last executing test programs: 14.502150843s ago: executing program 4 (id=240): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80001) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) 12.976511006s ago: executing program 4 (id=243): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x40000000, {0x2}, 0xfd}, 0x18) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) sendmsg$inet_sctp(r0, &(0x7f00000008c0)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000940)=[{0x0}, {0x0}, {&(0x7f0000000a80)="e16cc70565d13220fc10b89070eb038f03017a1d54b826d655001773da730c7c19f0819d5582e8e26d7ebad7b8cdc24be4b1ef788cfd804e0b1dc4d7b596702f10036528cae9f730f94adf378515b9c8f1297f6daa5d69970778b3a0f4d004d615627ebf493c1391530ada457dc945d65819649e20f56f6d9716c0f57a469cf962ca9ce643ba990e80db238aadfa91ec3c", 0x91}, {&(0x7f0000000840)="40312c10e77a8fd923d436956acae039b833654aacae500318f310b2cb9ac2d6bf12b3eb7f106a43482ac553ba0c13cc07232331d9d112f24edd6dff73252612184a3c963bf5befda569", 0x4a}, {0x0}], 0x5, &(0x7f0000000380), 0x0, 0x4}, 0x4) inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0x48, 0x30, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4, 0x21}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000380), 0x12fa, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000002c0)={0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) 12.772384587s ago: executing program 2 (id=244): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x7f, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) getpgrp(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x188341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xfffffdfb}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) 12.431729838s ago: executing program 4 (id=245): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000500), 0xfffffffffffffffe, 0x48203) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0x1, 0x10000000, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030803c000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0xb8}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r7], 0x188}}, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4241, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="34000000110029bd7000fcdbdf25000000000000", @ANYRES32=0x0, @ANYBLOB="001c000000000000140035006c6f"], 0x34}}, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000400)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f00000004c0)="31a161df84ff8b2883d2", 0xa}, {&(0x7f00000007c0)="55ed4fd173c52bae2c5afa86c5276c6fbf8e4d8877bbdd5be20f2eb4032820e05f100bba7b3af0d5d49dda224ec17260bc4a1bc3ac39ca521254ed4072f0d5da378cf7c2f0454343cb4a0a26174a5a6c17e971dba3d55654ba188bcc0889da9315c09245e8e692bf2ef14feb620af769eb", 0x71}, {&(0x7f0000000540)}], 0x3, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x233f9d9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff49}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbc}}], 0x60}, 0x20000800) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 12.387242879s ago: executing program 3 (id=246): syz_open_dev$MSR(0x0, 0x0, 0x0) fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 12.151384647s ago: executing program 3 (id=247): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0xe, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0xd}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() mknod(0x0, 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r3 = dup(r0) listen(r3, 0x9a7) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="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", 0xffe3}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x28, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, 0x2093}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x20000000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) 11.034395354s ago: executing program 3 (id=250): landlock_create_ruleset(&(0x7f0000000000)={0x100, 0x1}, 0x18, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000480)=0xf, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000000108000a00"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14, 0x80000) recvfrom$packet(r4, &(0x7f0000000540), 0x0, 0x40000000, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000140)="eb", 0x90}], 0x2}], 0x1, 0x40800) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.661833125s ago: executing program 2 (id=251): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x4000400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x9}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x0, 0x4, 0x58, 0x3}) r8 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r8, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r9, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) ppoll(&(0x7f00000000c0)=[{r9, 0x8040}], 0x1, 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES64=r4], 0x20) sendto$inet6(r0, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) fanotify_init(0x8, 0x800) 8.856126973s ago: executing program 4 (id=254): exit(0xfffffffffffffffe) socket(0x28, 0x801, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1440, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001180)=""/102400, 0xfffffffffffffd99) r2 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r3, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 6.539675208s ago: executing program 1 (id=257): syz_open_dev$MSR(0x0, 0x0, 0x0) fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 6.473898033s ago: executing program 1 (id=258): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x4073, &(0x7f0000000040), 0x1, 0x4000003}) landlock_create_ruleset(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14504}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000bc0)={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x4c, 0x3a, 0x1, @empty, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x3, 0x6, "39afb8", 0xf648, 0x0, 0x0, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, [@srh={0x4, 0x0, 0x4, 0x0, 0x2, 0xd8, 0x9}], "cb78b2e77750000048e3783e229f389a0fef4572"}}}}}}}, 0x0) 6.429777369s ago: executing program 3 (id=259): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x7f, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044014}, 0x24040090) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) getpgrp(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x188341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xfffffdfb}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) 6.139492525s ago: executing program 2 (id=260): socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="08f90459"]) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) 3.92294007s ago: executing program 1 (id=261): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$isdn(0x22, 0x3, 0x25) recvmmsg(r1, &(0x7f0000007900)=[{{&(0x7f00000003c0)=@un=@abs, 0x80, &(0x7f0000001900)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000580)=""/137, 0x89}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/205, 0xcd}, {&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000001780)=""/118, 0x76}, {&(0x7f0000001840)=""/146, 0x92}], 0x8}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001980)=""/91, 0x5b}, {&(0x7f0000001a00)=""/70, 0x46}, {&(0x7f0000001a80)=""/114, 0x72}, {&(0x7f0000001b00)=""/50, 0x32}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/196, 0xc4}, {&(0x7f0000001c80)=""/113, 0x71}, {&(0x7f0000001d00)=""/121, 0x79}], 0x8, &(0x7f0000001e00)=""/94, 0x5e}, 0x9}, {{&(0x7f0000001e80)=@can, 0x80, &(0x7f0000002100)=[{&(0x7f0000001f00)=""/241, 0xf1}, {&(0x7f0000002000)=""/148, 0x94}, {&(0x7f00000020c0)=""/24, 0x18}], 0x3, &(0x7f0000002140)=""/77, 0x4d}}, {{&(0x7f00000021c0)=@nfc_llcp, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002240)=""/37, 0x25}, {&(0x7f0000002280)=""/196, 0xc4}, {&(0x7f0000002380)}], 0x3, &(0x7f0000002400)=""/84, 0x54}, 0x7}, {{&(0x7f0000002480)=@in6, 0x80, &(0x7f0000002940)=[{&(0x7f0000007b40)=""/83, 0x53}, {&(0x7f0000002580)=""/66, 0x42}, {&(0x7f0000002600)=""/154, 0x9a}, {&(0x7f00000026c0)=""/162, 0xa2}, {&(0x7f0000002780)=""/4, 0x4}, {&(0x7f00000027c0)=""/195, 0xc3}, {&(0x7f00000028c0)=""/71, 0x47}], 0x7}, 0x2}, {{&(0x7f00000029c0)=@hci, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/192, 0xc0}, {&(0x7f0000003b00)=""/225, 0xe1}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/114, 0x72}, {&(0x7f0000004c80)=""/251, 0xfb}, {&(0x7f0000004d80)=""/13, 0xd}, {&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/253, 0xfd}], 0x9, &(0x7f0000005f80)=""/248, 0xf8}, 0x7}, {{&(0x7f0000006080)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000072c0)=[{&(0x7f0000006100)=""/167, 0xa7}, {&(0x7f00000061c0)=""/4096, 0x1000}, {&(0x7f00000071c0)=""/229, 0xe5}], 0x3, &(0x7f0000007300)=""/25, 0x19}}, {{&(0x7f0000007340)=@ieee802154, 0x80, &(0x7f0000007580)=[{&(0x7f00000073c0)}, {&(0x7f0000007400)=""/106, 0x6a}, {&(0x7f0000007480)=""/30, 0x1e}, {&(0x7f00000074c0)=""/96, 0x60}, {&(0x7f0000007540)=""/29, 0x1d}], 0x5, &(0x7f0000007600)=""/38, 0x26}, 0x101}, {{&(0x7f0000007640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007880)=[{&(0x7f00000076c0)=""/96, 0x60}, {&(0x7f0000007740)=""/23, 0x17}, {&(0x7f0000007780)=""/235, 0xeb}], 0x3, &(0x7f00000078c0)=""/48, 0x30}, 0x5}], 0x9, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0xc0001, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r6}, 0x70) 3.825008715s ago: executing program 0 (id=262): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x8014) 3.480058023s ago: executing program 4 (id=263): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = gettid() socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) (async) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x20, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000000000)) 3.407480588s ago: executing program 0 (id=264): fanotify_init(0x8, 0x40000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="440000000206050000000000007f41d9c9ee589371000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006000000"], 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2000000}, 0x1c) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x39) syz_open_dev$evdev(&(0x7f0000000100), 0x1000, 0x10800) 3.33168351s ago: executing program 1 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400a6ff", @ANYRES16=r1, @ANYBLOB="050b00000000fedbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 3.18766369s ago: executing program 3 (id=266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r3, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x40) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r3, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x40) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) (async) 2.544490988s ago: executing program 1 (id=267): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) r3 = syz_open_dev$sndctrl(&(0x7f00000013c0), 0x97e, 0x101080) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000005000efbd927fd420c4c909413373c96857d1601d34bcb0054ab3f775b14f770f01f915d9ed479d7b6007435cf45d58f3e7e14afe2bde27fbd6e615c16df28c5b379c178cd7"]) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x263f, 0x0, '\x00', 0x20000000}, 0x0, [0x0, 0x0, 0x0, 0xfffdffffffffbffd, 0x0, 0x0, 0x0, 0x3, 0x71, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc19, 0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0x9, 0x100000000, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd451, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0xc1, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x21}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x6, 0x7, 0x3, 0x6, 0x9, 0xf8, 0xfffb}, 0xc) connect(r5, &(0x7f0000000080)=@hci={0x1f, 0x1, 0x6}, 0x80) 2.189102761s ago: executing program 0 (id=268): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, 0x0) socket(0x10, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 1.669558398s ago: executing program 2 (id=269): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.630482061s ago: executing program 0 (id=270): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r0, 0x20, 0x287d, 0x40000002, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x3}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xa}]}, 0x24}}, 0x20008004) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 1.504434839s ago: executing program 0 (id=271): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0xd}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r4 = dup(r0) listen(r4, 