last executing test programs: 1m53.94956751s ago: executing program 4 (id=93): r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d00000905b7e18cac000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xd, 0x10, 0x10, 0x18, 0x10, 0x12, 0x10, 0x6, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) mq_notify(r0, &(0x7f0000000180)={0x0, 0x27, 0x0, @thr={0x0, 0x0}}) 1m50.479952869s ago: executing program 4 (id=101): io_uring_setup(0x2471, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x2010000, 0x0, 0xfffffffffffffd90, 0x0, 0x0, 0x0) 1m49.849629975s ago: executing program 4 (id=106): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904000000a0301a00"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="200d0100491d7d1607d47e270000f80000008029e7903a4140294347c787b62bfd3e74c029f7e16e5495b3ab5b7a8e218c86b77bc58274b6bff2ae84f7ff80efcc0292d8fddc13ebd3b7a2ebbb90fc0f863ffa33afc38e9b710387f02156179230630c39bb9ea2031ebd9c58d5a0187bc7e628da6a20e192e5c0debe92c8a5a88e3f02dcf3ed6384727da6133d2e19f582afa36e6cc76c089fda4f7431be"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) fanotify_init(0xf00, 0x0) mknod(0x0, 0x8001420, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2000) setresuid(0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r6, 0xc06855c8, &(0x7f0000000140)={0x6, 0x1, {0x55, 0x0, 0xa, {0x5, 0x5}, {0x9, 0x4}, @rumble={0x64a, 0x1}}, {0x55, 0x5, 0xfff, {0x9, 0x1000}, {0x3ff, 0xdf6}, @period={0x58, 0x6, 0x3, 0xaf, 0x98, {0xaf1, 0x9, 0xac0, 0x1000}, 0x0, 0x0}}}) mmap(&(0x7f0000961000/0x3000)=nil, 0x3000, 0x4000001, 0x13, r6, 0x3ecc4000) r7 = shmget$private(0x0, 0x800000, 0x54000000, &(0x7f0000173000/0x800000)=nil) shmat(r7, &(0x7f00004d8000/0x1000)=nil, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m46.144316679s ago: executing program 4 (id=120): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20004800) pidfd_getfd(r1, r1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3, 0x9234f60b, 0x100}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) 1m46.069478262s ago: executing program 4 (id=121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x0, 0x1, 0x8, &(0x7f0000000040)={0x5, "8349cae151c1f007237ad4cfef2fe63aada459d3bf9acea3c9bc5f27908a44f8cf"}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000000f0ef1e4c987838c4b76b62212795d71f00810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x23, &(0x7f0000000040), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001c80)={r7, 0x0, &(0x7f00000027c0)=""/161}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000004000072d990087890194bda7a28e8000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r9}, 0x18) accept(r1, &(0x7f0000000180)=@alg, &(0x7f0000000040)=0x80) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r10, r11+60000000}) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4010) 1m45.140806279s ago: executing program 4 (id=125): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0x8008330e, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x4}, 0xe) recvmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x103, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 1m30.00930258s ago: executing program 32 (id=125): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0x8008330e, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x4}, 0xe) recvmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x103, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 20.423839343s ago: executing program 3 (id=301): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) r1 = getpgrp(0xffffffffffffffff) sched_setscheduler(r1, 0x5, &(0x7f0000000240)=0xd) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) openat(0xffffffffffffff9c, 0x0, 0x64440, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a300000000014000380080002400000000008"], 0x68}}, 0x0) 19.144967765s ago: executing program 1 (id=303): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x151000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0xde, 0x4, 0x7, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x8, 0x7800, 0x240000, 0xa}}) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x28, 0xa, 0x8000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x3c}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8300}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1405, 0x1, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8055}, 0x20000840) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000002080)=""/4101, 0x1005}], 0x1, 0x18e6, 0xffffffff) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x1000000000000000, 0x2000) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1, 0x1}, 0x10) 17.773894448s ago: executing program 1 (id=306): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(0x0, 0x128) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf54", @ANYBLOB='\x00\x00\x00', @ANYRES16=r1], 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x3}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000001080)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0xe4, 0x50, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0x40}, [@extension_unit={0x7, 0x24, 0x8, 0x3, 0x1, 0x7}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x5, 0x2, [0x8, 0x3], 0x9}, @processing_unit={0x7, 0x24, 0x7, 0x2, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x3, 0xfa, 0x1000, 0x5, 0x81}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x5, 0x2, 0x4, 0x8, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x8d, {0x7, 0x25, 0x1, 0x80, 0x5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9a, 0x3, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0xb, 0x3, {0x7, 0x25, 0x1, 0x80, 0xfc, 0x7ff}}}}}}}]}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 16.5382519s ago: executing program 3 (id=309): ioperm(0x0, 0x2, 0x7e) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x25, 0x0) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x101841) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(0xffffffffffffffff, 0x7a18, 0x200, 0x48, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r5, &(0x7f0000000100)=[{0x0, 0x30}, {&(0x7f0000000040)=""/86, 0x56}], 0x2, 0xffff, 0x4, 0x1) 15.469316399s ago: executing program 5 (id=311): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000005000000030000000000000000000000000000000000000011b38838907a22e3815af11544560b9259048bdd98b22a3d9f123d23226b08b18a73df95042dc37ea4ee697ca11e557e8eb7b953990a69aced053e60910bb6d2ea649063f758a7f293b54a898cd57fd72f1ce6f446296bda1120782a7ddb5b2688820a970c6aeb750038b964ca107005bcc64919627b84a5eeb601dcec703d6398548a13ec66e6a5d1e8aa"], 0x50) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x40300, 0x28, 0x5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)={0x1, 0x1, [@random="b67adc663f22"]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) chown(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r7, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 13.338402049s ago: executing program 2 (id=313): getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400b9d3", @ANYRES16=r1, @ANYBLOB="090000000000fedbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x45040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x7, 0x3, 0x0, 0x0, 0x8}) ioctl$VIDIOC_DBG_G_REGISTER(r4, 0xc0385650, &(0x7f0000000180)={{0x1, @addr=0x9}, 0x8, 0xf3b, 0x8000000000000000}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000001c0)={{0xffffffffffffffff, 0x3}}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) r10 = syz_open_dev$vim2m(&(0x7f0000000040), 0xdf3b, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r10, 0x40045612, &(0x7f0000000000)=0x1) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) splice(r8, 0x0, r11, 0x0, 0xf3a, 0x0) splice(r5, 0x0, r11, 0x0, 0x1, 0x4) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r12}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 13.205471137s ago: executing program 0 (id=314): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000100)={r2, 0x4000002, 0xda3, 0x102, 0x3, [0x0], [0x8, 0x80000000, 0x6, 0xed0], [0x81d2, 0x807, 0x6, 0xc], [0x2, 0x7fffffff, 0x7f, 0x3]}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) close_range(r4, r4, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x1, 0x100, 0x0, [0x0], [0x0, 0x9], [0x80001]}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000100)={r8}) 12.72286692s ago: executing program 3 (id=315): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x5, [@typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @union={0xe, 0x2, 0x0, 0x5, 0x0, 0xffffff99, [{0x1, 0x3}, {0xf, 0x3}]}, @union={0x8, 0x1, 0x0, 0x5, 0x1, 0x4, [{0x6, 0x5, 0x2}]}, @struct={0x10, 0x0, 0x0, 0x4, 0x1, 0x7}, @enum={0xa, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x2}]}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f0000000380)=""/68, 0x85, 0x44, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x5) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c000280040001"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r6) listen(r8, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 11.86594346s ago: executing program 0 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383", 0x7, 0x840, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x243, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0xc008aec1, &(0x7f0000000080)=@x86={0x5, 0x1, 0x2, 0x0, 0x40, 0x6, 0xfb, 0x89, 0x18, 0xd, 0x7, 0x4, 0x0, 0x1000, 0x80000101, 0x2, 0xc, 0x7, 0x19, '\x00', 0x3, 0x8000000000000001}) 10.821710839s ago: executing program 3 (id=317): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000005000000030000000000000000000000000000000000000011b38838907a22e3815af11544560b9259048bdd98b22a3d9f123d23226b08b18a73df95042dc37ea4ee697ca11e557e8eb7b953990a69aced053e60910bb6d2ea649063f758a7f293b54a898cd57fd72f1ce6f446296bda1120782a7ddb5b2688820a970c6aeb750038b964ca107005bcc64919627b84a5eeb601dcec703d6398548a13ec66e6a5d1e8aa"], 0x50) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x40300, 0x28, 0x5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)={0x1, 0x1, [@random="b67adc663f22"]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) chown(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r7, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 9.778704261s ago: executing program 2 (id=318): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) (fail_nth: 10) 9.619800994s ago: executing program 0 (id=319): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = memfd_create(&(0x7f0000000040)='\xf3u\t\x9f\x918\xc0ud\xb0l \xfd\xd7\x03\x00\x898\xf8\xb5\x90Xp\xe3$\x1c\x9b\a\x92H\x00\x00\x00\x00\x81\f\x1et\x10\x0e\xcf[\xc2z-\x06\x96\xa7\xfd\x94\xa8\xa1nL\x13\xdayV9\xbe*\xd2d\xc8}\xd6\xdb\x88\xfb\xc7B\x8c\xa8\xb3\x01\x00\x00\x00', 0x0) unshare(0x22020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x5, 0xa, 0x2, 0x3ff}, {0x6, 0x3f, 0xa1, 0x7fff}, {0x8, 0x8, 0x5, 0x7}, {0x1, 0x40, 0x6, 0x40}, {0x4}]}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x6, 0x3}, {0xfff3}, {0x3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x200c8000) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x4b, 0x1, [0xfffffffffffffff7]}}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x68, &(0x7f0000000140)={0x0, 0x0, 0x31, 0x11, ""/17}, &(0x7f0000000200)=0x31, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0xfffb, @any, 0x6400, 0x3868b2d32409af77}, 0xe) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000840)=""/4096, 0x1000) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) r7 = socket$inet6(0xa, 0x801, 0x6) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c) 9.543791351s ago: executing program 5 (id=320): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r0, &(0x7f0000001f00)=""/4111, 0x100f) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000180)=@req3={0xc4a, 0x369, 0x6f6, 0x80, 0xadd, 0x1c0, 0xc6b}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = io_uring_setup(0xab1, &(0x7f0000000300)={0x0, 0xd674, 0x10000, 0x1, 0x380}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r3, 0x1a, &(0x7f0000000040), 0x1) close(0xffffffffffffffff) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000080), 0xc) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000180)) syz_open_dev$radio(0x0, 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) socket$inet_sctp(0x2, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x100, 