last executing test programs: 1m14.911876519s ago: executing program 3 (id=128): syz_usb_connect(0x3, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102dd8a7a20670812980f240102030109023f0001f40820100904440305b79db505090503120800078004090509f97f000410ff030100020905"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000080)={0x2, "625f94f0000000000000009024165d61e196ffc700004b1cd9ae00", 0x2, 0x9, 0x1, 0x2, 0x200, 0x2}) 1m12.777179396s ago: executing program 3 (id=140): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001b000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000c9d80000000000000000000000000000003801475f87a5bde3b7f5e5e7fca2ea2f0124a06825134b50", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) listen(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) inotify_init1(0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ef8, 0x9, r4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) iopl(0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1m12.646472914s ago: executing program 3 (id=142): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x40, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c851}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "c4"}]}}, 0x0}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)={0x8, 0x1, '\x00', [@pad1, @jumbo, @ra={0x5, 0x2, 0x4}]}, 0x18) landlock_restrict_self(0xffffffffffffffff, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000401000001000000090000003c0003800800030000000000140002007663616e300000000000000000000000080001000100000014000600ff02000000000000000000000000000179ab11a87a1be216bd62c278f2f3ffc7ff3a5c31efec395fad99245685405448621ff87f66b8cd141acca16ddbe2155def3bfc920a95a9adbec21971271b62dd294d11fc545410e3969be1d2fdc94c7759a0"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x12, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe838}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x80) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) 1m9.3430388s ago: executing program 3 (id=150): r0 = socket$inet(0x2, 0xa, 0xa) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000340)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fsetxattr$security_capability(r2, &(0x7f00000002c0), &(0x7f0000000300)=@v2={0x2000000, [{0x9, 0xfff}, {0xffffffff, 0xfffffffa}]}, 0x14, 0x1) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300", @ANYRES16=r3], 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000280)={0x7ff, 0x7, 0x29, 0x0, 0x1b}) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x82c2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a0000e107000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x301600, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xdaf}}, './file0\x00'}) r8 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) 1m5.53793304s ago: executing program 3 (id=159): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', "00000000000000000000000000000000000000000000000400"}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 1m5.155420832s ago: executing program 3 (id=160): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}]}}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}]}}) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) (async) 49.87369485s ago: executing program 32 (id=160): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}]}}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}]}}) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) (async) 9.305680843s ago: executing program 4 (id=345): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000013259920010000000000000003010902240001000000000904000002ca468101000000000000000000090508000000230000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0x7, 0x10700) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, r3, 0x1, 0x0) getitimer(0xe, 0x0) mlockall(0x6) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x200, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0x4}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="3d5c481f87eabfab10143d9abe86", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r6, 0x8000) r7 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r7, 0xaece) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, &(0x7f0000000180)) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000480902120001000000000904000000ef"], 0x0) 8.151688439s ago: executing program 2 (id=349): openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001040), &(0x7f0000001080)=0x14) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000b00)={0x0, 0x0, @ioapic={0x6000, 0x4, 0x3, 0x5, 0x0, [{0x7f, 0xfb, 0x0, '\x00', 0x71}, {0xd8, 0x0, 0x1}, {0x5, 0x6, 0x2, '\x00', 0x2}, {0x5, 0x0, 0x7f, '\x00', 0x6}, {0x8, 0x5, 0x5, '\x00', 0xe}, {0x1, 0x0, 0x2, '\x00', 0xf9}, {0x9, 0x9, 0xb, '\x00', 0xf}, {0x9, 0x5, 0x55, '\x00', 0x6a}, {0x5, 0x2, 0xf8, '\x00', 0x7f}, {0x0, 0xb3, 0x65, '\x00', 0x9}, {0x8, 0x2, 0x7f}, {0x0, 0x1, 0x9, '\x00', 0x7}, {0xff, 0xb, 0x0, '\x00', 0x7}, {0x0, 0x9, 0x2, '\x00', 0x8}, {0x0, 0x7, 0x8, '\x00', 0x4}, {0x5, 0x2, 0x5, '\x00', 0xf}, {0x3, 0x8, 0x7, '\x00', 0x6}, {0x1, 0x7, 0x4, '\x00', 0x3}, {0x7c, 0x6e, 0x5, '\x00', 0x76}, {0x0, 0x6, 0x2, '\x00', 0x7}, {0x80, 0x7, 0x2}, {0x3, 0x4, 0x4, '\x00', 0xef}, {0x38, 0x6, 0x2, '\x00', 0x9}, {0x5, 0x9, 0xfd, '\x00', 0x24}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000580)=@ethtool_regs={0x4, 0x6}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$inet6(0xa, 0x2, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) bind$inet6(r7, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 7.213149406s ago: executing program 1 (id=351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80600, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xd, &(0x7f0000000040)) setrlimit(0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x10000, &(0x7f0000000300)='usrquota') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002e00010026bd4e00fbdbdf250400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x2, 0x1, 0x4, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r5, 0x7, 0x3c, 0x6, 0x2, [], [0x8, 0x3, 0x8001, 0x5], [0x7, 0x5, 0xfffffffb, 0xd156], [0x1, 0x5, 0x800]}) 7.149199312s ago: executing program 2 (id=353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x410101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, '\x00', "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "beb8dd00", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r5, &(0x7f0000000240)=""/169, 0xa9, 0x40010002, 0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000140)={0xa, 0x4e23, 0xd, @local, 0x9}, 0x1c) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0xb, 0x0, 0x1b, 0x0, 0x4f, 0x0, 0xe7}) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000040)=""/173, &(0x7f0000000100)=0xad) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 6.833411942s ago: executing program 1 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904"], 0x0) (async) 5.310959099s ago: executing program 5 (id=357): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000600)=""/129, 0x81}, {0x0}], 0x3}, 0x20) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 5.286002169s ago: executing program 1 (id=358): capset(&(0x7f0000000540)={0x19980330}, &(0x7f0000000580)={0x8, 0x5d9, 0xfffffffb, 0xaca1, 0x7eb, 0x9}) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="6105060302"], 0x61) 5.160758152s ago: executing program 1 (id=359): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(r4, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4008000) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x26, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015743a"]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) 5.060852637s ago: executing program 5 (id=360): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x60c040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x4, 0x0, 0x5, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x40c0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf4d}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) faccessat2(r2, &(0x7f00000003c0)='./file0\x00', 0x7, 0x1100) modify_ldt$write2(0x11, &(0x7f0000000400)={0x5, 0x20000000, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r5 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000480)={0x4, [0x9, 0x7, 0x0, 0x3]}, &(0x7f00000004c0)=0xc) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x40080) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000600)=0xac, &(0x7f0000000640)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000680), 0x28a740, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r5}, './file0/file0\x00'}) setxattr$trusted_overlay_upper(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740), &(0x7f0000000780)={0x0, 0xfb, 0xc7, 0x0, 0x5, "197123187b87386bf5db515712502914", "5b732a869cc96bd6e4a9dae092afd8d4ec2b81b856e7b348e2205fa02f8557e4b3da43ee4d8a0a189fa069d533e7281923337b81158dfc1000c01105197abac5a346a07d73923ef41983decad3adb444b755ad1d0a774566c4d5ceb1e4f483ddb51d9550c115b0efafc2712c3cae0bef618c4476944baf688bd20390858e4e0d3f2f11e3eeeb0bd550782151a867cb483f2e4983f2bdddc7dbb26362648f5521d0242063a28770335216af8f694b24ec0bfb"}, 0xc7, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f0000000880), &(0x7f00000008c0)=0x4) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000900), 0x4) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r8) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4080) socket(0x18, 0x80000, 0x8) recvmmsg(r8, &(0x7f0000008c40)=[{{&(0x7f0000000a80)=@phonet, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b00)=""/230, 0xe6}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x2, &(0x7f0000000c80)=""/95, 0x5f}, 0x1}, {{&(0x7f0000000d00)=@nfc_llcp, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000d80)=""/191, 0xbf}, {&(0x7f0000000e40)=""/162, 0xa2}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/248, 0xf8}, {&(0x7f0000002000)=""/15, 0xf}, {&(0x7f0000002040)=""/233, 0xe9}, {&(0x7f0000002140)=""/194, 0xc2}, {&(0x7f0000002240)=""/95, 0x5f}], 0x8, &(0x7f0000002340)=""/166, 0xa6}}, {{&(0x7f0000002400)=@isdn, 0x80, &(0x7f0000002540)=[{&(0x7f0000002480)=""/137, 0x89}], 0x1}, 0x8}, {{&(0x7f0000002580)=@caif, 0x80, &(0x7f0000002700)=[{&(0x7f0000002600)=""/233, 0xe9}], 0x1, &(0x7f0000002740)=""/68, 0x44}, 0xffff}, {{&(0x7f00000027c0)=@isdn, 0x80, &(0x7f0000003980)=[{&(0x7f0000002840)=""/88, 0x58}, {&(0x7f00000028c0)=""/17, 0x11}, {&(0x7f0000002900)=""/8, 0x8}, {&(0x7f0000002940)=""/27, 0x1b}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x5, &(0x7f0000003a00)=""/163, 0xa3}, 0x4}, {{&(0x7f0000003ac0)=@nfc_llcp, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000003b40)=""/144, 0x90}, {&(0x7f0000003c00)=""/100, 0x64}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/158, 0x9e}, {&(0x7f0000004d40)=""/65, 0x41}, {&(0x7f0000004dc0)=""/4096, 0x1000}], 0x6, &(0x7f0000005e40)}, 0x4}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000005e80)=""/175, 0xaf}, {&(0x7f0000005f40)=""/124, 0x7c}, {&(0x7f0000005fc0)=""/78, 0x4e}, {&(0x7f0000006040)=""/163, 0xa3}, {&(0x7f0000006100)=""/123, 0x7b}], 0x5, &(0x7f0000006200)=""/61, 0x3d}, 0x6}, {{&(0x7f0000006240)=@pppoe, 0x80, &(0x7f0000006800)=[{&(0x7f00000062c0)=""/178, 0xb2}, {&(0x7f0000006380)=""/58, 0x3a}, {&(0x7f00000063c0)=""/215, 0xd7}, {&(0x7f00000064c0)=""/165, 0xa5}, {&(0x7f0000006580)=""/238, 0xee}, {&(0x7f0000006680)=""/227, 0xe3}, {&(0x7f0000006780)=""/77, 0x4d}], 0x7, &(0x7f0000006880)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000007880)=@alg, 0x80, &(0x7f0000008b80)=[{&(0x7f0000007900)=""/4096, 0x1000}, {&(0x7f0000008900)=""/71, 0x47}, {&(0x7f0000008980)=""/190, 0xbe}, {&(0x7f0000008a40)=""/139, 0x8b}, {&(0x7f0000008b00)=""/32, 0x20}, {&(0x7f0000008b40)=""/23, 0x17}], 0x6, &(0x7f0000008c00)=""/59, 0x3b}, 0x8b}], 0x9, 0x40010022, &(0x7f0000008e80)) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000008ec0)=0x1, 0x4) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2b) 4.946649041s ago: executing program 2 (id=361): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') (async, rerun: 32) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) (async, rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f07ebbeee, 0x810, r5, 0x5aa9f000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x1f00, 0x12) (async, rerun: 64) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) writev(r9, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) (async, rerun: 32) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x10, 0xb, 0x5}, 0x2}, 0x20, 0x1, 0x0) (rerun: 32) 4.801116296s ago: executing program 4 (id=362): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0x1, &(0x7f0000000240)={0x1, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) (async) r1 = gettid() rt_sigqueueinfo(r1, 0x21, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) (async, rerun: 64) read$FUSE(r2, &(0x7f0000001d00)={0x2020}, 0x2020) (async, rerun: 64) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$sndseq(0xffffffffffffffff, &(0x7f0000001380), 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) (async) getsockopt(0xffffffffffffffff, 0x111, 0xf8000000, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) sysinfo(&(0x7f0000000000)=""/196) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x5) (async) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000000)=0x1, 0x4) 4.352999727s ago: executing program 2 (id=363): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b", @ANYRESHEX], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) syz_usb_disconnect(r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r3, 0x29, 0x46, 0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) 3.856022658s ago: executing program 0 (id=364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80600, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xd, &(0x7f0000000040)) setrlimit(0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x10000, &(0x7f0000000300)='usrquota') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002e00010026bd4e00fbdbdf250400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x2, 0x1, 0x4, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r4, 0x7, 0x3c, 0x6, 0x2, [], [0x8, 0x3, 0x8001, 0x5], [0x7, 0x5, 0xfffffffb, 0xd156], [0x1, 0x5, 0x800]}) 3.581432442s ago: executing program 0 (id=365): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000004c0)='illinois', 0x8) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003a88080001800400df80180004800c00fb00ff0700000000005e4fec"], 0x38}, 0x1, 0x0, 0x0, 0x200c890}, 0x4040) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x1) fchdir(r6) lseek(0xffffffffffffffff, 0x100, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x14}, @in={0x2, 0x4e24, @loopback}], 0x2c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) r8 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r8, &(0x7f0000000080)="f8ffe0000affd7a5", 0x8, 0x40001, 0x0, 0x0) 3.509304519s ago: executing program 5 (id=366): socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r0 = getpid() socket(0x400000000010, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) setgroups(0x0, 0x0) (async) setgroups(0x0, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000140)={0x8, 