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.033157][ T8677] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 285.047765][ T30] audit: type=1400 audit(1744338294.431:583): avc: denied { read } for pid=8667 comm="syz.1.653" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 286.981905][ T92] kernel write not supported for file /input/event2 (pid: 92 comm: kworker/0:2) [ 287.102368][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 287.118343][ T8704] netlink: 'syz.2.658': attribute type 1 has an invalid length. [ 289.228503][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 289.228518][ T30] audit: type=1400 audit(1744338298.891:648): avc: denied { write } for pid=8732 comm="syz.1.671" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 289.267195][ T30] audit: type=1400 audit(1744338298.891:649): avc: denied { open } for pid=8732 comm="syz.1.671" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 289.347078][ T30] audit: type=1400 audit(1744338299.011:650): avc: denied { name_bind } for pid=8732 comm="syz.1.671" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 289.368539][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.449860][ T30] audit: type=1400 audit(1744338299.011:651): avc: denied { node_bind } for pid=8732 comm="syz.1.671" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 289.471416][ T30] audit: type=1400 audit(1744338299.081:652): avc: denied { ioctl } for pid=8732 comm="syz.1.671" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 289.477994][ T8740] vlan2: entered promiscuous mode [ 289.614050][ T30] audit: type=1400 audit(1744338299.281:653): avc: denied { read } for pid=8738 comm="syz.2.672" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 289.637602][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.637876][ T8740] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 289.704631][ T5903] kernel write not supported for file /input/event2 (pid: 5903 comm: kworker/0:5) [ 289.723124][ T30] audit: type=1400 audit(1744338299.281:654): avc: denied { open } for pid=8738 comm="syz.2.672" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 289.848253][ T8747] syz.4.675: attempt to access beyond end of device [ 289.848253][ T8747] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 289.949687][ T8747] hpfs: hpfs_map_sector(): read error [ 290.764281][ T30] audit: type=1400 audit(1744338299.281:655): avc: denied { ioctl } for pid=8738 comm="syz.2.672" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 290.806531][ T30] audit: type=1400 audit(1744338299.281:656): avc: denied { create } for pid=8738 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 290.829346][ T30] audit: type=1400 audit(1744338299.341:657): avc: denied { map } for pid=8715 comm="syz.5.666" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 291.238906][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 291.742347][ T8757] ipvlan2: entered promiscuous mode [ 291.777001][ T8757] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 291.803974][ T8765] [ 291.806317][ T8765] ====================================================== [ 291.813320][ T8765] WARNING: possible circular locking dependency detected [ 291.820322][ T8765] 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 Not tainted [ 291.827417][ T8765] ------------------------------------------------------ [ 291.834421][ T8765] syz.2.672/8765 is trying to acquire lock: [ 291.840295][ T8765] ffffffff9012bda8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x1843/0x2220 [ 291.849338][ T8765] [ 291.849338][ T8765] but task is already holding lock: [ 291.856685][ T8765] ffff88802aed9628 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0xbc/0x370 [ 291.866684][ T8765] [ 291.866684][ T8765] which lock already depends on the new lock. [ 291.866684][ T8765] [ 291.877073][ T8765] [ 291.877073][ T8765] the existing dependency chain (in reverse order) is: [ 291.886073][ T8765] [ 291.886073][ T8765] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 291.894674][ T8765] __mutex_lock+0x199/0xb90 [ 291.899705][ T8765] smc_switch_to_fallback+0x2d/0x9f0 [ 291.905514][ T8765] smc_sendmsg+0x13d/0x520 [ 291.910442][ T8765] __sys_sendto+0x495/0x510 [ 291.915462][ T8765] __x64_sys_sendto+0xe0/0x1c0 [ 291.920742][ T8765] do_syscall_64+0xcd/0x260 [ 291.925767][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.932172][ T8765] [ 291.932172][ T8765] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 291.939820][ T8765] lock_sock_nested+0x41/0xf0 [ 291.945017][ T8765] sockopt_lock_sock+0x54/0x70 [ 291.950294][ T8765] do_ip_setsockopt+0xfe/0x3240 [ 291.955665][ T8765] ip_setsockopt+0x59/0xf0 [ 291.960601][ T8765] raw_setsockopt+0xb7/0x2a0 [ 291.965701][ T8765] do_sock_setsockopt+0x221/0x470 [ 291.971252][ T8765] __sys_setsockopt+0x1a0/0x230 [ 291.976623][ T8765] __x64_sys_setsockopt+0xbd/0x160 [ 291.982249][ T8765] do_syscall_64+0xcd/0x260 [ 291.987274][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.993684][ T8765] [ 291.993684][ T8765] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 292.000896][ T8765] __lock_acquire+0x1173/0x1ba0 [ 292.006260][ T8765] lock_acquire+0x179/0x350 [ 292.011276][ T8765] __mutex_lock+0x199/0xb90 [ 292.016299][ T8765] do_ip_getsockopt+0x1843/0x2220 [ 292.021838][ T8765] ip_getsockopt+0x9b/0x1e0 [ 292.026853][ T8765] tcp_getsockopt+0x9e/0x100 [ 292.031958][ T8765] smc_getsockopt+0x162/0x370 [ 292.037149][ T8765] do_sock_getsockopt+0x3fc/0x800 [ 292.042694][ T8765] __sys_getsockopt+0x12f/0x260 [ 292.048061][ T8765] __x64_sys_getsockopt+0xbd/0x160 [ 292.053696][ T8765] do_syscall_64+0xcd/0x260 [ 292.058728][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.065144][ T8765] [ 292.065144][ T8765] other info that might help us debug this: [ 292.065144][ T8765] [ 292.075348][ T8765] Chain exists of: [ 292.075348][ T8765] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 292.075348][ T8765] [ 292.088880][ T8765] Possible unsafe locking scenario: [ 292.088880][ T8765] [ 292.096302][ T8765] CPU0 CPU1 [ 292.101644][ T8765] ---- ---- [ 292.106984][ T8765] lock(&smc->clcsock_release_lock); [ 292.112334][ T8765] lock(sk_lock-AF_INET); [ 292.119247][ T8765] lock(&smc->clcsock_release_lock); [ 292.127113][ T8765] lock(rtnl_mutex); [ 292.131073][ T8765] [ 292.131073][ T8765] *** DEADLOCK *** [ 292.131073][ T8765] [ 292.139189][ T8765] 1 lock held by syz.2.672/8765: [ 292.144104][ T8765] #0: ffff88802aed9628 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0xbc/0x370 [ 292.154517][ T8765] [ 292.154517][ T8765] stack backtrace: [ 292.160382][ T8765] CPU: 0 UID: 0 PID: 8765 Comm: syz.2.672 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 292.160399][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 292.160406][ T8765] Call Trace: [ 292.160411][ T8765] [ 292.160416][ T8765] dump_stack_lvl+0x116/0x1f0 [ 292.160434][ T8765] print_circular_bug+0x275/0x350 [ 292.160454][ T8765] check_noncircular+0x14c/0x170 [ 292.160475][ T8765] __lock_acquire+0x1173/0x1ba0 [ 292.160489][ T8765] lock_acquire+0x179/0x350 [ 292.160500][ T8765] ? do_ip_getsockopt+0x1843/0x2220 [ 292.160513][ T8765] ? __pfx___might_resched+0x10/0x10 [ 292.160532][ T8765] __mutex_lock+0x199/0xb90 [ 292.160549][ T8765] ? do_ip_getsockopt+0x1843/0x2220 [ 292.160560][ T8765] ? __might_fault+0xe3/0x190 [ 292.160573][ T8765] ? __might_fault+0xe3/0x190 [ 292.160584][ T8765] ? __might_fault+0x13b/0x190 [ 292.160596][ T8765] ? do_ip_getsockopt+0x1843/0x2220 [ 292.160607][ T8765] ? __pfx___mutex_lock+0x10/0x10 [ 292.160624][ T8765] ? _copy_from_user+0x59/0xd0 [ 292.160640][ T8765] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 292.160662][ T8765] ? do_ip_getsockopt+0x1843/0x2220 [ 292.160673][ T8765] ? rtnl_lock+0x9/0x20 [ 292.160691][ T8765] do_ip_getsockopt+0x1843/0x2220 [ 292.160703][ T8765] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 292.160714][ T8765] ? register_lock_class+0x41/0x4c0 [ 292.160727][ T8765] ? __lock_acquire+0xaa4/0x1ba0 [ 292.160744][ T8765] ? __pfx_slow_avc_audit+0x10/0x10 [ 292.160757][ T8765] ? __mutex_trylock_common+0xe9/0x250 [ 292.160770][ T8765] ? __pfx___mutex_trylock_common+0x10/0x10 [ 292.160782][ T8765] ? __pfx___might_resched+0x10/0x10 [ 292.160798][ T8765] ? rcu_is_watching+0x12/0xc0 [ 292.160813][ T8765] ? trace_contention_end+0xdd/0x130 [ 292.160825][ T8765] ? __mutex_lock+0x1ca/0xb90 [ 292.160842][ T8765] ip_getsockopt+0x9b/0x1e0 [ 292.160852][ T8765] ? __pfx___mutex_lock+0x10/0x10 [ 292.160868][ T8765] ? __pfx_ip_getsockopt+0x10/0x10 [ 292.160882][ T8765] tcp_getsockopt+0x9e/0x100 [ 292.160896][ T8765] smc_getsockopt+0x162/0x370 [ 292.160907][ T8765] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 292.160925][ T8765] ? __pfx_smc_getsockopt+0x10/0x10 [ 292.160938][ T8765] ? __pfx_smc_getsockopt+0x10/0x10 [ 292.160949][ T8765] do_sock_getsockopt+0x3fc/0x800 [ 292.160968][ T8765] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 292.160985][ T8765] ? __fget_files+0x204/0x3c0 [ 292.161002][ T8765] __sys_getsockopt+0x12f/0x260 [ 292.161017][ T8765] __x64_sys_getsockopt+0xbd/0x160 [ 292.161031][ T8765] ? do_syscall_64+0x91/0x260 [ 292.161051][ T8765] ? lockdep_hardirqs_on+0x7c/0x110 [ 292.161067][ T8765] do_syscall_64+0xcd/0x260 [ 292.161083][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.161096][ T8765] RIP: 0033:0x7f66a458d169 [ 292.161107][ T8765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.161120][ T8765] RSP: 002b:00007f66a5415038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 292.161132][ T8765] RAX: ffffffffffffffda RBX: 00007f66a47a6160 RCX: 00007f66a458d169 [ 292.161140][ T8765] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000008 [ 292.161148][ T8765] RBP: 00007f66a460e990 R08: 0000200000000040 R09: 0000000000000000 [ 292.161155][ T8765] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.161163][ T8765] R13: 0000000000000000 R14: 00007f66a47a6160 R15: 00007fffb8bf6578 [ 292.161174][ T8765] [ 292.170081][ T8757] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 292.177021][ T8770] 9pnet_fd: Insufficient options for proto=fd [ 292.319033][ T874] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 292.569188][ T5903] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 292.669061][ T874] usb 6-1: Using ep0 maxpacket: 8 [ 292.676427][ T874] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 292.685829][ T874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.693836][ T874] usb 6-1: Product: syz [ 292.697976][ T874] usb 6-1: Manufacturer: syz [ 292.702574][ T874] usb 6-1: SerialNumber: syz [ 292.707945][ T874] usb 6-1: config 0 descriptor?? [ 292.719094][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 292.725637][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short [ 292.734407][ T5903] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 292.742508][ T5903] usb 2-1: config 0 has no interface number 0 [ 292.748579][ T5903] usb 2-1: config 0 interface 88 altsetting 8 has an endpoint descriptor with address 0x43, changing to 0x3 [ 292.760269][ T5903] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 292.771218][ T5903] usb 2-1: config 0 interface 88 has no altsetting 0 [ 292.780450][ T5903] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 292.789720][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 292.797787][ T5903] usb 2-1: Product: syz [ 292.801949][ T5903] usb 2-1: Manufacturer: syz [ 292.806528][ T5903] usb 2-1: SerialNumber: syz [ 292.812140][ T5903] usb 2-1: config 0 descriptor?? [ 292.917735][ T874] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 292.933514][ T8759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.942002][ T8759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.953101][ T8759] netlink: 68 bytes leftover after parsing attributes in process `syz.5.679'. [ 292.961984][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.5.679'. [ 293.185898][ T5903] usb 2-1: USB disconnect, device number 14 [ 293.577302][ T874] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 293.589205][ T874] usb 6-1: USB disconnect, device number 9 [ 296.140075][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 296.140088][ T30] audit: type=1400 audit(1744338305.811:678): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 296.169996][ T30] audit: type=1400 audit(1744338305.811:679): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1