0xb}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE}}}]}, 0x38}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) write$binfmt_script(r8, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 9.444079463s ago: executing program 1 (id=321): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x1a0, 0x30, 0x1, 0x0, 0x0, {}, [{0x18c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x15c, 0x9, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x800, 0x8, 0x10000000, 0x3, 0x3445193e}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9b9f}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x5, &(0x7f0000000040)=""/162, 0x0) gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f700", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0x7, 0x1, 0x5, 0x3ae9, 0xc7, 0x4, "02f8ffff070000fbb4883d45f400", 0x8, 0xae, 0x6, 0x8, 0x2, 0x0, 0x40}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x40]}, &(0x7f0000000040), 0x8) 8.590614757s ago: executing program 2 (id=322): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef) read$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001400000000208000140000000300800024000000003080001400000001208000340"], 0x122}}, 0x10) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, 0x0) 7.508359607s ago: executing program 1 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x0, 0x1, 0x8, &(0x7f0000000040)={0x5, "8349cae151c1f007237ad4cfef2fe63aada459d3bf9acea3c9bc5f27908a44f8cf"}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000000f0ef1e4c987838c4b76b62212795d71f00810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x18) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4010) 7.137732099s ago: executing program 5 (id=324): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001"], 0x54}}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863"], 0xfce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x7, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x20000000009) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) connect$inet(r5, 0x0, 0x0) 6.353323993s ago: executing program 0 (id=325): r0 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='eid\x81J\xecc)\xe6JY\x98\xdd\xa0{[\xf9\x88]\xff2\x01\xe3\xb4\x88\xed\xe4b_\xba\xff\xea\xcc\x9fo\x01\x9d&\xda\xca1\x8f\xfc6\"A\x9b\x99\x9b\xfd\xe9\xb1\xab\x02B\xaf\xa1\xe0\x96LX\xba4Y2\xfc\x03\xe1\x1a\xb5H\xf4\xd5\x9d\x14\r-F(\xba\xa5\x84\bL\x0f\xa8\xae\xb7O\xeb\xad\f\x1f\x96\xadA\xf7\xb71\x10\xe1\x14\f\xfa\xa4\x95\xabX\xe5\x17Z\x00\x00\x00\x00\x00\x00', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000900)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd60c5819c00343a00fe800000000000000000000000000000ff0200000000000000000000000000010300907800000000605ad10a00002b00fe88000000000000000000000000000100000000001000000000000000000001aaa12ba2"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000303c0659"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000280), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="00000000b3080000000000007b8ad8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095b371f0080000000000000005ee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0xfffffffffffffdd7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000012, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee85, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x4) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x33) 5.935633781s ago: executing program 1 (id=326): r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = gettid() syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = socket(0x10, 0x3, 0xfffffffc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000480)={r7, 0xf9, "51fd2cbf960494098ed4288341ed11131c23ec30c59eb204c1797b6dbd5accd156005dfdd5c3b85e59196bf1d9c283202b5ed3f13760d5ff2839d35d36474a6a4d9ee405843954d875d9a09ce6da510ceb80d8d7ee8c52d5a3cfbd022d0938a31561e58c9956228e2a29433cb6387da06410102b8462bcdfe5144c9cfecd96e8035074db015a333f97c409eb1274a60baa353a775e84fe5f85e8b1402dadbc54347e680871a34131e8248b661f805aff6df7cacf0665dd2930c4bf6ee9d76e57805443fad9271dd5de1cd77efb334937aa3fb02f839ae478a2162742b34812e21b2dd3ca4595fe4913244382a74a5754b58e9f92c70101748e"}, &(0x7f0000000340)=0x101) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x80) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r13, 0xc0505405, &(0x7f0000000140)={{0x2, 0x3, 0x4, 0x2, 0xe00}, 0x800, 0x6, 0x80000001}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) recvmsg$can_bcm(r0, &(0x7f0000001740)={&(0x7f00000000c0)=@tipc=@name, 0x80, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f0000001780)=""/139, 0x8b}, {&(0x7f0000000180)=""/29, 0x1d}], 0x4}, 0x40000002) 4.370626593s ago: executing program 5 (id=327): times(&(0x7f0000000000)) (fail_nth: 1) 4.237901702s ago: executing program 2 (id=328): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) bind$pptp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe8000000000000000000000000000bb0000000000000000000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000907800006e1812f24311c2b48dd75de25eed5bffb81555858ac36623da503cedf29abead05620c0f5ef1dbdec1a3c2720067d4238b"], 0x0) syz_clone3(&(0x7f00000002c0)={0x960a0180, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x1b}, &(0x7f0000000140)=""/54, 0x36, &(0x7f0000000180), &(0x7f0000000200)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) sched_setscheduler(r7, 0x5, &(0x7f0000000340)=0xd) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 4.101463877s ago: executing program 3 (id=329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x30b980, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0xfffffffffffffed2) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team0\x00'}) 3.370705844s ago: executing program 5 (id=330): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7", 0xe}], 0x2}}], 0x1, 0x8810) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x0) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) 2.212541942s ago: executing program 2 (id=331): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000885000/0x3000)=nil, 0x3000, 0xb635773f07ebbeeb, 0x80010, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_io_uring_setup(0x85, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)={0x20102, 0x0, 0x28}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r7, 0x4536, 0x6aaf, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a44000/0x4000)=nil, 0x4000, 0x0, 0xbc32038f2d035af6, 0xffffffffffffffff, 0x2882c000) r10 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r10, 0x2004, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x0, &(0x7f0000000240)}, 0x10) 2.149294541s ago: executing program 3 (id=332): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)=0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f0000001540)=""/4131, 0x1023) sendmmsg$alg(r2, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="7a3f5f54764e0002d2406ea97f162bab", 0x10}], 0x1, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4044090}], 0x1, 0x4000010) 1.890163474s ago: executing program 0 (id=333): syz_open_dev$MSR(&(0x7f00000002c0), 0x8000000000000005, 0x0) (async) syz_open_dev$MSR(&(0x7f00000002c0), 0x8000000000000005, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x805, 0x1ff}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) (async) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_pidfd_open(r2, 0x0) (async) syz_pidfd_open(r2, 0x0) read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000) (async) read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = openat(0xffffffffffffff9c, 0x0, 0x102, 0x4) mmap$binder(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x2000000) socket(0x848000000015, 0x805, 0x0) (async) socket(0x848000000015, 0x805, 0x0) r4 = socket(0x1000000000000010, 0x80802, 0x0) unshare(0x2040400) (async) unshare(0x2040400) r5 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r5, 0x0, 0x0) bind$netlink(r4, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYRES64=r5], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYRES64=r5], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) socket$inet6(0xa, 0x1, 0x0) 1.283930948s ago: executing program 5 (id=334): socket(0x2, 0x3, 0xff) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r5, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000480)={{0x7, 0xd}, 'port0\x00', 0x63, 0x100001, 0x4, 0x6000000, 0xf52, 0x704, 0xc2a, 0x0, 0x7, 0x80}) tkill(r4, 0x7) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) accept(r3, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB="20199ef7"], 0x16) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setgroups(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setregid(0x0, 0xee01) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 1.191115404s ago: executing program 1 (id=335): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000002200)={0x3e, 0x1, 0x6, 0x3, 0x0, 0x81}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a48000000060a0b040000000000000000020000001400048018000180080001006c6f67000c00028006000140000700000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getchain={0x54, 0x66, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {0xb, 0x7}, {0x5, 0xf}}, [{0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x9c}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x1}]}, 0x54}}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002600)=@newtfilter={0x440, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x414, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x7fffffff, 0x19, 0x7fffffff, 0x8, 0x6, 0x2, 0x84f7, 0x40, 0x5, 0x7, 0x8, 0x227, 0x2, 0x0, 0x10000, 0x400, 0x9, 0x69, 0x7f, 0x6, 0x1, 0xca9, 0x7, 0xc, 0x8, 0x5, 0x2, 0xff, 0x709aabf1, 0x400, 0xe, 0x4, 0xe0a, 0x9, 0x743, 0xffffffff, 0xffff, 0xe, 0x7f, 0x0, 0x100, 0x4, 0x9, 0x5, 0x0, 0x10, 0x3, 0x5, 0x0, 0x1, 0x8, 0x514072a0, 0x10000, 0x0, 0xc7793a6, 0x2, 0x6, 0x72, 0x4, 0xd2, 0x4cea, 0x5, 0x9, 0x6, 0x7, 0x8, 0x40, 0x1, 0x1, 0x83, 0x4, 0x4, 0x0, 0x0, 0x1, 0x5, 0x1, 0x320, 0xe1fa, 0x4, 0x401, 0x0, 0x1, 0x1, 0xaf, 0x6, 0x9, 0x7, 0x3, 0x9, 0x4, 0x81, 0x7, 0x3, 0x9, 0x2, 0x1, 0xf, 0x242fd206, 0x5, 0x2, 0xffffe97f, 0x5, 0x2d, 0x9ba, 0x9, 0x8, 0x8ac, 0x8, 0x9, 0x12, 0xadb, 0x4, 0x6, 0x9, 0xfff, 0x3d6ba677, 0x9, 0x0, 0xb, 0x2, 0xffffffff, 0x6, 0x1, 0x1e, 0x5, 0xb0, 0x3ff, 0x2, 0x80, 0x0, 0xe675, 0x1000, 0x7, 0x7, 0x5, 0x1e, 0x1b, 0x0, 0x8, 0xffffffff, 0x81, 0x4, 0x2, 0x100, 0xd62, 0x3, 0x6, 0x200, 0x4, 0x3, 0xc, 0x8, 0x1, 0x5, 0x8, 0x1000, 0x9, 0xbf, 0x0, 0xf8, 0x8000, 0x3, 0x8, 0x2, 0x101, 0x10, 0x1, 0x5, 0x7ff, 0x3, 0x1, 0x10, 0xe769, 0x100, 0x7, 0xe, 0x0, 0xbe9d, 0x7, 0x80000001, 0x5, 0x7, 0x4, 0x7, 0x24c, 0x0, 0x200, 0xf74, 0x4, 0x80000000, 0x3, 0x4, 0x7ff, 0x6, 0x8, 0x0, 0x811, 0x400, 0x7, 0x8, 0x3, 0x5, 0x5, 0x8, 0x1ff, 0x81, 0x2, 0x291b004e, 0x2696, 0x10000, 0xfffffffc, 0xce92, 0x100, 0x326, 0x4, 0x7, 0x2491, 0xfffffff9, 0x7, 0x3ff, 0x7, 0xd, 0x6832, 0x4, 0x3, 0x3, 0x0, 0xcb, 0x1, 0x80, 0x10000, 0x10001, 0x1, 0x3ff, 0x1, 0xe67, 0x0, 0x0, 0x100000, 0x6, 0xfff, 0xfffffff9, 0x80, 0x4cad, 0x8, 0x6bd, 0x9, 0x8, 0x8, 0xd, 0x81, 0x0, 0xe, 0xffff]}]}]}}]}, 0x440}}, 0x24000000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x58500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x5}]}}}]}, 0x3c}}, 0x40) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 938.50173ms ago: executing program 0 (id=336): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) (fail_nth: 1) 0s ago: executing program 2 (id=337): socket$netlink(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x6417, 0x80, 0x3, 0x3d9}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x1, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): 60.222:146): avc: denied { connect } for pid=5937 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.677401][ T5810] Bluetooth: hci3: command tx timeout [ 69.677513][ T5853] usb 4-1: USB disconnect, device number 2 [ 69.684126][ T5810] Bluetooth: hci2: command tx timeout [ 69.694765][ T5810] Bluetooth: hci4: command tx timeout [ 69.700290][ T5810] Bluetooth: hci0: command tx timeout [ 69.712685][ T5124] Bluetooth: hci1: command tx timeout [ 69.767046][ T30] audit: type=1400 audit(1747705960.222:147): avc: denied { setopt } for pid=5937 comm="syz.1.15" laddr=fe80::13 lport=1 faddr=fe80::bb fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.805694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.833998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.918708][ T30] audit: type=1400 audit(1747705960.222:148): avc: denied { write } for pid=5937 comm="syz.1.15" laddr=fe80::13 lport=1 faddr=fe80::bb fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.957961][ T30] audit: type=1400 audit(1747705960.452:149): avc: denied { setopt } for pid=5942 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.963794][ T5953] Cannot find set identified by id 0 to match [ 70.026603][ T30] audit: type=1400 audit(1747705960.452:150): avc: denied { mount } for pid=5942 comm="syz.0.17" name="/" dev="mqueue" ino=4225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.323862][ T30] audit: type=1400 audit(1747705960.642:151): avc: denied { map } for pid=5952 comm="syz.0.