last executing test programs: 21.971574681s ago: executing program 0 (id=832): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xfffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x11, r1, 0x10000000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000280)={0x48}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, @val=@netfilter={0xa, 0x0, 0x4}}, 0x20) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x200008a3, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0x56, 0x9}}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, 0x0, 0x0) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmmsg$inet6(r7, &(0x7f0000000400)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x4, @mcast1, 0x8}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000380)="ad29a6fce23e27d73459add2cc8256100926fd613cbc45ee55b3c2cb431af293a71e60da12214ba62b7be63b165c57a5aa4826141ee55f432932ca278bfcd997d6747a4c254c1a0a324977b418047684a2fb42d1f5764e24e9cb", 0x5a}], 0x1, &(0x7f0000000680)=[@tclass={{0x14, 0x29, 0x43, 0xfffffffe}}, @dstopts={{0x2098, 0x29, 0x37, {0x2c, 0x40f, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x9, 0x400, [0x7, 0x10001, 0x3c0000, 0xffffffff, 0x8a, 0xc2]}}, @generic={0x72, 0x1000, "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"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x2, 0x6, [0x7, 0x7, 0x5, 0x4, 0x7fffffff]}}, @jumbo={0xc2, 0x4, 0xf62b}, @generic={0x5, 0x1000, "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"}, @pad1]}}}, @dstopts={{0xd8, 0x29, 0x37, {0x29, 0x18, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x8, 0x87, "001cb6e31ace9ac216f12282b867e069eff7263e4fcb56c7e2da62161665ef268ec09e20427b41111297291184a5c491ae5cee41a7fa36cc05ffd171a765b2ea96384519e83ea328f017f1ccd3307d24c4c7b75268af5cec474f61589b608ccf612b53f8b571116ce9c229bd55a2de4b9b1ae8d6b7528d1c658e97f84646819a75ab9cac049585"}, @calipso={0x7, 0x28, {0x2, 0x8, 0x8, 0x62, [0x8, 0x9, 0x7, 0x8]}}, @ra={0x5, 0x2, 0x5}]}}}, @hopopts={{0xa8, 0x29, 0x36, {0x6c, 0x11, '\x00', [@ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @calipso={0x7, 0x50, {0x0, 0x12, 0x95, 0x22, [0x3130, 0x7, 0xa, 0x3c9, 0x7, 0x7, 0x7fffffff, 0x7, 0x100000000]}}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xdc}, @jumbo={0xc2, 0x4, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xf5}}, @dstopts={{0x28, 0x29, 0x37, {0x21, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xd6}, @pad1, @enc_lim={0x4, 0x1, 0x82}, @ra={0x5, 0x2, 0x7}]}}}, @dstopts={{0x98, 0x29, 0x37, {0x4, 0x10, '\x00', [@generic={0x2c, 0x7e, "6139da8f066631c0676dedf32f815a904c99a9817e5f868034ee317b7dd0ecdd7dbaa055758bf8e5379092b9a4ce32ee84e6ddb34522d2f484e1ff89908bf62bc51930a75b847f2fe7dff1d6925b10fcded5010f5f6ea7ff0577772f013fe01448dd5a265ca61c13fea8a5051902446cdab2c78144c50feffa19923504c9"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0x800}}], 0x2360}}], 0x2, 0x40) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 20.446359084s ago: executing program 0 (id=837): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500003000000000008890"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x6, 0x0, 0x2, "57d4915b52cdfd4e8ea56ed6c1ca719a"}) mount$fuse(0x0, 0x0, 0x0, 0x1010, 0xfffffffffffffffc) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000380), 0x82000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f00000003c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000b000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c080003400000000008000240000000140800014000000003080001400000000b08000140000000120800024000000018080003"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x30048050) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x1003, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000040)="b89f1d52acf4ec2930c20918e462d45d87e1e18637b2f5e969990fdb6de4b79556f5758097e6589f36e4d3d53c5fbc61ef", 0x31}, {&(0x7f0000000100)="30dce4f6856ca0502e1cf1b0050e4d396fe9145184601601406e4f712f2d403a0961220530d0e876a8211a5e3f73f682163b4f2a9028e03da7df3a2841713a4b65560ec55c63b20d254923def2d1edd76d58dc58cd685ff20ec4b0fee1a011c7679ae76c94fef41f6ae16a38d63b82090efebecff162236cf30e64c281a8050de2193c3083defa33bdd2591c2944020d9399b9c8f19e81d69c576f839e8aacae81b7e219b0dcf9750f0532332c", 0xad}], 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, r11, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)={0xc4, r9, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x53}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x2}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x8c}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x8}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xdb}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x50}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x6e8}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x76}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2e}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9c, 0x29}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x43, 0x5b}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0xc4}, 0x1, 0x0, 0x0, 0x810}, 0x20008814) 13.294518033s ago: executing program 0 (id=852): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}], 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0xc902) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000001840)=0x5d4) sched_setscheduler(0x0, 0x1, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r2, 0xb) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x100007, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x7, 0x0, &(0x7f0000000200), 0x280000) r4 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_LINK_SELECT(r4, 0x10e, 0x7f, 0x0, 0x41) 12.179275431s ago: executing program 0 (id=857): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r6, r5, 0x2, 0x6, 0x4000, @void, @value}, 0x10) 11.909281023s ago: executing program 0 (id=858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) 11.233162728s ago: executing program 0 (id=859): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x118) r1 = semget$private(0x0, 0x3, 0x284) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) io_setup(0x8000, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000580), 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {0x2, 0xf}, {0x1, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0x10) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x4) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000780)=0x1) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000000880)=0x81) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f00000008c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) ioperm(0x0, 0x1, 0x1) sysfs$2(0x2, 0x19, &(0x7f0000000080)=""/101) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)) 8.007836644s ago: executing program 2 (id=862): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) exit(0x0) open(&(0x7f0000000080)='./file1\x00', 0x101080, 0x1c0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x2, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) 7.0953009s ago: executing program 2 (id=864): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r4, r0}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'veth1_to_batadv\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.030324717s ago: executing program 3 (id=865): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file1\x00') sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffce, 0x5, &(0x7f00000000c0)={0x0, 0x20}, 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.000119593s ago: executing program 1 (id=866): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x81}) 5.955146861s ago: executing program 1 (id=868): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r4, r0}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'veth1_to_batadv\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) close_range(r7, r7, 0x0) 5.954283753s ago: executing program 2 (id=869): socket$nl_xfrm(0x10, 0x3, 0x6) open$dir(0x0, 0x1, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x0, 0x800}, 0x20) getrlimit(0x2, &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000300)={0x0, @reserved}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0xa0044d07, &(0x7f0000000040)) 5.585539995s ago: executing program 4 (id=870): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200003, '\x00', 0x0, r2, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x803}, 0x45804) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) dup(r0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x1d, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x4, 0x8, 0x5, 0x40, 0x1}, @map_fd={0x18, 0x2}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0xb, 0x2, 0x17, 0xfffffffffffffffc}, @ringbuf_query, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x3, 0x51, &(0x7f00000005c0)=""/81, 0x41000, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x6, 0x22, 0x91}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000740)=[{0x0, 0x1, 0x0, 0x3}, {0x0, 0x4, 0xa}, {0x4, 0x2, 0x10, 0xa}, {0x1, 0x3, 0xf, 0x6}, {0x1, 0x3, 0x8, 0x3}, {0x5, 0x4, 0x3, 0x8}, {0x4, 0x6, 0xf, 0x4}, {0x4, 0x4, 0xb}, {0x0, 0x1, 0x5, 0x3}, {0x2, 0x4, 0xc, 0x1}], 0x10, 0x9, @void, @value}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) pwritev2(r6, &(0x7f0000000380)=[{&(0x7f00000000c0)="e3", 0x1}], 0x1, 0x8, 0x3ff, 0x15) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@bridge_getneigh={0x284, 0x1e, 0x200, 0x70bd2a, 0x25dfdbfc, {0x7, 0x0, 0x0, r4, 0x6a00}, [@IFLA_VFINFO_LIST={0x204, 0x16, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xd, @local}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x5c, 0xfffffffd, 0x7ff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x2}}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xa8a9, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0xdc77}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x77e, 0xfffffff8, 0x88a8}}, {0x14, 0x1, {0x6, 0x4ac, 0x5, 0x8100}}, {0x14, 0x1, {0xfff, 0x821, 0x5, 0x88a8}}, {0x14, 0x1, {0x1d9, 0x107, 0x243, 0x8100}}]}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8d6, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x157, 0x8}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0xf0a, 0x5, 0x88a8}}]}]}, {0x98, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x8f2}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x24f, 0xfff}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @broadcast}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10001, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @broadcast}}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xcc46, 0xe0d, 0x2083}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x200, 0x6}}, @IFLA_VF_TRUST={0xc, 0x9, {0xfffffff8, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xa63, 0x9}}]}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x6}, @IFLA_WEIGHT={0x8, 0xf, 0x10}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x12}]}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FD={0x8, 0x1, r6}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r9, @ANYBLOB="000427bd7000fedbdf2567000000cd00c5003cb063581330da9404fc01307ba253903d5b776315324592afc0a08ba1eb2c6812b0e5ab8a8006e12a8e257380bf04cda02d771c15dbaa135fa26f0e22de2b279581e1eda64d3dc4b07874faba1d93b7571881b89b842252bf982db4a0c0213569d25cad0ef014e5997c9087adada11c174430af6691b49eef2c2ff8e16b3aaa86b285fc3cd2b41358e531e7281074047172933704cb6ebc1dad0c1f2f4ad81367d7ae9ff4ff7796a824760d81586a315b2d01e66cdc17aa6d79ea28e5df207129b14eaa69e8e78134000000"], 0xe4}, 0x1, 0x0, 0x0, 0x2}, 0x80) ioctl$sock_netdev_private(r7, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") socket$nl_sock_diag(0x10, 0x3, 0x4) 5.567766201s ago: executing program 3 (id=871): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f00000000c0), 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x118, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5.156477398s ago: executing program 4 (id=872): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000300)={0x8, 0x6}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$rose(0xb, 0x5, 0x0) 4.893787719s ago: executing program 4 (id=873): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x6b0, 0xd0, 0x438, 0xd0, 0x0, 0x300, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0xfe}, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x438}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'tunl0\x00', {}, 'bond_slave_0\x00', {}, 0xe}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x710) (fail_nth: 4) 4.541048495s ago: executing program 4 (id=874): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x118) r1 = semget$private(0x0, 0x3, 0x284) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) io_setup(0x8000, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {0x2, 0xf}, {0x1, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0x10) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x4) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000780)=0x1) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000000880)=0x81) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f00000008c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) ioperm(0x0, 0x1, 0x1) sysfs$2(0x2, 0x19, &(0x7f0000000080)=""/101) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)) 3.722930275s ago: executing program 2 (id=875): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x118) r1 = semget$private(0x0, 0x3, 0x284) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) io_setup(0x8000, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {0x2, 0xf}, {0x1, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0x10) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x4) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000780)=0x1) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000000880)=0x81) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f00000008c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) ioperm(0x0, 0x1, 0x1) sysfs$2(0x2, 0x19, &(0x7f0000000080)=""/101) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)) 3.673193905s ago: executing program 4 (id=876): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008061, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0xa, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x3, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x8000012f, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0xfffffeff, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x4000, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x0, 0x4e0, 0x2, 0x4, 0xa, 0x4, 0x9, 0x81, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x6, 0x3, 0x9, 0x1, 0x3, 0x3, 0x1f, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x2000b, 0x9, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e5, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x4, 0x38, 0x820003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xc0, 0x2, 0x6, 0x7ff, 0x12b, 0x4, 0x1, 0x4, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x4, 0xb, 0x5, 0x938, 0x6, 0xf, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x7, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xffffeffc, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xd, 0x80, 0x7fffffff, 0x2, 0x8}, &(0x7f0000000040)=0x14) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x10, 0x0, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') syz_io_uring_complete(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r7, r6, 0x2f, 0x0, 0x0, @void, @value}, 0x20) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r6, r7, 0x2f, 0x28, 0x4, @void, @void, @void, @value}, 0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r2, 0x3}, &(0x7f00000000c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000300)=0x2, 0x4) 3.520229651s ago: executing program 3 (id=877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000012150001c04ae6c62b56"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000005000000020000006b"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300), 0x800, r7}, 0x38) 3.474090897s ago: executing program 1 (id=878): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0xa) mmap(&(0x7f000076c000/0x14000)=nil, 0x14000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x3, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x200000}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x8000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000200)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 