0x9a7) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="1a07d7a752d0e0b473e20e9000e8d84c45b8cee37faef5a633c0d97e7f1f1a0f420083a61c580df65c76fb5d98ea9d1e736d866585548ba3a73fc477f58ca764e7fb9277a226c919119d6bf57b3d469efe9f82475877cf7afac9e8edf7502b7af12c1c8f5e7a01d1d7cf1313854b7f49f985fb7865068d3b35bb64ed808df49e7d43ede3ba88a46cbf0ad62d6a8827c5b1666aac8a3dcb4d576896ec553f4f03d0dc0cd6f0b66c535c203bdf51c0fdba9d5cbf91f8b0888d9bbc70d415ae9e2473458cc6adcce77401219cb811e5de41ddc374c4d2e5ef8d55b9fbc22cbd8ec28815eb2d47f711761b2b3c3c1f9b2dab2e0358041ad57fc4c40162f5353c56afafa51c3483bcaf3ae1268ad8adccd9111a24a93ffd3a94468aec075e65a1a40527add2034ae0174fe5cbf499d72ec049a48d28b997de505d6fa4d8456b9120159227876cd255361d173c6ea33b5969062c846640ef", 0xffe3}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) 1.434994718s ago: executing program 1 (id=272): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}], 0x10, 0x40000}, 0x40001) r1 = socket$inet6(0xa, 0x2, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x204480, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) splice(r4, 0x0, r3, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfffffe3e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 1.397417182s ago: executing program 2 (id=273): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0xd}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x804c044}, 0x40) r4 = dup(r0) listen(r4, 0x9a7) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="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", 0xffe3}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) 856.071825ms ago: executing program 0 (id=274): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/18], 0x48) ftruncate(0xffffffffffffffff, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r7 = openat$cgroup_freezer_state(r6, &(0x7f00000002c0), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x8000002) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000480)='./file0\x00', 0x103680, 0x20) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 760.911434ms ago: executing program 2 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001640), 0x121040, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f0000000d00)='0', 0x1) r4 = syz_usb_connect$uac1(0x3, 0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902940003014e00010904000000010100000a2401bd08060201020824020501010570800001010724070505000006240406075e0c24020106020206010006020924030600030605a607240805070004090401000001020000090401010101020000090501090002070206072501803f060009040200000102000009040201010102c4000905820920"], 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="c80c6580117662b4991c7dd555db1a9938000000", @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESHEX=r4, @ANYBLOB="0a003400010101010101000005001801170000000500190105000000", @ANYRESOCT=r2, @ANYRES64=r1, @ANYRES16=r3], 0x38}}, 0x0) 404.573µs ago: executing program 3 (id=276): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=277): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x7f, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044014}, 0x24040090) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) getpgrp(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x188341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xfffffdfb}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 56.636281][ T30] audit: type=1400 audit(1767083544.174:62): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.659729][ T30] audit: type=1400 audit(1767083544.194:63): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.662061][ T5802] cgroup: Unknown subsys name 'net' [ 56.689283][ T30] audit: type=1400 audit(1767083544.234:64): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.904976][ T5802] cgroup: Unknown subsys name 'cpuset' [ 56.912929][ T5802] cgroup: Unknown subsys name 'rlimit' [ 57.071852][ T30] audit: type=1400 audit(1767083544.604:65): avc: denied { setattr } for pid=5802 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.095427][ T30] audit: type=1400 audit(1767083544.604:66): avc: denied { create } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.130991][ T30] audit: type=1400 audit(1767083544.604:67): avc: denied { write } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.151744][ T30] audit: type=1400 audit(1767083544.614:68): avc: denied { read } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.172179][ T30] audit: type=1400 audit(1767083544.634:69): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.177291][ T5804] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 57.197122][ T30] audit: type=1400 audit(1767083544.634:70): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.228834][ T30] audit: type=1400 audit(1767083544.744:71): avc: denied { relabelto } for pid=5804 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.146545][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.121517][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.129696][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.131741][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.144504][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.150065][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.151903][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.159894][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.166100][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.174410][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.180021][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.186813][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.194221][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.201161][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.208731][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.215211][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.222018][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.230518][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.242711][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.243233][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.250198][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.257448][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.272440][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.280473][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.287658][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.295768][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.711504][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 60.720683][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 60.842886][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 60.877898][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 60.922881][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 60.981403][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.989040][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.996550][ T5814] bridge_slave_0: entered allmulticast mode [ 61.003592][ T5814] bridge_slave_0: entered promiscuous mode [ 61.015843][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.022932][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.030008][ T5822] bridge_slave_0: entered allmulticast mode [ 61.036749][ T5822] bridge_slave_0: entered promiscuous mode [ 61.053214][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.060341][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.067646][ T5814] bridge_slave_1: entered allmulticast mode [ 61.074241][ T5814] bridge_slave_1: entered promiscuous mode [ 61.087724][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.094829][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.101905][ T5822] bridge_slave_1: entered allmulticast mode [ 61.108619][ T5822] bridge_slave_1: entered promiscuous mode [ 61.182458][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.189643][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.197194][ T5813] bridge_slave_0: entered allmulticast mode [ 61.203877][ T5813] bridge_slave_0: entered promiscuous mode [ 61.212362][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.237112][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.246387][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.254295][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.261398][ T5812] bridge_slave_0: entered allmulticast mode [ 61.268243][ T5812] bridge_slave_0: entered promiscuous mode [ 61.275281][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.282363][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.289771][ T5813] bridge_slave_1: entered allmulticast mode [ 61.296527][ T5813] bridge_slave_1: entered promiscuous mode [ 61.304262][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.321268][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.337122][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.344358][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.351439][ T5812] bridge_slave_1: entered allmulticast mode [ 61.358281][ T5812] bridge_slave_1: entered promiscuous mode [ 61.411586][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.418993][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.426131][ T5815] bridge_slave_0: entered allmulticast mode [ 61.432768][ T5815] bridge_slave_0: entered promiscuous mode [ 61.440640][ T5822] team0: Port device team_slave_0 added [ 61.455302][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.465841][ T5814] team0: Port device team_slave_0 added [ 61.471534][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.478813][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.486072][ T5815] bridge_slave_1: entered allmulticast mode [ 61.492602][ T5815] bridge_slave_1: entered promiscuous mode [ 61.500127][ T5822] team0: Port device team_slave_1 added [ 61.507225][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.517685][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.527742][ T5814] team0: Port device team_slave_1 added [ 61.554568][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.605710][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.612896][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.639406][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.652396][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.661990][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.669018][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.694913][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.714366][ T5813] team0: Port device team_slave_0 added [ 61.725165][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.732111][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.758174][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.770176][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.780012][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.786996][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.813514][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.825269][ T5812] team0: Port device team_slave_0 added [ 61.831933][ T5813] team0: Port device team_slave_1 added [ 61.852641][ T5812] team0: Port device team_slave_1 added [ 61.874752][ T5815] team0: Port device team_slave_0 added [ 61.896974][ T5815] team0: Port device team_slave_1 added [ 61.917119][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.924295][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.950665][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.982554][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.990057][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.015978][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.027218][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.034743][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.060907][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.087923][ T5822] hsr_slave_0: entered promiscuous mode [ 62.094124][ T5822] hsr_slave_1: entered promiscuous mode [ 62.100649][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.107786][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.134016][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.151784][ T5814] hsr_slave_0: entered promiscuous mode [ 62.157831][ T5814] hsr_slave_1: entered promiscuous mode [ 62.163814][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 62.169580][ T5814] Cannot create hsr debugfs directory [ 