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.645294][ T30] audit: type=1400 audit(1747705960.642:152): avc: denied { read write } for pid=5952 comm="syz.0.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.770280][ T30] audit: type=1400 audit(1747705960.722:153): avc: denied { create } for pid=5948 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.041514][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.057552][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.174163][ T30] audit: type=1400 audit(1747705960.812:154): avc: denied { prog_run } for pid=5948 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.262913][ T5981] [ 72.575870][ T5993] tmpfs: Bad value for 'mpol' [ 73.087384][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.095505][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.170719][ T6014] bridge0: entered allmulticast mode [ 73.213823][ T5914] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.304012][ T5856] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 73.372175][ T6001] sp0: Synchronizing with TNC [ 73.386462][ T5809] IPVS: starting estimator thread 0... [ 73.474071][ T6017] IPVS: using max 75 ests per chain, 180000 per kthread [ 73.483186][ T5914] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.516616][ T5914] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 73.531254][ T5914] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.541361][ T5914] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 73.554491][ T5914] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 73.568177][ T5856] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 73.577846][ T5856] usb 3-1: config 0 has no interface number 0 [ 73.584944][ T5914] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.594315][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.602460][ T5856] usb 3-1: config 0 interface 41 has no altsetting 0 [ 73.625427][ T5914] usb 1-1: Product: syz [ 73.630191][ T5914] usb 1-1: Manufacturer: syz [ 73.637481][ T5856] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 73.651512][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.666038][ T5914] cdc_wdm 1-1:1.0: skipping garbage [ 73.681416][ T5914] cdc_wdm 1-1:1.0: skipping garbage [ 73.693777][ T5856] usb 3-1: Product: syz [ 73.701026][ T5856] usb 3-1: Manufacturer: syz [ 73.711775][ T5914] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 73.719044][ T5856] usb 3-1: SerialNumber: syz [ 73.723957][ T5914] cdc_wdm 1-1:1.0: Unknown control protocol [ 73.739618][ T5856] usb 3-1: config 0 descriptor?? [ 74.558689][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 74.558705][ T30] audit: type=1400 audit(1747705965.212:197): avc: denied { create } for pid=6007 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.566504][ T9] usb 1-1: USB disconnect, device number 2 [ 74.731214][ T6032] tipc: Started in network mode [ 74.737223][ T6032] tipc: Node identity f6b077112a8b, cluster identity 4711 [ 74.745906][ T6032] tipc: Enabled bearer , priority 0 [ 75.324585][ T6010] tipc: Disabling bearer [ 75.453858][ T30] audit: type=1400 audit(1747705966.102:198): avc: denied { bind } for pid=6043 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.509176][ T5856] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 75.522822][ T30] audit: type=1400 audit(1747705966.102:199): avc: denied { write } for pid=6043 comm="syz.3.39" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.523927][ T5856] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 75.544438][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.649940][ T30] audit: type=1400 audit(1747705966.152:200): avc: denied { create } for pid=6046 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.664873][ T5856] usb 3-1: USB disconnect, device number 2 [ 75.699532][ T30] audit: type=1400 audit(1747705966.162:201): avc: denied { setopt } for pid=6046 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.582911][ T30] audit: type=1400 audit(1747705966.982:202): avc: denied { ioctl } for pid=6055 comm="syz.4.42" path="socket:[8299]" dev="sockfs" ino=8299 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.645510][ T6064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.663416][ T30] audit: type=1400 audit(1747705967.302:203): avc: denied { mount } for pid=6062 comm="syz.3.44" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 76.722481][ T30] audit: type=1400 audit(1747705967.372:204): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 76.744113][ T30] audit: type=1400 audit(1747705967.372:205): avc: denied { ioctl } for pid=6061 comm="syz.1.43" path="socket:[7963]" dev="sockfs" ino=7963 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.802798][ T6066] netlink: 96 bytes leftover after parsing attributes in process `syz.0.45'. [ 76.926382][ T30] audit: type=1400 audit(1747705967.582:206): avc: denied { write } for pid=6061 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 76.945178][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.862063][ T6084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.343820][ T5855] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.586764][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 78.641946][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 78.660808][ T5855] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 79.129140][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.137653][ T5855] usb 3-1: Product: syz [ 79.138598][ T6098] program syz.1.54 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.141812][ T5855] usb 3-1: Manufacturer: syz [ 79.155515][ T5855] usb 3-1: SerialNumber: syz [ 79.216338][ T5855] usb 3-1: config 0 descriptor?? [ 79.274685][ T5855] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 79.284346][ T5855] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 79.727813][ T6107] trusted_key: encrypted_key: key user:syz not found [ 79.879587][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 79.879603][ T30] audit: type=1400 audit(1747705970.532:217): avc: denied { sys_module } for pid=6093 comm="syz.0.53" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 80.053236][ T5855] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 80.374022][ T30] audit: type=1400 audit(1747705970.642:218): avc: denied { write } for pid=6105 comm="syz.4.55" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.583851][ T30] audit: type=1400 audit(1747705970.642:219): avc: denied { connect } for pid=6105 comm="syz.4.55" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.666719][ T6120] syz.4.59 uses obsolete (PF_INET,SOCK_PACKET) [ 80.684368][ T6120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.59'. [ 80.686668][ T30] audit: type=1400 audit(1747705970.652:220): avc: denied { name_connect } for pid=6105 comm="syz.4.55" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 80.866236][ T30] audit: type=1400 audit(1747705970.762:221): avc: denied { read } for pid=6105 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.222563][ T6126] netlink: 56 bytes leftover after parsing attributes in process `syz.2.47'. [ 81.447444][ T58] cfg80211: failed to load regulatory.db [ 81.457762][ T30] audit: type=1400 audit(1747705970.862:222): avc: denied { read write } for pid=6116 comm="syz.3.57" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.156438][ T5855] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 82.172256][ T5855] em28xx 3-1:0.0: board has no eeprom [ 82.239895][ T30] audit: type=1400 audit(1747705970.862:223): avc: denied { open } for pid=6116 comm="syz.3.57" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.375240][ T30] audit: type=1400 audit(1747705970.872:224): avc: denied { ioctl } for pid=6116 comm="syz.3.57" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.417160][ T30] audit: type=1400 audit(1747705971.382:225): avc: denied { write } for pid=6121 comm="syz.1.58" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.449275][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.62'. [ 82.463791][ T5855] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 82.471625][ T5855] em28xx 3-1:0.0: dvb set to bulk mode. [ 82.494892][ T58] em28xx 3-1:0.0: Binding DVB extension [ 82.535672][ T30] audit: type=1400 audit(1747705971.482:226): avc: denied { create } for pid=6121 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 82.706144][ T6141] process 'syz.4.62' launched './file1' with NULL argv: empty string added [ 82.726444][ T24] usb 3-1: USB disconnect, device number 3 [ 82.764612][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 82.978585][ T58] em28xx 3-1:0.0: Registering input extension [ 83.003354][ T6149] netlink: 72 bytes leftover after parsing attributes in process `syz.2.66'. [ 83.012751][ T24] em28xx 3-1:0.0: Closing input extension [ 83.058751][ T24] em28xx 3-1:0.0: Freeing device [ 83.498398][ T6145] SELinux: failed to load policy [ 84.333762][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 84.501213][ T6176] Zero length message leads to an empty skb [ 85.091801][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 85.091817][ T30] audit: type=1400 audit(1747705975.742:242): avc: denied { name_connect } for pid=6167 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 85.125330][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 85.133427][ T9] usb 5-1: config 0 has no interface number 0 [ 85.166676][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 85.179871][ T30] audit: type=1400 audit(1747705975.792:243): avc: denied { shutdown } for pid=6167 comm="syz.0.73" lport=49248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.179948][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 85.219582][ T30] audit: type=1400 audit(1747705975.812:244): avc: denied { read } for pid=6167 comm="syz.0.73" path="socket:[9423]" dev="sockfs" ino=9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.314286][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.339546][ T30] audit: type=1400 audit(1747705975.812:245): avc: denied { write } for pid=6167 comm="syz.0.73" path="socket:[8520]" dev="sockfs" ino=8520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.474337][ T9] usb 5-1: Product: syz [ 85.498921][ T9] usb 5-1: Manufacturer: syz [ 85.683411][ T9] usb 5-1: SerialNumber: syz [ 85.688241][ T30] audit: type=1400 audit(1747705975.942:246): avc: denied { read } for pid=6180 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.708932][ T30] audit: type=1400 audit(1747705975.942:247): avc: denied { append } for pid=6180 comm="syz.2.74" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.732285][ T9] usb 5-1: config 0 descriptor?? [ 85.739575][ T30] audit: type=1400 audit(1747705976.152:248): avc: denied { ioctl } for pid=6183 comm="syz.0.75" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 85.827528][ T6188] Bluetooth: MGMT ver 1.23 [ 86.082736][ T1147] Bluetooth: hci5: Frame reassembly failed (-84) [ 86.090068][ T6197] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 86.119930][ T1147] Bluetooth: hci5: Frame reassembly failed (-84) [ 86.496752][ T6165] tipc: Started in network mode [ 86.501639][ T6165] tipc: Node identity 9e9eb55cd898, cluster identity 4711 [ 86.509066][ T6165] tipc: Enabled bearer , priority 0 [ 86.527275][ T6164] tipc: Disabling bearer [ 86.577237][ T9] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 86.624466][ T9] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 86.661233][ T9] usb 5-1: USB disconnect, device number 2 [ 86.775534][ T30] audit: type=1400 audit(1747705977.422:249): avc: denied { ioctl } for pid=6201 comm="syz.0.79" path="/dev/sg0" dev="devtmpfs" ino=735 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.806874][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 87.590262][ T30] audit: type=1400 audit(1747705977.422:250): avc: denied { map_read map_write } for pid=6201 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.612443][ T30] audit: type=1400 audit(1747705977.512:251): avc: denied { getopt } for pid=6201 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.803331][ T6210] trusted_key: encrypted_key: key user:syz not found [ 88.133918][ T5124] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 88.135110][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 88.584294][ T6226] binder: 6224:6226 ioctl c0306201 2000000003c0 returned -14 [ 88.935737][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 88.976852][ T5124] block nbd0: Receive control failed (result -11) [ 89.382345][ T6239] netlink: 'syz.3.88': attribute type 10 has an invalid length. [ 89.392172][ T6239] team0: Device ipvlan1 failed to register rx_handler [ 89.450167][ T6239] netlink: 216 bytes leftover after parsing attributes in process `syz.3.88'. [ 89.460881][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 89.489504][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 89.509946][ T6239] netlink: 154 bytes leftover after parsing attributes in process `syz.3.88'. [ 89.539638][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 89.563993][ T5856] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.591941][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 89.601171][ T6239] netlink: 1520 bytes leftover after parsing attributes in process `syz.3.88'. [ 89.709008][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.91'. [ 89.719244][ T5855] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.725067][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 89.735919][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.777576][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.802567][ T5856] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 89.824635][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.839803][ T5856] usb 2-1: config 0 descriptor?? [ 89.886398][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 89.906730][ T5855] usb 3-1: unable to get BOS descriptor or descriptor too short [ 89.918374][ T5855] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 89.931431][ T5855] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 89.962425][ T5855] usb 3-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.993872][ T5855] usb 3-1: config 1 interface 0 has no altsetting 0 [ 90.006413][ T5855] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 90.015636][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.034580][ T5855] usb 3-1: Product: syz [ 90.039035][ T5855] usb 3-1: Manufacturer: syz [ 90.043640][ T5855] usb 3-1: SerialNumber: syz [ 90.055612][ T6242] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 90.244698][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.406435][ T5855] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7 [ 90.421139][ T5856] usbhid 2-1:0.0: can't add hid device: -71 [ 90.427224][ T5856] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 90.429365][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 90.429375][ T30] audit: type=1400 audit(1747705981.082:270): avc: denied { read } for pid=5169 comm="acpid" name="mouse1" dev="devtmpfs" ino=2809 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.515918][ T5856] usb 2-1: USB disconnect, device number 2 [ 90.521867][ T30] audit: type=1400 audit(1747705981.092:271): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2809 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.525704][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.565191][ T5809] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.574986][ T24] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 90.591471][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 90.609555][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x87 has invalid maxpacket 42124, setting to 1024 [ 90.621049][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 90.638542][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.657376][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.665532][ T24] usb 5-1: Product: syz [ 90.669760][ T24] usb 5-1: Manufacturer: syz [ 90.676836][ T24] usb 5-1: SerialNumber: syz [ 90.739888][ T5809] usb 1-1: Using ep0 maxpacket: 32 [ 90.752818][ T5809] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 90.753816][ T6269] trusted_key: encrypted_key: key user:syz not found [ 90.819860][ T30] audit: type=1400 audit(1747705981.472:272): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2809 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.824785][ T5809] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 90.874995][ C0] bcm5974 3-1:1.0: trackpad urb failed: -1 [ 91.115097][ T5169] bcm5974 3-1:1.0: could not read from device [ 91.124683][ T2148] usb 3-1: USB disconnect, device number 4 [ 91.144420][ T5809] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 91.153466][ T5809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.163357][ T5809] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 91.173119][ T5809] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 91.187320][ T5169] bcm5974 3-1:1.0: could not read from device [ 91.213488][ T5809] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 91.245975][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.278009][ T5809] usb 1-1: config 0 descriptor?? [ 91.674147][ T2148] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 91.879956][ T24] cdc_ncm 5-1:1.0: bind() failure [ 92.453932][ T24] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 92.463621][ T2148] usb 3-1: Using ep0 maxpacket: 16 [ 92.596197][ T24] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 92.606532][ T24] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 92.777850][ T6287] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.98'. [ 92.783922][ T2148] usb 3-1: device descriptor read/all, error -71 [ 92.874288][ T24] usb 5-1: USB disconnect, device number 3 [ 93.558964][ T5809] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 93.907978][ T5809] usb 1-1: USB disconnect, device number 3 [ 93.946136][ T6305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.967226][ T5809] usblp0: removed [ 94.050485][ T30] audit: type=1400 audit(1747705984.702:273): avc: denied { accept } for pid=6303 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.125527][ T30] audit: type=1400 audit(1747705984.732:274): avc: denied { ioctl } for pid=6309 comm="syz.1.104" path="socket:[8740]" dev="sockfs" ino=8740 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.198840][ T30] audit: type=1400 audit(1747705984.852:275): avc: denied { wake_alarm } for pid=6309 comm="syz.1.104" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.335011][ T6319] SELinux: Context system_u:object_r:fsadm_ex is not valid (left unmapped). [ 94.339649][ T5809] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.498607][ T2148] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.522268][ T30] audit: type=1400 audit(1747705984.932:276): avc: denied { ioctl } for pid=6317 comm="syz.2.105" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 94.559523][ T30] audit: type=1400 audit(1747705985.002:277): avc: denied { relabelto } for pid=6317 comm="syz.2.105" name="14" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 94.611743][ T30] audit: type=1400 audit(1747705985.002:278): avc: denied { associate } for pid=6317 comm="syz.2.105" name="14" dev="tmpfs" ino=84 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_ex" [ 94.678622][ T5809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.694551][ T2148] usb 5-1: Using ep0 maxpacket: 32 [ 94.701299][ T5809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.714367][ T5809] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 94.727676][ T2148] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 94.751877][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.767297][ T2148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.785555][ T30] audit: type=1400 audit(1747705985.432:279): avc: denied { write } for pid=5817 comm="syz-executor" name="14" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 94.817170][ T5809] usb 1-1: config 0 descriptor?? [ 94.843983][ T2148] usb 5-1: config 0 descriptor?? [ 94.966316][ T6331] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 95.063985][ T2148] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 95.073886][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 95.077818][ T2148] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 95.090654][ T2148] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 95.213793][ T5856] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.226430][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.234607][ T9] usb 3-1: config 0 has no interface number 0 [ 95.240595][ T5809] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 95.240685][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.252728][ T5809] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 95.261344][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.261381][ T9] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 95.261403][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.305361][ T5809] playstation 0003:054C:0DF2.0001: item fetching failed at offset 2/5 [ 95.315672][ T5809] playstation 0003:054C:0DF2.0001: Parse failed [ 95.321971][ T5809] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -22 [ 95.419912][ T9] usb 3-1: config 0 descriptor?? [ 95.514158][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 95.533618][ T5856] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.553079][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.570320][ T5856] usb 2-1: Product: syz [ 95.580431][ T5856] usb 2-1: Manufacturer: syz [ 95.585290][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 95.592018][ T30] audit: type=1400 audit(1747705986.232:283): avc: denied { ioctl } for pid=6312 comm="syz.4.106" path="socket:[8771]" dev="sockfs" ino=8771 ioctlcmd=0x55c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.684441][ T5856] usb 2-1: SerialNumber: syz [ 95.696306][ T30] audit: type=1400 audit(1747705986.232:284): avc: denied { map } for pid=6312 comm="syz.4.106" path="socket:[8771]" dev="sockfs" ino=8771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.719471][ T30] audit: type=1400 audit(1747705986.232:285): avc: denied { read } for pid=6312 comm="syz.4.106" path="socket:[8771]" dev="sockfs" ino=8771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.022811][ T30] audit: type=1400 audit(1747705986.672:286): avc: denied { listen } for pid=6340 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 96.073979][ T5856] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 96.085749][ T30] audit: type=1400 audit(1747705986.722:287): avc: denied { create } for pid=6306 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.122361][ T9] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0002/input/input8 [ 96.138233][ T30] audit: type=1400 audit(1747705986.762:288): avc: denied { write } for pid=6306 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.167931][ T5856] usb 2-1: USB disconnect, device number 3 [ 96.249020][ T6325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.251630][ T30] audit: type=1400 audit(1747705986.902:289): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 96.263637][ T6325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.298316][ T10] usb 1-1: USB disconnect, device number 4 [ 96.318122][ T9] holtek_kbd 0003:04D9:A055.