2.553700634s ago: executing program 3 (id=879): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x81}) 2.339700244s ago: executing program 1 (id=880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) r3 = dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) 1.808984691s ago: executing program 4 (id=881): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r7, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000240)=[{0xffffffffffffffff}], 0x1, &(0x7f0000000280)=""/239, 0xef}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000580)=""/245, 0xf5}], 0x5, &(0x7f0000000700)=""/27, 0x1b}}, {{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180, 0xb4}}], 0x4, 0x10162, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010020000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xffffffffffffff37}}]}, 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x2a020400) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1.634932879s ago: executing program 3 (id=882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timerfd_create(0x6, 0x100000) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="0a000000010001", 0x7) syz_emit_ethernet(0x108, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0xaa, 0xaa, "e5", 'P\ai', 0x88e5, "7762eff180252b1f781c9150a3ba78ae0561a0d81a31270edbd56aa8ccab7beb9048f2dcd75ee33bfd42ee7f880edfac827b28d906ab2ebf9d8cd0ae1a5dcc929ac80bb09215af286fe34d0b8f6149a4647e6caa20ad452ab7a120cd85e24c2f5de9531a622acade484918e541697b38e31ec739a3398c433c69136b9aa02e2436b19ec27b4efcfb332734ee66efea4f79af190b6184c1c00574580447cffa2769d43aa02d8bbbe46ce1cb8a98a6c653e2ad642cb1b0d8b271eb7daeb0441e5581f9ec665e78833d762536b6dbf049de76ae89446c4bde0487892c9f69b6e1df1b2e153f1aa215d2b71a"}}}}}, &(0x7f0000000200)={0x1, 0x2, [0x116, 0xb10, 0xa82, 0xcbd]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 1.57889683s ago: executing program 1 (id=883): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x2, 0x980900}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x3, 0xc17b, "c54e24", 0x9}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x4, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r8 = socket(0x18, 0x3, 0x0) connect$pppoe(r8, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) 949.747694ms ago: executing program 2 (id=884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xfffffff7, 0x7f, {}, {0x0}, 0x4, 0x8}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, r4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0xf9}, @void, @eth={@empty, @random="1f00", @val, {@mpls_mc={0x8848, {[], @llc={@llc={0x0, 0xfe, '\x00'}}}}}}}, 0x1d) 829.116996ms ago: executing program 3 (id=885): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r7, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000240)=[{0xffffffffffffffff}], 0x1, &(0x7f0000000280)=""/239, 0xef}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000580)=""/245, 0xf5}], 0x5, &(0x7f0000000700)=""/27, 0x1b}}, {{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180, 0xb4}}], 0x4, 0x10162, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r8}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010020000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xffffffffffffff37}}]}, 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x2a020400) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 113.256359ms ago: executing program 2 (id=886): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x118) r1 = semget$private(0x0, 0x3, 0x284) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) io_setup(0x8000, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1, 0xa}, {0x2, 0xf}, {0x1, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0x10) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x4) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000780)=0x1) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000000880)=0x81) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f00000008c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) ioperm(0x0, 0x1, 0x1) sysfs$2(0x2, 0x19, &(0x7f0000000080)=""/101) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)) 0s ago: executing program 1 (id=887): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x100000002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x1c3, 0x12) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0xc0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'bridge0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r6, 0x7, 0x0, 0x10000000000007}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x84, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x8, 0x1, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/32, 0x20, 0x1, 0x17}, @flat=@binder={0x73622a85, 0x1001, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x3}, @dead_binder_done, @clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x2}], 0x7c, 0x0, &(0x7f0000000580)="b7f5239d90b33916e61f0b9a268ea4824f1dc9686951bd01f8775c5bf08651819725f18671d171c29d68b50c47b6baf08cf84610fe6a56bc3b766a69a9c1fef09d3d6bba187700ae29d6d1d197af5d0d20af89f8cc4c6920a28f9b2593c517394014850dc0d3452ac7a5f80e1b3f77d9a1c01227ee592c095d95fe12"}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x1ef802, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000240)) unshare(0x6a040000) creat(0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000002000010300000000feffffff02141400fd0000020100000008000200ac1414bb080004000080000008000100ffffffff"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000d00000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000000000000000000000000000000ac91435a9febf50ade2a7ed139a681000000070f459c"], 0x50) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, r10, 0x0, &(0x7f0000047000/0x1000)=nil, 0x1000, 0x200000000000ffff}) kernel console output (not intermixed with test programs): an invalid bInterval 42, changing to 9 [ 251.555620][ T8095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.545'. [ 251.599137][ T8095] zonefs (nullb0) ERROR: Not a zoned block device [ 251.628132][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 251.637282][ T8095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.545'. [ 251.661407][ T5136] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 251.762013][ T5136] Bluetooth: hci3: Injecting HCI hardware error event [ 251.794877][ T5136] Bluetooth: hci3: hardware error 0x00 [ 251.838672][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.848564][ T5873] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.858313][ T8088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.544'. [ 251.867912][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 251.880344][ T5873] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 251.890677][ T8088] zonefs (nullb0) ERROR: Not a zoned block device [ 251.897247][ T5873] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 251.906404][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 251.915163][ T8088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.544'. [ 251.924193][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.941808][ T5873] usb 2-1: config 0 descriptor?? [ 251.949479][ T8077] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 252.279108][ T974] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 252.435921][ T30] audit: type=1400 audit(1744501636.826:457): avc: denied { wake_alarm } for pid=8099 comm="syz.2.548" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 253.299947][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 253.355489][ T974] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 253.369855][ T974] usb 1-1: config 0 has no interface number 0 [ 253.377839][ T974] usb 1-1: config 0 interface 184 has no altsetting 0 [ 253.405977][ T974] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 253.432845][ T8106] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 253.439057][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.495159][ T974] usb 1-1: Product: syz [ 253.499341][ T974] usb 1-1: Manufacturer: syz [ 253.515640][ T974] usb 1-1: SerialNumber: syz [ 253.527610][ T974] usb 1-1: config 0 descriptor?? [ 253.537249][ T974] smsc75xx v1.0.0 [ 253.897240][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.074337][ T5823] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 254.301110][ T5136] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 254.380092][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.821422][ T5873] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 254.878658][ T5822] usb 2-1: USB disconnect, device number 25 [ 254.896729][ T8128] xt_l2tp: missing protocol rule (udp|l2tpip) [ 254.970528][ T5873] usb 3-1: device descriptor read/64, error -71 [ 255.481403][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.568178][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 255.629832][ T5873] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 255.829804][ T5873] usb 3-1: device descriptor read/64, error -71 [ 256.100237][ T5873] usb usb3-port1: attempt power cycle [ 256.205411][ T974] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 256.960293][ T5873] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 256.966908][ T974] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 257.133594][ T5873] usb 3-1: device descriptor read/8, error -71 [ 257.238125][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 257.608665][ T974] usb 1-1: USB disconnect, device number 16 [ 257.646583][ T8145] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.768638][ T8145] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.833181][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'. [ 257.854098][ T8145] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.880199][ T5873] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 257.972492][ T8145] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.257786][ T8145] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.272885][ T8145] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.286401][ T8145] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.303760][ T8145] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.433787][ T8157] syz.3.560: attempt to access beyond end of device [ 258.433787][ T8157] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 258.447115][ T8157] hpfs: hpfs_map_sector(): read error [ 259.469081][ T5873] usb 3-1: device descriptor read/8, error -71 [ 259.964481][ T8167] kvm: kvm [8165]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x16 [ 260.091308][ T5873] usb usb3-port1: unable to enumerate USB device [ 260.819900][ T8174] kvm: kvm [8171]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x16 [ 261.140611][ T8178] syz.3.564: attempt to access beyond end of device [ 261.140611][ T8178] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 261.154147][ T8178] hpfs: hpfs_map_sector(): read error [ 261.993578][ T8194] capability: warning: `syz.2.569' uses deprecated v2 capabilities in a way that may be insecure [ 262.126721][ T5880] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 262.144057][ T30] audit: type=1400 audit(1744501646.476:458): avc: denied { ioctl } for pid=8189 comm="syz.2.569" path="socket:[19650]" dev="sockfs" ino=19650 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 263.092098][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 263.185289][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.570'. [ 263.196545][ T8193] zonefs (nullb0) ERROR: Not a zoned block device [ 263.206486][ T5880] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 263.210363][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 263.223540][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.570'. [ 263.241960][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 263.256744][ T5880] usb 5-1: config 0 has no interface number 0 [ 263.263199][ T5880] usb 5-1: config 0 interface 184 has no altsetting 0 [ 263.321354][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.574'. [ 263.334174][ T8205] zonefs (nullb0) ERROR: Not a zoned block device [ 263.354623][ T5880] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 263.372430][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.407524][ T5880] usb 5-1: Product: syz [ 263.412424][ T8207] affs: No valid root block on device nullb0 [ 263.418772][ T5880] usb 5-1: Manufacturer: syz [ 263.443306][ T5880] usb 5-1: SerialNumber: syz [ 263.538634][ T974] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 263.547266][ T5880] usb 5-1: config 0 descriptor?? [ 263.572515][ T5880] smsc75xx v1.0.0 [ 264.687659][ T974] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 264.721994][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.064282][ T974] usb 2-1: Product: syz [ 265.074675][ T974] usb 2-1: Manufacturer: syz [ 265.079277][ T974] usb 2-1: SerialNumber: syz [ 265.086894][ T974] usb 2-1: config 0 descriptor?? [ 265.094203][ T974] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 265.114616][ T8220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.123504][ T8220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.430944][ T8225] kvm: kvm [8221]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x16 [ 265.737046][ T974] gspca_sunplus: reg_r err -110 [ 265.767545][ T974] usb 2-1: USB disconnect, device number 26 [ 266.374717][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 267.034338][ T5880] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 267.131268][ T8233] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.141159][ T5880] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 267.232843][ T5880] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 267.250174][ T5880] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 267.259344][ T8233] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.268554][ T5880] usb 5-1: USB disconnect, device number 22 [ 267.401422][ T8233] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.565817][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 267.946412][ T8233] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.972560][ T8246] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.027207][ T8233] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.039796][ T8233] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.053061][ T8233] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.065561][ T8233] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.183631][ T8246] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.301185][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.586'. [ 268.311698][ T8250] zonefs (nullb0) ERROR: Not a zoned block device [ 268.319164][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 268.327968][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.586'. [ 268.485913][ T8246] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.537247][ T8246] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.764663][ T8255] kvm: kvm [8252]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x16 [ 269.181366][ T8258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.587'. [ 269.194245][ T8258] zonefs (nullb0) ERROR: Not a zoned block device [ 269.269291][ T8246] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.282683][ T8246] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.295581][ T8246] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.308837][ T8246] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.771082][ T8293] syz.1.592: attempt to access beyond end of device [ 271.771082][ T8293] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 271.784281][ T8293] hpfs: hpfs_map_sector(): read error [ 272.274272][ T8294] tipc: Started in network mode [ 272.279970][ T8294] tipc: Node identity 36ea724a4eb4, cluster identity 4711 [ 272.288446][ T8294] tipc: Enabled bearer , priority 0 [ 272.723030][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 273.014738][ T8304] syz.2.597: attempt to access beyond end of device [ 273.014738][ T8304] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 273.027456][ T8304] hpfs: hpfs_map_sector(): read error [ 273.042182][ T5872] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 273.295277][ T5905] tipc: Node number set to 2019455562 [ 273.431132][ T8294] syzkaller0: entered promiscuous mode [ 273.460776][ T8294] syzkaller0: entered allmulticast mode [ 273.467173][ T8294] tipc: Resetting bearer [ 273.489796][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 