62.175602][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.182520][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.208896][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.220779][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.227815][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.253708][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.333375][ T5827] Bluetooth: hci1: command tx timeout [ 62.343501][ T5827] Bluetooth: hci2: command tx timeout [ 62.343512][ T5821] Bluetooth: hci3: command tx timeout [ 62.343608][ T5823] Bluetooth: hci0: command tx timeout [ 62.349233][ T5813] hsr_slave_0: entered promiscuous mode [ 62.360485][ T5813] hsr_slave_1: entered promiscuous mode [ 62.365386][ T5826] Bluetooth: hci4: command tx timeout [ 62.371307][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 62.381982][ T5813] Cannot create hsr debugfs directory [ 62.421881][ T5812] hsr_slave_0: entered promiscuous mode [ 62.428560][ T5812] hsr_slave_1: entered promiscuous mode [ 62.434675][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 62.440377][ T5812] Cannot create hsr debugfs directory [ 62.449137][ T5815] hsr_slave_0: entered promiscuous mode [ 62.455245][ T5815] hsr_slave_1: entered promiscuous mode [ 62.461077][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 62.466989][ T5815] Cannot create hsr debugfs directory [ 62.773953][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.786883][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.800562][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.810110][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.854517][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.875284][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.884746][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.896522][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.941231][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.956254][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.966256][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.979408][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.039076][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.052367][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.063735][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.087028][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.140690][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.168321][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.184815][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.198890][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.214361][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.227865][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.249337][ T3855] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.256513][ T3855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.276148][ T3855] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.283267][ T3855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.347267][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.391318][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.412539][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.431438][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 63.431451][ T30] audit: type=1400 audit(1767083550.964:84): avc: denied { sys_module } for pid=5822 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.466589][ T4553] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.473672][ T4553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.496097][ T3855] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.503246][ T3855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.526971][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.546876][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.569138][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.576214][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.588860][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.603340][ T3855] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.610430][ T3855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.639368][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.647671][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.668732][ T4500] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.675811][ T4500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.686226][ T4500] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.693297][ T4500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.706255][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.724721][ T4500] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.731781][ T4500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.740632][ T4500] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.747695][ T4500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.914788][ T5822] veth0_vlan: entered promiscuous mode [ 63.956218][ T5822] veth1_vlan: entered promiscuous mode [ 64.034872][ T5822] veth0_macvtap: entered promiscuous mode [ 64.067150][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.086233][ T5822] veth1_macvtap: entered promiscuous mode [ 64.135467][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.164870][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.215371][ T3855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.227916][ T3855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.242338][ T3855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.253095][ T3855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.272147][ T5813] veth0_vlan: entered promiscuous mode [ 64.287410][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.307458][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.316698][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.327033][ T5813] veth1_vlan: entered promiscuous mode [ 64.415101][ T5823] Bluetooth: hci2: command tx timeout [ 64.415121][ T5831] Bluetooth: hci1: command tx timeout [ 64.420565][ T5827] Bluetooth: hci4: command tx timeout [ 64.426069][ T5821] Bluetooth: hci0: command tx timeout [ 64.439139][ T5826] Bluetooth: hci3: command tx timeout [ 64.455450][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.474992][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.487920][ T5812] veth0_vlan: entered promiscuous mode [ 64.525579][ T5814] veth0_vlan: entered promiscuous mode [ 64.545527][ T5813] veth0_macvtap: entered promiscuous mode [ 64.551571][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.567558][ T5812] veth1_vlan: entered promiscuous mode [ 64.574661][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.611130][ T5813] veth1_macvtap: entered promiscuous mode [ 64.612730][ T30] audit: type=1400 audit(1767083552.144:85): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.QGZwIn/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.630475][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.649692][ T30] audit: type=1400 audit(1767083552.144:86): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.674325][ T30] audit: type=1400 audit(1767083552.144:87): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.QGZwIn/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.689746][ T5814] veth1_vlan: entered promiscuous mode [ 64.705458][ T30] audit: type=1400 audit(1767083552.144:88): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.740518][ T30] audit: type=1400 audit(1767083552.184:89): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.QGZwIn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.755219][ T5814] veth0_macvtap: entered promiscuous mode [ 64.773174][ T30] audit: type=1400 audit(1767083552.184:90): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.QGZwIn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.774869][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.801002][ T30] audit: type=1400 audit(1767083552.194:91): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.837160][ T5812] veth0_macvtap: entered promiscuous mode [ 64.850013][ T30] audit: type=1400 audit(1767083552.214:92): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.854517][ T5814] veth1_macvtap: entered promiscuous mode [ 64.879450][ T30] audit: type=1400 audit(1767083552.214:93): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="gadgetfs" ino=7295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.907491][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.936142][ T5812] veth1_macvtap: entered promiscuous mode [ 64.958284][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.968308][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.987002][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.002295][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.025586][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.040006][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.067019][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.079624][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.117185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.175906][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.198657][ T5929] NFSD: Failed to start, no listeners configured. [ 65.212480][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.231216][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.245545][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.257880][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.270583][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.300730][ T5815] veth0_vlan: entered promiscuous mode [ 65.343493][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.359506][ T2031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.373421][ T2031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.384266][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.407625][ T5815] veth1_vlan: entered promiscuous mode [ 65.423952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 65.466728][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.476336][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.490631][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.502491][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.582034][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.582237][ T5815] veth0_macvtap: entered promiscuous mode [ 65.607348][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.662209][ T2031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.678149][ T5815] veth1_macvtap: entered promiscuous mode [ 65.684779][ T2031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.737906][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.872154][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.885338][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.936246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.970908][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.009848][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.015673][ T5934] NFSD: Failed to start, no listeners configured. [ 66.073730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.082189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.095032][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.121692][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.141043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.179620][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.213150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.323194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.483288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.493995][ T5827] Bluetooth: hci1: command tx timeout [ 66.494086][ T5826] Bluetooth: hci0: command tx timeout [ 66.499406][ T5827] Bluetooth: hci3: command tx timeout [ 66.504871][ T5826] Bluetooth: hci2: command tx timeout [ 66.891120][ T5831] Bluetooth: hci4: command tx timeout [ 66.948144][ T2031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.964929][ T2031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.018500][ T3941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.048699][ T3941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.183302][ T116] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 67.243261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.549572][ T116] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.662121][ T116] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 67.674269][ T116] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 67.715108][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.768180][ T116] usb 2-1: config 0 descriptor?? [ 67.907101][ T116] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 