0x2f3d}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)=ANY=[@ANYBLOB="020000000100070000000000040000000000070010000600000000002000040000000000"], 0x4, 0x3) (async) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)=ANY=[@ANYBLOB="020000000100070000000000040000000000070010000600000000002000040000000000"], 0x4, 0x3) 2.949665879s ago: executing program 4 (id=367): modify_ldt$write2(0x11, &(0x7f0000000100)={0xb34, 0x100000, 0x2000, 0x1}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_setup(0xe5, &(0x7f0000000000)) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.851437277s ago: executing program 1 (id=368): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x141000, 0x0) r3 = memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xcb00, 0x180) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000180)={0xa, 0xfffc, 0x0, @mcast1, 0x7}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000140)=@t={0x81, 0x6, 0x4}) 2.548988859s ago: executing program 0 (id=369): r0 = add_key(0x0, &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000340)="565f4a62523e7e16e78500599e3a1ed54b8e485b3b86c3a23d93523e23800aacdbdad43d31fdb16efe0a52", 0x2b, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f00000010c0)=""/4096, 0x1000) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f0000003140)=""/4083, 0xff3) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x5) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r3, 0x200f, 0x0) 2.286544883s ago: executing program 0 (id=370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='attr\x00') r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x48, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.063228772s ago: executing program 4 (id=371): r0 = socket(0x200000100000011, 0x3, 0x0) (async) r1 = syz_open_dev$video4linux(0x0, 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000040)={0x2bcb, 0x0, 0x2012, 0x0, 0x2, 0x3, 0x5, 0x1}) socket$packet(0x11, 0x3, 0x300) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) r3 = syz_io_uring_setup(0x1715, &(0x7f00000020c0)={0x0, 0x4, 0x10000, 0x1, 0xd5}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000), 0x4}, 0x1) (async) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) (async) io_uring_enter(r3, 0x27e2, 0x0, 0xf, 0x0, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) (async) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) pipe2$watch_queue(0x0, 0x80) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000640)={0x38, r10, 0x1, 0x30bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf2501000000000000000230000099fc042bf1db7c36043efebebd338141151f68f616328ae7e4e51efd89b761fae7d4e32c2495c16777fe531335efa2569a7b848d9c693d9b372a88e29c73173298b65854a18bd29f"], 0x2c}, 0x1, 0x0, 0x0, 0x4008055}, 0xc855) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r11, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x34}}, 0x44004) 1.940860308s ago: executing program 2 (id=372): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ed1}, [@call={0x85, 0x0, 0x0, 0x30}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.836415461s ago: executing program 1 (id=373): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000340)=@req3={0xa40, 0x80, 0x401, 0xffff, 0x4, 0x1, 0x2}, 0x1c) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYRES32=r6], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r11, &(0x7f0000000200)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x7}, 0x20000080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000840)={r7, @in={{0x2, 0x4e20, @remote}}, 0x0, 0x2, 0x614, 0xfffffffd, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0xa798cd4948749441, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x4e21, 0x40000, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.654102053s ago: executing program 0 (id=374): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r2 = getpid() (rerun: 64) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x30, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async, rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async, rerun: 64) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x3, 0x1ff, 0xfffffff9, 0xc6d5, 0xfd, "01000000000060e800000000060cc1d600", 0x240001, 0x1fd}) (async) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@dstopts={{0x18, 0x29, 0x32, {0xff}}}], 0x18}, 0x40) 1.464865695s ago: executing program 4 (id=375): epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x29, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb}, {0x0, 0xffe0}}}, 0x24}}, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec21, 0x1000, 0x400001, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x947ba, 0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x30b840, 0x0) ioctl$IOMMU_IOAS_UNMAP(r8, 0x3b86, &(0x7f0000000340)={0x18, 0x0, 0x1, 0x1}) read$msr(r7, &(0x7f000001aa40)=""/102392, 0x18ff8) 1.453394816s ago: executing program 5 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80600, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xd, &(0x7f0000000040)) setrlimit(0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x10000, &(0x7f0000000300)='usrquota') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002e00010026bd4e00fbdbdf250400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x2, 0x1, 0x4, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r4, 0x7, 0x3c, 0x6, 0x2, [], [0x8, 0x3, 0x8001, 0x5], [0x7, 0x5, 0xfffffffb, 0xd156], [0x1, 0x5, 0x800]}) 1.093317607s ago: executing program 5 (id=377): syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0000000000000000"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d}]}, 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x24004090) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1}, &(0x7f0000000080)=0xfffc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x85, &(0x7f0000000380)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x3, 0x8, 0x5, 0x7fff, 0xff, 0x4, 0x6, {0x0, @in={{0x2, 0x4e24, @remote}}, 0x2, 0x8, 0x7, 0x7, 0x6}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x6}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xfffffffffffffe99) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e20, 0xfffffffe, @empty, 0xffff}}, 0xb, 0x7, 0x8000, 0xe, 0x4, 0xffffff36, 0x6}, 0x9c) 913.180328ms ago: executing program 5 (id=378): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbddffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') close(0x3) 860.246484ms ago: executing program 0 (id=379): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4, 0x3ffd}, @typed={0x8, 0x8, 0x0, 0x0, @binary='a^&/'}]}, 0x20}}, 0x4004080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x30395056, 0x5}}) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) r6 = fsmount(r5, 0x0, 0x7c) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000300)={{0x5, 0x6, 0x2, 0x8, '\x00', 0x97}, 0x6, 0x2, 0xff, r0, 0x1, 0x10, 'syz1\x00', &(0x7f0000000080)=[':\x00'], 0x2}) 802.716642ms ago: executing program 2 (id=380): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0x4, &(0x7f0000000000)={0xc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000380)=0xe5d1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dmmidi(&(0x7f00000003c0), 0x2, 0x258001) socket$nl_route(0x10, 0x3, 0x0) recvfrom$unix(r2, &(0x7f0000000200)=""/93, 0x5d, 0x143, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181080, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f0000000800)) 0s ago: executing program 4 (id=381): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x81, 0x6, {0x0}, {0xffffffffffffffff}, 0x9, 0x8}) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x100) connect$bt_sco(r0, &(0x7f00000003c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newlink={0x118, 0x10, 0x4, 0x0, 0xfffffffc, {0x0, 0x0, 0x4a00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_VF_PORTS={0xf0, 0x18, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "5fdbbe1c1a68ea6719dcb664c3e8cc33"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cdee4459c11f55c86de5bf6b7be0e053"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5dcbbb7aa818c080ab7bf39a48f83c21"}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7537abe76590b0c69fffc28662ce7375"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'bridge0\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "91e1e595f9daecf8bd7bf13ceca7ba6d"}, @IFLA_PORT_VF={0x8, 0x1, 0x4f2}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x8, 0x2, '/#\'\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7f}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9bea93912d6fb131c731b963bec3feb8"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "55908d68a2b094de60317975beeef761"}, @IFLA_PORT_PROFILE={0x8, 0x2, '%h.\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x45844}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.242' (ED25519) to the list of known hosts. [ 66.829123][ T30] audit: type=1400 audit(1770559544.042:62): avc: denied { mounton } for pid=5793 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.852632][ T30] audit: type=1400 audit(1770559544.062:63): avc: denied { mount } for pid=5793 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.855788][ T5793] cgroup: Unknown subsys name 'net' [ 66.882103][ T30] audit: type=1400 audit(1770559544.092:64): avc: denied { unmount } for pid=5793 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.070360][ T5793] cgroup: Unknown subsys name 'cpuset' [ 67.078914][ T5793] cgroup: Unknown subsys name 'rlimit' [ 67.270711][ T30] audit: type=1400 audit(1770559544.482:65): avc: denied { setattr } for pid=5793 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.294389][ T30] audit: type=1400 audit(1770559544.482:66): avc: denied { create } for pid=5793 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.323854][ T30] audit: type=1400 audit(1770559544.482:67): avc: denied { write } for pid=5793 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.366564][ T30] audit: type=1400 audit(1770559544.482:68): avc: denied { read } for pid=5793 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.387390][ T30] audit: type=1400 audit(1770559544.502:69): avc: denied { mounton } for pid=5793 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.413803][ T30] audit: type=1400 audit(1770559544.502:70): avc: denied { mount } for pid=5793 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.453561][ T5795] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 67.463081][ T30] audit: type=1400 audit(1770559544.672:71): avc: denied { relabelto } for pid=5795 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.439410][ T5793] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.586201][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.594407][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.602634][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.610477][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.618752][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.627190][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.635230][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.643913][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.647030][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.652046][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.665225][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.666059][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.673663][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.687394][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.696003][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.735651][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.745613][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.753570][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.762284][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.771882][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.796993][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.805000][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.814400][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.823067][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.836694][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.224100][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 71.317238][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 71.372641][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.379599][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.384480][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 71.434208][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 71.469480][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.476694][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.484098][ T5805] bridge_slave_0: entered allmulticast mode [ 71.491459][ T5805] bridge_slave_0: entered promiscuous mode [ 71.521449][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.528660][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.536404][ T5805] bridge_slave_1: entered allmulticast mode [ 71.543548][ T5805] bridge_slave_1: entered promiscuous mode [ 71.621736][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.628978][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.636133][ T5806] bridge_slave_0: entered allmulticast mode [ 71.643134][ T5806] bridge_slave_0: entered promiscuous mode [ 71.657450][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.679988][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.696658][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.704286][ T5806] bridge_slave_1: entered allmulticast mode [ 71.711889][ T5806] bridge_slave_1: entered promiscuous mode [ 71.724541][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.784672][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.791902][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.799365][ T5820] bridge_slave_0: entered allmulticast mode [ 71.806155][ T5820] bridge_slave_0: entered promiscuous mode [ 71.823665][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.830827][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.838309][ T5820] bridge_slave_1: entered allmulticast mode [ 71.845288][ T5820] bridge_slave_1: entered promiscuous mode [ 71.861211][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 71.872632][ T5805] team0: Port device team_slave_0 added [ 71.880645][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.914800][ T5805] team0: Port device team_slave_1 added [ 71.922569][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.947150][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.954337][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.961846][ T5813] bridge_slave_0: entered allmulticast mode [ 71.968826][ T5813] bridge_slave_0: entered promiscuous mode [ 71.986591][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.993713][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.000952][ T5813] bridge_slave_1: entered allmulticast mode [ 72.008341][ T5813] bridge_slave_1: entered promiscuous mode [ 72.032557][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.067921][ T5806] team0: Port device team_slave_0 added [ 