273.593602][ T8305] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.605639][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 273.624556][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.626958][ T8291] tipc: Resetting bearer [ 273.709927][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 274.082674][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.095118][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 274.128930][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 274.140092][ T5872] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 274.149129][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.164409][ T5872] usb 5-1: config 0 descriptor?? [ 274.170129][ T8292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 274.241388][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 274.262145][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 274.270565][ T24] usb 1-1: config 0 has no interface number 0 [ 274.277565][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 274.296115][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 274.305814][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.314144][ T24] usb 1-1: Product: syz [ 274.318591][ T24] usb 1-1: Manufacturer: syz [ 274.326458][ T24] usb 1-1: SerialNumber: syz [ 274.334609][ T24] usb 1-1: config 0 descriptor?? [ 274.459443][ T24] smsc75xx v1.0.0 [ 275.185156][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 275.196891][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 275.212824][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 275.688690][ T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 275.763728][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.787114][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.128364][ T8329] xt_l2tp: missing protocol rule (udp|l2tpip) [ 276.271153][ T5136] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 277.596670][ T8291] tipc: Disabling bearer [ 277.605970][ T8305] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.731389][ T8305] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.746857][ T24] usb 1-1: USB disconnect, device number 17 [ 278.863702][ T8305] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.049249][ T8305] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.063268][ T8305] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.075580][ T8305] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.088340][ T8305] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.731653][ T5872] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 279.827192][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.608'. [ 279.899797][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 279.957663][ T8354] zonefs (nullb0) ERROR: Not a zoned block device [ 279.980760][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 279.996456][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.045577][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.111017][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 280.560008][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 280.574505][ T5872] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 280.588853][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.609676][ T5872] usb 1-1: config 0 descriptor?? [ 280.834545][ T8348] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 280.957422][ T974] usb 5-1: USB disconnect, device number 23 [ 281.726891][ T8377] tipc: Enabled bearer , priority 0 [ 281.918257][ T8377] syzkaller0: entered promiscuous mode [ 281.980467][ T8383] syz.1.614: attempt to access beyond end of device [ 281.980467][ T8383] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 281.993564][ T8383] hpfs: hpfs_map_sector(): read error [ 282.479682][ T8377] syzkaller0: entered allmulticast mode [ 282.495350][ T8377] tipc: Resetting bearer [ 282.765449][ T974] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 282.791139][ T8376] tipc: Resetting bearer [ 283.080075][ T5136] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 283.410238][ T974] usb 5-1: device descriptor read/64, error -71 [ 283.634944][ T8384] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 283.723337][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 283.889868][ T974] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 284.016187][ T5880] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 284.049874][ T974] usb 5-1: device descriptor read/64, error -71 [ 284.328058][ T974] usb usb5-port1: attempt power cycle [ 284.381381][ T5880] usb 2-1: unable to get BOS descriptor or descriptor too short [ 284.413332][ T5880] usb 2-1: not running at top speed; connect to a high speed hub [ 284.449465][ T5880] usb 2-1: config 1 interface 0 has no altsetting 0 [ 284.472547][ T5880] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 284.487916][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.504358][ T5880] usb 2-1: Product: syz [ 284.514477][ T5880] usb 2-1: Manufacturer: 㴱抬íœã‰¬à¦ì›„쇭फ़뿛çƒè·à²’柫ç¡ì¿à°³ï³ï¹–爫鉵굌鴶屺ᇅ騳럭힇騻å—篱㗌峜宩笗碗ꞟࢧ족枴쵈뀴潵㧴㡥즂ᅙ骲ëµã›ì»¡á¤„೦뉭â€ç©­åœ³ï‚且鬣♿䫘á‘뱨埗于芽跜䒘䚢铈䇆ꕋ深ë‚㤭輓慲㺿붗蓞放㡎è§è£¤å«ëž«ì–‰é“¥ì±—帇䕋↠äºï¢‰ï”¿ïŠèŒ„祽婷懚襎䞱磳ꓜ臉䫰を曀貙̾䗽²ã è¢·ì—¹ï“½ç—˜ [ 284.680020][ T974] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 284.729855][ T5880] usb 2-1: SerialNumber: syz [ 284.908736][ T974] usb 5-1: device descriptor read/8, error -71 [ 285.709808][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 287.041726][ T8376] tipc: Disabling bearer [ 287.105350][ T5880] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input13 [ 287.153019][ T5180] bcm5974 2-1:1.0: could not read from device [ 287.161498][ T5880] usb 2-1: USB disconnect, device number 27 [ 287.190238][ T5180] bcm5974 2-1:1.0: could not read from device [ 287.869968][ T8424] syz.4.623: attempt to access beyond end of device [ 287.869968][ T8424] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 287.883154][ T8424] hpfs: hpfs_map_sector(): read error [ 289.603205][ T5823] Bluetooth: hci6: command 0x1003 tx timeout [ 289.640916][ T5831] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 289.832483][ T8441] syz.3.629: attempt to access beyond end of device [ 289.832483][ T8441] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 289.845216][ T8441] hpfs: hpfs_map_sector(): read error [ 289.856499][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 290.116627][ T8437] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.370856][ T8437] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.654935][ T8451] kvm: kvm [8446]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x16 [ 292.448653][ T8437] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.467697][ T30] audit: type=1326 audit(1744501676.896:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.4.632" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f649778d169 code=0x0 [ 292.496606][ T30] audit: type=1400 audit(1744501676.896:460): avc: denied { map } for pid=8454 comm="syz.3.633" path="socket:[21253]" dev="sockfs" ino=21253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 292.623324][ T8437] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.710314][ T8437] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.725685][ T8437] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.738128][ T8437] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.750888][ T8437] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.799209][ T5872] usb 1-1: USB disconnect, device number 18 [ 292.919891][ T8468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.635'. [ 292.945543][ T8468] zonefs (nullb0) ERROR: Not a zoned block device [ 292.958793][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 292.967744][ T8468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.635'. [ 293.138580][ T8464] serio: Serial port ttyS3 [ 294.804457][ T5872] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 295.629890][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 295.795056][ T5872] usb 2-1: not running at top speed; connect to a high speed hub [ 295.813334][ T5872] usb 2-1: config 1 interface 0 has no altsetting 0 [ 295.878138][ T8492] syz.0.640: attempt to access beyond end of device [ 295.878138][ T8492] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 295.891360][ T8492] hpfs: hpfs_map_sector(): read error [ 297.976973][ T5872] usb 2-1: string descriptor 0 read error: -71 [ 297.996751][ T5872] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 298.087291][ T8516] FAULT_INJECTION: forcing a failure. [ 298.087291][ T8516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.110004][ T8516] CPU: 1 UID: 0 PID: 8516 Comm: syz.0.645 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 298.110030][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.110039][ T8516] Call Trace: [ 298.110045][ T8516] [ 298.110052][ T8516] dump_stack_lvl+0x16c/0x1f0 [ 298.110078][ T8516] should_fail_ex+0x512/0x640 [ 298.110093][ T8516] _copy_from_user+0x2e/0xd0 [ 298.110106][ T8516] core_sys_select+0x35a/0xbe0 [ 298.110120][ T8516] ? __pfx_core_sys_select+0x10/0x10 [ 298.110141][ T8516] ? set_user_sigmask+0x21b/0x2b0 [ 298.110154][ T8516] ? __pfx_set_user_sigmask+0x10/0x10 [ 298.110169][ T8516] do_pselect.constprop.0+0x19f/0x1e0 [ 298.110179][ T8516] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 298.110193][ T8516] __x64_sys_pselect6+0x182/0x240 [ 298.110204][ T8516] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 298.110217][ T8516] do_syscall_64+0xcd/0x260 [ 298.110232][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.110243][ T8516] RIP: 0033:0x7fcf8ef8d169 [ 298.110251][ T8516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.110261][ T8516] RSP: 002b:00007fcf8fe71038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 298.110271][ T8516] RAX: ffffffffffffffda RBX: 00007fcf8f1a6160 RCX: 00007fcf8ef8d169 [ 298.110278][ T8516] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000040 [ 298.110284][ T8516] RBP: 00007fcf8fe71090 R08: 0000000000000000 R09: 0000000000000000 [ 298.110290][ T8516] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 298.110296][ T8516] R13: 0000000000000001 R14: 00007fcf8f1a6160 R15: 00007ffe01923d68 [ 298.110308][ T8516] [ 298.110513][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.504279][ T5872] usb 2-1: can't set config #1, error -71 [ 298.520393][ T5872] usb 2-1: USB disconnect, device number 28 [ 298.806816][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 299.051373][ T8518] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.343915][ T8539] syz.2.650: attempt to access beyond end of device [ 299.343915][ T8539] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 299.357217][ T8539] hpfs: hpfs_map_sector(): read error [ 299.532811][ T5871] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 299.683776][ T8518] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.733804][ T8518] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.836385][ T5871] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.846944][ T5871] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 299.974789][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 300.031013][ T8518] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.032015][ T5871] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 300.256169][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.268005][ T8528] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 300.301073][ T5871] hub 1-1:1.0: bad descriptor, ignoring hub [ 300.317171][ T5871] hub 1-1:1.0: probe with driver hub failed with error -5 [ 300.332609][ T5871] cdc_wdm 1-1:1.0: skipping garbage [ 300.341436][ T5871] cdc_wdm 1-1:1.0: skipping garbage [ 300.356021][ T5871] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 300.380044][ T5871] cdc_wdm 1-1:1.0: Unknown control protocol [ 300.495310][ T30] audit: type=1326 audit(1744501684.926:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8543 comm="syz.4.653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f649778d169 code=0x0 [ 300.596099][ T8549] SET target dimension over the limit! [ 300.643890][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 300.650699][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 300.657081][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 300.663688][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 301.026372][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 301.033021][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 301.039872][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 301.046483][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 301.055425][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 301.062056][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 301.068329][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 301.074938][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 301.081222][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 301.087819][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 301.094080][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 301.100678][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 301.107506][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 301.114215][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 301.121739][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 301.128356][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 301.283678][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 301.846290][ T8560] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.915898][ T8560] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.983012][ T8560] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.021131][ T5872] usb 1-1: USB disconnect, device number 19 [ 302.091615][ T8560] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.157548][ T8518] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.191836][ T8560] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.207875][ T8560] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.225254][ T8518] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.239030][ T8560] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.258876][ T8518] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.273249][ T8560] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.304737][ T8518] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.440222][ T8567] kvm: MWAIT instruction emulated as NOP! [ 302.848699][ T8583] FAULT_INJECTION: forcing a failure. [ 302.848699][ T8583] name failslab, interval 1, probability 0, space 0, times 0 [ 302.862016][ T8583] CPU: 0 UID: 0 PID: 8583 Comm: syz.2.660 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 302.862039][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 302.862049][ T8583] Call Trace: [ 302.862055][ T8583] [ 302.862061][ T8583] dump_stack_lvl+0x16c/0x1f0 [ 302.862088][ T8583] should_fail_ex+0x512/0x640 [ 302.862106][ T8583] ? fs_reclaim_acquire+0xae/0x150 [ 302.862131][ T8583] ? tomoyo_encode2+0x100/0x3e0 [ 302.862153][ T8583] should_failslab+0xc2/0x120 [ 302.862172][ T8583] __kmalloc_noprof+0xd2/0x510 [ 302.862188][ T8583] ? d_absolute_path+0x136/0x1a0 [ 302.862215][ T8583] tomoyo_encode2+0x100/0x3e0 [ 302.862241][ T8583] tomoyo_encode+0x29/0x50 [ 302.862262][ T8583] tomoyo_realpath_from_path+0x18f/0x6e0 [ 302.862292][ T8583] tomoyo_path_number_perm+0x245/0x580 [ 302.862311][ T8583] ? tomoyo_path_number_perm+0x237/0x580 [ 302.862331][ T8583] ? finish_task_switch.isra.0+0x1a4/0xc10 [ 302.862355][ T8583] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 302.862374][ T8583] ? rcu_is_watching+0x12/0xc0 [ 302.862395][ T8583] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.862439][ T8583] ? find_held_lock+0x2b/0x80 [ 302.862459][ T8583] ? hook_file_ioctl_common+0x145/0x410 [ 302.862481][ T8583] ? __fget_files+0x20e/0x3c0 [ 302.862502][ T8583] security_file_ioctl+0x9b/0x240 [ 302.862526][ T8583] __x64_sys_ioctl+0xb7/0x200 [ 302.862557][ T8583] do_syscall_64+0xcd/0x260 [ 302.862581][ T8583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.862597][ T8583] RIP: 0033:0x7f1b6418d169 [ 302.862610][ T8583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.862625][ T8583] RSP: 002b:00007f1b64f0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.862641][ T8583] RAX: ffffffffffffffda RBX: 00007f1b643a6160 RCX: 00007f1b6418d169 [ 302.862651][ T8583] RDX: 0000200000000000 RSI: 000000000000541a RDI: 0000000000000008 [ 302.862661][ T8583] RBP: 00007f1b64f0a090 R08: 0000000000000000 R09: 0000000000000000 [ 302.862671][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.862680][ T8583] R13: 0000000000000000 R14: 00007f1b643a6160 R15: 00007fff6ff769f8 [ 302.862704][ T8583] [ 302.862777][ T8583] ERROR: Out of memory at tomoyo_realpath_from_path. [ 303.364962][ T30] audit: type=1400 audit(1744501687.796:462): avc: denied { read write } for pid=8582 comm="syz.1.661" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 303.521578][ T30] audit: type=1400 audit(1744501687.816:463): avc: denied { open } for pid=8582 comm="syz.1.661" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 303.550231][ T8587] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 303.662016][ T8587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.896560][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 304.082372][ T8599] kvm: kvm [8593]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x16 [ 306.458109][ T8597] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.437019][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'. [ 307.500395][ T8597] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.890164][ T8616] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.014459][ T8597] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.134078][ T8597] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.162486][ T8621] kvm: kvm [8611]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x16 [ 308.789632][ T8616] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.841275][ T8597] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.858330][ T8597] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.873956][ T8597] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.891073][ T8597] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.061841][ T8616] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.210570][ T8634] sctp: [Deprecated]: syz.3.671 (pid 8634) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.210570][ T8634] Use struct sctp_sack_info instead [ 309.238532][ T8616] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.371795][ T30] audit: type=1400 audit(1744501693.766:464): avc: denied { append } for pid=8625 comm="syz.1.673" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 309.390491][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 309.403761][ T30] audit: type=1400 audit(1744501693.776:465): avc: denied { read } for pid=8625 comm="syz.1.673" path="socket:[22119]" dev="sockfs" ino=22119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 309.455123][ T30] audit: type=1400 audit(1744501693.886:466): avc: denied { write } for pid=8638 comm="syz.4.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 309.496449][ T8639] xt_CT: No such helper "snmp_trap" [ 309.509975][ T5872] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 309.529804][ T974] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 309.679872][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 309.686785][ T974] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.702646][ T974] usb 4-1: config 0 has no interface number 0 [ 309.704261][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 309.713054][ T974] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 309.726208][ T974] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 309.742187][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.762473][ T974] usb 4-1: config 0 descriptor?? [ 309.770223][ T974] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 309.984856][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 309.996060][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 310.007029][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 310.018150][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 310.079576][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 310.095617][ T974] usb 4-1: USB disconnect, device number 32 [ 310.134933][ T5872] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 310.152120][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.170954][ T5872] usb 1-1: config 0 descriptor?? [ 310.183962][ T8636] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 310.523442][ T30] audit: type=1326 audit(1744501694.956:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649778d169 code=0x7ffc0000 [ 310.557573][ T30] audit: type=1326 audit(1744501694.956:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649778d169 code=0x7ffc0000 [ 310.582976][ T30] audit: type=1326 audit(1744501694.956:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f649778d169 code=0x7ffc0000 [ 310.607417][ T30] audit: type=1326 audit(1744501694.956:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649778d169 code=0x7ffc0000 [ 310.632090][ T30] audit: type=1326 audit(1744501694.956:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649778d169 code=0x7ffc0000 [ 310.664494][ T30] audit: type=1326 audit(1744501694.976:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f649778d169 code=0x7ffc0000 [ 310.700551][ T30] audit: type=1326 audit(1744501694.976:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649778d169 code=0x7ffc0000 [ 310.772997][ T8654] Cannot find add_set index 2 as target [ 311.183221][ T8616] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.197375][ T8616] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.211800][ T8616] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.226098][ T8616] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.136210][ T8669] tipc: Enabled bearer , priority 0 [ 312.202481][ T8669] syzkaller0: entered promiscuous mode [ 312.208273][ T8669] syzkaller0: entered allmulticast mode [ 312.214911][ T8669] tipc: Resetting bearer [ 312.264746][ T8668] tipc: Resetting bearer [ 312.397042][ T5831] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 312.939932][ T5136] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 313.482751][ T24] usb 1-1: USB disconnect, device number 20 [ 314.983049][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 315.321584][ T5872] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 315.489930][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 315.527434][ T5872] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 315.536624][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.544716][ T5872] usb 1-1: Product: syz [ 315.548893][ T5872] usb 1-1: Manufacturer: syz [ 315.553826][ T5872] usb 1-1: SerialNumber: syz [ 315.570223][ T5872] usb 1-1: config 0 descriptor?? [ 316.001790][ T8668] tipc: Disabling bearer [ 316.336443][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 316.359922][ T8695] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.360935][ T5872] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 316.492267][ T8701] dummy0: entered promiscuous mode [ 316.497514][ T8701] macsec1: entered promiscuous mode [ 316.500178][ T5872] gspca_sunplus: reg_w_riv err -71 [ 316.508524][ T8701] macsec1: entered allmulticast mode [ 316.527840][ T8701] dummy0: entered allmulticast mode [ 316.558074][ T8695] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.577962][ T5872] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 316.685084][ T8708] xt_l2tp: missing protocol rule (udp|l2tpip) [ 316.699557][ T8695] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.699948][ T5872] usb 1-1: USB disconnect, device number 21 [ 316.756598][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.859844][ T5871] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 316.923307][ T8695] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.012942][ T8695] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.025400][ T8695] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.037841][ T8695] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.050565][ T8695] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.174955][ T8717] xt_l2tp: missing protocol rule (udp|l2tpip) [ 317.235440][ T5871] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 317.248166][ T5871] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 2 [ 317.499981][ T974] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 317.545833][ T5871] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 317.555256][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.563424][ T5871] usb 5-1: Product: syz [ 317.567647][ T5871] usb 5-1: Manufacturer: syz [ 317.575342][ T5871] usb 5-1: SerialNumber: syz [ 317.771847][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.782905][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.119942][ T974] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.142916][ T974] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.152375][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.176114][ T974] usb 2-1: config 0 descriptor?? [ 318.925227][ T8731] netlink: 152 bytes leftover after parsing attributes in process `syz.0.695'. [ 318.932407][ T974] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 318.962382][ T974] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 318.984119][ T8731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.695'. [ 319.200669][ T8718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.209161][ T8718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.287485][ T5871] usb 2-1: USB disconnect, device number 29 [ 320.002623][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.698'. [ 320.013464][ T8741] zonefs (nullb0) ERROR: Not a zoned block device [ 320.069847][ T5872] usb 5-1: USB disconnect, device number 28 [ 320.516083][ T8747] syz.3.697: attempt to access beyond end of device [ 320.516083][ T8747] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 320.529330][ T8747] hpfs: hpfs_map_sector(): read error [ 321.153023][ T8754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.700'. [ 321.989855][ T5872] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 322.018731][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 322.018745][ T30] audit: type=1400 audit(1744501705.556:501): avc: denied { execute_no_trans } for pid=8752 comm="syz.2.700" path="/154/file2" dev="tmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 322.129549][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 322.541281][ T8760] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.688873][ T8760] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.725440][ T5872] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 322.739393][ T8760] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.744957][ T5872] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 2 [ 322.824200][ T8768] sctp: [Deprecated]: syz.2.703 (pid 8768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.824200][ T8768] Use struct sctp_sack_info instead [ 322.879398][ T5872] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 322.898766][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.912789][ T5872] usb 5-1: Product: syz [ 322.918941][ T5872] usb 5-1: Manufacturer: syz [ 322.937216][ T5872] usb 5-1: SerialNumber: syz [ 323.269778][ T5880] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 323.353075][ T5872] usb 5-1: USB disconnect, device number 29 [ 323.359844][ T5871] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 323.415043][ T8760] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.500083][ T5871] usb 4-1: device descriptor read/64, error -71 [ 323.589859][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 323.601370][ T5880] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.630617][ T5880] usb 3-1: config 0 has no interface number 0 [ 323.636746][ T5880] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 323.658092][ T5880] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 323.677624][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.690189][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 323.704229][ T5880] usb 3-1: config 0 descriptor?? [ 323.899756][ T5871] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 323.936983][ T5880] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 323.989762][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 323.996408][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 324.005407][ T10] usb 1-1: config 0 has no interface number 0 [ 324.011876][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 324.022302][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 324.031587][ T5871] usb 4-1: device descriptor read/64, error -71 [ 324.049897][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.058848][ T10] usb 1-1: Product: syz [ 324.065104][ T10] usb 1-1: Manufacturer: syz [ 324.070543][ T10] usb 1-1: SerialNumber: syz [ 324.076925][ T10] usb 1-1: config 0 descriptor?? [ 324.090296][ T10] smsc75xx v1.0.0 [ 324.159983][ T5880] usb 3-1: USB disconnect, device number 24 [ 324.171394][ T5871] usb usb4-port1: attempt power cycle [ 324.628808][ T5871] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 324.633951][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.672586][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 324.789436][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 324.821811][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 324.825401][ T30] audit: type=1400 audit(1744501709.256:502): avc: denied { create } for pid=8783 comm="syz.2.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 324.856986][ T5871] usb 4-1: device descriptor read/8, error -71 [ 324.862698][ T30] audit: type=1400 audit(1744501709.256:503): avc: denied { connect } for pid=8783 comm="syz.2.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 324.890027][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 324.932128][ T8760] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.944710][ T8760] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.957429][ T8760] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.970252][ T8760] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.033346][ T30] audit: type=1400 audit(1744501709.286:504): avc: denied { bind } for pid=8783 comm="syz.2.708" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 325.053504][ T30] audit: type=1400 audit(1744501709.286:505): avc: denied { node_bind } for pid=8783 comm="syz.2.708" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 325.115114][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.150096][ T5871] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 325.151538][ T30] audit: type=1400 audit(1744501709.586:506): avc: denied { mount } for pid=8791 comm="syz.2.710" name="/" dev="autofs" ino=23450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 325.248956][ T8797] sctp: [Deprecated]: syz.1.711 (pid 8797) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.248956][ T8797] Use struct sctp_sack_info instead [ 325.274312][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 325.295006][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 325.319938][ T30] audit: type=1400 audit(1744501709.746:507): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 325.353980][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 325.507909][ T5871] usb 4-1: device not accepting address 36, error -71 [ 325.516023][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'. [ 325.527564][ T5871] usb usb4-port1: unable to enumerate USB device [ 325.611464][ T8810] syz.2.714: attempt to access beyond end of device [ 325.611464][ T8810] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 325.624750][ T8810] hpfs: hpfs_map_sector(): read error [ 326.002936][ T974] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 326.073239][ T30] audit: type=1400 audit(1744501710.506:508): avc: denied { write } for pid=8812 comm="syz.4.715" name="file0" dev="tmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 326.099225][ T30] audit: type=1400 audit(1744501710.526:509): avc: denied { open } for pid=8812 comm="syz.4.715" path="/133/file0" dev="tmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 326.167192][ T10] usb 1-1: USB disconnect, device number 22 [ 326.170220][ T974] usb 2-1: Using ep0 maxpacket: 8 [ 326.191286][ T974] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 326.209273][ T974] usb 2-1: config 0 has no interface number 0 [ 326.216443][ T974] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.227942][ T974] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 326.242944][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.319178][ T974] usb 2-1: config 0 descriptor?? [ 326.340853][ T974] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 326.371817][ T5871] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 326.706258][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 327.354416][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'. [ 327.522940][ T8828] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.694289][ T5871] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 327.715328][ T8831] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.737765][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.749363][ T8828] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.751154][ T10] usb 2-1: USB disconnect, device number 30 [ 327.765406][ T5871] usb 4-1: Product: syz [ 327.769557][ T5871] usb 4-1: Manufacturer: syz [ 327.777009][ T5871] usb 4-1: SerialNumber: syz [ 327.786664][ T8831] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.812354][ T5871] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 327.833853][ T8828] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.854736][ T8831] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.874479][ T8828] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.916756][ T8831] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.941459][ T30] audit: type=1400 audit(1744501712.366:510): avc: denied { firmware_load } for pid=5934 comm="kworker/0:7" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 327.951134][ T8828] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.983259][ T8828] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.998343][ T8828] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.014270][ T8828] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.041294][ T8831] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.059930][ T8831] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.078192][ T8831] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.092118][ T974] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 328.094832][ T8831] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.203058][ T5934] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 328.444274][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.450045][ T5871] usb 4-1: USB disconnect, device number 37 [ 328.719763][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.731212][ T8840] syz.4.721: attempt to access beyond end of device [ 328.731212][ T8840] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 328.743998][ T8840] hpfs: hpfs_map_sector(): read error [ 328.776925][ T974] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 328.794646][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.806986][ T974] usb 3-1: config 0 descriptor?? [ 329.125521][ T5880] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 329.311448][ T5934] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 329.319295][ T5934] ath9k_htc: Failed to initialize the device [ 329.328502][ T5871] usb 4-1: ath9k_htc: USB layer deinitialized [ 329.385174][ T974] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 329.927437][ T974] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 329.942572][ T5880] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 329.951991][ T5880] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 329.969920][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 330.002046][ T974] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 330.014555][ T5880] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 330.132657][ T5871] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 330.450205][ T974] hid-steam 0003:28DE:1142.0002: No HID_FEATURE_REPORT submitted - nothing to read [ 330.475143][ T5880] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 330.493627][ T974] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 330.501069][ T5822] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 330.580966][ T5871] usb 4-1: device descriptor read/64, error -71 [ 330.587623][ T5880] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 330.599202][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 330.619402][ T974] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 330.666145][ T5880] usb 2-1: Product: syz [ 330.675218][ T974] usb 3-1: USB disconnect, device number 25 [ 330.685458][ T5880] usb 2-1: Manufacturer: syz [ 330.690258][ T5822] usb 1-1: Using ep0 maxpacket: 32 [ 330.704617][ T5822] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 330.729076][ T5880] cdc_wdm 2-1:1.0: skipping garbage [ 330.751595][ T974] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 330.771055][ T5822] usb 1-1: config 0 has no interface number 0 [ 330.789656][ T5880] cdc_wdm 2-1:1.0: skipping garbage [ 330.803443][ T5822] usb 1-1: config 0 interface 184 has no altsetting 0 [ 330.811774][ T5880] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 330.851007][ T5871] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 330.858960][ T5880] cdc_wdm 2-1:1.0: Unknown control protocol [ 330.886661][ T30] audit: type=1400 audit(1744501715.316:511): avc: denied { module_request } for pid=8865 comm="syz.2.728" kmod="bt-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 330.943980][ T5822] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 330.963096][ T8869] sctp: [Deprecated]: syz.2.728 (pid 8869) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.963096][ T8869] Use struct sctp_sack_info instead [ 330.986361][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.013191][ T5871] usb 4-1: device descriptor read/64, error -71 [ 331.053335][ T8871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.130964][ T5822] usb 1-1: Product: syz [ 331.144094][ T5822] usb 1-1: Manufacturer: syz [ 331.148750][ T5822] usb 1-1: SerialNumber: syz [ 331.151693][ T5871] usb usb4-port1: attempt power cycle [ 331.163117][ T8871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.195247][ T5822] usb 1-1: config 0 descriptor?? [ 331.201640][ C1] wdm_int_callback: 2642 callbacks suppressed [ 331.201660][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.214291][ C1] wdm_int_callback: 2642 callbacks suppressed [ 331.214302][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.226885][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.233462][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.239904][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.246478][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.252971][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.259576][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.265849][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.272431][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.278657][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.285236][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.291540][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.298133][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.304369][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.310951][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.317262][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.323844][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.330590][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.337180][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.344813][ T5880] usb 2-1: USB disconnect, device number 31 [ 331.350779][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 331.377758][ T5822] smsc75xx v1.0.0 [ 331.505678][ T974] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 331.580521][ T5871] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 331.626000][ T5871] usb 4-1: device descriptor read/8, error -71 [ 331.681197][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 331.687429][ T974] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 331.695788][ T974] usb 3-1: config 0 has no interface number 0 [ 331.703553][ T974] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 331.714859][ T974] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 331.725483][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.736483][ T974] usb 3-1: config 0 descriptor?? [ 331.746998][ T974] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 331.805098][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.829230][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.858264][ T30] audit: type=1326 audit(1744501716.286:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8874 comm="syz.3.730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf87d8d169 code=0x0 [ 331.881656][ T5871] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 331.952483][ T9] usb 3-1: USB disconnect, device number 26 [ 332.091149][ T5871] usb 4-1: device not accepting address 41, error -71 [ 332.115133][ T5871] usb usb4-port1: unable to enumerate USB device [ 332.671018][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 332.767074][ T30] audit: type=1400 audit(1744501717.196:513): avc: denied { getopt } for pid=8889 comm="syz.3.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 332.852383][ T5822] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 332.869922][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 332.891432][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 332.902994][ T9] usb 5-1: config 0 has no interface number 0 [ 332.916353][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 332.917679][ T5822] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 332.937246][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 332.948935][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.965108][ T9] usb 5-1: Product: syz [ 332.973681][ T9] usb 5-1: Manufacturer: syz [ 332.978413][ T9] usb 5-1: SerialNumber: syz [ 333.014345][ T9] usb 5-1: config 0 descriptor?? [ 333.100740][ T5822] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 333.111403][ T5822] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 333.122933][ T5822] usb 1-1: USB disconnect, device number 23 [ 333.776227][ T9] smsc75xx v1.0.0 [ 334.546377][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 334.569927][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 334.825925][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 334.899752][ T5822] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 334.927998][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 334.944908][ T8901] zonefs (nullb0) ERROR: Not a zoned block device [ 334.953894][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 334.962683][ T8901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.737'. [ 335.006714][ T30] audit: type=1400 audit(1744501719.436:514): avc: denied { create } for pid=8914 comm="syz.1.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 335.171513][ T5822] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 335.186104][ T5822] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 335.699743][ T5822] usb 4-1: config 5 has no interface number 0 [ 335.721365][ T5822] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 335.746072][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.786466][ T5822] usb 4-1: Product: syz [ 335.862346][ T5874] usb 5-1: USB disconnect, device number 30 [ 335.878379][ T5822] usb 4-1: Manufacturer: syz [ 335.883810][ T5822] usb 4-1: SerialNumber: syz [ 336.002083][ T52] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 336.091434][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 336.109479][ T5822] comedi comedi0: Wrong number of endpoints [ 336.137554][ T5822] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 336.165485][ T5822] usb 4-1: USB disconnect, device number 42 [ 336.187268][ T52] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 336.219901][ T5874] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 336.310983][ T52] usb 2-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 336.325266][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.330006][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 336.344363][ T9] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 336.365071][ T9] usb 1-1: config 0 has no interface number 0 [ 336.374746][ T9] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.383083][ T52] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 336.407474][ T9] usb 1-1: config 0 interface 85 has no altsetting 0 [ 336.417552][ T6836] udevd[6836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.459487][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 336.488353][ T8925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.743'. [ 336.500637][ T8925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.512556][ T8925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.567804][ T30] audit: type=1400 audit(1744501720.916:515): avc: denied { write } for pid=8924 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 336.587978][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.653596][ T8939] syz.4.743: attempt to access beyond end of device [ 336.653596][ T8939] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 336.666881][ T8939] vxfs: unable to read disk superblock at 1 [ 336.675434][ T8939] syz.4.743: attempt to access beyond end of device [ 336.675434][ T8939] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 336.688640][ T8939] vxfs: unable to read disk superblock at 8 [ 336.694841][ T8939] vxfs: can't find superblock. [ 336.705725][ T9] usb 1-1: Product: syz [ 337.045368][ T9] usb 1-1: Manufacturer: syz [ 337.058765][ T30] audit: type=1400 audit(1744501720.966:516): avc: denied { getopt } for pid=8924 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 337.079476][ T9] usb 1-1: SerialNumber: syz [ 337.097744][ T9] usb 1-1: config 0 descriptor?? [ 337.124625][ T30] audit: type=1400 audit(1744501721.146:517): avc: denied { map } for pid=8924 comm="syz.4.743" path="socket:[23913]" dev="sockfs" ino=23913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 337.151393][ T30] audit: type=1400 audit(1744501721.146:518): avc: denied { read } for pid=8924 comm="syz.4.743" path="socket:[23913]" dev="sockfs" ino=23913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 337.244870][ T5874] usb 5-1: unable to get BOS descriptor or descriptor too short [ 337.256354][ T5874] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 337.264789][ T5874] usb 5-1: can't read configurations, error -71 [ 337.379139][ T8944] sctp: [Deprecated]: syz.3.744 (pid 8944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.379139][ T8944] Use struct sctp_sack_info instead [ 337.639909][ T974] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 337.850978][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 337.861600][ T974] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 337.884288][ T974] usb 4-1: config 0 has no interface number 0 [ 338.423378][ T52] usb 2-1: USB disconnect, device number 32 [ 338.451235][ T974] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 338.501433][ T974] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 338.520364][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.541907][ T974] usb 4-1: config 0 descriptor?? [ 338.555458][ T974] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 338.796626][ T30] audit: type=1400 audit(1744501723.196:519): avc: denied { prog_load } for pid=8971 comm="syz.2.