67.924869][ T116] dvb-usb: bulk message failed: -22 (3/0) [ 67.992140][ T116] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 68.049118][ T116] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 68.089836][ T5944] dvb-usb: bulk message failed: -22 (2/0) [ 68.100644][ T116] usb 2-1: media controller created [ 68.138529][ T116] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 68.269953][ T116] dvb-usb: bulk message failed: -22 (6/0) [ 68.277366][ T116] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 68.575376][ T5821] Bluetooth: hci2: command tx timeout [ 68.580942][ T5831] Bluetooth: hci3: command tx timeout [ 68.586442][ T5821] Bluetooth: hci0: command tx timeout [ 68.591956][ T5831] Bluetooth: hci1: command tx timeout [ 68.646840][ T116] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 68.733339][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 68.733375][ T30] audit: type=1400 audit(1767083556.274:130): avc: denied { allowed } for pid=5967 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.776341][ T30] audit: type=1400 audit(1767083556.304:131): avc: denied { create } for pid=5967 comm="syz.0.9" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.988708][ T5826] Bluetooth: hci4: command tx timeout [ 69.015103][ T116] dvb-usb: schedule remote query interval to 150 msecs. [ 69.029625][ T30] audit: type=1400 audit(1767083556.304:132): avc: denied { map } for pid=5967 comm="syz.0.9" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.063843][ T30] audit: type=1400 audit(1767083556.304:133): avc: denied { read write } for pid=5967 comm="syz.0.9" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.089669][ T30] audit: type=1400 audit(1767083556.414:134): avc: denied { create } for pid=5967 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.112145][ T30] audit: type=1400 audit(1767083556.424:135): avc: denied { write } for pid=5967 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.155090][ T116] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 69.172191][ T5956] NFSD: Failed to start, no listeners configured. [ 69.271970][ T30] audit: type=1400 audit(1767083556.434:136): avc: denied { create } for pid=5967 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.292390][ T30] audit: type=1400 audit(1767083556.444:137): avc: denied { map_create } for pid=5967 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 69.314644][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 69.327289][ T5871] dvb-usb: error while querying for an remote control event. [ 69.328089][ T30] audit: type=1400 audit(1767083556.484:138): avc: denied { ioctl } for pid=5967 comm="syz.0.9" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8106 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.395409][ T30] audit: type=1400 audit(1767083556.934:139): avc: denied { create } for pid=5974 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.552731][ T116] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.618760][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 69.638103][ T5871] dvb-usb: error while querying for an remote control event. [ 70.322149][ T116] usb 3-1: Using ep0 maxpacket: 16 [ 70.338487][ T116] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 70.352282][ T116] usb 3-1: config 0 has no interface number 0 [ 70.362736][ T116] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 70.398671][ T116] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 70.449332][ T116] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 70.461304][ T116] usb 3-1: Product: syz [ 70.468043][ T116] usb 3-1: SerialNumber: syz [ 70.488340][ T116] usb 3-1: config 0 descriptor?? [ 70.495152][ T5816] dvb-usb: bulk message failed: -22 (1/0) [ 70.497153][ T5884] usb 2-1: USB disconnect, device number 2 [ 70.500899][ T5816] dvb-usb: error while querying for an remote control event. [ 70.538262][ T116] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 70.610640][ T5884] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 70.930146][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.936607][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.768987][ T5993] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.552617][ T5930] usb 3-1: USB disconnect, device number 2 [ 72.587759][ T6002] hub 5-0:1.0: USB hub found [ 72.615998][ T6002] hub 5-0:1.0: 1 port detected [ 73.907717][ T6011] NFSD: Failed to start, no listeners configured. [ 74.094963][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 74.094977][ T30] audit: type=1400 audit(1767083561.634:169): avc: denied { ioctl } for pid=6021 comm="syz.2.20" path="socket:[9274]" dev="sockfs" ino=9274 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.272736][ T5902] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 74.369413][ T30] audit: type=1400 audit(1767083561.904:170): avc: denied { write } for pid=6029 comm="syz.1.22" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.395893][ T30] audit: type=1400 audit(1767083561.934:171): avc: denied { open } for pid=6029 comm="syz.1.22" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.431591][ T6030] Zero length message leads to an empty skb [ 74.563626][ T5902] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 74.571845][ T5902] usb 1-1: config 7 has no interface number 0 [ 74.578332][ T5902] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 74.590236][ T5902] usb 1-1: config 7 interface 252 has no altsetting 0 [ 74.650422][ T5902] usb 1-1: string descriptor 0 read error: -22 [ 74.776663][ T5902] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 74.788813][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.801390][ T5902] idmouse 1-1:7.252: Unable to find bulk-in endpoint. [ 75.380373][ T30] audit: type=1400 audit(1767083562.914:172): avc: denied { name_bind } for pid=6020 comm="syz.0.21" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 75.760766][ T30] audit: type=1400 audit(1767083562.944:173): avc: denied { node_bind } for pid=6020 comm="syz.0.21" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 76.252033][ T30] audit: type=1400 audit(1767083563.114:174): avc: denied { setopt } for pid=6040 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.628217][ T30] audit: type=1400 audit(1767083563.114:175): avc: denied { bind } for pid=6040 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.942879][ T30] audit: type=1400 audit(1767083563.134:176): avc: denied { name_bind } for pid=6040 comm="syz.2.24" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 77.033546][ T6053] xt_TCPMSS: Only works on TCP SYN packets [ 77.257336][ T30] audit: type=1400 audit(1767083563.134:177): avc: denied { node_bind } for pid=6040 comm="syz.2.24" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 77.909838][ T5930] usb 1-1: USB disconnect, device number 2 [ 78.024228][ T30] audit: type=1400 audit(1767083563.264:178): avc: denied { write } for pid=6040 comm="syz.2.24" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.647994][ T6072] SELinux: policydb string length -440559075 does not match expected length 8 [ 78.669331][ T6062] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 78.749269][ T6072] SELinux: failed to load policy [ 78.764655][ T6071] dummy0: entered promiscuous mode [ 78.790558][ T6071] macsec1: entered allmulticast mode [ 78.801737][ T6071] dummy0: entered allmulticast mode [ 79.084165][ T6071] dummy0: left allmulticast mode [ 79.089275][ T6071] dummy0: left promiscuous mode [ 79.137552][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 79.137569][ T30] audit: type=1400 audit(1767083566.654:203): avc: denied { read write } for pid=6070 comm="syz.1.32" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 79.407536][ T30] audit: type=1400 audit(1767083566.654:204): avc: denied { open } for pid=6070 comm="syz.1.32" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 80.060383][ T30] audit: type=1400 audit(1767083566.704:205): avc: denied { nlmsg_read } for pid=6070 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 80.084379][ T30] audit: type=1400 audit(1767083566.894:206): avc: denied { create } for pid=6078 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.105300][ T30] audit: type=1400 audit(1767083566.904:207): avc: denied { bind } for pid=6078 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.430144][ T6087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.35'. [ 80.601910][ T30] audit: type=1400 audit(1767083568.044:208): avc: denied { name_bind } for pid=6092 comm="syz.3.38" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 80.688518][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'. [ 80.863451][ T30] audit: type=1400 audit(1767083568.334:209): avc: denied { name_connect } for pid=6092 comm="syz.3.38" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 80.908825][ T6087] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6087 comm=syz.1.35 [ 81.406785][ T10] cfg80211: failed to load regulatory.db [ 81.476335][ T6099] NFSD: Failed to start, no listeners configured. [ 81.518789][ T30] audit: type=1400 audit(1767083569.054:210): avc: denied { relabelfrom } for pid=6095 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 81.714902][ T30] audit: type=1400 audit(1767083569.054:211): avc: denied { relabelto } for pid=6095 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 81.745565][ T30] audit: type=1400 audit(1767083569.134:212): avc: denied { create } for pid=6095 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.252561][ T6113] team0: Cannot enslave team device to itself [ 82.856210][ T6124] team0: Cannot enslave team device to itself [ 83.039871][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 83.210057][ T6127] ptrace attach of "./syz-executor exec"[5822] was attempted by ""[6127] [ 83.226894][ T6129] syz.1.46 uses obsolete (PF_INET,SOCK_PACKET) [ 83.258050][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 83.366576][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 84.488622][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.636018][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'. [ 84.742739][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 84.758699][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 84.758721][ T30] audit: type=1400 audit(1767083572.294:222): avc: denied { setcheckreqprot } for pid=6156 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 84.790552][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.828878][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 84.850848][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.067553][ T30] audit: type=1400 audit(1767083572.604:223): avc: denied { getopt } for pid=6158 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.088072][ T10] usb 5-1: config 0 descriptor?? [ 85.723868][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 85.748500][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 85.772537][ T10] usb 5-1: USB disconnect, device number 2 [ 86.148017][ T30] audit: type=1400 audit(1767083573.674:224): avc: denied { ioctl } for pid=6170 comm="syz.1.58" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 86.149510][ T6182] FAULT_INJECTION: forcing a failure. [ 86.149510][ T6182] name failslab, interval 1, probability 0, space 0, times 1 [ 86.232775][ T6182] CPU: 0 UID: 0 PID: 6182 Comm: syz.0.61 Not tainted syzkaller #0 PREEMPT(full) [ 86.232797][ T6182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.232806][ T6182] Call Trace: [ 86.232811][ T6182] [ 86.232818][ T6182] dump_stack_lvl+0x16c/0x1f0 [ 86.232843][ T6182] should_fail_ex+0x512/0x640 [ 86.232867][ T6182] ? fs_reclaim_acquire+0xae/0x150 [ 86.232892][ T6182] should_failslab+0xc2/0x120 [ 86.232912][ T6182] __kmalloc_noprof+0xeb/0x910 [ 86.232949][ T6182] ? tomoyo_encode2+0x100/0x3e0 [ 86.232973][ T6182] ? tomoyo_encode2+0x100/0x3e0 [ 86.232993][ T6182] tomoyo_encode2+0x100/0x3e0 [ 86.233016][ T6182] tomoyo_encode+0x29/0x50 [ 86.233035][ T6182] tomoyo_realpath_from_path+0x18f/0x6e0 [ 86.233062][ T6182] tomoyo_path_number_perm+0x245/0x580 [ 86.233080][ T6182] ? tomoyo_path_number_perm+0x237/0x580 [ 86.233101][ T6182] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 86.233121][ T6182] ? find_held_lock+0x2b/0x80 [ 86.233165][ T6182] ? find_held_lock+0x2b/0x80 [ 86.233187][ T6182] ? hook_file_ioctl_common+0x144/0x410 [ 86.233217][ T6182] ? __fget_files+0x20e/0x3c0 [ 86.233244][ T6182] security_file_ioctl+0x9b/0x240 [ 86.233266][ T6182] __x64_sys_ioctl+0xb7/0x210 [ 86.233286][ T6182] do_syscall_64+0xcd/0xf80 [ 86.233308][ T6182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.233325][ T6182] RIP: 0033:0x7fa333d8f749 [ 86.233339][ T6182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.233354][ T6182] RSP: 002b:00007fa334ca9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.233371][ T6182] RAX: ffffffffffffffda RBX: 00007fa333fe5fa0 RCX: 00007fa333d8f749 [ 86.233380][ T6182] RDX: 00002000000001c0 RSI: 00000000c02c564a RDI: 0000000000000003 [ 86.233389][ T6182] RBP: 00007fa334ca9090 R08: 0000000000000000 R09: 0000000000000000 [ 86.233398][ T6182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.233410][ T6182] R13: 00007fa333fe6038 R14: 00007fa333fe5fa0 R15: 00007ffd6857bac8 [ 86.233433][ T6182] [ 86.233496][ T6182] ERROR: Out of memory at tomoyo_realpath_from_path. [ 86.412712][ T6117] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.447717][ T6180] NFSD: Failed to start, no listeners configured. [ 86.823910][ T6117] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 86.903754][ T6117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 87.081069][ T6117] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 87.091146][ T6117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.511430][ T6117] usb 2-1: Product: syz [ 87.515798][ T6117] usb 2-1: Manufacturer: syz [ 87.520395][ T6117] usb 2-1: SerialNumber: syz [ 87.527136][ T6117] usb 2-1: config 0 descriptor?? [ 87.628205][ T30] audit: type=1400 audit(1767083575.144:225): avc: denied { accept } for pid=6193 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.714166][ T6117] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 88.105008][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 88.652482][ T30] audit: type=1400 audit(1767083576.184:226): avc: denied { create } for pid=6213 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.238473][ T10] usb 2-1: USB disconnect, device number 3 [ 89.281567][ T6226] Bluetooth: MGMT ver 1.23 [ 89.295215][ T30] audit: type=1400 audit(1767083576.814:227): avc: denied { write } for pid=6219 comm="syz.4.74" path="socket:[10572]" dev="sockfs" ino=10572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.775460][ T30] audit: type=1400 audit(1767083579.254:228): avc: denied { getopt } for pid=6234 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.980226][ T6256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6256 comm=syz.1.78 [ 93.002363][ T6263] netlink: 88 bytes leftover after parsing attributes in process `syz.1.87'. [ 93.011339][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 93.398064][ T6277] mmap: syz.1.90 (6277) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.342769][ T116] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.904235][ T116] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 94.920631][ T30] audit: type=1400 audit(1767083582.444:229): avc: denied { write } for pid=6297 comm="syz.1.96" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.942742][ T116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 94.975298][ T116] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 94.984755][ T116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.002802][ T116] usb 4-1: Product: syz [ 95.008767][ T116] usb 4-1: Manufacturer: syz [ 95.015712][ T116] usb 4-1: SerialNumber: syz [ 95.143322][ T116] usb 4-1: config 0 descriptor?? [ 95.161342][ T116] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 95.235993][ T6302] FAULT_INJECTION: forcing a failure. [ 95.235993][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 95.248790][ T6302] CPU: 1 UID: 0 PID: 6302 Comm: syz.1.97 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.248815][ T6302] Tainted: [L]=SOFTLOCKUP [ 95.248821][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.248830][ T6302] Call Trace: [ 95.248836][ T6302] [ 95.248842][ T6302] dump_stack_lvl+0x16c/0x1f0 [ 95.248868][ T6302] should_fail_ex+0x512/0x640 [ 95.248892][ T6302] ? kmem_cache_alloc_noprof+0x62/0x770 [ 95.248911][ T6302] should_failslab+0xc2/0x120 [ 95.248933][ T6302] kmem_cache_alloc_noprof+0x83/0x770 [ 95.248949][ T6302] ? __might_fault+0xe3/0x190 [ 95.248964][ T6302] ? getname_flags.part.0+0x4c/0x550 [ 95.248986][ T6302] ? getname_flags.part.0+0x4c/0x550 [ 95.249002][ T6302] getname_flags.part.0+0x4c/0x550 [ 95.249021][ T6302] getname_flags+0x93/0xf0 [ 95.249041][ T6302] user_path_at+0x24/0x60 [ 95.249061][ T6302] __x64_sys_mount+0x1fb/0x310 [ 95.249079][ T6302] ? __pfx___x64_sys_mount+0x10/0x10 [ 95.249095][ T6302] ? __x64_sys_write+0x11/0xb0 [ 95.249119][ T6302] do_syscall_64+0xcd/0xf80 [ 95.249141][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.249158][ T6302] RIP: 0033:0x7fdf3338f749 [ 95.249171][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.249186][ T6302] RSP: 002b:00007fdf342bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 95.249203][ T6302] RAX: ffffffffffffffda RBX: 00007fdf335e6180 RCX: 00007fdf3338f749 [ 95.249213][ T6302] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 95.249223][ T6302] RBP: 00007fdf342bc090 R08: 0000000000000000 R09: 0000000000000000 [ 95.249232][ T6302] R10: 0000000000010005 R11: 0000000000000246 R12: 0000000000000001 [ 95.249242][ T6302] R13: 00007fdf335e6218 R14: 00007fdf335e6180 R15: 00007fff701bbcc8 [ 95.249264][ T6302] [ 95.584367][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 95.795193][ T791] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.335395][ T791] usb 5-1: Using ep0 maxpacket: 16 [ 96.379268][ T791] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 96.407708][ T791] usb 5-1: config 0 has no interface number 0 [ 96.424544][ T791] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 96.448075][ T791] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 96.463236][ T6313] netlink: 88 bytes leftover after parsing attributes in process `syz.1.101'. [ 96.472127][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 96.505157][ T791] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 96.525213][ T791] usb 5-1: Product: syz [ 96.595515][ T791] usb 5-1: SerialNumber: syz [ 96.691304][ T791] usb 5-1: config 0 descriptor?? [ 96.699497][ T791] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 96.805690][ T30] audit: type=1400 audit(1767083584.344:230): avc: denied { create } for pid=6319 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.895899][ T791] usb 4-1: USB disconnect, device number 2 [ 96.933897][ T30] audit: type=1400 audit(1767083584.454:231): avc: denied { write } for pid=6319 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.941508][ T6321] lo speed is unknown, defaulting to 1000 [ 96.965874][ T6321] lo speed is unknown, defaulting to 1000 [ 96.978115][ T6321] lo speed is unknown, defaulting to 1000 [ 96.998615][ T6321] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.037111][ T6321] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 97.126074][ T6321] lo speed is unknown, defaulting to 1000 [ 97.145562][ T6321] lo speed is unknown, defaulting to 1000 [ 97.158272][ T6321] lo speed is unknown, defaulting to 1000 [ 97.172154][ T6321] lo speed is unknown, defaulting to 1000 [ 97.189557][ T6321] lo speed is unknown, defaulting to 1000 [ 97.201457][ T6321] lo speed is unknown, defaulting to 1000 [ 97.980609][ T5950] kernel write not supported for file /ppp (pid: 5950 comm: kworker/0:10) [ 97.995900][ T30] audit: type=1400 audit(1767083585.504:232): avc: denied { create } for pid=6326 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 98.024898][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.104'. [ 99.158744][ T6336] team0: Cannot enslave team device to itself [ 101.162712][ T6117] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.204016][ T6315] usb 5-1: USB disconnect, device number 3 [ 101.262803][ T5950] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.314957][ T6117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.425749][ T6117] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 101.435064][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 101.443119][ T6117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.500093][ T6117] usb 3-1: config 0 descriptor?? [ 101.545999][ T30] audit: type=1400 audit(1767083589.084:233): avc: denied { getopt } for pid=6361 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.722741][ T6315] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.819453][ T6367] netlink: 88 bytes leftover after parsing attributes in process `syz.4.113'. [ 101.828429][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.113'. [ 101.945045][ T6353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.955269][ T6353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.982733][ T6315] usb 4-1: Using ep0 maxpacket: 16 [ 102.043147][ T5950] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 102.051435][ T5950] usb 1-1: config 0 has no interface number 0 [ 102.061319][ T5950] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 102.071798][ T6315] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 102.072767][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.088967][ T5950] usb 1-1: Product: syz [ 102.093216][ T5950] usb 1-1: Manufacturer: syz [ 102.093645][ T30] audit: type=1400 audit(1767083589.624:234): avc: denied { getopt } for pid=6368 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.097837][ T5950] usb 1-1: SerialNumber: syz [ 102.119428][ T6315] usb 4-1: config 1 has no interface number 0 [ 102.129911][ T5950] usb 1-1: config 0 descriptor?? [ 102.138915][ T5950] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 102.151430][ T6315] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 102.161452][ T6315] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 102.171831][ T6315] usb 4-1: config 1 interface 105 has no altsetting 0 [ 102.181064][ T6315] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 102.191279][ T6315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.200592][ T6315] usb 4-1: Product: syz [ 102.204822][ T6315] usb 4-1: Manufacturer: syz [ 102.209427][ T6315] usb 4-1: SerialNumber: syz [ 102.235348][ T6364] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 102.245896][ T6364] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 102.372977][ T5950] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 102.408067][ T791] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.464234][ T5950] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 102.544709][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 102.587695][ T791] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 102.614062][ T791] usb 5-1: config index 0 descriptor too short (expected 8219, got 27) [ 102.623428][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.639332][ T791] usb 5-1: config 0 has no interfaces? [ 102.653219][ T791] usb 5-1: config index 1 descriptor too short (expected 8219, got 27) [ 102.663586][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.674255][ T791] usb 5-1: config 0 has no interfaces? [ 102.696364][ T30] audit: type=1400 audit(1767083590.224:235): avc: denied { create } for pid=6363 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.696960][ T6364] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 102.753746][ T791] usb 5-1: config index 2 descriptor too short (expected 8219, got 27) [ 102.760085][ T6360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.777246][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.788147][ T6364] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 102.796442][ T791] usb 5-1: config 0 has no interfaces? [ 102.803901][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 102.806052][ T791] usb 5-1: config index 3 descriptor too short (expected 8219, got 27) [ 102.818007][ T6360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.826482][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.841167][ T791] usb 5-1: config 0 has no interfaces? [ 102.868867][ T30] audit: type=1400 audit(1767083590.234:236): avc: denied { write } for pid=6363 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.900794][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 102.901173][ T48] usb 1-1: USB disconnect, device number 3 [ 102.954200][ T791] usb 5-1: config index 4 descriptor too short (expected 8219, got 27) [ 102.994086][ T48] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 103.021396][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.034260][ T791] usb 