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 96.376258][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.403792][ T9] usb 3-1: USB disconnect, device number 7 [ 96.442383][ T30] audit: type=1400 audit(1747705987.092:290): avc: denied { bind } for pid=6348 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.479774][ T30] audit: type=1400 audit(1747705987.122:291): avc: denied { listen } for pid=6348 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.515966][ T30] audit: type=1400 audit(1747705987.122:292): avc: denied { read } for pid=6348 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.578502][ T6350] fido_id[6350]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 96.812269][ T6360] __nla_validate_parse: 1 callbacks suppressed [ 96.812279][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'. [ 96.936278][ T5809] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.964309][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.105298][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.116304][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.127774][ T5809] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 97.136858][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.147805][ T5809] usb 4-1: config 0 descriptor?? [ 97.156147][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 97.169431][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 97.187505][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 97.197613][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.213857][ T9] usb 2-1: config 0 descriptor?? [ 97.216314][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.340755][ T6377] trusted_key: encrypted_key: insufficient parameters specified [ 97.372249][ T24] usb 1-1: device descriptor read/64, error -71 [ 97.462186][ T6358] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 97.704424][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 97.853809][ T24] usb 1-1: device descriptor read/64, error -71 [ 97.981788][ T24] usb usb1-port1: attempt power cycle [ 97.991199][ T5809] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -71 [ 98.004336][ T5809] usb 4-1: USB disconnect, device number 3 [ 98.099431][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.121'. [ 98.141840][ T6384] netlink: zone id is out of range [ 98.147935][ T6384] netlink: zone id is out of range [ 98.153891][ T6384] netlink: zone id is out of range [ 98.159072][ T6384] netlink: zone id is out of range [ 98.164367][ T6384] netlink: zone id is out of range [ 98.170404][ T6384] netlink: zone id is out of range [ 98.176109][ T6384] netlink: zone id is out of range [ 98.181296][ T6384] netlink: zone id is out of range [ 98.285371][ T6384] netlink: set zone limit has 4 unknown bytes [ 98.611812][ T6391] binder: 6390:6391 ioctl c0306201 200000000080 returned -22 [ 98.621459][ T6392] binder: 6390:6392 ioctl c0306201 200000000080 returned -22 [ 98.773833][ T1147] af_packet: tpacket_rcv: packet too big, clamped from 66 to 4294967286. macoff=82 [ 98.773932][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.805444][ T24] usb 1-1: device descriptor read/8, error -71 [ 98.824816][ T6403] random: crng reseeded on system resumption [ 99.043941][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 99.057598][ T5809] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 99.084243][ T24] usb 1-1: device descriptor read/8, error -71 [ 99.590790][ T5809] usb 3-1: device descriptor read/64, error -71 [ 99.599270][ T24] usb usb1-port1: unable to enumerate USB device [ 99.686920][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 99.692973][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 99.706623][ T9] usb 2-1: USB disconnect, device number 4 [ 99.874590][ T5809] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 100.060042][ T5809] usb 3-1: device descriptor read/64, error -71 [ 100.204102][ T5809] usb usb3-port1: attempt power cycle [ 100.368394][ T6425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.555128][ T5809] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 100.584442][ T5809] usb 3-1: device descriptor read/8, error -71 [ 100.973813][ T5809] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 101.044956][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 101.051138][ T30] audit: type=1400 audit(1747705991.750:304): avc: denied { write } for pid=6437 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 101.432304][ T6440] netlink: set zone limit has 4 unknown bytes [ 101.464094][ T5809] usb 3-1: device descriptor read/8, error -71 [ 101.620788][ T5809] usb usb3-port1: unable to enumerate USB device [ 102.034333][ T5856] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 102.276455][ T30] audit: type=1400 audit(1747705992.960:305): avc: denied { bind } for pid=6452 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.296158][ T5856] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 102.339402][ T5856] usb 4-1: config 0 has no interface number 0 [ 102.369777][ T5856] usb 4-1: config 0 interface 41 has no altsetting 0 [ 102.490047][ T30] audit: type=1400 audit(1747705992.970:306): avc: denied { listen } for pid=6452 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.582270][ T5856] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 102.595660][ T6458] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 103.003831][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.020995][ T30] audit: type=1400 audit(1747705993.310:307): avc: denied { setopt } for pid=6454 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.040332][ T5856] usb 4-1: Product: syz [ 103.046620][ T5856] usb 4-1: Manufacturer: syz [ 103.051314][ T5856] usb 4-1: SerialNumber: syz [ 103.080919][ T5856] usb 4-1: config 0 descriptor?? [ 103.618030][ T30] audit: type=1400 audit(1747705994.330:308): avc: denied { create } for pid=6467 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.639230][ T30] audit: type=1400 audit(1747705994.330:309): avc: denied { bind } for pid=6467 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.725689][ T30] audit: type=1400 audit(1747705994.330:310): avc: denied { listen } for pid=6467 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.745081][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.791392][ T30] audit: type=1400 audit(1747705994.330:311): avc: denied { connect } for pid=6467 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.810884][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.971660][ T30] audit: type=1400 audit(1747705994.360:312): avc: denied { mount } for pid=6465 comm="syz.2.142" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 104.069970][ T6476] tipc: Started in network mode [ 104.172220][ T6476] tipc: Node identity 0a8ad854fdfd, cluster identity 4711 [ 104.185472][ T6476] tipc: Enabled bearer , priority 0 [ 104.202394][ T30] audit: type=1400 audit(1747705994.900:313): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 104.319184][ T6477] trusted_key: encrypted_key: key user:syz not found [ 104.672807][ T6447] tipc: Disabling bearer [ 104.811412][ T5856] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 104.817519][ T6486] loop8: detected capacity change from 0 to 7 [ 104.846916][ T6352] Dev loop8: unable to read RDB block 7 [ 104.854378][ T5856] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 104.868326][ T6352] loop8: unable to read partition table [ 104.877846][ T6352] loop8: partition table beyond EOD, truncated [ 104.880581][ T5856] usb 4-1: USB disconnect, device number 4 [ 104.968217][ T6486] Dev loop8: unable to read RDB block 7 [ 104.976527][ T6486] loop8: unable to read partition table [ 104.983676][ T6486] loop8: partition table beyond EOD, truncated [ 105.023534][ T6486] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 105.492331][ T6499] binder: 6496:6499 ioctl c0306201 200000000480 returned -14 [ 106.704833][ T6515] bridge1: entered promiscuous mode [ 107.329465][ T6523] afs: Unknown parameter '' [ 107.335546][ T6523] netlink: 'syz.2.155': attribute type 10 has an invalid length. [ 107.598120][ T6523] veth0_macvtap: left promiscuous mode [ 107.649345][ T30] audit: type=1400 audit(1747705998.360:314): avc: denied { create } for pid=6529 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 107.681375][ T6523] batman_adv: batadv0: Adding interface: macvtap0 [ 107.695543][ T6523] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.736945][ T6523] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 107.892629][ T6523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.155'. [ 108.543596][ T5941] udevd[5941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 108.626707][ T6544] trusted_key: encrypted_key: key user:syz not found [ 108.943979][ T30] audit: type=1400 audit(1747705999.650:315): avc: denied { write } for pid=6548 comm="syz.0.161" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.100125][ T30] audit: type=1400 audit(1747705999.690:316): avc: denied { read append } for pid=6548 comm="syz.0.161" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 109.175220][ T30] audit: type=1400 audit(1747705999.690:317): avc: denied { open } for pid=6548 comm="syz.0.161" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 109.657663][ T30] audit: type=1400 audit(1747705999.690:318): avc: denied { view } for pid=6548 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 110.052739][ T30] audit: type=1400 audit(1747706000.010:319): avc: denied { create } for pid=6552 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.123521][ T6562] netlink: 68 bytes leftover after parsing attributes in process `syz.0.165'. [ 110.127503][ T30] audit: type=1400 audit(1747706000.060:320): avc: denied { bind } for pid=6552 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.181636][ T6569] input: syz0 as /devices/virtual/input/input9 [ 110.220344][ T30] audit: type=1400 audit(1747706000.060:321): avc: denied { map } for pid=6552 comm="syz.2.163" path="socket:[9181]" dev="sockfs" ino=9181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.317375][ T6571] netlink: 64 bytes leftover after parsing attributes in process `syz.0.167'. [ 110.323404][ T30] audit: type=1400 audit(1747706000.060:322): avc: denied { read accept } for pid=6552 comm="syz.2.163" path="socket:[9181]" dev="sockfs" ino=9181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.571429][ T6579] Cannot find del_set index 4 as target [ 110.760267][ T30] audit: type=1400 audit(1747706000.830:323): avc: denied { append } for pid=6561 comm="syz.0.165" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 111.218920][ T6587] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 111.227736][ T6587] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 111.236448][ T6587] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 112.142123][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.150577][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.159689][ T6602] bridge0: entered allmulticast mode [ 112.255429][ T6605] futex_wake_op: syz.0.174 tries to shift op by -1; fix this program [ 112.970780][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 112.970795][ T30] audit: type=1400 audit(1747706003.680:326): avc: denied { getopt } for pid=6615 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.055026][ T30] audit: type=1400 audit(1747706003.770:327): avc: denied { shutdown } for pid=6615 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.183601][ T5809] IPVS: starting estimator thread 0... [ 115.225695][ T30] audit: type=1400 audit(1747706005.910:328): avc: denied { ioctl } for pid=6638 comm="syz.3.185" path="socket:[10471]" dev="sockfs" ino=10471 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.348224][ T6646] IPVS: using max 40 ests per chain, 96000 per kthread [ 115.424236][ T6650] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 115.491450][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.493939][ T6655] input: syz0 as /devices/virtual/input/input10 [ 115.501563][ T6657] netlink: 'syz.1.186': attribute type 6 has an invalid length. [ 115.512679][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.519822][ T30] audit: type=1400 audit(1747706006.160:329): avc: denied { create } for pid=6647 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 115.540448][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.550691][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.559977][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.719981][ T6661] xt_connbytes: Forcing CT accounting to be enabled [ 115.726755][ T6661] Cannot find set identified by id 0 to match [ 