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 338.818782][ T974] usb 4-1: USB disconnect, device number 43 [ 338.869337][ T30] audit: type=1400 audit(1744501723.196:520): avc: denied { bpf } for pid=8971 comm="syz.2.748" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 338.951048][ T52] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 339.149210][ T30] audit: type=1400 audit(1744501723.196:521): avc: denied { search } for pid=8946 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.246375][ T30] audit: type=1400 audit(1744501723.196:522): avc: denied { getattr } for pid=8946 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.249870][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 339.509480][ T52] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 339.517723][ T52] usb 2-1: config 0 has no interface number 0 [ 339.533994][ T52] usb 2-1: config 0 interface 184 has no altsetting 0 [ 339.552095][ T52] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 339.561718][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.570234][ T52] usb 2-1: Product: syz [ 339.574445][ T52] usb 2-1: Manufacturer: syz [ 339.579011][ T52] usb 2-1: SerialNumber: syz [ 339.583704][ T30] audit: type=1400 audit(1744501723.196:523): avc: denied { write } for pid=8946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.608995][ T52] usb 2-1: config 0 descriptor?? [ 339.633356][ T52] smsc75xx v1.0.0 [ 339.652709][ T9] appletouch 1-1:0.85: Failed to request geyser raw mode [ 339.669897][ T9] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 340.352732][ T9] usb 1-1: USB disconnect, device number 24 [ 340.382597][ T8970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.390994][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 340.391007][ T30] audit: type=1400 audit(1744501724.806:561): avc: denied { create } for pid=8962 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.391055][ T30] audit: type=1400 audit(1744501724.806:562): avc: denied { write } for pid=8962 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.397200][ T52] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 340.450933][ T8970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.487670][ T52] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 340.497734][ T52] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 340.508488][ T52] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 340.685469][ T30] audit: type=1400 audit(1744501724.806:563): avc: denied { read } for pid=8962 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.290297][ T30] audit: type=1400 audit(1744501724.806:564): avc: denied { read write } for pid=8962 comm="syz.1.747" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.422415][ T9004] syz.0.752: attempt to access beyond end of device [ 341.422415][ T9004] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 341.435191][ T9004] hpfs: hpfs_map_sector(): read error [ 341.854318][ T30] audit: type=1400 audit(1744501724.816:565): avc: denied { open } for pid=8962 comm="syz.1.747" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.972179][ T30] audit: type=1400 audit(1744501725.076:566): avc: denied { create } for pid=8959 comm="syz.4.746" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 341.993446][ T30] audit: type=1400 audit(1744501725.076:567): avc: denied { map } for pid=8959 comm="syz.4.746" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 342.024237][ T30] audit: type=1400 audit(1744501725.076:568): avc: denied { read write } for pid=8959 comm="syz.4.746" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 342.212591][ T9] usb 2-1: USB disconnect, device number 33 [ 342.231854][ T30] audit: type=1400 audit(1744501725.086:569): avc: denied { read } for pid=8959 comm="syz.4.746" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 342.254677][ T30] audit: type=1400 audit(1744501725.086:570): avc: denied { open } for pid=8959 comm="syz.4.746" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 342.345185][ T9019] openvswitch: netlink: Missing key (keys=40, expected=100) [ 343.462095][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 343.915973][ T9046] sctp: [Deprecated]: syz.1.760 (pid 9046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.915973][ T9046] Use struct sctp_sack_info instead [ 344.057142][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 344.078728][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 344.087190][ T9] usb 3-1: config 0 has no interface number 0 [ 344.131995][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 344.169047][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 344.178341][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.199814][ T9] usb 3-1: Product: syz [ 344.217702][ T9] usb 3-1: Manufacturer: syz [ 344.234403][ T9] usb 3-1: SerialNumber: syz [ 344.255884][ T9] usb 3-1: config 0 descriptor?? [ 344.270643][ T52] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 344.301965][ T9] smsc75xx v1.0.0 [ 344.306072][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 344.362737][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 344.459764][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 344.481632][ T52] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.492410][ T52] usb 2-1: config 0 has no interface number 0 [ 344.498530][ T52] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.529836][ T52] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 344.547630][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.788958][ T52] usb 2-1: config 0 descriptor?? [ 345.182849][ T52] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 345.699987][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 345.700002][ T30] audit: type=1400 audit(1744501730.126:595): avc: denied { ioctl } for pid=9076 comm="syz.0.764" path="socket:[24096]" dev="sockfs" ino=24096 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.730768][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.792793][ T5872] usb 2-1: USB disconnect, device number 34 [ 345.798783][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 345.834851][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 345.873471][ T9080] dummy0: entered promiscuous mode [ 345.879068][ T9080] macsec1: entered promiscuous mode [ 345.885385][ T9080] macsec1: entered allmulticast mode [ 345.890797][ T9080] dummy0: entered allmulticast mode [ 346.055702][ T30] audit: type=1400 audit(1744501730.166:596): avc: denied { write } for pid=9041 comm="syz.1.760" name="iowarrior0" dev="devtmpfs" ino=3026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 346.079053][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.155464][ T30] audit: type=1400 audit(1744501730.176:597): avc: denied { ioctl } for pid=9076 comm="syz.0.764" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24101 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 346.181296][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.264777][ T9] usb 3-1: USB disconnect, device number 27 [ 346.435701][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 346.475391][ T9085] dummy0: entered promiscuous mode [ 346.481158][ T9085] macsec1: entered promiscuous mode [ 346.487965][ T9085] macsec1: entered allmulticast mode [ 346.493473][ T9085] dummy0: entered allmulticast mode [ 346.713367][ T30] audit: type=1400 audit(1744501731.116:598): avc: denied { write } for pid=9087 comm="syz.2.766" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 346.849015][ T30] audit: type=1400 audit(1744501731.216:599): avc: denied { setopt } for pid=9091 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 346.915717][ T30] audit: type=1400 audit(1744501731.246:600): avc: denied { create } for pid=9089 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 346.957431][ T30] audit: type=1400 audit(1744501731.246:601): avc: denied { write } for pid=9089 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 347.179866][ T30] audit: type=1400 audit(1744501731.246:602): avc: denied { nlmsg_write } for pid=9089 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 347.230458][ T30] audit: type=1400 audit(1744501731.276:603): avc: denied { write } for pid=9091 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 347.515797][ T9109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.770'. [ 348.896623][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 349.334840][ T30] audit: type=1400 audit(1744501733.756:604): avc: denied { read } for pid=9130 comm="syz.2.775" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 349.419777][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 349.639926][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 349.666454][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.690312][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.712885][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 350.000510][ T9145] xt_nat: multiple ranges no longer supported [ 350.428309][ T9149] SELinux: syz.2.777 (9149) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 350.984469][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 350.986790][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 350.986802][ T30] audit: type=1400 audit(1744501735.416:611): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 351.067677][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 351.094666][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.110460][ T24] usb 4-1: config 0 descriptor?? [ 351.122277][ T9119] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 351.580701][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 351.601286][ T30] audit: type=1400 audit(1744501735.906:612): avc: denied { write } for pid=9151 comm="syz.4.778" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 351.780409][ T30] audit: type=1400 audit(1744501735.946:613): avc: denied { read } for pid=9151 comm="syz.4.778" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 351.804344][ T30] audit: type=1400 audit(1744501736.116:614): avc: denied { name_bind } for pid=9151 comm="syz.4.778" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 351.838159][ T9162] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.865765][ T9] usb 4-1: USB disconnect, device number 44 [ 351.876164][ T5136] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 351.899219][ T30] audit: type=1400 audit(1744501736.116:615): avc: denied { node_bind } for pid=9151 comm="syz.4.778" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 352.079827][ T5872] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 352.093369][ T9162] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.258331][ T9162] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.262909][ T9171] netlink: 72 bytes leftover after parsing attributes in process `syz.0.782'. [ 352.691527][ T9162] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.779750][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 352.792879][ T5872] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.819075][ T9162] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.833119][ T9162] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.845844][ T9162] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.858341][ T9162] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.964834][ T5872] usb 3-1: config 0 has no interface number 0 [ 352.976066][ T5872] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.989809][ T5872] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 352.998985][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.061719][ T5872] usb 3-1: config 0 descriptor?? [ 353.080110][ T5872] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 353.298572][ T5934] usb 3-1: USB disconnect, device number 28 [ 354.006594][ T30] audit: type=1400 audit(1744501738.436:616): avc: denied { read write } for pid=9190 comm="syz.0.786" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 354.147801][ T9196] xt_l2tp: missing protocol rule (udp|l2tpip) [ 354.246988][ T30] audit: type=1400 audit(1744501738.466:617): avc: denied { open } for pid=9190 comm="syz.0.786" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 354.400924][ T9194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.787'. [ 354.412884][ T9194] zonefs (nullb0) ERROR: Not a zoned block device [ 354.422418][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 354.431404][ T9194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.787'. [ 354.443485][ T30] audit: type=1400 audit(1744501738.586:618): avc: denied { append } for pid=9190 comm="syz.0.786" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 354.470304][ T30] audit: type=1400 audit(1744501738.846:619): avc: denied { mounton } for pid=9193 comm="syz.3.787" path="/161" dev="tmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 354.505842][ T30] audit: type=1400 audit(1744501738.896:620): avc: denied { ioctl } for pid=9193 comm="syz.3.787" path="socket:[24376]" dev="sockfs" ino=24376 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 354.655125][ T9205] netlink: 'syz.3.790': attribute type 17 has an invalid length. [ 354.979940][ T5872] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 355.220658][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 355.229629][ T5872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 355.238996][ T5872] usb 3-1: config 129 has an invalid interface number: 252 but max is 0 [ 355.247858][ T5872] usb 3-1: config 129 has no interface number 0 [ 355.254853][ T5872] usb 3-1: config 129 interface 252 has no altsetting 0 [ 355.263534][ T9210] syz.4.792: attempt to access beyond end of device [ 355.263534][ T9210] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 355.276292][ T9210] hpfs: hpfs_map_sector(): read error [ 355.286648][ T5872] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=5e.c9 [ 355.295954][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.304769][ T5872] usb 3-1: Product: syz [ 355.309404][ T5872] usb 3-1: Manufacturer: syz [ 355.381032][ T5872] usb 3-1: SerialNumber: syz [ 356.562053][ T5872] keyspan 3-1:129.252: Keyspan 1 port adapter converter detected [ 356.590108][ T5872] keyspan 3-1:129.252: found no endpoint descriptor for endpoint 84 [ 356.599212][ T5872] keyspan 3-1:129.252: found no endpoint descriptor for endpoint 81 [ 356.607341][ T5872] keyspan 3-1:129.252: found no endpoint descriptor for endpoint 82 [ 356.615426][ T5872] keyspan 3-1:129.252: found no endpoint descriptor for endpoint 1 [ 356.628598][ T5872] keyspan 3-1:129.252: found no endpoint descriptor for endpoint 2 [ 356.697646][ T5872] keyspan 3-1:129.252: found no endpoint descriptor for endpoint 83 [ 357.203697][ T5872] keyspan 3-1:129.252: found no endpoint descriptor for endpoint 3 [ 357.223195][ T5872] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 357.264620][ T5872] usb 3-1: USB disconnect, device number 29 [ 357.277292][ T5872] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 357.292724][ T5872] keyspan 3-1:129.252: device disconnected [ 357.777829][ T30] audit: type=1400 audit(1744501742.116:621): avc: denied { ioctl } for pid=9250 comm="syz.0.800" path="/dev/usbmon7" dev="devtmpfs" ino=741 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 357.884153][ T30] audit: type=1400 audit(1744501742.236:622): avc: denied { ioctl } for pid=9250 comm="syz.0.800" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 358.034471][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 358.239849][ T974] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 358.341713][ T9269] syz.2.802: attempt to access beyond end of device [ 358.341713][ T9269] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 358.355009][ T9269] hpfs: hpfs_map_sector(): read error [ 358.935824][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 359.056495][ T9273] tipc: Started in network mode [ 359.074666][ T9273] tipc: Node identity a64749e9084c, cluster identity 4711 [ 359.085248][ T9273] tipc: Enabled bearer , priority 0 [ 359.101024][ T974] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 359.146723][ T974] usb 2-1: config 0 has no interface number 0 [ 359.159324][ T974] usb 2-1: config 0 interface 184 has no altsetting 0 [ 359.303586][ T9273] syzkaller0: entered promiscuous mode [ 359.309453][ T9273] syzkaller0: entered allmulticast mode [ 359.315682][ T9278] syz.2.804: attempt to access beyond end of device [ 359.315682][ T9278] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 359.328394][ T9278] hpfs: hpfs_map_sector(): read error [ 359.334718][ T9273] tipc: Resetting bearer [ 359.394325][ T9272] tipc: Resetting bearer [ 359.575153][ T974] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 359.584730][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.604204][ T974] usb 2-1: Product: syz [ 359.655279][ T974] usb 2-1: Manufacturer: syz [ 359.666069][ T974] usb 2-1: SerialNumber: syz [ 359.685736][ T974] usb 2-1: config 0 descriptor?? [ 359.720996][ T974] smsc75xx v1.0.0 [ 360.185612][ T5872] tipc: Node number set to 2919975401 [ 360.328463][ T30] audit: type=1400 audit(1744501744.756:623): avc: denied { setopt } for pid=9283 comm="syz.2.806" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.605087][ T9286] netlink: 304 bytes leftover after parsing attributes in process `syz.2.806'. [ 361.927726][ T30] audit: type=1400 audit(1744501744.936:624): avc: denied { create } for pid=9283 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 361.927776][ T974] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 361.948672][ T30] audit: type=1400 audit(1744501744.946:625): avc: denied { write } for pid=9283 comm="syz.2.806" path="socket:[25862]" dev="sockfs" ino=25862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 361.989837][ T30] audit: type=1400 audit(1744501744.946:626): avc: denied { nlmsg_write } for pid=9283 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 362.034965][ T30] audit: type=1400 audit(1744501746.466:627): avc: denied { create } for pid=9288 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 362.070020][ T30] audit: type=1400 audit(1744501746.486:628): avc: denied { setopt } for pid=9288 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 362.116094][ T30] audit: type=1400 audit(1744501746.546:629): avc: denied { write } for pid=9288 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 362.166247][ T974] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 362.205657][ T974] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 362.253691][ T974] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 362.284887][ T974] usb 2-1: USB disconnect, device number 35 [ 362.321090][ T30] audit: type=1400 audit(1744501746.756:630): avc: denied { create } for pid=9293 comm="syz.1.