72.074386][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.081556][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.107679][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.124896][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.153382][ T5806] team0: Port device team_slave_1 added [ 72.168669][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.175625][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.202050][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.227874][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.263928][ T5820] team0: Port device team_slave_0 added [ 72.271597][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.281525][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.288893][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.314980][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.343931][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.351158][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.358444][ T5822] bridge_slave_0: entered allmulticast mode [ 72.365208][ T5822] bridge_slave_0: entered promiscuous mode [ 72.374307][ T5820] team0: Port device team_slave_1 added [ 72.395773][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.403124][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.429114][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.459063][ T5805] hsr_slave_0: entered promiscuous mode [ 72.465412][ T5805] hsr_slave_1: entered promiscuous mode [ 72.472174][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.479590][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.487440][ T5822] bridge_slave_1: entered allmulticast mode [ 72.494320][ T5822] bridge_slave_1: entered promiscuous mode [ 72.525619][ T5813] team0: Port device team_slave_0 added [ 72.533758][ T5813] team0: Port device team_slave_1 added [ 72.546584][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.553547][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.580129][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.592474][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.599538][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.625628][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.680044][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.699370][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.706347][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.732399][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.743803][ T5812] Bluetooth: hci1: command tx timeout [ 72.743807][ T52] Bluetooth: hci0: command tx timeout [ 72.744013][ T5816] Bluetooth: hci2: command tx timeout [ 72.751790][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.767365][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.793398][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.819705][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.843258][ T5806] hsr_slave_0: entered promiscuous mode [ 72.849550][ T5806] hsr_slave_1: entered promiscuous mode [ 72.855490][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 72.861409][ T5806] Cannot create hsr debugfs directory [ 72.887054][ T5816] Bluetooth: hci4: command tx timeout [ 72.887095][ T52] Bluetooth: hci3: command tx timeout [ 72.954682][ T5820] hsr_slave_0: entered promiscuous mode [ 72.961510][ T5820] hsr_slave_1: entered promiscuous mode [ 72.967649][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 72.973365][ T5820] Cannot create hsr debugfs directory [ 72.986136][ T5822] team0: Port device team_slave_0 added [ 73.011055][ T5813] hsr_slave_0: entered promiscuous mode [ 73.017575][ T5813] hsr_slave_1: entered promiscuous mode [ 73.023534][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 73.029358][ T5813] Cannot create hsr debugfs directory [ 73.041148][ T5822] team0: Port device team_slave_1 added [ 73.138841][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.145800][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.171859][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.208630][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.215743][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.242701][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.414638][ T5822] hsr_slave_0: entered promiscuous mode [ 73.421185][ T5822] hsr_slave_1: entered promiscuous mode [ 73.427902][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 73.433625][ T5822] Cannot create hsr debugfs directory [ 73.562006][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.579615][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.602539][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.623413][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.715786][ T5806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.729084][ T5806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.743979][ T5806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.765285][ T5806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.829098][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.852895][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.864797][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.879398][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.973054][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.983780][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.996237][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.006308][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.035934][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.129551][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.143635][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.153080][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.162923][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.173114][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.182984][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.204682][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.211945][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.240723][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.247876][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.301324][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.319116][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.329651][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.336749][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.375318][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.382446][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.419441][ T5805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.442319][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.490777][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.497990][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.506387][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 74.506404][ T30] audit: type=1400 audit(1770559551.712:84): avc: denied { sys_module } for pid=5805 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.552809][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.570831][ T5806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.582509][ T5806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.610337][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.617689][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.650042][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.682983][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.690132][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.738293][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.755272][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.762486][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.785988][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.808282][ T52] Bluetooth: hci0: command tx timeout [ 74.808438][ T5816] Bluetooth: hci2: command tx timeout [ 74.813700][ T52] Bluetooth: hci1: command tx timeout [ 74.854980][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.862464][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.881315][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.910224][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.938924][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.960141][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.967283][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.967520][ T52] Bluetooth: hci3: command tx timeout [ 74.975678][ T5816] Bluetooth: hci4: command tx timeout [ 75.068375][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.162641][ T5805] veth0_vlan: entered promiscuous mode [ 75.230034][ T5805] veth1_vlan: entered promiscuous mode [ 75.348263][ T5806] veth0_vlan: entered promiscuous mode [ 75.363916][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.385278][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.408392][ T5805] veth0_macvtap: entered promiscuous mode [ 75.428730][ T5806] veth1_vlan: entered promiscuous mode [ 75.458960][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.481282][ T5805] veth1_macvtap: entered promiscuous mode [ 75.539523][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.571953][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.579569][ T5813] veth0_vlan: entered promiscuous mode [ 75.626921][ T1152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.635824][ T1152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.660957][ T1152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.671604][ T1152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.690807][ T5813] veth1_vlan: entered promiscuous mode [ 75.701975][ T5806] veth0_macvtap: entered promiscuous mode [ 75.717547][ T5822] veth0_vlan: entered promiscuous mode [ 75.731640][ T5822] veth1_vlan: entered promiscuous mode [ 75.748233][ T5806] veth1_macvtap: entered promiscuous mode [ 75.855520][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.865458][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.874190][ T5813] veth0_macvtap: entered promiscuous mode [ 75.880391][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.896237][ T5820] veth0_vlan: entered promiscuous mode [ 75.905911][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.939688][ T5822] veth0_macvtap: entered promiscuous mode [ 75.948827][ T5813] veth1_macvtap: entered promiscuous mode [ 75.965070][ T5820] veth1_vlan: entered promiscuous mode [ 75.972351][ T3019] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.981977][ T3019] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.000198][ T5822] veth1_macvtap: entered promiscuous mode [ 76.007711][ T3019] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.017079][ T1152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.027653][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.037364][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.058329][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.067763][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.079964][ T30] audit: type=1400 audit(1770559553.292:85): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/root/syzkaller.jHpVID/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.126367][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.139916][ T30] audit: type=1400 audit(1770559553.292:86): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.147332][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.173256][ T30] audit: type=1400 audit(1770559553.292:87): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/root/syzkaller.jHpVID/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.225630][ T66] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.237102][ T30] audit: type=1400 audit(1770559553.292:88): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.262044][ T30] audit: type=1400 audit(1770559553.292:89): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/root/syzkaller.jHpVID/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.263596][ T5805] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.305553][ T30] audit: type=1400 audit(1770559553.292:90): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/root/syzkaller.jHpVID/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.314733][ T5820] veth0_macvtap: entered promiscuous mode [ 76.343642][ T30] audit: type=1400 audit(1770559553.292:91): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.349875][ T66] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.363921][ T30] audit: type=1400 audit(1770559553.312:92): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.374309][ T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.405740][ T30] audit: type=1400 audit(1770559553.332:93): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="gadgetfs" ino=7556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.421388][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.438101][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.464130][ T5820] veth1_macvtap: entered promiscuous mode [ 76.475333][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.485068][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.539013][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.549822][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.566033][ T66] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.622347][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.640517][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.652443][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.676819][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.734289][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.767264][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.775162][ T5919] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.785090][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.861214][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.887086][ T5816] Bluetooth: hci1: command tx timeout [ 76.888552][ T52] Bluetooth: hci2: command tx timeout [ 76.892509][ T5816] Bluetooth: hci0: command tx timeout [ 77.028723][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.039052][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.054512][ T5816] Bluetooth: hci3: command tx timeout [ 77.059989][ T5812] Bluetooth: hci4: command tx timeout [ 77.065548][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.074527][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.185614][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.197016][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.218346][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.242849][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.321821][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.351746][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.471975][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.509345][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.650563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.657976][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.686636][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.729467][ T5927] Zero length message leads to an empty skb [ 77.855324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.887226][ T5936] sock: sock_timestamping_bind_phc: sock not