5-1: config 0 has no interfaces? [ 103.035994][ T6364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.042981][ T791] usb 5-1: config index 5 descriptor too short (expected 8219, got 27) [ 103.060096][ T6364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.060359][ T48] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 103.082972][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.093263][ T6315] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 103.104189][ T791] usb 5-1: config 0 has no interfaces? [ 103.105632][ T30] audit: type=1326 audit(1767083590.644:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.1.118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf3338f749 code=0x0 [ 103.111663][ T6315] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 103.142546][ T48] quatech2 1-1:0.51: device disconnected [ 103.153867][ T791] usb 5-1: config index 6 descriptor too short (expected 8219, got 27) [ 103.162124][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.173368][ T791] usb 5-1: config 0 has no interfaces? [ 103.182141][ T6315] usb 4-1: USB disconnect, device number 3 [ 103.189378][ T791] usb 5-1: config index 7 descriptor too short (expected 8219, got 27) [ 103.200102][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.212470][ T791] usb 5-1: config 0 has no interfaces? [ 103.221126][ T791] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 103.230212][ T791] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 103.239144][ T791] usb 5-1: Product: syz [ 103.243482][ T791] usb 5-1: Manufacturer: syz [ 103.248057][ T791] usb 5-1: SerialNumber: syz [ 103.254633][ T791] usb 5-1: config 0 descriptor?? [ 103.305677][ T6117] usbhid 3-1:0.0: can't add hid device: -71 [ 103.311710][ T6117] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 103.357020][ T6117] usb 3-1: USB disconnect, device number 3 [ 103.477566][ T30] audit: type=1400 audit(1767083591.014:238): avc: denied { connect } for pid=6368 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.509148][ T30] audit: type=1400 audit(1767083591.014:239): avc: denied { read } for pid=6368 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.550123][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 103.731276][ T48] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.739398][ T791] usb 5-1: USB disconnect, device number 4 [ 103.892707][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 103.899262][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 103.909034][ T48] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 103.920345][ T48] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 103.930667][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.938752][ T48] usb 1-1: Product: syz [ 103.942716][ T5950] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.942940][ T48] usb 1-1: Manufacturer: syz [ 103.954994][ T48] usb 1-1: SerialNumber: syz [ 103.960977][ T48] usb 1-1: config 0 descriptor?? [ 104.093679][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 104.103225][ T5950] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 104.111272][ T5950] usb 4-1: config 0 has no interface number 0 [ 104.117582][ T5950] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 104.130325][ T5950] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 104.140771][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 104.152276][ T5950] usb 4-1: Product: syz [ 104.161709][ T5950] usb 4-1: SerialNumber: syz [ 104.182928][ T5950] usb 4-1: config 0 descriptor?? [ 104.196797][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.199514][ T5950] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 104.208559][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.240069][ T48] usb 1-1: USB disconnect, device number 4 [ 104.373735][ T30] audit: type=1400 audit(1767083591.916:240): avc: denied { attach_queue } for pid=6396 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.753630][ T6409] hub 5-0:1.0: USB hub found [ 105.758798][ T6409] hub 5-0:1.0: 1 port detected [ 106.306887][ T30] audit: type=1400 audit(1767083593.846:241): avc: denied { create } for pid=6410 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 106.348031][ T30] audit: type=1400 audit(1767083593.886:242): avc: denied { read write } for pid=6410 comm="syz.4.130" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.372292][ T5816] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.631882][ T30] audit: type=1400 audit(1767083593.926:243): avc: denied { open } for pid=6410 comm="syz.4.130" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.694550][ T6417] xt_hashlimit: max too large, truncated to 1048576 [ 106.728910][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 106.738187][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.757141][ T5816] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 106.768612][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.820723][ T5950] usb 4-1: USB disconnect, device number 4 [ 106.920339][ T5816] usb 2-1: config 0 descriptor?? [ 107.389075][ T5816] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 107.442983][ T5950] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.607790][ T5950] usb 4-1: Using ep0 maxpacket: 8 [ 107.624993][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.672761][ T6405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.682117][ T5950] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 107.682991][ T6405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.696968][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.760698][ T5950] usb 4-1: config 0 descriptor?? [ 107.781202][ T5950] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 107.851046][ T5816] usb 2-1: USB disconnect, device number 4 [ 108.347846][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 108.347860][ T30] audit: type=1400 audit(1767083595.886:250): avc: denied { mounton } for pid=6433 comm="syz.0.136" path="/28/file0" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 108.413320][ T30] audit: type=1400 audit(1767083595.946:251): avc: denied { watch } for pid=6433 comm="syz.0.136" path="/28/file1" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.705316][ T30] audit: type=1400 audit(1767083595.946:252): avc: denied { watch_sb watch_reads } for pid=6433 comm="syz.0.136" path="/28/file1" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.844996][ T30] audit: type=1400 audit(1767083595.986:253): avc: denied { execute } for pid=6433 comm="syz.0.136" path="/28/file1" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.960999][ T6441] xt_TCPMSS: Only works on TCP SYN packets [ 108.992899][ T5936] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.223107][ T30] audit: type=1400 audit(1767083596.756:254): avc: denied { mount } for pid=6442 comm="syz.0.138" name="/" dev="ramfs" ino=11503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 109.322800][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 109.325815][ T6445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.138'. [ 109.328100][ T30] audit: type=1326 audit(1767083596.866:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6442 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa333d8f749 code=0x7ffc0000 [ 109.367742][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.388033][ T5936] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 109.397598][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.418616][ T30] audit: type=1326 audit(1767083596.866:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6442 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa333d8f749 code=0x7ffc0000 [ 109.451966][ T30] audit: type=1326 audit(1767083596.866:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6442 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa333d8f749 code=0x7ffc0000 [ 109.484811][ T5936] usb 3-1: config 0 descriptor?? [ 109.527940][ T30] audit: type=1326 audit(1767083596.866:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6442 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa333d8f749 code=0x7ffc0000 [ 109.565943][ T30] audit: type=1326 audit(1767083596.866:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6442 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa333d8f749 code=0x7ffc0000 [ 109.613648][ T5950] gspca_vc032x: reg_w err -71 [ 109.703523][ T5950] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 109.713534][ T5950] usb 4-1: USB disconnect, device number 5 [ 110.183903][ T6450] hub 5-0:1.0: USB hub found [ 110.192774][ T6450] hub 5-0:1.0: 1 port detected [ 110.562407][ T5936] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 110.851761][ T48] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 110.856443][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.893947][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.930391][ T5902] usb 3-1: USB disconnect, device number 4 [ 110.982734][ T48] usb 1-1: device descriptor read/64, error -71 [ 111.002740][ T5816] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.162699][ T5816] usb 5-1: Using ep0 maxpacket: 16 [ 111.251050][ T5816] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 111.262401][ T5816] usb 5-1: config 0 has no interface number 0 [ 111.269153][ T5816] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 111.274120][ T48] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 111.281294][ T5816] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 112.051296][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 112.102757][ T48] usb 1-1: device descriptor read/64, error -71 [ 112.112698][ T5816] usb 5-1: Product: syz [ 112.116884][ T5816] usb 5-1: SerialNumber: syz [ 112.135986][ T5816] usb 5-1: config 0 descriptor?? [ 112.148630][ T5816] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 112.192714][ T5902] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 112.223874][ T48] usb usb1-port1: attempt power cycle [ 112.563274][ T6474] netlink: 'syz.2.146': attribute type 4 has an invalid length. [ 113.462516][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 113.476638][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 113.476653][ T30] audit: type=1400 audit(1767083599.886:271): avc: denied { create } for pid=6469 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 113.769129][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.839222][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.872528][ T5902] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 113.881729][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.904849][ T5902] usb 4-1: config 0 descriptor?? [ 113.926356][ T30] audit: type=1400 audit(1767083601.466:272): avc: denied { create } for pid=6482 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 113.954687][ T6483] netlink: 'syz.1.149': attribute type 10 has an invalid length. [ 113.969908][ T30] audit: type=1400 audit(1767083601.496:273): avc: denied { ioctl } for pid=6482 comm="syz.1.149" path="socket:[11638]" dev="sockfs" ino=11638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.013893][ T6483] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 114.417259][ T5902] usbhid 4-1:0.0: can't add hid device: -71 [ 114.430563][ T5902] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 114.452167][ T5902] usb 4-1: USB disconnect, device number 6 [ 114.646046][ T6117] usb 5-1: USB disconnect, device number 5 [ 114.653670][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 114.662346][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 114.672496][ T6488] ceph: No mds server is up or the cluster is laggy [ 115.865503][ T6509] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.156'. [ 115.877806][ T6509] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.156'. [ 116.103100][ T6517] team0: Cannot enslave team device to itself [ 116.323637][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 116.763419][ T30] audit: type=1400 audit(1767083603.956:274): avc: denied { mount } for pid=6514 comm="syz.4.159" name="/" dev="rpc_pipefs" ino=12831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 116.823481][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 116.966665][ T6530] trusted_key: syz.0.164 sent an empty control message without MSG_MORE. [ 117.562747][ T6117] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 117.570406][ T5902] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.782887][ T6117] usb 1-1: Using ep0 maxpacket: 16 [ 