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 362.640582][ T974] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 362.779796][ T974] usb 2-1: device descriptor read/64, error -71 [ 363.029052][ T974] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 363.179866][ T974] usb 2-1: device descriptor read/64, error -71 [ 363.316798][ T974] usb usb2-port1: attempt power cycle [ 363.437719][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 363.594748][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 363.594778][ T30] audit: type=1400 audit(1744501747.946:632): avc: denied { connect } for pid=9301 comm="syz.3.811" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 363.703480][ T30] audit: type=1400 audit(1744501747.946:633): avc: denied { name_connect } for pid=9301 comm="syz.3.811" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 363.896792][ T9272] tipc: Disabling bearer [ 363.907525][ T9304] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.990763][ T974] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 364.002157][ T9304] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.115398][ T974] usb 2-1: device descriptor read/8, error -71 [ 364.186509][ T9304] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.286997][ T9316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.814'. [ 364.379855][ T974] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 364.656415][ T9304] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.673559][ T9318] xt_l2tp: missing protocol rule (udp|l2tpip) [ 364.715230][ T974] usb 2-1: device descriptor read/8, error -71 [ 364.773551][ T9304] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.786507][ T9304] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.799015][ T9304] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.812489][ T9304] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.874035][ T974] usb usb2-port1: unable to enumerate USB device [ 365.683527][ T9329] FAULT_INJECTION: forcing a failure. [ 365.683527][ T9329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.759543][ T9329] CPU: 0 UID: 0 PID: 9329 Comm: syz.1.817 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 365.759561][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 365.759567][ T9329] Call Trace: [ 365.759571][ T9329] [ 365.759575][ T9329] dump_stack_lvl+0x16c/0x1f0 [ 365.759595][ T9329] should_fail_ex+0x512/0x640 [ 365.759610][ T9329] _copy_to_user+0x32/0xd0 [ 365.759628][ T9329] simple_read_from_buffer+0xcb/0x170 [ 365.759653][ T9329] proc_fail_nth_read+0x197/0x270 [ 365.759681][ T9329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.759705][ T9329] ? rw_verify_area+0xcf/0x680 [ 365.759726][ T9329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.759750][ T9329] vfs_read+0x1de/0xc70 [ 365.759770][ T9329] ? __pfx___mutex_lock+0x10/0x10 [ 365.759785][ T9329] ? __pfx_vfs_read+0x10/0x10 [ 365.759804][ T9329] ? __fget_files+0x20e/0x3c0 [ 365.759818][ T9329] ksys_read+0x12a/0x240 [ 365.759843][ T9329] ? __pfx_ksys_read+0x10/0x10 [ 365.759851][ T9329] ? rcu_is_watching+0x12/0xc0 [ 365.759868][ T9329] do_syscall_64+0xcd/0x260 [ 365.759884][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.759895][ T9329] RIP: 0033:0x7fc6fed8bb7c [ 365.759904][ T9329] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 365.759915][ T9329] RSP: 002b:00007fc6ffbd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 365.759926][ T9329] RAX: ffffffffffffffda RBX: 00007fc6fefa5fa0 RCX: 00007fc6fed8bb7c [ 365.759932][ T9329] RDX: 000000000000000f RSI: 00007fc6ffbd50a0 RDI: 0000000000000005 [ 365.759938][ T9329] RBP: 00007fc6ffbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 365.759944][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.759950][ T9329] R13: 0000000000000000 R14: 00007fc6fefa5fa0 R15: 00007ffdf742a338 [ 365.759963][ T9329] [ 366.282069][ T9335] ERROR: device name not specified. [ 366.600118][ T5934] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 366.757460][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 366.765743][ T5934] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 366.775501][ T5934] usb 2-1: config 0 has no interface number 0 [ 366.790470][ T5934] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 366.869791][ T5934] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 366.898983][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.908261][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.823'. [ 366.921212][ T9348] zonefs (nullb0) ERROR: Not a zoned block device [ 366.928647][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 366.937521][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.823'. [ 366.954128][ T5934] usb 2-1: config 0 descriptor?? [ 366.972028][ T5934] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 367.982850][ T30] audit: type=1400 audit(1744501752.416:634): avc: denied { create } for pid=9356 comm="syz.2.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 368.005539][ T5934] usb 2-1: USB disconnect, device number 40 [ 368.174651][ T9359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 368.521614][ T9366] syz.4.827: attempt to access beyond end of device [ 368.521614][ T9366] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 368.542569][ T9366] hpfs: hpfs_map_sector(): read error [ 368.589805][ T30] audit: type=1400 audit(1744501752.996:635): avc: denied { create } for pid=9364 comm="syz.3.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 368.625355][ T5831] Bluetooth: hci5: sending frame failed (-49) [ 368.645459][ T5136] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 368.652070][ T30] audit: type=1400 audit(1744501753.006:636): avc: denied { setopt } for pid=9364 comm="syz.3.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 368.673153][ T30] audit: type=1400 audit(1744501753.006:637): avc: denied { read } for pid=9364 comm="syz.3.829" path="socket:[26153]" dev="sockfs" ino=26153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 368.872512][ T30] audit: type=1400 audit(1744501753.306:638): avc: denied { name_bind } for pid=9371 comm="syz.2.831" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 369.006607][ T30] audit: type=1400 audit(1744501753.306:639): avc: denied { node_bind } for pid=9371 comm="syz.2.831" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 371.506369][ T30] audit: type=1400 audit(1744501755.356:640): avc: denied { write } for pid=9371 comm="syz.2.831" name="rt_acct" dev="proc" ino=4026533049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 371.842479][ T9393] tipc: Enabled bearer , priority 0 [ 372.599760][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 372.753519][ T30] audit: type=1400 audit(1744501755.966:641): avc: denied { sys_module } for pid=9371 comm="syz.2.831" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 372.939328][ T9393] syzkaller0: entered promiscuous mode [ 372.968483][ T9393] syzkaller0: entered allmulticast mode [ 373.017673][ T9393] tipc: Resetting bearer [ 373.040134][ T9401] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.103927][ T9401] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.296244][ T9390] tipc: Resetting bearer [ 373.685599][ T30] audit: type=1400 audit(1744501758.076:642): avc: denied { ioctl } for pid=9407 comm="syz.3.839" path="socket:[26203]" dev="sockfs" ino=26203 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 373.734006][ T30] audit: type=1400 audit(1744501758.076:643): avc: denied { bind } for pid=9407 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 373.997350][ T30] audit: type=1400 audit(1744501758.426:644): avc: denied { mounton } for pid=9420 comm="syz.1.841" path="/151/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 374.100387][ T30] audit: type=1400 audit(1744501758.486:645): avc: denied { mount } for pid=9420 comm="syz.1.841" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 374.128220][ T30] audit: type=1400 audit(1744501758.516:646): avc: denied { read write } for pid=9420 comm="syz.1.841" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 374.149537][ T30] audit: type=1400 audit(1744501758.516:647): avc: denied { open } for pid=9420 comm="syz.1.841" path="/151/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 374.179802][ T30] audit: type=1400 audit(1744501758.566:648): avc: denied { connect } for pid=9422 comm="syz.3.842" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.227198][ T30] audit: type=1400 audit(1744501758.586:649): avc: denied { mount } for pid=9422 comm="syz.3.842" name="/" dev="autofs" ino=26926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 374.255430][ T30] audit: type=1400 audit(1744501758.656:650): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 374.333171][ T30] audit: type=1400 audit(1744501758.766:651): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 375.337597][ T9441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.846'. [ 375.647772][ T9448] kvm: kvm [9444]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x16 [ 376.600109][ T9390] tipc: Disabling bearer [ 376.610216][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 376.623866][ T9401] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.916105][ T9401] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.047966][ T9401] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.085033][ T9401] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.120103][ T9401] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.155364][ T9401] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.560521][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 377.585375][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.606011][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.634170][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 377.650142][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.757153][ T10] usb 3-1: config 0 descriptor?? [ 378.145008][ T9463] ceph: No mds server is up or the cluster is laggy [ 378.192823][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.192904][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 378.359949][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 378.576676][ T9475] tipc: Started in network mode [ 378.586719][ T9475] tipc: Node identity 26a12bbf4f1b, cluster identity 4711 [ 378.624830][ T9475] tipc: Enabled bearer , priority 0 [ 378.742523][ T9477] syzkaller0: entered promiscuous mode [ 378.748082][ T9477] syzkaller0: entered allmulticast mode [ 378.754431][ T9477] tipc: Resetting bearer [ 378.884387][ T10] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 379.096504][ T10] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 379.297196][ T10] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 379.312231][ T9473] tipc: Resetting bearer [ 379.513446][ T10] ft260 0003:0403:6030.0004: failed to retrieve status: -32, no wakeup [ 379.522502][ T10] ft260 0003:0403:6030.0004: failed to retrieve status: -32 [ 379.755439][ T24] tipc: Node number set to 1773808575 [ 380.412924][ T9] usb 3-1: reset high-speed USB device number 30 using dummy_hcd [ 380.637988][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 380.638020][ T30] audit: type=1400 audit(1744501765.066:663): avc: denied { read write } for pid=9492 comm="syz.3.861" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 380.813930][ T30] audit: type=1400 audit(1744501765.096:664): avc: denied { open } for pid=9492 comm="syz.3.861" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 380.977328][ T30] audit: type=1400 audit(1744501765.096:665): avc: denied { append } for pid=9492 comm="syz.3.861" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.987098][ T9498] loop6: detected capacity change from 0 to 524287999 [ 381.056239][ T30] audit: type=1400 audit(1744501765.306:666): avc: denied { shutdown } for pid=9490 comm="syz.4.860" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 381.129975][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 381.139272][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 381.160561][ T5871] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 381.195573][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 381.204795][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 381.256854][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 381.266047][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 381.275848][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 381.285010][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 381.294760][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.304992][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.319034][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.334073][ T30] audit: type=1326 audit(1744501765.356:667): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.3.861" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf87d8d169 code=0x0 [ 381.334578][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 381.366184][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 381.374389][ T5873] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 381.382145][ T5871] usb 5-1: device descriptor read/64, error -71 [ 381.384341][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 381.397524][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 381.413284][ T30] audit: type=1400 audit(1744501765.536:668): avc: denied { append } for pid=9492 comm="syz.3.861" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 381.419924][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 381.445116][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 381.521606][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 381.522094][ T30] audit: type=1400 audit(1744501765.676:669): avc: denied { read } for pid=9500 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 381.530778][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 381.530893][ T9498] ldm_validate_partition_table(): Disk read failed. [ 381.554244][ T30] audit: type=1400 audit(1744501765.676:670): avc: denied { open } for pid=9500 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 381.592805][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.606185][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 381.615322][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 381.626057][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 381.635210][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 381.635295][ T30] audit: type=1400 audit(1744501765.706:671): avc: denied { ioctl } for pid=9500 comm="syz-executor" path="socket:[26349]" dev="sockfs" ino=26349 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.643339][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 381.684148][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.685898][ T9498] Dev loop6: unable to read RDB block 0 [ 381.728040][ T30] audit: type=1400 audit(1744501766.156:672): avc: denied { mounton } for pid=9500 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 381.739254][ T9498] loop6: unable to read partition table [ 381.749654][ T5871] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 381.755289][ T9498] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 381.762861][ T5873] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 381.784355][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.797225][ T5873] usb 4-1: config 0 descriptor?? [ 381.810060][ T5873] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 381.920745][ T5871] usb 5-1: device descriptor read/64, error -71 [ 382.030158][ T5871] usb usb5-port1: attempt power cycle [ 382.379815][ T5871] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 382.401253][ T5871] usb 5-1: device descriptor read/8, error -71 [ 382.641445][ T5871] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 382.665098][ T5871] usb 5-1: device descriptor read/8, error -71 [ 382.733151][ T9473] tipc: Disabling bearer [ 382.774378][ T5894] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.786131][ T5871] usb usb5-port1: unable to enumerate USB device [ 382.878537][ T5894] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.022014][ T9512] veth0_vlan: entered allmulticast mode [ 383.103766][ T9512] veth0_vlan: left promiscuous mode [ 383.114357][ T9512] veth0_vlan: entered promiscuous mode [ 383.504736][ T9500] chnl_net:caif_netlink_parms(): no params data found [ 383.526113][ T5873] gspca_vc032x: reg_w err -110 [ 383.542323][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.555867][ T5894] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.566753][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.578709][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.590413][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.601917][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.619120][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.646876][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.661602][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.676272][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.689147][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.705988][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.720348][ T5831] Bluetooth: hci1: command tx timeout [ 383.757596][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.763332][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.768620][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.823226][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.828552][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 383.992321][ T10] usb 3-1: USB disconnect, device number 30 [ 384.020025][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 384.025345][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 384.414214][ T5894] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.483528][ T5873] gspca_vc032x: Unknown sensor... [ 384.537675][ T5873] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 384.629706][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.646165][ T5873] usb 4-1: USB disconnect, device number 45 [ 384.699247][ T9500] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.889973][ T9500] bridge_slave_0: entered allmulticast mode [ 384.923751][ T9500] bridge_slave_0: entered promiscuous mode [ 384.972103][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.979243][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.087922][ T9535] syz.4.867: attempt to access beyond end of device [ 385.087922][ T9535] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 385.100654][ T9535] hpfs: hpfs_map_sector(): read error [ 385.159962][ T9500] bridge_slave_1: entered allmulticast mode [ 385.167187][ T9500] bridge_slave_1: entered promiscuous mode [ 385.328452][ T9500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.358023][ T9500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.439030][ T9500] team0: Port device team_slave_0 added [ 385.587498][ T9500] team0: Port device team_slave_1 added [ 385.819907][ T5831] Bluetooth: hci1: command tx timeout [ 385.948486][ T9551] FAULT_INJECTION: forcing a failure. [ 385.948486][ T9551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.964288][ T9551] CPU: 0 UID: 0 PID: 9551 Comm: syz.4.873 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 385.964313][ T9551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 385.964323][ T9551] Call Trace: [ 385.964328][ T9551] [ 385.964334][ T9551] dump_stack_lvl+0x16c/0x1f0 [ 385.964360][ T9551] should_fail_ex+0x512/0x640 [ 385.964381][ T9551] _copy_from_user+0x2e/0xd0 [ 385.964400][ T9551] copy_from_sockptr_offset+0x15c/0x1b0 [ 385.964425][ T9551] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 385.964455][ T9551] do_ip6t_set_ctl+0x544/0xb00 [ 385.964478][ T9551] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 385.964503][ T9551] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 385.964525][ T9551] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 385.964554][ T9551] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 385.964575][ T9551] nf_setsockopt+0x8a/0xf0 [ 385.964598][ T9551] ipv6_setsockopt+0x135/0x170 [ 385.964621][ T9551] udpv6_setsockopt+0x7d/0xd0 [ 385.964637][ T9551] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 385.964660][ T9551] do_sock_setsockopt+0x221/0x470 [ 385.964682][ T9551] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 385.964718][ T9551] __sys_setsockopt+0x1a0/0x230 [ 385.964740][ T9551] __x64_sys_setsockopt+0xbd/0x160 [ 385.964764][ T9551] ? do_syscall_64+0x91/0x260 [ 385.964783][ T9551] ? lockdep_hardirqs_on+0x7c/0x110 [ 385.964803][ T9551] do_syscall_64+0xcd/0x260 [ 385.964824][ T9551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.964842][ T9551] RIP: 0033:0x7f649778d169 [ 385.964855][ T9551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.964868][ T9551] RSP: 002b:00007f6498532038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 385.964884][ T9551] RAX: ffffffffffffffda RBX: 00007f64979a5fa0 RCX: 00007f649778d169 [ 385.964894][ T9551] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 385.964902][ T9551] RBP: 00007f6498532090 R08: 0000000000000710 R09: 0000000000000000 [ 385.964912][ T9551] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.964921][ T9551] R13: 0000000000000000 R14: 00007f64979a5fa0 R15: 00007ffee8e29b68 [ 385.964943][ T9551] [ 386.519882][ T9556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.874'. [ 386.687349][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.724660][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.780040][ T9555] zonefs (nullb0) ERROR: Not a zoned block device [ 387.013271][ T9500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.032513][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.039596][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.075949][ T9500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.145865][ T5894] bridge_slave_1: left allmulticast mode [ 387.159805][ T5894] bridge_slave_1: left promiscuous mode [ 387.166899][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.217808][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 387.217819][ T30] audit: type=1400 audit(1744501771.646:682): avc: denied { create } for pid=9566 comm="syz.4.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 387.350352][ T30] audit: type=1400 audit(1744501771.776:683): avc: denied { setopt } for pid=9566 comm="syz.4.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 387.455977][ T5894] bridge_slave_0: left allmulticast mode [ 387.470731][ T5894] bridge_slave_0: left promiscuous mode [ 387.476535][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.523561][ T9581] kvm: kvm [9573]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x16 [ 387.787453][ T9585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.875'. [ 387.870414][ T5831] Bluetooth: hci1: command tx timeout [ 387.902865][ T9572] zonefs (nullb0) ERROR: Not a zoned block device [ 387.911025][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 387.920054][ T9572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.875'. [ 388.314947][ T5894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.326509][ T5894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.341060][ T5894] bond0 (unregistering): Released all slaves [ 388.433778][ T9500] hsr_slave_0: entered promiscuous mode [ 388.440279][ T9500] hsr_slave_1: entered promiscuous mode [ 388.446404][ T9500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.453999][ T9500] Cannot create hsr debugfs directory [ 388.942223][ T5894] tipc: Left network mode [ 389.097376][ T9595] syz.1.880: attempt to access beyond end of device [ 389.097376][ T9595] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 389.110182][ T9595] hpfs: hpfs_map_sector(): read error [ 389.381925][ T30] audit: type=1400 audit(1744501773.816:684): avc: denied { create } for pid=9599 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 389.468448][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 389.837957][ T30] audit: type=1400 audit(1744501773.836:685): avc: denied { bind } for pid=9599 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 389.858581][ T30] audit: type=1400 audit(1744501774.266:686): avc: denied { write } for pid=9599 comm="syz.3.882" path="socket:[27533]" dev="sockfs" ino=27533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 389.950907][ T5831] Bluetooth: hci1: command tx timeout [ 389.998646][ T9606] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.013752][ T9605] netlink: 64 bytes leftover after parsing attributes in process `syz.1.883'. [ 390.023138][ T30] audit: type=1400 audit(1744501774.446:687): avc: denied { ioctl } for pid=9610 comm="syz.2.884" path="socket:[27770]" dev="sockfs" ino=27770 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 390.494848][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 390.542531][ T9606] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.559307][ T9617] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.643330][ T9602] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 390.691500][ T9617] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.717225][ T9606] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.776405][ T5894] hsr_slave_0: left promiscuous mode [ 390.791731][ T5894] hsr_slave_1: left promiscuous mode [ 390.830364][ T5894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.837869][ T5894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.865465][ T9633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.886'. [ 390.884982][ T5894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.893244][ T5894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.961189][ T9637] zonefs (nullb0) ERROR: Not a zoned block device [ 391.127794][ T9638] block device autoloading is deprecated and will be removed. [ 391.131162][ T5894] [ 391.135502][ T9638] PM: Image not found (code -22) [ 391.137641][ T5894] ============================================ [ 391.137650][ T5894] WARNING: possible recursive locking detected [ 391.154855][ T5894] 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 Not tainted [ 391.161942][ T5894] -------------------------------------------- [ 391.168066][ T5894] kworker/u8:7/5894 is trying to acquire lock: [ 391.174191][ T5894] ffff88805d782d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0xa2/0x260 [ 391.184184][ T5894] [ 391.184184][ T5894] but task is already holding lock: [ 391.191522][ T5894] ffff88805d782d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x14a1/0x25a0 [ 391.203158][ T5894] and the lock comparison function returns 0: [ 391.209194][ T5894] [ 391.209194][ T5894] other info that might help us debug this: [ 391.217225][ T5894] Possible unsafe locking scenario: [ 391.217225][ T5894] [ 391.224651][ T5894] CPU0 [ 391.227909][ T5894] ---- [ 391.231167][ T5894] lock(&dev_instance_lock_key#3); [ 391.236347][ T5894] lock(&dev_instance_lock_key#3); [ 391.241526][ T5894] [ 391.241526][ T5894] *** DEADLOCK *** [ 391.241526][ T5894] [ 391.249643][ T5894] May be due to missing lock nesting notation [ 391.249643][ T5894] [ 391.257936][ T5894] 5 locks held by kworker/u8:7/5894: [ 391.263194][ T5894] #0: ffff88801c2f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 391.273528][ T5894] #1: ffffc90004827d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 391.283424][ T5894] #2: ffffffff90115fd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 391.292737][ T5894] #3: ffffffff9012be68 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8b/0xaf0 [ 391.302739][ T5894] #4: ffff88805d782d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x14a1/0x25a0 [ 391.314832][ T5894] [ 391.314832][ T5894] stack backtrace: [ 391.320714][ T5894] CPU: 1 UID: 0 PID: 5894 Comm: kworker/u8:7 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 391.320734][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 391.320744][ T5894] Workqueue: netns cleanup_net [ 391.320767][ T5894] Call Trace: [ 391.320773][ T5894] [ 391.320779][ T5894] dump_stack_lvl+0x116/0x1f0 [ 391.320799][ T5894] print_deadlock_bug+0x1e9/0x240 [ 391.320818][ T5894] __lock_acquire+0xff7/0x1ba0 [ 391.320833][ T5894] lock_acquire+0x179/0x350 [ 391.320845][ T5894] ? dev_set_allmulti+0xa2/0x260 [ 391.320863][ T5894] ? __pfx___might_resched+0x10/0x10 [ 391.320882][ T5894] __mutex_lock+0x199/0xb90 [ 391.320901][ T5894] ? dev_set_allmulti+0xa2/0x260 [ 391.320918][ T5894] ? __hw_addr_del_entry+0x106/0x390 [ 391.320936][ T5894] ? dev_set_allmulti+0xa2/0x260 [ 391.320953][ T5894] ? __pfx___mutex_lock+0x10/0x10 [ 391.320970][ T5894] ? lock_acquire+0x179/0x350 [ 391.320985][ T5894] ? dev_set_allmulti+0xa2/0x260 [ 391.321001][ T5894] dev_set_allmulti+0xa2/0x260 [ 391.321019][ T5894] macsec_dev_stop+0x221/0x300 [ 391.321033][ T5894] ? __pfx_macsec_dev_stop+0x10/0x10 [ 391.321046][ T5894] ? __local_bh_enable_ip+0xa4/0x120 [ 391.321064][ T5894] ? lockdep_hardirqs_on+0x7c/0x110 [ 391.321080][ T5894] ? dev_deactivate_many+0x787/0xd50 [ 391.321096][ T5894] ? __local_bh_enable_ip+0xa4/0x120 [ 391.321112][ T5894] ? dev_deactivate_many+0x92c/0xd50 [ 391.321128][ T5894] ? __pfx_dev_deactivate_many+0x10/0x10 [ 391.321146][ T5894] ? __pfx_macsec_dev_stop+0x10/0x10 [ 391.321158][ T5894] __dev_close_many+0x298/0x770 [ 391.321176][ T5894] ? __pfx___dev_close_many+0x10/0x10 [ 391.321195][ T5894] ? unregister_netdevice_many_notify+0x14a1/0x25a0 [ 391.321214][ T5894] dev_close_many+0x233/0x630 [ 391.321234][ T5894] ? __pfx_dev_close_many+0x10/0x10 [ 391.321254][ T5894] unregister_netdevice_many_notify+0x384/0x25a0 [ 391.321273][ T5894] ? lockdep_hardirqs_on+0x7c/0x110 [ 391.321288][ T5894] ? batadv_tt_local_event+0x455/0x7f0 [ 391.321302][ T5894] ? __local_bh_enable_ip+0xa4/0x120 [ 391.321318][ T5894] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 391.321338][ T5894] ? unregister_netdevice_queue+0x22e/0x3f0 [ 391.321356][ T5894] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 391.321373][ T5894] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 391.321395][ T5894] default_device_exit_batch+0x853/0xaf0 [ 391.321414][ T5894] ? __pfx_default_device_exit_batch+0x10/0x10 [ 391.321432][ T5894] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 391.321447][ T5894] ? __pfx___might_resched+0x10/0x10 [ 391.321464][ T5894] ? __pfx_cfg802154_pernet_exit+0x10/0x10 [ 391.321482][ T5894] ? __pfx_default_device_exit_batch+0x10/0x10 [ 391.321500][ T5894] ops_exit_list+0x128/0x180 [ 391.321516][ T5894] cleanup_net+0x5c1/0xb30 [ 391.321534][ T5894] ? __pfx_cleanup_net+0x10/0x10 [ 391.321553][ T5894] ? rcu_is_watching+0x12/0xc0 [ 391.321570][ T5894] process_one_work+0x9cc/0x1b70 [ 391.321588][ T5894] ? __pfx_process_one_work+0x10/0x10 [ 391.321605][ T5894] ? assign_work+0x1a0/0x250 [ 391.321618][ T5894] worker_thread+0x6c8/0xf10 [ 391.321636][ T5894] ? __pfx_worker_thread+0x10/0x10 [ 391.321655][ T5894] kthread+0x3c2/0x780 [ 391.321668][ T5894] ? __pfx_kthread+0x10/0x10 [ 391.321680][ T5894] ? __pfx_kthread+0x10/0x10 [ 391.321691][ T5894] ? __pfx_kthread+0x10/0x10 [ 391.321703][ T5894] ? __pfx_kthread+0x10/0x10 [ 391.321715][ T5894] ? rcu_is_watching+0x12/0xc0 [ 391.321729][ T5894] ? __pfx_kthread+0x10/0x10 [ 391.321741][ T5894] ret_from_fork+0x45/0x80 [ 391.321756][ T5894] ? __pfx_kthread+0x10/0x10 [ 391.321768][ T5894] ret_from_fork_asm+0x1a/0x30 [ 391.321792][ T5894] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 391.746661][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'. [ 391.755472][ T9637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.886'. [ 391.760699][ T30] audit: type=1400 audit(1744501776.166:688): avc: denied { write } for pid=5807 comm="syz-executor" path="pipe:[4299]" dev="pipefs" ino=4299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1