bind to device [ 78.018024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.049270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.060768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.117478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.276852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.279295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.294030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.716268][ T5962] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.851074][ T5962] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.970950][ T5816] Bluetooth: hci2: command tx timeout [ 78.978653][ T5812] Bluetooth: hci1: command tx timeout [ 78.978672][ T52] Bluetooth: hci0: command tx timeout [ 79.037411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.095781][ T5962] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.132971][ T5972] syzkaller0: entered promiscuous mode [ 79.139307][ T5816] Bluetooth: hci3: command tx timeout [ 79.139602][ T5812] Bluetooth: hci4: command tx timeout [ 79.177582][ T5972] syzkaller0: entered allmulticast mode [ 79.256110][ T5979] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15'. [ 79.284495][ T5962] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.320224][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.320956][ T5980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=5980 comm=syz.1.15 [ 79.345128][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.375944][ T5979] bond0 (unregistering): Released all slaves [ 79.517524][ T2992] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.720128][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 79.720141][ T30] audit: type=1400 audit(1770559556.932:139): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 80.079258][ T30] audit: type=1400 audit(1770559557.232:140): avc: denied { read write } for pid=5986 comm="syz.1.17" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 80.124594][ T30] audit: type=1400 audit(1770559557.232:141): avc: denied { open } for pid=5986 comm="syz.1.17" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 80.207508][ T30] audit: type=1400 audit(1770559557.232:142): avc: denied { mounton } for pid=5986 comm="syz.1.17" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.427517][ T30] audit: type=1400 audit(1770559557.632:143): avc: denied { read } for pid=5996 comm="syz.3.18" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.463353][ T5998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.556282][ T30] audit: type=1400 audit(1770559557.632:144): avc: denied { open } for pid=5996 comm="syz.3.18" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.598149][ T30] audit: type=1400 audit(1770559557.632:145): avc: denied { ioctl } for pid=5996 comm="syz.3.18" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.676578][ T30] audit: type=1400 audit(1770559557.672:146): avc: denied { write } for pid=5996 comm="syz.3.18" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.720409][ T30] audit: type=1400 audit(1770559557.682:147): avc: denied { write } for pid=5996 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.320138][ T30] audit: type=1400 audit(1770559558.532:148): avc: denied { setopt } for pid=6006 comm="syz.4.20" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.322283][ T24] IPVS: starting estimator thread 0... [ 81.436680][ T6009] IPVS: using max 37 ests per chain, 88800 per kthread [ 81.963824][ T2992] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.990512][ T2992] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.126531][ T2992] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.859114][ T6024] can0: slcan on ptm0. [ 83.557024][ T5881] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 83.907131][ T5881] usb 5-1: unable to get BOS descriptor or descriptor too short [ 83.971214][ T5881] usb 5-1: not running at top speed; connect to a high speed hub [ 84.098425][ T5881] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.153733][ T5881] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.238259][ T5881] usb 5-1: string descriptor 0 read error: -22 [ 84.245400][ T5881] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.292534][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.097473][ T5881] usb 5-1: 0:2 : does not exist [ 85.304335][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 85.304348][ T30] audit: type=1400 audit(1770559562.512:166): avc: denied { create } for pid=6025 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.357487][ T30] audit: type=1400 audit(1770559562.552:167): avc: denied { ioctl } for pid=6025 comm="syz.4.25" path="socket:[9490]" dev="sockfs" ino=9490 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.403596][ T30] audit: type=1400 audit(1770559562.612:168): avc: denied { write } for pid=6025 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.432003][ T30] audit: type=1400 audit(1770559562.642:169): avc: denied { read write } for pid=6025 comm="syz.4.25" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 85.464022][ T30] audit: type=1400 audit(1770559562.642:170): avc: denied { open } for pid=6025 comm="syz.4.25" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 85.498011][ T30] audit: type=1400 audit(1770559562.702:171): avc: denied { create } for pid=6027 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.526716][ T5861] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.698734][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 85.711806][ T5861] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.745804][ T5861] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.758798][ T5861] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.784288][ T5861] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.814383][ T5861] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.814679][ T30] audit: type=1400 audit(1770559563.022:172): avc: denied { append } for pid=6048 comm="syz.0.28" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.855028][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.057437][ T6015] can0 (unregistered): slcan off ptm0. [ 86.324866][ T30] audit: type=1400 audit(1770559563.092:173): avc: denied { bind } for pid=6048 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.347156][ T30] audit: type=1400 audit(1770559563.092:174): avc: denied { setopt } for pid=6048 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.374496][ T5881] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 86.386684][ T5881] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 86.634528][ T30] audit: type=1400 audit(1770559563.762:175): avc: denied { create } for pid=6039 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.671374][ T5881] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 86.683821][ T5861] usb 4-1: GET_CAPABILITIES returned 0 [ 86.723118][ T5861] usbtmc 4-1:16.0: can't read capabilities [ 86.747707][ T89] cfg80211: failed to load regulatory.db [ 86.815626][ T6062] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET) [ 86.949458][ T5881] usb 5-1: USB disconnect, device number 2 [ 87.291732][ T6078] syzkaller0: entered promiscuous mode [ 87.336894][ T6078] syzkaller0: entered allmulticast mode [ 88.248204][ T5881] usb 4-1: USB disconnect, device number 2 [ 88.704734][ T5881] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.926639][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 88.935512][ T5881] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 88.944367][ T5881] usb 1-1: config 179 has no interface number 0 [ 88.952938][ T5881] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 88.974556][ T5881] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 88.986011][ T5881] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 8 [ 89.029223][ T5881] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 89.054449][ T5881] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 89.095528][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 89.106781][ T5881] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 89.134604][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.225305][ T6107] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.813755][ T5881] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 89.992493][ T6107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6107 comm=syz.0.36 [ 90.062040][ T6134] Cannot find add_set index 65532 as target [ 90.110104][ T5861] usb 1-1: USB disconnect, device number 2 [ 90.110119][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 90.124689][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 90.725010][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 90.725021][ T30] audit: type=1400 audit(1770559567.932:204): avc: denied { mounton } for pid=6138 comm="syz.2.42" path="/9/file1" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.276742][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.404769][ T30] audit: type=1400 audit(1770559568.612:205): avc: denied { bind } for pid=6141 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.442635][ T30] audit: type=1400 audit(1770559568.612:206): avc: denied { write } for pid=6141 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.538773][ T9] usb 3-1: device descriptor read/64, error -71 [ 91.598427][ T6148] capability: warning: `syz.3.44' uses 32-bit capabilities (legacy support in use) [ 91.849211][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.363267][ T9] usb 3-1: device descriptor read/64, error -71 [ 92.536855][ T9] usb usb3-port1: attempt power cycle [ 92.603776][ T30] audit: type=1400 audit(1770559569.812:207): avc: denied { setopt } for pid=6157 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.624210][ T6160] netlink: 'syz.0.47': attribute type 10 has an invalid length. [ 92.691076][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.718630][ T6160] bridge_slave_1: left allmulticast mode [ 92.737299][ T6160] bridge_slave_1: left promiscuous mode [ 92.749297][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.750622][ T30] audit: type=1400 audit(1770559569.962:208): avc: denied { write } for pid=6162 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.787636][ T30] audit: type=1400 audit(1770559569.962:209): avc: denied { nlmsg_write } for pid=6162 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.849909][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051010c00: rx timeout, send abort [ 92.863849][ T6160] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 92.876799][ T30] audit: type=1400 audit(1770559570.082:210): avc: denied { read } for pid=5162 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 92.899080][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.940096][ T9] usb 3-1: device descriptor read/8, error -71 [ 92.963460][ T30] audit: type=1400 audit(1770559570.092:211): avc: denied { search } for pid=5162 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.019582][ T30] audit: type=1400 audit(1770559570.092:212): avc: denied { search } for pid=5162 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.156646][ T30] audit: type=1400 audit(1770559570.092:213): avc: denied { add_name } for pid=5162 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.247093][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.271624][ T9] usb 3-1: device descriptor read/8, error -71 [ 93.350506][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051010800: rx timeout, send abort [ 93.358979][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051010c00: abort rx timeout. Force session deactivation [ 93.386888][ T9] usb usb3-port1: unable to enumerate USB device [ 93.426585][ T5861] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.680668][ T6183] macvlan2: entered promiscuous mode [ 93.752718][ T6183] macvlan2: entered allmulticast mode [ 93.858799][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051010800: abort rx timeout. Force session deactivation [ 93.872897][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 93.915266][ T5861] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.948867][ T5861] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 94.385846][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.442767][ T6186] tipc: Started in network mode [ 94.449456][ T6186] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 94.461674][ T6186] tipc: Enabled bearer , priority 10 [ 94.478765][ T5861] usb 5-1: Product: syz [ 94.484998][ T5861] usb 5-1: Manufacturer: syz [ 94.516822][ T5861] usb 5-1: SerialNumber: syz [ 94.571558][ T5861] usb 5-1: config 0 descriptor?? [ 96.221827][ T5861] gs_usb 5-1:0.0: Couldn't get device config: (err=-110) [ 96.229383][ T9] tipc: Node number set to 4269801492 [ 96.242905][ T5861] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 96.278178][ T5861] usb 5-1: USB disconnect, device number 3 [ 96.879017][ T5861] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 96.950003][ T6216] netlink: 60 bytes leftover after parsing attributes in process `syz.3.60'. [ 96.977889][ T6165] Process accounting resumed [ 97.210875][ T5861] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 97.240820][ T5861] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 97.254083][ T5861] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 97.274013][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.298592][ T6212] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 97.673501][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.753295][ T5861] usb 3-1: string descriptor 0 read error: -71 [ 97.761834][ T5861] hub 3-1:32.0: USB hub found [ 97.772218][ T5861] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 97.898275][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 97.966547][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.040704][ T5861] usb 3-1: USB disconnect, device number 6 [ 98.066841][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.222624][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 98.306576][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0131, bcdDevice= 0.00 [ 98.315649][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.377822][ T24] usb 1-1: config 0 descriptor?? [ 98.816547][ T89] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.825323][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 98.825339][ T30] audit: type=1400 audit(1770559576.032:223): avc: denied { create } for pid=6229 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.873543][ T24] wacom 0003:056A:0131.0001: Unknown device_type for 'HID 056a:0131'. Ignoring. [ 98.904472][ T30] audit: type=1400 audit(1770559576.092:224): avc: denied { setopt } for pid=6229 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.016593][ T89] usb 4-1: Using ep0 maxpacket: 16 [ 99.038706][ T89] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 99.058250][ T89] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 99.070427][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.087694][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.117765][ T24] usb 1-1: USB disconnect, device number 3 [ 99.227308][ T89] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 99.236427][ T89] usb 4-1: config 1 has no interface number 1 [ 