115.732901][ T30] audit: type=1400 audit(1747706006.430:330): avc: denied { shutdown } for pid=6649 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.797944][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.805453][ T6663] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.819484][ T6663] bridge0: entered allmulticast mode [ 116.031580][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 116.400615][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.423283][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.486877][ T6653] bridge_slave_0: entered allmulticast mode [ 116.500393][ T6653] bridge_slave_0: entered promiscuous mode [ 116.520085][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.530890][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.538197][ T6653] bridge_slave_1: entered allmulticast mode [ 116.551415][ T6653] bridge_slave_1: entered promiscuous mode [ 116.691173][ T6679] fuse: Unknown parameter '0x000000000000000d' [ 116.721265][ T30] audit: type=1400 audit(1747706007.430:331): avc: denied { connect } for pid=6675 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.941660][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.987875][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.034383][ T6653] team0: Port device team_slave_0 added [ 117.050709][ T6653] team0: Port device team_slave_1 added [ 117.087339][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.096548][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.128845][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.143114][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.151879][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.183442][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.250447][ T6653] hsr_slave_0: entered promiscuous mode [ 117.362910][ T6653] hsr_slave_1: entered promiscuous mode [ 117.369157][ T6653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.398540][ T6653] Cannot create hsr debugfs directory [ 117.654489][ T5124] Bluetooth: hci5: command tx timeout [ 118.066517][ T30] audit: type=1400 audit(1747706008.780:332): avc: denied { read } for pid=6689 comm="syz.1.195" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 118.217524][ T30] audit: type=1400 audit(1747706008.900:333): avc: denied { setopt } for pid=6689 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.415375][ T6653] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.441836][ T6653] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.460145][ T6653] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.470702][ T6653] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 118.990073][ T6700] macvtap1: entered allmulticast mode [ 118.995493][ T6700] veth0_macvtap: entered allmulticast mode [ 119.006376][ T30] audit: type=1326 audit(1747706009.440:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6693 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843818e969 code=0x7ffc0000 [ 119.229062][ T30] audit: type=1326 audit(1747706009.440:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6693 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843818e969 code=0x7ffc0000 [ 119.416561][ T30] audit: type=1326 audit(1747706009.440:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6693 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f843818e969 code=0x7ffc0000 [ 119.538880][ T6708] smc: net device bond0 applied user defined pnetid SYZ2 [ 119.593465][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.734127][ T5124] Bluetooth: hci5: command tx timeout [ 119.893903][ T30] audit: type=1326 audit(1747706009.440:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6693 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843818e969 code=0x7ffc0000 [ 119.918100][ T30] audit: type=1326 audit(1747706009.440:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6693 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843818e969 code=0x7ffc0000 [ 119.941604][ T30] audit: type=1326 audit(1747706009.440:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6693 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f843818e969 code=0x7ffc0000 [ 119.967206][ T30] audit: type=1326 audit(1747706009.440:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6693 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843818e969 code=0x7ffc0000 [ 119.990631][ T30] audit: type=1326 audit(1747706009.450:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6693 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843818e969 code=0x7ffc0000 [ 120.176285][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.195202][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.203004][ T6414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.268199][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.200'. [ 120.304213][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.311329][ T6414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.324756][ T6710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.440191][ T6712] xfrm1: entered promiscuous mode [ 120.462284][ T6712] xfrm1: entered allmulticast mode [ 120.532073][ T6712] netfs: Couldn't get user pages (rc=-14) [ 120.727569][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.202'. [ 121.743831][ T5857] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 121.753812][ T5856] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.815479][ T5124] Bluetooth: hci5: command tx timeout [ 121.884376][ T6735] hfs: can't find a HFS filesystem on dev nullb0 [ 121.893253][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.914832][ T5856] usb 4-1: device descriptor read/64, error -71 [ 121.926400][ T6738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.208'. [ 121.941402][ T6738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.949426][ T6738] batadv_slave_0: entered promiscuous mode [ 121.954097][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 121.961841][ T5857] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.980453][ T5857] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.992394][ T5857] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.009806][ T5857] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 122.027230][ T5857] usb 1-1: config 0 interface 0 has no altsetting 0 [ 122.035087][ T5857] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 122.052439][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.074782][ T5857] usb 1-1: config 0 descriptor?? [ 122.163756][ T5856] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.217998][ T6653] veth0_vlan: entered promiscuous mode [ 122.235571][ T6653] veth1_vlan: entered promiscuous mode [ 122.268391][ T6653] veth0_macvtap: entered promiscuous mode [ 122.279181][ T6653] veth1_macvtap: entered promiscuous mode [ 122.303825][ T5856] usb 4-1: device descriptor read/64, error -71 [ 122.307024][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.339487][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.352242][ T6653] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.361741][ T6653] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.371158][ T6653] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.380592][ T6653] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.418295][ T5856] usb usb4-port1: attempt power cycle [ 122.470791][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.504110][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.528184][ T5857] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 122.557811][ T5857] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 122.576043][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.587011][ T5857] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 122.599956][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.611733][ T5857] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 122.638537][ T5857] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 122.680179][ T5857] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 122.752084][ T5857] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints? [ 122.797821][ C1] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -71 [ 122.833753][ T5856] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.846938][ T5857] usb 1-1: USB disconnect, device number 9 [ 122.863565][ T5856] usb 4-1: device descriptor read/8, error -71 [ 122.888332][ T6753] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 122.940958][ T6753] CIFS mount error: No usable UNC path provided in device string! [ 122.940958][ T6753] [ 123.004940][ T6753] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 123.131904][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 123.131919][ T30] audit: type=1400 audit(1747706013.840:366): avc: denied { write } for pid=6764 comm="syz.2.213" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.137733][ T5856] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 123.257245][ T5856] usb 4-1: device descriptor read/8, error -71 [ 123.383483][ T5856] usb usb4-port1: unable to enumerate USB device [ 123.435893][ T30] audit: type=1400 audit(1747706014.120:367): avc: denied { mount } for pid=6764 comm="syz.2.213" name="/" dev="rpc_pipefs" ino=11131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 123.458861][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.650287][ T30] audit: type=1400 audit(1747706014.320:368): avc: denied { setopt } for pid=6768 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.670585][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.735093][ T5809] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.790435][ T6779] trusted_key: encrypted_key: key user:syz not found [ 123.902419][ T5124] Bluetooth: hci5: command tx timeout [ 123.915073][ T5809] usb 6-1: Using ep0 maxpacket: 16 [ 123.931616][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.036630][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.263561][ T5809] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 124.485290][ T30] audit: type=1400 audit(1747706015.200:369): avc: denied { ioctl } for pid=6764 comm="syz.2.213" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 124.486339][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.509635][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.526905][ T5809] usb 6-1: config 0 descriptor?? [ 125.552036][ T30] audit: type=1400 audit(1747706015.370:370): avc: denied { connect } for pid=6791 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.782685][ T6804] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 125.822704][ T30] audit: type=1400 audit(1747706016.530:371): avc: denied { bind } for pid=6807 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.843156][ T6809] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.862044][ T6812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.888225][ T6810] capability: warning: `syz.0.222' uses 32-bit capabilities (legacy support in use) [ 126.147907][ T5809] usbhid 6-1:0.0: can't add hid device: -71 [ 126.268978][ T5809] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 126.269972][ T6813] tun0: tun_chr_ioctl cmd 1074025675 [ 126.283815][ T30] audit: type=1400 audit(1747706017.000:372): avc: denied { read } for pid=6816 comm="syz.0.226" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 126.307204][ T6813] tun0: persist disabled [ 126.369738][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 126.402859][ T6821] netlink: zone id is out of range [ 126.409103][ T6821] netlink: zone id is out of range [ 126.414658][ T6821] netlink: zone id is out of range [ 126.419795][ T6821] netlink: zone id is out of range [ 126.429627][ T6821] netlink: zone id is out of range [ 126.434823][ T6821] netlink: zone id is out of range [ 126.511447][ T6821] netlink: set zone limit has 4 unknown bytes [ 126.789812][ T5809] usb 6-1: USB disconnect, device number 2 [ 126.896565][ T30] audit: type=1400 audit(1747706017.520:373): avc: denied { open } for pid=6816 comm="syz.0.226" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 127.875854][ T30] audit: type=1400 audit(1747706018.590:374): avc: denied { map } for pid=6824 comm="syz.0.228" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.938544][ T30] audit: type=1400 audit(1747706018.590:375): avc: denied { execute } for pid=6824 