117.786303][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 117.789783][ T6117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.818883][ T5902] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 117.896251][ T30] audit: type=1400 audit(1767083605.436:275): avc: denied { setopt } for pid=6536 comm="syz.4.166" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.903495][ T6117] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 117.935780][ T6539] xt_hashlimit: max too large, truncated to 1048576 [ 117.942718][ T5902] usb 2-1: config 0 has no interface number 0 [ 117.948824][ T5902] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 117.953152][ T6117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.980734][ T5902] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 117.985041][ T6117] usb 1-1: config 0 descriptor?? [ 117.999375][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 118.007688][ T5902] usb 2-1: Product: syz [ 118.052771][ T5902] usb 2-1: SerialNumber: syz [ 118.068629][ T5902] usb 2-1: config 0 descriptor?? [ 118.086343][ T5902] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 118.504614][ T6117] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 118.722870][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.982167][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.071300][ T5902] usb 1-1: USB disconnect, device number 8 [ 119.281786][ T5950] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.475186][ T6557] team0: Cannot enslave team device to itself [ 119.650404][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 119.719148][ T5950] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 119.744866][ T5950] usb 4-1: config 1 has no interface number 0 [ 119.761369][ T5950] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 119.789563][ T5950] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 119.808637][ T5950] usb 4-1: config 1 interface 105 has no altsetting 0 [ 119.838319][ T5950] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 120.051802][ T6560] netlink: 88 bytes leftover after parsing attributes in process `syz.4.173'. [ 120.060962][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 120.190243][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.231149][ T5950] usb 4-1: Product: syz [ 120.242694][ T5950] usb 4-1: Manufacturer: syz [ 120.266781][ T5950] usb 4-1: SerialNumber: syz [ 120.302299][ T6551] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 120.312801][ T6551] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 120.343277][ T5902] usb 2-1: USB disconnect, device number 5 [ 120.742799][ T48] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 121.522780][ T48] usb 1-1: device descriptor read/64, error -71 [ 121.568262][ T6551] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 121.594523][ T6551] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 121.798024][ T48] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 122.017990][ T6551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.074098][ T48] usb 1-1: device descriptor read/64, error -71 [ 122.095846][ T6551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.158007][ T5950] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 122.192926][ T48] usb usb1-port1: attempt power cycle [ 122.210507][ T5950] aqc111 4-1:1.105: probe with driver aqc111 failed with error -32 [ 122.245618][ T5950] usb 4-1: USB disconnect, device number 7 [ 122.494289][ T6586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6586 comm=syz.4.178 [ 122.667527][ T48] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 122.787196][ T48] usb 1-1: device descriptor read/8, error -71 [ 123.063022][ T48] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 123.135968][ T6598] xt_hashlimit: max too large, truncated to 1048576 [ 123.213612][ T48] usb 1-1: device descriptor read/8, error -71 [ 123.224862][ T6588] tmpfs: Unknown parameter '' [ 123.463779][ T48] usb usb1-port1: unable to enumerate USB device [ 123.468569][ T30] audit: type=1400 audit(1767083610.766:276): avc: denied { read } for pid=6587 comm="syz.2.181" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 123.551354][ T30] audit: type=1400 audit(1767083610.766:277): avc: denied { ioctl } for pid=6587 comm="syz.2.181" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 123.639093][ T30] audit: type=1400 audit(1767083610.766:278): avc: denied { mounton } for pid=6587 comm="syz.2.181" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 123.665760][ T6596] team0: Cannot enslave team device to itself [ 123.685744][ T30] audit: type=1400 audit(1767083611.216:279): avc: denied { ioctl } for pid=6604 comm="syz.4.185" path="socket:[12058]" dev="sockfs" ino=12058 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.362714][ T5950] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 124.413033][ T6613] lo speed is unknown, defaulting to 1000 [ 124.439102][ T30] audit: type=1400 audit(1767083611.976:280): avc: denied { ioctl } for pid=6612 comm="syz.2.188" path="socket:[13077]" dev="sockfs" ino=13077 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.502786][ T5902] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.544805][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 124.657039][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 124.664307][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.677331][ T5950] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 124.686557][ T5902] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 124.702099][ T5902] usb 4-1: config 0 has no interface number 0 [ 124.712281][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.727677][ T5902] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 124.764092][ T5950] usb 1-1: config 0 descriptor?? [ 124.770548][ T5902] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 124.791394][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 124.822114][ T5902] usb 4-1: Product: syz [ 124.836682][ T5902] usb 4-1: SerialNumber: syz [ 124.854336][ T5902] usb 4-1: config 0 descriptor?? [ 124.886161][ T5902] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 124.997615][ T6619] NFSD: Failed to start, no listeners configured. [ 125.216283][ T5950] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 125.388044][ T30] audit: type=1400 audit(1767083612.926:281): avc: denied { create } for pid=6621 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.542914][ T30] audit: type=1400 audit(1767083612.946:282): avc: denied { mounton } for pid=6621 comm="syz.4.191" path="/33/file1" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.543376][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.583469][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.708730][ T5950] usb 1-1: USB disconnect, device number 13 [ 126.548460][ T6644] team0: Cannot enslave team device to itself [ 126.775987][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 127.630381][ T24] usb 4-1: USB disconnect, device number 8 [ 128.005864][ T6656] netlink: 88 bytes leftover after parsing attributes in process `syz.4.199'. [ 128.015080][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 128.372914][ T6117] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 128.582720][ T6117] usb 1-1: Using ep0 maxpacket: 16 [ 128.694473][ T6117] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 128.715275][ T6117] usb 1-1: config 0 has no interface number 0 [ 128.721509][ T6117] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 128.740445][ T6117] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 128.769318][ T6117] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 128.862490][ T6668] dvmrp0: entered allmulticast mode [ 129.201881][ T6117] usb 1-1: Product: syz [ 129.348827][ T6117] usb 1-1: SerialNumber: syz [ 129.503278][ T6672] xt_TCPMSS: Only works on TCP SYN packets [ 129.797539][ T6117] usb 1-1: config 0 descriptor?? [ 129.822042][ T6117] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 130.539237][ T6684] hub 5-0:1.0: USB hub found [ 130.546551][ T6684] hub 5-0:1.0: 1 port detected [ 131.682704][ T5919] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.982694][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 132.017743][ T5919] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 132.047454][ T5919] usb 3-1: config 0 has no interface number 0 [ 132.072566][ T5919] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 132.127438][ T5919] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 132.168113][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 132.204982][ T5919] usb 3-1: Product: syz [ 132.228885][ T5919] usb 3-1: SerialNumber: syz [ 132.257730][ T5919] usb 3-1: config 0 descriptor?? [ 132.302139][ T5919] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 132.335319][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.357405][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.340748][ T24] usb 1-1: USB disconnect, device number 14 [ 134.225875][ T30] audit: type=1400 audit(1767083621.766:283): avc: denied { read } for pid=6706 comm="syz.1.214" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.252027][ T6708] binder: 6706:6708 ioctl c00c620f 2000000000c0 returned -22 [ 134.415537][ T6117] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.483109][ T30] audit: type=1400 audit(1767083621.796:284): avc: denied { open } for pid=6706 comm="syz.1.214" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.496461][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 135.507541][ T30] audit: type=1400 audit(1767083621.796:285): avc: denied { ioctl } for pid=6706 comm="syz.1.214" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.618653][ T6708] IPVS: ip_vs_add_dest(): server weight less than zero [ 135.639947][ T24] IPVS: starting estimator thread 0... [ 135.654429][ T6117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 135.664220][ T6117] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 135.726281][ T24] usb 3-1: USB disconnect, device number 5 [ 135.764497][ T6714] IPVS: using max 51 ests per chain, 122400 per kthread [ 135.767017][ T6117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 135.787353][ T6117] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 135.798665][ T6117] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 135.921666][ T6117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.088218][ T6117] usb 5-1: config 0 descriptor?? [ 136.234479][ T6723] netlink: 44 bytes leftover after parsing attributes in process `syz.1.218'. [ 136.445285][ T6117] hdpvr 5-1:0.0: firmware version 0x0 dated [ 136.451960][ T6117] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 136.853075][ T6702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.875782][ T6702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.973483][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 137.049426][ T6702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.092004][ T6702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.268679][ T6117] hdpvr 5-1:0.0: device init failed [ 137.351883][ T6117] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 137.438481][ T6117] usb 5-1: USB disconnect, device number 6 [ 137.771719][ T30] audit: type=1400 audit(1767083625.256:286): avc: denied { write } for pid=6739 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.194549][ T6751] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 138.717363][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 138.790376][ T6762] SELinux: Context system_u:object_r:newrole_exec_t:s0 is not valid (left unmapped). [ 138.838636][ T30] audit: type=1400 audit(1767083626.366:287): avc: denied { relabelto } for pid=6761 comm="syz.0.229" name=F70385A56E dev="mqueue" ino=14420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:newrole_exec_t:s0" [ 139.236709][ T30] audit: type=1400 audit(1767083626.366:288): avc: denied { associate } for pid=6761 comm="syz.0.229" name=F70385A56E dev="mqueue" ino=14420 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:newrole_exec_t:s0" [ 139.988467][ T6782] hub 5-0:1.0: USB hub found [ 139.996290][ T6782] hub 5-0:1.0: 1 port detected [ 140.580323][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 140.993914][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 141.003885][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 141.293993][ T5826] Bluetooth: hci1: command 0x2016 tx timeout [ 142.037552][ T6808] NFSD: Failed to start, no listeners configured. [ 142.062733][ T5884] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 142.202730][ T5884] usb 1-1: device descriptor read/64, error -71 [ 142.543294][ T5884] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 142.692717][ T5884] usb 1-1: device descriptor read/64, error -71 [ 142.858835][ T5884] usb usb1-port1: attempt power cycle [ 143.020153][ T30] audit: type=1400 audit(1767083630.546:289): avc: denied { read write } for pid=6814 comm="syz.2.242" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 143.074593][ T6818] lo speed is unknown, defaulting to 1000 [ 143.463545][ T5821] Bluetooth: hci1: command 0x2016 tx timeout [ 143.503106][ T5884] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 143.531697][ T5884] usb 1-1: device descriptor read/8, error -71 [ 143.549203][ T30] audit: type=1400 audit(1767083630.546:290): avc: denied { open } for pid=6814 comm="syz.2.242" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 143.633792][ T30] audit: type=1400 audit(1767083630.546:291): avc: denied { ioctl } for pid=6814 comm="syz.2.242" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 143.922791][ T5884] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 144.002958][ T5884] usb 1-1: device descriptor read/8, error -71 [ 144.200518][ T5884] usb usb1-port1: unable to enumerate USB device [ 144.262910][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.422699][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 144.478231][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.501619][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 144.617840][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.727939][ T6837] team0: Cannot enslave team device to itself [ 144.731793][ T24] usb 2-1: config 0 descriptor?? [ 144.982540][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 145.019987][ T6840] team0: Cannot enslave team device to itself [ 145.941777][ T6846] hub 5-0:1.0: USB hub found [ 145.947504][ T6846] hub 5-0:1.0: 1 port detected [ 146.760903][ T24] gspca_vc032x: reg_r err -110 [ 146.765903][ T24] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 146.777038][ T24] usb 2-1: USB disconnect, device number 6 [ 147.691015][ T6859] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 149.299491][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 149.485482][ T6867] hub 5-0:1.0: USB hub found [ 149.490422][ T6867] hub 5-0:1.0: 1 port detected [ 150.428554][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.258'. [ 150.992886][ T791] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 151.175275][ T6879] lo speed is unknown, defaulting to 1000 [ 151.474009][ T791] usb 3-1: Using ep0 maxpacket: 8 [ 151.537757][ T791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.569884][ T791] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 151.595571][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.633307][ T791] usb 3-1: config 0 descriptor?? [ 152.172604][ T791] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 152.204155][ T6887] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 152.204690][ T6887] block (null): Could not allocate knbd recv work queue. [ 152.260817][ T6889] hub 5-0:1.0: USB hub found [ 152.272796][ T6889] hub 5-0:1.0: 1 port detected [ 152.464501][ T6887] nbd: failed to add new device [ 152.938160][ T6901] 9p: Bad value for 'wfdno' [ 153.225425][ T30] audit: type=1400 audit(1767083640.766:292): avc: denied { write } for pid=6903 comm="syz.0.264" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.252014][ T6906] netlink: 48 bytes leftover after parsing attributes in process `syz.0.264'. [ 153.594665][ T791] gspca_vc032x: reg_w err -71 [ 153.655525][ T791] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 153.694563][ T6911] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 153.705291][ T6911] block device autoloading is deprecated and will be removed. [ 153.968496][ T791] usb 3-1: USB disconnect, device number 6 [ 154.053100][ T30] audit: type=1400 audit(1767083641.126:293): avc: denied { write } for pid=6903 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 154.704700][ T30] audit: type=1400 audit(1767083641.886:294): avc: denied { connect } for pid=6913 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.755494][ T30] audit: type=1400 audit(1767083641.946:295): avc: denied { setopt } for pid=6913 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.081810][ T6926] xt_TCPMSS: Only works on TCP SYN packets [ 155.409378][ T6930] xt_TCPMSS: Only works on TCP SYN packets [ 155.780410][ T6940] xt_hashlimit: max too large, truncated to 1048576 [ 156.032826][ T5919] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 156.224548][ T5919] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 156.233321][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.262848][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 156.290538][ T5919] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.321198][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 156.332325][ T5919] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.371278][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.394426][ T5919] usb 3-1: Product: syz [ 156.408524][ T5919] usb 3-1: Manufacturer: syz [ 156.422736][ T5919] usb 3-1: SerialNumber: syz [ 275.702697][ C1] ------------[ cut here ]------------ [ 275.708820][ C1] WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall.part.0+0x1c4/0x4b0, CPU#1: swapper/1/0 [ 275.720196][ C1] Modules linked in: [ 275.724361][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.734829][ C1] Tainted: [L]=SOFTLOCKUP [ 275.739119][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.749142][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 275.756052][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 30 38 85 00 b8 01 00 00 00 87 05 d5 c4 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 e6 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 275.775625][ C1] RSP: 0000:ffffc90000a08df0 EFLAGS: 00010046 [ 275.781670][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38de0 [ 275.789625][ C1] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 275.797564][ C1] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58 [ 275.805502][ C1] R10: 0000000000000003 R11: ffff88801dab2ff0 R12: 1ffffffff1c02250 [ 275.813440][ C1] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b853bc52 [ 275.821377][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 275.830280][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.836831][ C1] CR2: 0000001b30510ff8 CR3: 00000000366df000 CR4: 00000000003526f0 [ 275.844771][ C1] Call Trace: [ 275.848022][ C1] [ 275.850837][ C1] rcu_core+0x4cf/0x15f0 [ 275.855049][ C1] ? sched_clock+0x38/0x60 [ 275.859429][ C1] ? sched_clock_cpu+0x6c/0x530 [ 275.864245][ C1] ? clockevents_program_event+0x151/0x370 [ 275.870025][ C1] ? __pfx_rcu_core+0x10/0x10 [ 275.874681][ C1] ? read_tsc+0x9/0x20 [ 275.878718][ C1] ? ktime_get+0x1a7/0x310 [ 275.883101][ C1] ? find_held_lock+0x2b/0x80 [ 275.887752][ C1] handle_softirqs+0x219/0x950 [ 275.892489][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 275.897746][ C1] __irq_exit_rcu+0x109/0x170 [ 275.902391][ C1] irq_exit_rcu+0x9/0x30 [ 275.906608][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 275.912210][ C1] [ 275.915110][ C1] [ 275.918013][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 275.923959][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 275.929560][ C1] Code: d6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 275.949132][ C1] RSP: 0000:ffffc90000197de8 EFLAGS: 000002c6 [ 275.955165][ C1] RAX: 0000000001e25031 RBX: 0000000000000001 RCX: ffffffff8b7806d9 [ 275.963101][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdec9 RDI: ffffffff8bf2b400 [ 275.971039][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 275.978983][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 275.986920][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b5d0 R15: 0000000000000000 [ 275.994871][ C1] ? ct_kernel_exit+0x139/0x190 [ 275.999691][ C1] default_idle+0x13/0x20 [ 276.003990][ C1] default_idle_call+0x6c/0xb0 [ 276.008724][ C1] do_idle+0x38d/0x510 [ 276.012768][ C1] ? __pfx_do_idle+0x10/0x10 [ 276.017334][ C1] ? do_idle+0x1c/0x510 [ 276.021472][ C1] cpu_startup_entry+0x4f/0x60 [ 276.026214][ C1] start_secondary+0x21d/0x2d0 [ 276.030953][ C1] ? __pfx_start_secondary+0x10/0x10 [ 276.036208][ C1] common_startup_64+0x13e/0x148 [ 276.041120][ C1] [ 276.044128][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 276.051376][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.061840][ C1] Tainted: [L]=SOFTLOCKUP [ 276.066130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.076150][ C1] Call Trace: [ 276.079399][ C1] [ 276.082225][ C1] dump_stack_lvl+0x3d/0x1f0 [ 276.086785][ C1] vpanic+0x640/0x6f0 [ 276.090745][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 276.097038][ C1] panic+0xca/0xd0 [ 276.100727][ C1] ? __pfx_panic+0x10/0x10 [ 276.105113][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 276.110191][ C1] check_panic_on_warn+0xab/0xb0 [ 276.115105][ C1] __warn+0x108/0x3c0 [ 276.119056][ C1] __report_bug+0x2a0/0x520 [ 276.123526][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 276.129822][ C1] ? __pfx___report_bug+0x10/0x10 [ 276.134814][ C1] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 276.140505][ C1] ? __lock_acquire+0x436/0x2890 [ 276.145418][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 276.151713][ C1] report_bug+0xb2/0x220 [ 276.155923][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 276.162222][ C1] handle_bug+0x127/0x260 [ 276.166522][ C1] exc_invalid_op+0x17/0x50 [ 276.171001][ C1] asm_exc_invalid_op+0x1a/0x20 [ 276.175820][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 276.182723][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 30 38 85 00 b8 01 00 00 00 87 05 d5 c4 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 e6 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 276.202293][ C1] RSP: 0000:ffffc90000a08df0 EFLAGS: 00010046 [ 276.208324][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38de0 [ 276.216261][ C1] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 276.224200][ C1] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58 [ 276.232139][ C1] R10: 0000000000000003 R11: ffff88801dab2ff0 R12: 1ffffffff1c02250 [ 276.240079][ C1] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b853bc52 [ 276.248021][ C1] ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0 [ 276.254327][ C1] rcu_core+0x4cf/0x15f0 [ 276.258538][ C1] ? sched_clock+0x38/0x60 [ 276.262920][ C1] ? sched_clock_cpu+0x6c/0x530 [ 276.267735][ C1] ? clockevents_program_event+0x151/0x370 [ 276.273512][ C1] ? __pfx_rcu_core+0x10/0x10 [ 276.278158][ C1] ? read_tsc+0x9/0x20 [ 276.282202][ C1] ? ktime_get+0x1a7/0x310 [ 276.286592][ C1] ? find_held_lock+0x2b/0x80 [ 276.291242][ C1] handle_softirqs+0x219/0x950 [ 276.295979][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 276.301236][ C1] __irq_exit_rcu+0x109/0x170 [ 276.305885][ C1] irq_exit_rcu+0x9/0x30 [ 276.310098][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 276.315705][ C1] [ 276.318603][ C1] [ 276.321503][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.327448][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 276.333046][ C1] Code: d6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 276.352627][ C1] RSP: 0000:ffffc90000197de8 EFLAGS: 000002c6 [ 276.358658][ C1] RAX: 0000000001e25031 RBX: 0000000000000001 RCX: ffffffff8b7806d9 [ 276.366595][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdec9 RDI: ffffffff8bf2b400 [ 276.374531][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 276.382469][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 276.390407][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b5d0 R15: 0000000000000000 [ 276.398346][ C1] ? ct_kernel_exit+0x139/0x190 [ 276.403169][ C1] default_idle+0x13/0x20 [ 276.407467][ C1] default_idle_call+0x6c/0xb0 [ 276.412200][ C1] do_idle+0x38d/0x510 [ 276.416239][ C1] ? __pfx_do_idle+0x10/0x10 [ 276.420799][ C1] ? do_idle+0x1c/0x510 [ 276.424925][ C1] cpu_startup_entry+0x4f/0x60 [ 276.429661][ C1] start_secondary+0x21d/0x2d0 [ 276.434390][ C1] ? __pfx_start_secondary+0x10/0x10 [ 276.439649][ C1] common_startup_64+0x13e/0x148 [ 276.444561][ C1] [ 277.500755][ C1] Shutting down cpus with NMI [ 277.505718][ C1] Kernel Offset: disabled [ 277.510016][ C1] Rebooting in 86400 seconds..