99.243077][ T89] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 99.274686][ T89] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 99.384767][ T89] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 99.959308][ T89] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.971022][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.995018][ T89] usb 4-1: Product: syz [ 100.008351][ T89] usb 4-1: Manufacturer: syz [ 100.019888][ T89] usb 4-1: SerialNumber: syz [ 100.314679][ T30] audit: type=1400 audit(1770559577.512:225): avc: denied { execute } for pid=6239 comm="syz.0.68" name="file2" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.437406][ T6246] netlink: 'syz.1.69': attribute type 1 has an invalid length. [ 100.443070][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.472165][ T6230] CIFS: VFS: Malformed UNC in devname [ 100.496982][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.590141][ T89] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 100.618785][ T89] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 100.642072][ T89] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 100.707371][ T89] usb 4-1: USB disconnect, device number 3 [ 101.095239][ T6114] udevd[6114]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.647384][ T89] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.850589][ T6287] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.305621][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 102.349366][ T6282] bridge1: entered promiscuous mode [ 102.557308][ T5888] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 102.659737][ T6303] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 102.727825][ T5888] usb 3-1: device descriptor read/64, error -71 [ 102.770813][ T30] audit: type=1400 audit(1770559579.982:226): avc: denied { connect } for pid=6301 comm="syz.3.81" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.798622][ T30] audit: type=1400 audit(1770559580.012:227): avc: denied { setopt } for pid=6307 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.113370][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.196662][ T5888] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 103.996545][ T5888] usb 3-1: device descriptor read/64, error -71 [ 104.013526][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 104.138481][ T5888] usb usb3-port1: attempt power cycle [ 104.152475][ T24] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 104.159152][ T6321] : renamed from vlan0 (while UP) [ 104.196685][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.234233][ T24] usb 1-1: config 0 descriptor?? [ 104.516589][ T5888] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 104.536577][ T30] audit: type=1400 audit(1770559581.732:228): avc: denied { lock } for pid=6327 comm="syz.4.91" path="socket:[10066]" dev="sockfs" ino=10066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 104.572707][ T5888] usb 3-1: device descriptor read/8, error -71 [ 104.752692][ T6335] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 104.836868][ T5888] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 105.103358][ T30] audit: type=1400 audit(1770559582.312:229): avc: denied { map } for pid=6334 comm="syz.4.92" path="socket:[10093]" dev="sockfs" ino=10093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 105.166832][ T5888] usb 3-1: device descriptor read/8, error -71 [ 105.189651][ T30] audit: type=1400 audit(1770559582.342:230): avc: denied { create } for pid=6334 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.267223][ T30] audit: type=1400 audit(1770559582.342:231): avc: denied { create } for pid=6334 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.297908][ T5888] usb usb3-port1: unable to enumerate USB device [ 105.491058][ T30] audit: type=1400 audit(1770559582.342:232): avc: denied { connect } for pid=6334 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.658835][ T30] audit: type=1400 audit(1770559582.342:233): avc: denied { setopt } for pid=6334 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.847363][ T30] audit: type=1400 audit(1770559582.592:234): avc: denied { create } for pid=6340 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 105.868646][ T30] audit: type=1400 audit(1770559582.622:235): avc: denied { write } for pid=6340 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 105.970875][ T30] audit: type=1400 audit(1770559583.182:236): avc: denied { write } for pid=6340 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.149714][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 106.155743][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 106.190383][ T30] audit: type=1400 audit(1770559583.402:237): avc: denied { name_connect } for pid=6348 comm="syz.0.96" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 106.237474][ T24] usb 1-1: USB disconnect, device number 4 [ 109.204373][ T6358] overlayfs: failed to clone upperpath [ 109.386829][ T5861] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.446583][ T89] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.546637][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 109.554256][ T5861] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 109.586515][ T5861] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.596919][ T89] usb 1-1: Using ep0 maxpacket: 32 [ 109.617115][ T89] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.625069][ T5861] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.659651][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.685003][ T89] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 109.877196][ T89] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 109.927251][ T5861] usb 4-1: Product: syz [ 109.980854][ T5861] usb 4-1: Manufacturer: syz [ 109.985491][ T5861] usb 4-1: SerialNumber: syz [ 109.990293][ T89] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 110.018318][ T89] usb 1-1: config 128 has no interface number 0 [ 110.041622][ T89] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 110.066592][ T89] usb 1-1: config 128 interface 127 has no altsetting 0 [ 110.097190][ T89] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 110.127258][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.146778][ T89] usb 1-1: Product: syz [ 110.162828][ T89] usb 1-1: Manufacturer: syz [ 110.183364][ T89] usb 1-1: SerialNumber: syz [ 110.263163][ T5861] usb 4-1: 0:2 : does not exist [ 110.300962][ T5861] usb 4-1: USB disconnect, device number 4 [ 110.372994][ T6114] udevd[6114]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.712040][ T89] usb 1-1: USB disconnect, device number 5 [ 110.802295][ T6114] udevd[6114]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.073394][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 111.073413][ T30] audit: type=1400 audit(1770559588.242:244): avc: denied { watch } for pid=6412 comm="syz.3.110" path="/18" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 111.223366][ T30] audit: type=1400 audit(1770559588.242:245): avc: denied { watch_sb watch_reads } for pid=6412 comm="syz.3.110" path="/18" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.273546][ T30] audit: type=1400 audit(1770559588.242:246): avc: denied { watch } for pid=6412 comm="syz.3.110" path="/18" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.376587][ T89] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.516581][ T5861] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 111.566611][ T89] usb 4-1: Using ep0 maxpacket: 32 [ 111.578824][ T89] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 111.611382][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 111.628852][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.636733][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.650817][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 111.663086][ T89] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.683092][ T5861] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 111.743332][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.759252][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.829478][ T50] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.841632][ T5861] usb 1-1: config 0 has no interface number 0 [ 111.851521][ T5861] usb 1-1: config 0 interface 41 has no altsetting 0 [ 111.853032][ T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.879589][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.893653][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.909723][ T89] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 111.919045][ T5861] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 111.950513][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.964865][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.968418][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.983618][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.992239][ T5861] usb 1-1: Product: syz [ 111.996815][ T5861] usb 1-1: Manufacturer: syz [ 112.001521][ T89] usb 4-1: Product: syz [ 112.005800][ T5861] usb 1-1: SerialNumber: syz [ 112.010974][ T89] usb 4-1: Manufacturer: syz [ 112.017222][ T89] usb 4-1: SerialNumber: syz [ 112.022854][ T5861] usb 1-1: config 0 descriptor?? [ 112.040547][ T89] usb 4-1: config 0 descriptor?? [ 112.347848][ T30] audit: type=1400 audit(1770559589.562:247): avc: denied { create } for pid=6426 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 112.372156][ T6417] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 112.627565][ T30] audit: type=1400 audit(1770559589.832:248): avc: denied { read } for pid=6432 comm="syz.2.115" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 112.702660][ T30] audit: type=1400 audit(1770559589.832:249): avc: denied { open } for pid=6432 comm="syz.2.115" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 112.739849][ T30] audit: type=1400 audit(1770559589.832:250): avc: denied { ioctl } for pid=6432 comm="syz.2.115" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 112.871767][ T5861] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 113.164321][ T6443] netlink: 60 bytes leftover after parsing attributes in process `syz.0.111'. [ 113.187686][ T30] audit: type=1400 audit(1770559590.362:251): avc: denied { listen } for pid=6414 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.643699][ T30] audit: type=1400 audit(1770559590.852:252): avc: denied { create } for pid=6441 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 113.706537][ T30] audit: type=1400 audit(1770559590.912:253): avc: denied { connect } for pid=6441 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 114.039152][ T5860] usb 4-1: USB disconnect, device number 5 [ 114.461084][ T5861] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 114.493043][ T5861] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 114.561804][ T5861] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 114.602089][ T5861] usb 1-1: USB disconnect, device number 6 [ 115.612902][ T6471] tipc: Started in network mode [ 115.618870][ T6471] tipc: Node identity 4, cluster identity 4711 [ 115.625089][ T6471] tipc: Node number set to 4 [ 116.132448][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 116.132479][ T30] audit: type=1400 audit(1770559593.332:263): avc: denied { mounton } for pid=6476 comm="syz.0.125" path="/23/file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.255809][ T30] audit: type=1400 audit(1770559593.332:264): avc: denied { mount } for pid=6476 comm="syz.0.125" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 116.331751][ T30] audit: type=1400 audit(1770559593.422:265): avc: denied { ioctl } for pid=6478 comm="syz.1.127" path="socket:[10820]" dev="sockfs" ino=10820 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.400115][ T30] audit: type=1400 audit(1770559593.512:266): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 116.468661][ T6489] tmpfs: Unknown parameter '0x0000000000000000' [ 116.479168][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 116.490212][ T30] audit: type=1400 audit(1770559593.682:267): avc: denied { mounton } for pid=6488 comm="syz.0.129" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 116.549602][ T5861] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.650124][ T30] audit: type=1400 audit(1770559593.862:268): avc: denied { create } for pid=6474 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 117.105623][ T30] audit: type=1400 audit(1770559594.162:269): avc: denied { read } for pid=6494 comm="syz.0.131" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.117448][ T5861] usb 4-1: Using ep0 maxpacket: 32 [ 117.142302][ T5861] usb 4-1: unable to get BOS descriptor or descriptor too short [ 117.152283][ T5861] usb 4-1: config 244 has an invalid interface number: 68 but max is 0 [ 117.162036][ T5861] usb 4-1: config 244 contains an unexpected descriptor of type 0x1, skipping [ 117.183433][ T30] audit: type=1400 audit(1770559594.162:270): avc: denied { open } for pid=6494 comm="syz.0.131" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.249927][ T5861] usb 4-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config [ 117.276283][ T30] audit: type=1400 audit(1770559594.162:271): avc: denied { ioctl } for pid=6494 comm="syz.0.131" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.279944][ T5861] usb 4-1: config 244 has no interface number 0 [ 117.394299][ T5861] usb 4-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 117.419746][ T6501] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 117.424631][ T30] audit: type=1400 audit(1770559594.222:272): avc: denied { setopt } for pid=6490 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.429582][ T5861] usb 4-1: config 244 interface 68 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 117.468015][ T5861] usb 4-1: config 244 interface 68 has no altsetting 0 [ 117.485498][ T5861] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 117.497609][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.505737][ T5861] usb 4-1: Product: syz [ 117.514707][ T5861] usb 4-1: Manufacturer: syz [ 117.525755][ T5861] usb 4-1: SerialNumber: syz [ 117.616908][ T6485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 117.739997][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 117.968548][ T5861] comedi comedi5: Wrong number of endpoints [ 118.082302][ T5861] dt9812 4-1:244.68: driver 'dt9812' failed to auto-configure device. [ 118.144975][ T5861] usb 4-1: USB disconnect, device number 6 [ 118.335668][ T6522] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 118.371604][ T5812] Bluetooth: hci4: hcon ffff888052a24000 sent 1 < count 6 [ 118.380412][ T5812] Bluetooth: hci4: hcon ffff888021bec000 sent 1 < count 42927 [ 118.613917][ T6535] fuse: Unknown parameter '0x0000000000000003' [ 120.645271][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'. [ 120.726760][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.971980][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 121.024440][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.081345][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1224, setting to 1024 [ 121.126601][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 121.252559][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 121.261777][ T24] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 121.284283][ T24] usb 4-1: Manufacturer: syz [ 121.651204][ T24] usb 4-1: config 0 descriptor?? [ 121.703950][ T6561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.148'. [ 121.713300][ T6561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.148'. [ 121.815081][ T24] usb 4-1: can't set config #0, error -71 [ 121.838856][ T24] usb 4-1: USB disconnect, device number 7 [ 122.054373][ T6567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.107597][ T6571] netlink: 60 bytes leftover after parsing attributes in process `syz.4.152'. [ 122.199419][ T6572] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.150'. [ 122.295979][ T6575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.429270][ T6566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.622265][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 122.622279][ T30] audit: type=1400 audit(1770559599.812:402): avc: denied { read } for pid=6579 comm="syz.0.149" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 123.197298][ T30] audit: type=1400 audit(1770559599.812:403): avc: denied { open } for pid=6579 comm="syz.0.149" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 123.370751][ T6587] gre0: entered promiscuous mode [ 124.145454][ T6595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.424524][ T30] audit: type=1400 audit(1770559601.402:404): avc: denied { read } for pid=6591 comm="syz.2.154" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 125.467509][ T30] audit: type=1400 audit(1770559602.672:405): avc: denied { create } for pid=6600 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.582146][ T30] audit: type=1400 audit(1770559602.702:406): avc: denied { bind } for pid=6600 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.685657][ T30] audit: type=1400 audit(1770559602.702:407): avc: denied { create } for pid=6600 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.794132][ T30] audit: type=1400 audit(1770559602.702:408): avc: denied { setopt } for pid=6600 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.860782][ T30] audit: type=1400 audit(1770559602.712:409): avc: denied { ioctl } for pid=6600 comm="syz.4.157" path="socket:[11732]" dev="sockfs" ino=11732 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.093894][ T30] audit: type=1400 audit(1770559603.302:410): avc: denied { mounton } for pid=6611 comm="syz.3.160" path="/26/file0" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 127.446550][ T30] audit: type=1400 audit(1770559604.642:411): avc: denied { read } for pid=6633 comm="syz.4.164" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.421038][ T6648] process 'syz.4.168' launched '/dev/fd/5' with NULL argv: empty string added [ 128.472829][ T30] audit: type=1400 audit(1770559605.682:412): avc: denied { execute_no_trans } for pid=6647 comm="syz.4.168" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.061585][ T30] audit: type=1400 audit(1770559606.272:413): avc: denied { write } for pid=6653 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.766992][ T6664] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 130.008769][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'. [ 130.224758][ T6656] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 130.392233][ T6679] netlink: 60 bytes leftover after parsing attributes in process `syz.1.176'. [ 131.205733][ T6694] fuse: Unknown parameter 'rootvmode' [ 131.334019][ T30] audit: type=1400 audit(1770559608.392:414): avc: denied { unlink } for pid=6686 comm="syz.4.179" name="#1" dev="tmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 132.047414][ T30] audit: type=1400 audit(1770559608.402:415): avc: denied { mount } for pid=6686 comm="syz.4.179" name="/" dev="overlay" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 132.166557][ T2149] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 132.387983][ T6704] netlink: 48 bytes leftover after parsing attributes in process `syz.0.183'. [ 132.859065][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.865565][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.898299][ T2149] usb 5-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 132.918768][ T2149] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.957735][ T2149] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 133.019014][ T2149] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 133.044331][ T30] audit: type=1400 audit(1770559610.252:416): avc: denied { name_bind } for pid=6706 comm="syz.2.172" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 133.050144][ T2149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.126964][ T5888] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.179524][ T6694] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 133.199328][ T2149] hub 5-1:1.0: bad descriptor, ignoring hub [ 133.205271][ T2149] hub 5-1:1.0: probe with driver hub failed with error -5 [ 133.227069][ T2149] cdc_wdm 5-1:1.0: skipping garbage [ 133.232307][ T2149] cdc_wdm 5-1:1.0: skipping garbage [ 133.262863][ T2149] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 133.275202][ T2149] cdc_wdm 5-1:1.0: Unknown control protocol [ 133.307046][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 133.313759][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.329631][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.343052][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.367893][ T30] audit: type=1400 audit(1770559610.582:417): avc: denied { ioctl } for pid=6711 comm="syz.2.185" path="socket:[12437]" dev="sockfs" ino=12437 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.372227][ T5888] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.417315][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.509276][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 133.516029][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 133.522893][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 133.529509][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 133.537049][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 133.543665][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 133.550170][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 133.556796][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 133.563537][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 133.720019][ T30] audit: type=1400 audit(1770559610.632:418): avc: denied { read write } for pid=6686 comm="syz.4.179" name="cdc-wdm0" dev="devtmpfs" ino=2855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 133.724719][ T5888] usb 1-1: config 0 descriptor?? [ 133.837658][ T30] audit: type=1400 audit(1770559610.632:419): avc: denied { open } for pid=6686 comm="syz.4.179" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 134.268116][ T5888] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 134.299313][ T5888] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 134.316682][ T5888] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 134.324044][ T5888] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 134.337476][ T5888] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 134.354924][ T5888] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 134.369228][ T5888] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 134.376622][ T5888] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 134.384922][ T5888] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 134.392567][ T5888] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 134.399917][ T5888] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 134.407819][ T5888] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 134.420501][ T5888] microsoft 0003:045E:07DA.0002: implement() called with n (56) > 32! (kworker/1:4) [ 134.469735][ T5888] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 134.484872][ T5888] microsoft 0003:045E:07DA.0002: no inputs found [ 134.492382][ T5888] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 134.720034][ T5888] usb 1-1: USB disconnect, device number 7 [ 134.749947][ T30] audit: type=1400 audit(1770559611.962:420): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 134.799898][ T89] usb 5-1: USB disconnect, device number 5 [ 134.914573][ T6740] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 135.038727][ T6735] fido_id[6735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 135.286291][ T6737] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 135.633252][ T30] audit: type=1400 audit(1770559612.842:421): avc: denied { read } for pid=6744 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 135.670197][ T30] audit: type=1400 audit(1770559612.872:422): avc: denied { read write } for pid=6741 comm="syz.4.191" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 135.739714][ T30] audit: type=1400 audit(1770559612.882:423): avc: denied { open } for pid=6741 comm="syz.4.191" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 135.764982][ T30] audit: type=1400 audit(1770559612.882:424): avc: denied { ioctl } for pid=6741 comm="syz.4.191" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 135.814304][ T6748] input: syz1 as /devices/virtual/input/input10 [ 135.917501][ T30] audit: type=1400 audit(1770559612.922:425): avc: denied { setopt } for pid=6744 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 135.947672][ T30] audit: type=1400 audit(1770559613.022:426): avc: denied { ioctl } for pid=6744 comm="syz.2.192" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 136.277283][ T6754] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 136.290184][ T6754] team0: Port device batadv1 added [ 136.407431][ T30] audit: type=1400 audit(1770559613.392:427): avc: denied { name_bind } for pid=6750 comm="syz.1.194" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 137.154458][ T6765] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.199'. [ 137.372430][ T6768] 9pnet_virtio: no channels available for device syz [ 137.488524][ T6768] ======================================================= [ 137.488524][ T6768] WARNING: The mand mount option has been deprecated and [ 137.488524][ T6768] and is ignored by this kernel. Remove the mand [ 137.488524][ T6768] option from the mount to silence this warning. [ 137.488524][ T6768] ======================================================= [ 137.546742][ T6768] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 137.705195][ T6768] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 137.716036][ T6768] overlayfs: failed to look up (tracing) for ino (-66) [ 138.564901][ T6771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.199'. [ 139.032906][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 139.032924][ T30] audit: type=1400 audit(1770559616.152:436): avc: denied { create } for pid=6770 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 139.272521][ T30] audit: type=1400 audit(1770559616.152:437): avc: denied { connect } for pid=6770 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.335884][ T30] audit: type=1400 audit(1770559616.152:438): avc: denied { watch_mount } for pid=6770 comm="syz.0.193" path="/34" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 139.519065][ T30] audit: type=1400 audit(1770559616.272:439): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 139.785708][ T30] audit: type=1400 audit(1770559616.942:440): avc: denied { accept } for pid=6778 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 140.042560][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.057573][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.083411][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.109984][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.377680][ T30] audit: type=1400 audit(1770559617.572:441): avc: denied { create } for pid=6791 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 140.413291][ T6789] debugfs: '1^!l1*$pOc' already exists in 'ieee80211' [ 140.653473][ T30] audit: type=1400 audit(1770559617.862:442): avc: denied { relabelfrom } for pid=6791 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 140.800060][ T6789] netlink: 'syz.0.202': attribute type 1 has an invalid length. [ 140.937398][ T5861] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 140.955307][ T30] audit: type=1400 audit(1770559617.862:443): avc: denied { relabelto } for pid=6791 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 141.115311][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.205'. [ 141.369339][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.380331][ T5861] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 141.466886][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.498776][ T5861] usb 5-1: config 0 descriptor?? [ 141.563212][ T6811] fuse: Unknown parameter 'roode' [ 141.583278][ T30] audit: type=1400 audit(1770559618.782:444): avc: denied { connect } for pid=6809 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 141.706518][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.717329][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.727905][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.740829][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.748893][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.929288][ T30] audit: type=1400 audit(1770559619.142:445): avc: denied { create } for pid=6816 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.946026][ T5861] smartjoyplus 0003:0925:8866.0003: report_id 2800044516 is invalid [ 141.959825][ T5861] smartjoyplus 0003:0925:8866.0003: item 0 4 1 8 parsing failed [ 141.970061][ T5861] smartjoyplus 0003:0925:8866.0003: parse failed [ 142.004874][ T5861] smartjoyplus 0003:0925:8866.0003: probe with driver smartjoyplus failed with error -22 [ 142.179558][ T6814] chnl_net:caif_netlink_parms(): no params data found [ 142.264164][ T5861] usb 5-1: USB disconnect, device number 6 [ 142.504806][ T6814] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.550131][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.568740][ T6814] bridge_slave_0: entered allmulticast mode [ 142.582737][ T6814] bridge_slave_0: entered promiscuous mode [ 142.595434][ T6814] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.603793][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.611694][ T6814] bridge_slave_1: entered allmulticast mode [ 142.633801][ T6814] bridge_slave_1: entered promiscuous mode [ 143.081323][ T6814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.118409][ T6814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.341647][ T6814] team0: Port device team_slave_0 added [ 143.371611][ T6814] team0: Port device team_slave_1 added [ 143.448104][ T6814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.455127][ T6814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.575829][ T6814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.590350][ T6814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.616563][ T24] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 143.635214][ T6814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.665509][ T6814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.839040][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 143.847258][ T5816] Bluetooth: hci5: command tx timeout [ 143.855680][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.901085][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 143.935825][ T24] usb 5-1: config 1 has no interface number 1 [ 143.952366][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 143.953832][ T6814] hsr_slave_0: entered promiscuous mode [ 143.973616][ T6814] hsr_slave_1: entered promiscuous mode [ 143.995002][ T6814] debugfs: 'hsr0' already exists in 'hsr' [ 144.000825][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 144.000860][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 4176, setting to 1023 [ 144.003305][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.029840][ T6814] Cannot create hsr debugfs directory [ 144.084847][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.103298][ T24] usb 5-1: Product: syz [ 144.113387][ T24] usb 5-1: Manufacturer: syz [ 144.123484][ T24] usb 5-1: SerialNumber: syz [ 144.150315][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 144.150331][ T30] audit: type=1400 audit(1770559621.362:447): avc: denied { read write } for pid=6858 comm="syz.0.219" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 144.226692][ T30] audit: type=1400 audit(1770559621.362:448): avc: denied { open } for pid=6858 comm="syz.0.219" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 144.424114][ T24] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 144.649207][ T30] audit: type=1400 audit(1770559621.662:449): avc: denied { write } for pid=6860 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.998047][ T30] audit: type=1400 audit(1770559622.202:450): avc: denied { append } for pid=6872 comm="syz.4.223" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 145.384901][ T24] usb 5-1: USB disconnect, device number 7 [ 145.412967][ T6879] syzkaller0: entered promiscuous mode [ 145.420725][ T6881] SQUASHFS error: Failed to read block 0x0: -5 [ 145.429408][ T6879] syzkaller0: entered allmulticast mode [ 145.435089][ T6881] unable to read squashfs_super_block [ 145.561821][ T6037] udevd[6037]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.856108][ T6814] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.896370][ T6814] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.915601][ T6814] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.931532][ T5816] Bluetooth: hci5: command tx timeout [ 145.991214][ T6814] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.867149][ T30] audit: type=1400 audit(1770559624.082:451): avc: denied { sqpoll } for pid=6912 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 147.012345][ T6814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.080747][ T6814] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.119305][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.126518][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.164346][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.171562][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.447011][ T6934] netlink: 10 bytes leftover after parsing attributes in process `syz.4.236'. [ 147.494422][ T6814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.006652][ T5816] Bluetooth: hci5: command tx timeout [ 148.388046][ T30] audit: type=1400 audit(1770559625.592:452): avc: denied { open } for pid=6953 comm="syz.2.240" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 148.561044][ T30] audit: type=1400 audit(1770559625.602:453): avc: denied { ioctl } for pid=6953 comm="syz.2.240" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x4b33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 148.660381][ T6814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.829318][ T6968] team_slave_1: mtu greater than device maximum [ 148.835611][ T6968] team0: Device team_slave_1 failed to change mtu [ 148.849601][ T30] audit: type=1400 audit(1770559626.042:454): avc: denied { ioctl } for pid=6962 comm="syz.2.243" path="socket:[13929]" dev="sockfs" ino=13929 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.917572][ T24] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 149.020880][ T30] audit: type=1400 audit(1770559626.062:455): avc: denied { read } for pid=6962 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.103697][ T24] usb 1-1: config 0 has an invalid interface number: 190 but max is 0 [ 149.214260][ T24] usb 1-1: config 0 has no interface number 0 [ 149.214316][ T6814] veth0_vlan: entered promiscuous mode [ 149.264974][ T6814] veth1_vlan: entered promiscuous mode [ 149.290362][ T24] usb 1-1: New USB device found, idVendor=5df2, idProduct=8c36, bcdDevice=b8.d2 [ 149.342492][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.417413][ T24] usb 1-1: config 0 descriptor?? [ 149.439940][ T24] usb 1-1: bad CDC descriptors [ 149.462530][ T6814] veth0_macvtap: entered promiscuous mode [ 149.480496][ T6977] netlink: 'syz.1.244': attribute type 4 has an invalid length. [ 149.489785][ T6977] netlink: 17 bytes leftover after parsing attributes in process `syz.1.244'. [ 149.566094][ T6978] delete_channel: no stack [ 149.765171][ T6814] veth1_macvtap: entered promiscuous mode [ 149.795564][ T6814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.813668][ T6814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.874005][ T6036] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.883597][ T6036] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.905413][ T6036] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.919675][ T6036] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.001916][ T6290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.032536][ T6290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.088477][ T5816] Bluetooth: hci5: command tx timeout [ 150.123856][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.133379][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.154807][ T30] audit: type=1400 audit(1770559627.362:456): avc: denied { mounton } for pid=6814 comm="syz-executor" path="/root/syzkaller.B3Kpdq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 150.318091][ T6984] syzkaller0: entered promiscuous mode [ 150.323681][ T6984] syzkaller0: entered allmulticast mode [ 150.360471][ T6985] netlink: 'syz.5.206': attribute type 1 has an invalid length. [ 150.371435][ T6983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6286 sclass=netlink_route_socket pid=6983 comm=syz.5.206 [ 150.520335][ T30] audit: type=1400 audit(1770559627.732:457): avc: denied { set_context_mgr } for pid=6988 comm="syz.5.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 150.607937][ T30] audit: type=1400 audit(1770559627.732:458): avc: denied { write } for pid=6988 comm="syz.5.246" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 151.317366][ T5860] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 151.374351][ T5861] usb 1-1: USB disconnect, device number 8 [ 151.489595][ T5860] usb 6-1: unable to get BOS descriptor or descriptor too short [ 151.499123][ T5860] usb 6-1: not running at top speed; connect to a high speed hub [ 151.526484][ T5860] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.561105][ T30] audit: type=1400 audit(1770559628.762:459): avc: denied { ioctl } for pid=6995 comm="syz.0.247" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 151.772613][ T30] audit: type=1400 audit(1770559628.942:460): avc: denied { getopt } for pid=6998 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.805393][ T5860] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.829343][ T5860] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.839580][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.850513][ T5860] usb 6-1: Product: syz [ 151.854806][ T5860] usb 6-1: Manufacturer: syz [ 151.860035][ T5860] usb 6-1: SerialNumber: syz [ 151.890904][ T30] audit: type=1400 audit(1770559629.002:461): avc: denied { bind } for pid=6998 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.920788][ T30] audit: type=1400 audit(1770559629.002:462): avc: denied { read } for pid=6998 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.043971][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 153.089040][ T7010] netlink: 56 bytes leftover after parsing attributes in process `syz.2.250'. [ 153.115906][ T7014] comedi comedi3: comedi_config --init_data is deprecated [ 153.216195][ T7021] netlink: 32 bytes leftover after parsing attributes in process `syz.2.250'. [ 153.425371][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.256'. [ 153.451155][ T30] audit: type=1326 audit(1770559630.652:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7011 comm="syz.1.253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64bf19aeb9 code=0x0 [ 153.499728][ T30] audit: type=1400 audit(1770559630.662:464): avc: denied { create } for pid=7027 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 153.562447][ T5860] usb 6-1: 0:2 : does not exist [ 153.567944][ T5860] usb 6-1: unit 0 not found! [ 153.582001][ T5860] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 153.619768][ T5860] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 153.824686][ T5860] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 153.865453][ T5860] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 154.574556][ T5860] usb 6-1: USB disconnect, device number 2 [ 155.433656][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 155.442647][ T7061] netlink: 'syz.0.262': attribute type 30 has an invalid length. [ 155.542053][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 155.551055][ T7061] netlink: 'syz.0.262': attribute type 30 has an invalid length. [ 155.806410][ T66] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.819782][ T66] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.833486][ T66] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.865687][ T66] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.207225][ T5860] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 156.303236][ T7071] netlink: 60 bytes leftover after parsing attributes in process `syz.5.264'. [ 156.761755][ T5860] usb 5-1: config 0 has no interfaces? [ 156.770265][ T5860] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 156.781279][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.806067][ T5860] usb 5-1: config 0 descriptor?? [ 157.181070][ T5916] usb 5-1: USB disconnect, device number 8 [ 157.859857][ T30] audit: type=1400 audit(1770559635.032:465): avc: denied { read write } for pid=7084 comm="syz.4.271" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.189296][ T7094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.209546][ T30] audit: type=1400 audit(1770559635.032:466): avc: denied { open } for pid=7084 comm="syz.4.271" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.255584][ T30] audit: type=1400 audit(1770559635.032:467): avc: denied { ioctl } for pid=7084 comm="syz.4.271" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.295392][ T7098] capability: warning: `syz.4.273' uses deprecated v2 capabilities in a way that may be insecure [ 158.611887][ T7101] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 159.034322][ T7101] netlink: 'syz.5.270': attribute type 1 has an invalid length. [ 160.825672][ T7129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.835345][ T7129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.226535][ T5916] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 161.330058][ T7134] Failed to initialize the IGMP autojoin socket (err -2) [ 163.742290][ T7157] netlink: 32 bytes leftover after parsing attributes in process `syz.1.288'. [ 164.008720][ T5812] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 164.022546][ T5812] Bluetooth: hci2: Injecting HCI hardware error event [ 164.035036][ T5816] Bluetooth: hci2: hardware error 0x00 [ 164.540163][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 164.591778][ T7168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.292'. [ 164.620568][ T7170] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 166.193903][ T30] audit: type=1400 audit(1770559643.392:468): avc: denied { bind } for pid=7175 comm="syz.5.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.796896][ T5816] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 167.157163][ T7188] overlayfs: failed to clone upperpath [ 167.231843][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 168.489145][ T2149] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 168.771350][ T2149] usb 6-1: config 24 has an invalid interface number: 199 but max is 0 [ 168.796502][ T2149] usb 6-1: config 24 has no interface number 0 [ 168.840921][ T2149] usb 6-1: config 24 interface 199 has no altsetting 0 [ 169.403445][ T2149] usb 6-1: string descriptor 0 read error: -22 [ 169.802146][ T2149] usb 6-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 169.829155][ T2149] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.872824][ T2149] cp210x 6-1:24.199: cp210x converter detected [ 170.085363][ T2149] cp210x 6-1:24.199: failed to get vendor val 0x370b size 1: -71 [ 170.136626][ T2149] cp210x 6-1:24.199: querying part number failed [ 170.180201][ T2149] usb 6-1: cp210x converter now attached to ttyUSB0 [ 170.276667][ T2149] usb 6-1: USB disconnect, device number 4 [ 170.298076][ T2149] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 170.337099][ T5916] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 170.347190][ T2149] cp210x 6-1:24.199: device disconnected [ 170.546542][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 170.564094][ T5916] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 170.579644][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.599719][ T5916] usb 5-1: Product: syz [ 170.608261][ T5916] usb 5-1: Manufacturer: syz [ 170.617313][ T5916] usb 5-1: SerialNumber: syz [ 170.643734][ T5916] usb 5-1: config 0 descriptor?? [ 172.079297][ T30] audit: type=1326 audit(1770559649.292:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7215 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f39aeb9 code=0x7fc00000 [ 172.092900][ T5916] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 172.490042][ T7240] tmpfs: Unknown parameter '0x0000000000000000' [ 172.664476][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 172.675149][ T7225] netlink: 'syz.5.304': attribute type 1 has an invalid length. [ 172.688698][ T5860] usb 5-1: USB disconnect, device number 9 [ 172.784132][ T7251] comedi comedi4: bad chanlist[0]=0x00001000 chan=4096 range length=2 [ 173.493657][ T7258] netlink: 'syz.2.314': attribute type 2 has an invalid length. [ 173.508828][ T7258] netlink: 224 bytes leftover after parsing attributes in process `syz.2.314'. [ 173.933848][ T7250] mmap: syz.4.312 (7250): VmData 25837568 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 174.027104][ T5860] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 174.155792][ T7268] vxcan1: entered promiscuous mode [ 174.184603][ T7268] team0: Device vxcan1 is of different type [ 174.200857][ T5860] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 174.221332][ T30] audit: type=1400 audit(1770559651.432:470): avc: denied { append } for pid=7271 comm="syz.4.318" name="sg0" dev="devtmpfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 174.252081][ T5860] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 174.277735][ T5860] usb 1-1: config 8 has no interface number 0 [ 174.291639][ T5860] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 174.327444][ T5860] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 174.373624][ T5860] usb 1-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 174.389658][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.429161][ T5860] usb 1-1: Product: syz [ 174.443589][ T5860] usb 1-1: Manufacturer: syz [ 174.475509][ T5860] usb 1-1: SerialNumber: syz [ 174.734153][ T5860] usb 1-1: USB disconnect, device number 9 [ 174.827065][ T89] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 174.987667][ T89] usb 5-1: Using ep0 maxpacket: 32 [ 174.995114][ T89] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 175.011838][ T89] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 175.028019][ T89] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 175.040123][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.052804][ T89] usb 5-1: Product: syz [ 175.058045][ T89] usb 5-1: Manufacturer: syz [ 175.062987][ T89] usb 5-1: SerialNumber: syz [ 175.078764][ T89] usb 5-1: config 0 descriptor?? [ 175.093062][ T89] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 175.465094][ T7299] netlink: 'syz.0.324': attribute type 2 has an invalid length. [ 175.481313][ T30] audit: type=1400 audit(1770559652.692:471): avc: denied { getopt } for pid=7298 comm="syz.5.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.550047][ T7297] netlink: 14 bytes leftover after parsing attributes in process `syz.0.324'. [ 175.550047][ T7299] netlink: 14 bytes leftover after parsing attributes in process `syz.0.324'. [ 175.560861][ T89] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 175.580205][ T30] audit: type=1400 audit(1770559652.792:472): avc: denied { mount } for pid=7296 comm="syz.1.325" name="/" dev="ramfs" ino=15235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 176.626660][ T7305] gre0 speed is unknown, defaulting to 1000 [ 176.630810][ T89] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=5f.b1 [ 176.635282][ T7305] gre0 speed is unknown, defaulting to 1000 [ 176.657266][ T7305] gre0 speed is unknown, defaulting to 1000 [ 177.299067][ T7305] infiniband syz0: set down [ 177.303780][ T7305] infiniband syz0: added gre0 [ 177.320917][ T7305] syz0: rxe_create_qp: returned err = -2 [ 177.327040][ T7305] infiniband syz0: Couldn't create ib_mad QP1 [ 177.336557][ T7305] infiniband syz0: Couldn't open port 1 [ 177.371738][ T2149] gre0 speed is unknown, defaulting to 1000 [ 177.457292][ T7305] RDS/IB: syz0: added [ 177.464102][ T7305] smc: adding ib device syz0 with port count 1 [ 177.471534][ T7305] smc: ib device syz0 port 1 has no pnetid [ 177.600300][ T89] usb 3-1: New USB device strings: Mfr=137, Product=72, SerialNumber=3 [ 177.612360][ T7305] gre0 speed is unknown, defaulting to 1000 [ 177.627638][ T89] usb 3-1: Product: syz [ 177.631951][ T89] usb 3-1: Manufacturer: syz [ 177.653474][ T2149] gre0 speed is unknown, defaulting to 1000 [ 177.737333][ T89] usb 3-1: SerialNumber: syz [ 177.760227][ T89] usb 3-1: config 0 descriptor?? [ 177.831599][ T7305] gre0 speed is unknown, defaulting to 1000 [ 177.932570][ T7305] gre0 speed is unknown, defaulting to 1000 [ 178.031763][ T7305] gre0 speed is unknown, defaulting to 1000 [ 178.132971][ T7305] gre0 speed is unknown, defaulting to 1000 [ 178.232385][ T7305] gre0 speed is unknown, defaulting to 1000 [ 178.396294][ T24] usb 5-1: USB disconnect, device number 10 [ 178.542904][ T89] usb 3-1: can't set config #0, error -71 [ 178.603895][ T89] usb 3-1: USB disconnect, device number 11 [ 178.625104][ T30] audit: type=1400 audit(1770559655.832:473): avc: denied { write } for pid=7314 comm="syz.0.328" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 178.757544][ T30] audit: type=1400 audit(1770559655.832:474): avc: denied { open } for pid=7314 comm="syz.0.328" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 178.830157][ T30] audit: type=1400 audit(1770559655.832:475): avc: denied { ioctl } for pid=7314 comm="syz.0.328" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 178.885770][ T30] audit: type=1400 audit(1770559656.092:476): avc: denied { read } for pid=7319 comm="syz.2.330" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.932049][ T30] audit: type=1400 audit(1770559657.122:477): avc: denied { create } for pid=7338 comm="syz.5.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 180.027617][ T30] audit: type=1400 audit(1770559657.132:478): avc: denied { bind } for pid=7338 comm="syz.5.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 180.464226][ T30] audit: type=1400 audit(1770559657.622:479): avc: denied { bind } for pid=7349 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 181.085316][ T7356] Failed to initialize the IGMP autojoin socket (err -2) [ 181.391153][ T7370] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7370 comm=syz.4.339 [ 181.721476][ T7360] netlink: 'syz.2.330': attribute type 1 has an invalid length. [ 181.768440][ T30] audit: type=1400 audit(1770559658.982:480): avc: denied { ioctl } for pid=7378 comm="syz.4.342" path="socket:[15873]" dev="sockfs" ino=15873 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 182.157565][ T2149] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 182.170794][ T89] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 182.488261][ T2149] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 182.512006][ T2149] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.524408][ T2149] usb 6-1: Product: syz [ 182.531244][ T30] audit: type=1400 audit(1770559659.742:481): avc: denied { getopt } for pid=7387 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.531306][ T2149] usb 6-1: Manufacturer: syz [ 182.575680][ T2149] usb 6-1: SerialNumber: syz [ 182.583072][ T89] usb 5-1: Using ep0 maxpacket: 32 [ 182.598858][ T89] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.624645][ T89] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.661756][ T89] usb 5-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 0.00 [ 182.675759][ T89] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.693087][ T89] usb 5-1: SerialNumber: syz [ 182.711799][ T89] usb 5-1: config 0 descriptor?? [ 182.948354][ T7395] netlink: 'syz.2.348': attribute type 10 has an invalid length. [ 182.960485][ T7395] netlink: 224 bytes leftover after parsing attributes in process `syz.2.348'. [ 183.019187][ T2149] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 183.174055][ T2149] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 183.186033][ T2149] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 183.199030][ T2149] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 183.210101][ T2149] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 183.227972][ T2149] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 183.917358][ T2149] usb 6-1: USB disconnect, device number 5 [ 184.403624][ T30] audit: type=1400 audit(1770559661.612:482): avc: denied { block_suspend } for pid=7409 comm="syz.2.353" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 185.616509][ T30] audit: type=1400 audit(1770559662.742:483): avc: denied { create } for pid=7385 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 185.667524][ T30] audit: type=1400 audit(1770559662.792:484): avc: denied { listen } for pid=7385 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 185.755241][ T7386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.803235][ T7386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.854631][ T89] usb 5-1: USB disconnect, device number 11 [ 186.242674][ T7441] debugfs: '1^!l1*$pOcɔr$Gt:' already exists in 'ieee80211' [ 186.412907][ T30] audit: type=1400 audit(1770559663.622:485): avc: denied { getopt } for pid=7438 comm="syz.5.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.107421][ T5860] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 187.317418][ T5860] usb 3-1: Using ep0 maxpacket: 8 [ 187.358785][ T5860] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 187.378142][ T5860] usb 3-1: config 0 has no interface number 0 [ 187.384363][ T5860] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 187.417487][ T5860] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 187.460892][ T5860] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 102, changing to 10 [ 187.487496][ T5860] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24624, setting to 1024 [ 187.500862][ T7446] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 187.520443][ T5860] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.587317][ T5860] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 187.596386][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.817785][ T5860] usb 3-1: config 0 descriptor?? [ 187.843756][ T5860] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 187.991518][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 188.170220][ T5860] usb 3-1: USB disconnect, device number 12 [ 188.218551][ T5860] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 189.204506][ T7480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.370'. [ 189.536648][ T7490] netlink: 'syz.1.373': attribute type 10 has an invalid length. [ 189.769047][ T7496] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 189.787741][ T7499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.375'. [ 189.823077][ T7496] team0: Port device batadv2 added [ 190.518727][ T30] audit: type=1400 audit(1770559667.732:486): avc: denied { read } for pid=7514 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.338872][ T7510] slab kmalloc-8k start ffff888146718000 pointer offset 1480 size 8192 [ 191.347456][ T7510] list_del corruption. prev->next should be ffff88805d041b70, but was ffff8881467185c8. (prev=ffff8881467185c8) [ 191.359840][ T7510] ------------[ cut here ]------------ [ 191.365312][ T7510] kernel BUG at lib/list_debug.c:62! [ 191.370617][ T7510] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 191.377034][ T7510] CPU: 0 UID: 0 PID: 7510 Comm: syz.5.378 Not tainted syzkaller #0 PREEMPT(full) [ 191.386218][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 191.396262][ T7510] RIP: 0010:__list_del_entry_valid_or_report+0x14a/0x1d0 [ 191.403293][ T7510] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 40 3d fa 8b e8 37 b0 32 fc 90 <0f> 0b 4c 89 e7 e8 3c 24 5d fd 48 89 ea 48 b8 00 00 00 00 00 fc ff [ 191.422892][ T7510] RSP: 0018:ffffc90010557860 EFLAGS: 00010082 [ 191.428965][ T7510] RAX: 000000000000006d RBX: ffff88805d041b70 RCX: 0000000000000000 [ 191.436936][ T7510] RDX: 000000000000006d RSI: ffffffff81e5d6c9 RDI: fffff520020aaefd [ 191.444946][ T7510] RBP: ffff8881467185c8 R08: 0000000000000005 R09: 0000000000000000 [ 191.452915][ T7510] R10: 0000000080000001 R11: 0000000000000001 R12: ffff88805d041a30 [ 191.460889][ T7510] R13: ffff88805d041b88 R14: ffff88805d041b70 R15: ffff88805d041b48 [ 191.468861][ T7510] FS: 0000000000000000(0000) GS:ffff8881245d9000(0000) knlGS:0000000000000000 [ 191.477784][ T7510] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.484353][ T7510] CR2: 00007f42701f8ff8 CR3: 000000007a7e0000 CR4: 00000000003526f0 [ 191.492398][ T7510] Call Trace: [ 191.495670][ T7510] [ 191.498584][ T7510] io_poll_remove_entries.part.0+0x156/0x7e0 [ 191.504554][ T7510] ? __lock_acquire+0x4a5/0x2630 [ 191.509478][ T7510] io_poll_task_func+0x39e/0xe30 [ 191.514403][ T7510] ? __pfx_io_poll_task_func+0x10/0x10 [ 191.519869][ T7510] ? find_held_lock+0x2b/0x80 [ 191.524538][ T7510] ? io_handle_tw_list+0xd4/0x580 [ 191.529548][ T7510] ? io_handle_tw_list+0xd4/0x580 [ 191.534560][ T7510] ? __pfx_io_poll_task_func+0x10/0x10 [ 191.540007][ T7510] io_handle_tw_list+0x194/0x580 [ 191.544934][ T7510] tctx_task_work_run+0x57/0x2b0 [ 191.549862][ T7510] tctx_task_work+0x7a/0xd0 [ 191.554351][ T7510] ? __pfx_tctx_task_work+0x10/0x10 [ 191.559552][ T7510] ? rcu_is_watching+0x12/0xc0 [ 191.564307][ T7510] ? _raw_spin_unlock_irq+0x23/0x50 [ 191.569500][ T7510] ? lockdep_hardirqs_on+0x78/0x100 [ 191.574703][ T7510] task_work_run+0x150/0x240 [ 191.579312][ T7510] ? __pfx_task_work_run+0x10/0x10 [ 191.584417][ T7510] ? do_raw_spin_unlock+0x145/0x1e0 [ 191.589606][ T7510] do_exit+0x829/0x2a30 [ 191.593757][ T7510] ? __pfx_do_exit+0x10/0x10 [ 191.598336][ T7510] ? do_raw_spin_lock+0x128/0x260 [ 191.603354][ T7510] ? find_held_lock+0x2b/0x80 [ 191.608022][ T7510] ? get_signal+0x7e0/0x21e0 [ 191.612611][ T7510] do_group_exit+0xd5/0x2a0 [ 191.617101][ T7510] get_signal+0x1ec7/0x21e0 [ 191.621607][ T7510] ? __pfx_get_signal+0x10/0x10 [ 191.626462][ T7510] ? do_futex+0x192/0x350 [ 191.630787][ T7510] arch_do_signal_or_restart+0x91/0x7a0 [ 191.636329][ T7510] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 191.642502][ T7510] ? __pfx___x64_sys_futex+0x10/0x10 [ 191.647852][ T7510] ? xfd_validate_state+0x129/0x190 [ 191.653041][ T7510] exit_to_user_mode_loop+0x86/0x4b0 [ 191.658414][ T7510] ? rcu_is_watching+0x12/0xc0 [ 191.663178][ T7510] do_syscall_64+0x4fe/0xf80 [ 191.667854][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.673741][ T7510] RIP: 0033:0x7f5a5959aeb9 [ 191.678153][ T7510] Code: Unable to access opcode bytes at 0x7f5a5959ae8f. [ 191.685151][ T7510] RSP: 002b:00007f5a5a3770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 191.693555][ T7510] RAX: fffffffffffffe00 RBX: 00007f5a59815fa8 RCX: 00007f5a5959aeb9 [ 191.701516][ T7510] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5a59815fa8 [ 191.709562][ T7510] RBP: 00007f5a59815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 191.717529][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.725508][ T7510] R13: 00007f5a59816038 R14: 00007ffd9b6dc8c0 R15: 00007ffd9b6dc9a8 [ 191.733474][ T7510] [ 191.736479][ T7510] Modules linked in: [ 191.740378][ T7510] ---[ end trace 0000000000000000 ]--- [ 191.745846][ T7510] RIP: 0010:__list_del_entry_valid_or_report+0x14a/0x1d0 [ 191.752861][ T7510] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 40 3d fa 8b e8 37 b0 32 fc 90 <0f> 0b 4c 89 e7 e8 3c 24 5d fd 48 89 ea 48 b8 00 00 00 00 00 fc ff [ 191.772458][ T7510] RSP: 0018:ffffc90010557860 EFLAGS: 00010082 [ 191.778513][ T7510] RAX: 000000000000006d RBX: ffff88805d041b70 RCX: 0000000000000000 [ 191.786470][ T7510] RDX: 000000000000006d RSI: ffffffff81e5d6c9 RDI: fffff520020aaefd [ 191.794430][ T7510] RBP: ffff8881467185c8 R08: 0000000000000005 R09: 0000000000000000 [ 191.802476][ T7510] R10: 0000000080000001 R11: 0000000000000001 R12: ffff88805d041a30 [ 191.810520][ T7510] R13: ffff88805d041b88 R14: ffff88805d041b70 R15: ffff88805d041b48 [ 191.818486][ T7510] FS: 0000000000000000(0000) GS:ffff8881245d9000(0000) knlGS:0000000000000000 [ 191.827413][ T7510] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.833990][ T7510] CR2: 00007f42701f8ff8 CR3: 000000007a7e0000 CR4: 00000000003526f0 [ 191.842130][ T7510] Kernel panic - not syncing: Fatal exception [ 191.848460][ T7510] Kernel Offset: disabled [ 191.852856][ T7510] Rebooting in 86400 seconds..