comm="syz.0.228" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.055790][ T6838] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.231'. [ 128.725805][ T6854] usb usb8: usbfs: process 6854 (syz.1.237) did not claim interface 0 before use [ 129.080254][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 129.080269][ T30] audit: type=1400 audit(1747706019.790:377): avc: denied { unlink } for pid=6857 comm="syz.1.238" name="#1" dev="tmpfs" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 129.153760][ T30] audit: type=1400 audit(1747706019.790:378): avc: denied { mount } for pid=6857 comm="syz.1.238" name="/" dev="overlay" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 129.268218][ T6863] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 129.343798][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 129.514161][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 129.527612][ T24] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 129.542946][ T24] usb 2-1: config 0 has no interface number 0 [ 129.549613][ T24] usb 2-1: config 0 interface 249 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 129.560366][ T24] usb 2-1: config 0 interface 249 has no altsetting 0 [ 129.665266][ T24] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1 [ 129.674859][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.682875][ T24] usb 2-1: Product: syz [ 129.688850][ T24] usb 2-1: Manufacturer: syz [ 129.693482][ T24] usb 2-1: SerialNumber: syz [ 129.701247][ T24] usb 2-1: config 0 descriptor?? [ 129.707668][ T6861] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.721437][ T24] aircable 2-1:0.249: aircable converter detected [ 129.748771][ T24] usb 2-1: aircable converter now attached to ttyUSB0 [ 130.228073][ T30] audit: type=1400 audit(1747706020.940:379): avc: denied { lock } for pid=6857 comm="syz.1.238" path="socket:[12486]" dev="sockfs" ino=12486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.437682][ T30] audit: type=1400 audit(1747706021.150:380): avc: denied { write } for pid=6873 comm="syz.2.242" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 130.463406][ T30] audit: type=1400 audit(1747706021.160:381): avc: denied { allowed } for pid=6873 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 130.840524][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'. [ 130.852364][ T6863] netlink: 'syz.0.239': attribute type 5 has an invalid length. [ 130.862971][ T6866] veth1_to_bridge: entered promiscuous mode [ 130.869057][ T6866] veth1_to_bridge: left promiscuous mode [ 131.018883][ T10] usb 2-1: USB disconnect, device number 5 [ 131.033225][ T10] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 131.077329][ T10] aircable 2-1:0.249: device disconnected [ 131.297906][ T6890] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 131.737898][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.143774][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 132.200557][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.242319][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.294236][ T24] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 132.555145][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.561513][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.584397][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.607611][ T24] usb 4-1: config 0 descriptor?? [ 132.783028][ T6904] syzkaller0: entered promiscuous mode [ 132.788747][ T6904] syzkaller0: entered allmulticast mode [ 133.333651][ T24] greenasia 0003:0E8F:0012.0005: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 133.447994][ T24] greenasia 0003:0E8F:0012.0005: no inputs found [ 133.779253][ T6918] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 134.405772][ T5856] usb 4-1: USB disconnect, device number 9 [ 134.535952][ T6919] hugetlbfs: syz.1.254 (6919): Using mlock ulimits for SHM_HUGETLB is obsolete [ 134.695279][ T5855] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 135.003840][ T5855] usb 6-1: Using ep0 maxpacket: 16 [ 135.055795][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.089600][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.099937][ T5855] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.113195][ T5855] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.128082][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.154769][ T5855] usb 6-1: config 0 descriptor?? [ 135.600004][ T30] audit: type=1400 audit(1747706026.310:382): avc: denied { read } for pid=6935 comm="syz.1.260" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.606665][ T5855] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0006/input/input12 [ 135.743450][ T5855] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 135.911972][ T30] audit: type=1400 audit(1747706026.620:383): avc: denied { write } for pid=6920 comm="syz.5.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.562261][ T5855] usb 6-1: USB disconnect, device number 3 [ 136.671618][ T30] audit: type=1400 audit(1747706027.380:384): avc: denied { write } for pid=6953 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 136.708321][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 137.793849][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 137.943950][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 137.967065][ T9] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 138.007102][ T9] usb 4-1: config 0 has no interface number 0 [ 138.021606][ T9] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 138.050279][ T9] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 138.082779][ T30] audit: type=1400 audit(1747706028.780:385): avc: denied { mount } for pid=6975 comm="syz.5.271" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 138.111086][ T6977] overlayfs: invalid redirect ((null)) [ 138.116594][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 138.129112][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.155780][ T9] usb 4-1: Product: syz [ 138.218531][ T6977] vlan2: entered allmulticast mode [ 138.286204][ T9] usb 4-1: Manufacturer: syz [ 138.291418][ T9] usb 4-1: SerialNumber: syz [ 138.309896][ T6981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.273'. [ 138.318915][ T6977] bond0: entered allmulticast mode [ 138.328953][ T9] usb 4-1: config 0 descriptor?? [ 138.334866][ T6966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.342084][ T6977] bond_slave_0: entered allmulticast mode [ 138.342123][ T6966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.367163][ T6977] bond_slave_1: entered allmulticast mode [ 138.387870][ T6977] team0: Device vlan2 is up. Set it down before adding it as a team port [ 138.411848][ T30] audit: type=1400 audit(1747706029.070:386): avc: denied { watch watch_reads } for pid=6980 comm="syz.1.273" path="/60" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 138.805156][ T6989] FAULT_INJECTION: forcing a failure. [ 138.805156][ T6989] name failslab, interval 1, probability 0, space 0, times 0 [ 138.823857][ T6989] CPU: 0 UID: 0 PID: 6989 Comm: syz.2.274 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 138.823885][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.823895][ T6989] Call Trace: [ 138.823901][ T6989] [ 138.823907][ T6989] dump_stack_lvl+0x16c/0x1f0 [ 138.823938][ T6989] should_fail_ex+0x512/0x640 [ 138.823962][ T6989] ? fs_reclaim_acquire+0xae/0x150 [ 138.823989][ T6989] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 138.824013][ T6989] should_failslab+0xc2/0x120 [ 138.824033][ T6989] __kmalloc_noprof+0xd2/0x510 [ 138.824056][ T6989] tomoyo_realpath_from_path+0xc2/0x6e0 [ 138.824085][ T6989] ? tomoyo_profile+0x47/0x60 [ 138.824104][ T6989] tomoyo_path_number_perm+0x245/0x580 [ 138.824125][ T6989] ? tomoyo_path_number_perm+0x237/0x580 [ 138.824149][ T6989] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 138.824171][ T6989] ? find_held_lock+0x2b/0x80 [ 138.824212][ T6989] ? find_held_lock+0x2b/0x80 [ 138.824232][ T6989] ? hook_file_ioctl_common+0x145/0x410 [ 138.824255][ T6989] ? __fget_files+0x20e/0x3c0 [ 138.824277][ T6989] security_file_ioctl+0x9b/0x240 [ 138.824305][ T6989] __x64_sys_ioctl+0xb7/0x200 [ 138.824330][ T6989] do_syscall_64+0xcd/0x260 [ 138.824357][ T6989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.824375][ T6989] RIP: 0033:0x7f7f5d98e969 [ 138.824389][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.824405][ T6989] RSP: 002b:00007f7f5e7e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.824422][ T6989] RAX: ffffffffffffffda RBX: 00007f7f5dbb5fa0 RCX: 00007f7f5d98e969 [ 138.824433][ T6989] RDX: 0000200000000480 RSI: 00000000c0386105 RDI: 0000000000000003 [ 138.824443][ T6989] RBP: 00007f7f5e7e0090 R08: 0000000000000000 R09: 0000000000000000 [ 138.824453][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.824463][ T6989] R13: 0000000000000000 R14: 00007f7f5dbb5fa0 R15: 00007ffc573345e8 [ 138.824487][ T6989] [ 138.824580][ T6989] ERROR: Out of memory at tomoyo_realpath_from_path. [ 138.844557][ T6978] vlan2: entered allmulticast mode [ 138.863487][ T30] audit: type=1400 audit(1747706029.570:387): avc: denied { create } for pid=6980 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 138.883465][ T6978] team0: Device vlan2 is up. Set it down before adding it as a team port [ 138.974762][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.058843][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.189429][ T9] asix 4-1:0.251: probe with driver asix failed with error -71 [ 139.221658][ T9] usb 4-1: USB disconnect, device number 10 [ 139.335949][ T6997] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 139.343058][ T6997] overlayfs: failed to set xattr on upper [ 139.348814][ T6997] overlayfs: ...falling back to redirect_dir=nofollow. [ 139.356165][ T6997] overlayfs: ...falling back to index=off. [ 139.361980][ T6997] overlayfs: ...falling back to uuid=null. [ 139.367869][ T6997] overlayfs: failed to clone lowerpath [ 139.394069][ T30] audit: type=1400 audit(1747706030.040:388): avc: denied { mount } for pid=6993 comm="syz.0.276" name="/" dev="ramfs" ino=13620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 139.473397][ T30] audit: type=1400 audit(1747706030.040:389): avc: denied { mounton } for pid=6993 comm="syz.0.276" path="/file0" dev="ramfs" ino=13622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 139.495145][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.511195][ T30] audit: type=1400 audit(1747706030.160:390): avc: denied { unmount } for pid=6653 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 139.531710][ T30] audit: type=1400 audit(1747706030.160:391): avc: denied { unmount } for pid=6653 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 139.573041][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 139.725327][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.781590][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.613445][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 140.613462][ T30] audit: type=1400 audit(1747706031.270:393): avc: denied { setopt } for pid=7004 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 140.766364][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 140.776475][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.815765][ T24] usb 3-1: config 0 descriptor?? [ 141.645812][ T6995] loop6: detected capacity change from 0 to 524287999 [ 141.971807][ T7010] FAULT_INJECTION: forcing a failure. [ 141.971807][ T7010] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 141.985726][ T7010] CPU: 1 UID: 0 PID: 7010 Comm: syz.3.280 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 141.985750][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.985760][ T7010] Call Trace: [ 141.985766][ T7010] [ 141.985773][ T7010] dump_stack_lvl+0x16c/0x1f0 [ 141.985803][ T7010] should_fail_ex+0x512/0x640 [ 141.985832][ T7010] _copy_from_iter+0x2a4/0x15b0 [ 141.985866][ T7010] ? __pfx__copy_from_iter+0x10/0x10 [ 141.985897][ T7010] ? sock_has_perm+0x259/0x2f0 [ 141.985918][ T7010] ? __pfx_sock_has_perm+0x10/0x10 [ 141.985943][ T7010] hci_sock_sendmsg+0x46d/0x25e0 [ 141.985969][ T7010] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 141.985996][ T7010] sock_write_iter+0x4ff/0x5b0 [ 141.986023][ T7010] ? __pfx_sock_write_iter+0x10/0x10 [ 141.986060][ T7010] ? bpf_lsm_file_permission+0x9/0x10 [ 141.986086][ T7010] ? security_file_permission+0x71/0x210 [ 141.986113][ T7010] ? rw_verify_area+0xcf/0x680 [ 141.986142][ T7010] vfs_write+0x5bd/0x1180 [ 141.986169][ T7010] ? __pfx_sock_write_iter+0x10/0x10 [ 141.986197][ T7010] ? __pfx_vfs_write+0x10/0x10 [ 141.986220][ T7010] ? find_held_lock+0x2b/0x80 [ 141.986262][ T7010] ksys_write+0x205/0x240 [ 141.986287][ T7010] ? __pfx_ksys_write+0x10/0x10 [ 141.986323][ T7010] do_syscall_64+0xcd/0x260 [ 141.986351][ T7010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.986369][ T7010] RIP: 0033:0x7f8e5518e969 [ 141.986384][ T7010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.986401][ T7010] RSP: 002b:00007f8e52fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.986417][ T7010] RAX: ffffffffffffffda RBX: 00007f8e553b6080 RCX: 00007f8e5518e969 [ 141.986428][ T7010] RDX: 0000000000000006 RSI: 0000200000001280 RDI: 0000000000000009 [ 141.986438][ T7010] RBP: 00007f8e52fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 141.986448][ T7010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.986458][ T7010] R13: 0000000000000000 R14: 00007f8e553b6080 R15: 00007ffd1e7300e8 [ 141.986482][ T7010] [ 142.198576][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.424032][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 142.450872][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 142.460615][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 142.523083][ T30] audit: type=1400 audit(1747706033.210:394): avc: denied { map } for pid=7015 comm="syz.5.281" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 142.554418][ C1] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 142.563775][ C0] I/O error, dev loop6, sector 5114 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 142.564382][ C1] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 142.584112][ C0] I/O error, dev loop6, sector 5114 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 142.584148][ C1] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 142.603957][ C1] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 142.614006][ C1] I/O error, dev loop6, sector 3066 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 142.620726][ C0] I/O error, dev loop6, sector 6138 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 142.647952][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 142.653915][ T9] usb 1-1: device descriptor read/64, error -71 [ 142.663774][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 142.679074][ T24] usb 3-1: USB disconnect, device number 12 [ 143.061593][ T5914] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 143.244018][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 143.256347][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.271297][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.288386][ T5914] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.319867][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.335749][ T5124] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 143.344447][ T5124] Bluetooth: hci1: Injecting HCI hardware error event [ 143.353142][ T5124] Bluetooth: hci1: hardware error 0x00 [ 143.414392][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 144.059849][ T5914] usb 2-1: Product: syz [ 144.943840][ T5914] usb 2-1: Manufacturer: syz [ 144.954668][ T5914] usb 2-1: SerialNumber: syz [ 145.205692][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.283'. [ 145.342055][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.393791][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.433931][ T7035] Bluetooth: MGMT ver 1.23 [ 145.444627][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.456121][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.288'. [ 145.597430][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.625848][ T9] usb 1-1: SerialNumber: syz [ 145.640189][ T30] audit: type=1400 audit(1747706036.340:395): avc: granted { setsecparam } for pid=7036 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 145.933233][ T5914] usb 2-1: cannot find UAC_HEADER [ 146.120493][ T5914] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 146.133549][ T9] usb 1-1: 0:2 : does not exist [ 146.374886][ T5124] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 146.490530][ T5914] usb 2-1: USB disconnect, device number 6 [ 146.517568][ T9] usb 1-1: USB disconnect, device number 11 [ 146.741812][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.795663][ T6352] udevd[6352]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.984095][ T2148] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 158.000376][ T2148] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 158.027685][ T2148] usb 5-1: USB disconnect, device number 4 [ 158.372561][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.423177][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.473319][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.553585][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.681246][ T36] bridge_slave_1: left allmulticast mode [ 158.691276][ T36] bridge_slave_1: left promiscuous mode [ 158.698488][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.707830][ T36] bridge_slave_0: left allmulticast mode [ 158.713466][ T36] bridge_slave_0: left promiscuous mode [ 158.720960][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.918578][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.929326][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.940507][ T36] bond0 (unregistering): Released all slaves [ 159.000003][ T36] tipc: Left network mode [ 159.113636][ T30] audit: type=1400 audit(1747706049.820:396): avc: denied { search } for pid=7061 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.282147][ T30] audit: type=1400 audit(1747706049.990:397): avc: denied { search } for pid=7062 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.309986][ T36] hsr_slave_0: left promiscuous mode [ 159.315955][ T36] hsr_slave_1: left promiscuous mode [ 159.318698][ T30] audit: type=1400 audit(1747706049.990:398): avc: denied { search } for pid=7062 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.338355][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.349787][ T30] audit: type=1400 audit(1747706049.990:399): avc: denied { search } for pid=7062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.351338][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.376312][ T30] audit: type=1400 audit(1747706049.990:400): avc: denied { search } for pid=7062 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.413564][ T30] audit: type=1400 audit(1747706050.040:401): avc: denied { search } for pid=7063 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.437249][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.444844][ T30] audit: type=1400 audit(1747706050.040:402): avc: denied { search } for pid=7063 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.444887][ T30] audit: type=1400 audit(1747706050.040:403): avc: denied { search } for pid=7063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.444926][ T30] audit: type=1400 audit(1747706050.040:404): avc: denied { read } for pid=7063 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.444963][ T30] audit: type=1400 audit(1747706050.040:405): avc: denied { read open } for pid=7063 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.548744][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.572306][ T36] veth1_macvtap: left promiscuous mode [ 159.578151][ T36] veth0_macvtap: left promiscuous mode [ 159.586618][ T36] veth1_vlan: left promiscuous mode [ 159.593036][ T36] veth0_vlan: left promiscuous mode [ 159.995604][ T36] team0 (unregistering): Port device team_slave_1 removed [ 160.031524][ T36] team0 (unregistering): Port device team_slave_0 removed [ 164.175899][ T30] kauditd_printk_skb: 1181 callbacks suppressed [ 164.175914][ T30] audit: type=1400 audit(1747706054.890:1587): avc: denied { search } for pid=7119 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.266453][ T30] audit: type=1400 audit(1747706054.980:1588): avc: denied { search } for pid=7120 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.288890][ T30] audit: type=1400 audit(1747706054.980:1589): avc: denied { search } for pid=7120 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.317198][ T30] audit: type=1400 audit(1747706054.980:1590): avc: denied { search } for pid=7120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.345085][ T30] audit: type=1400 audit(1747706054.980:1591): avc: denied { search } for pid=7120 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.370842][ T30] audit: type=1400 audit(1747706055.000:1592): avc: denied { search } for pid=7121 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.373115][ T7121] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.395789][ T30] audit: type=1400 audit(1747706055.000:1593): avc: denied { search } for pid=7121 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.425670][ T30] audit: type=1400 audit(1747706055.000:1594): avc: denied { search } for pid=7121 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.430082][ T7121] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 169.463127][ T30] kauditd_printk_skb: 1361 callbacks suppressed [ 169.463143][ T30] audit: type=1400 audit(1747706060.170:2955): avc: denied { sys_admin } for pid=7191 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 169.491385][ T30] audit: type=1400 audit(1747706060.170:2956): avc: denied { sys_admin } for pid=7191 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 169.515012][ T30] audit: type=1400 audit(1747706060.180:2957): avc: denied { sys_admin } for pid=7191 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 169.540380][ T30] audit: type=1400 audit(1747706060.180:2958): avc: denied { sys_admin } for pid=7191 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 169.564833][ T30] audit: type=1400 audit(1747706060.180:2959): avc: denied { sys_admin } for pid=7191 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 170.229383][ T30] audit: type=1400 audit(1747706060.940:2960): avc: denied { sys_admin } for pid=7195 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 170.252310][ T30] audit: type=1400 audit(1747706060.940:2961): avc: denied { sys_admin } for pid=7195 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 170.277049][ T30] audit: type=1400 audit(1747706060.940:2962): avc: denied { sys_admin } for pid=7195 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 170.299142][ T30] audit: type=1400 audit(1747706060.940:2963): avc: denied { sys_admin } for pid=7195 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 170.320431][ T30] audit: type=1400 audit(1747706060.940:2964): avc: denied { sys_admin } for pid=7195 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 174.466894][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 174.466908][ T30] audit: type=1400 audit(1747706065.180:2975): avc: denied { sys_admin } for pid=7203 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 174.496908][ T30] audit: type=1400 audit(1747706065.180:2976): avc: denied { sys_admin } for pid=7203 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 174.518361][ T30] audit: type=1400 audit(1747706065.180:2977): avc: denied { sys_admin } for pid=7203 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 174.546138][ T30] audit: type=1400 audit(1747706065.180:2978): avc: denied { sys_admin } for pid=7203 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 174.567657][ T30] audit: type=1400 audit(1747706065.180:2979): avc: denied { sys_admin } for pid=7203 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 175.122589][ T30] audit: type=1400 audit(1747706065.830:2980): avc: denied { search } for pid=7207 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.145491][ T30] audit: type=1400 audit(1747706065.830:2981): avc: denied { search } for pid=7207 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.172810][ T30] audit: type=1400 audit(1747706065.830:2982): avc: denied { search } for pid=7207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.198067][ T30] audit: type=1400 audit(1747706065.830:2983): avc: denied { search } for pid=7207 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.223358][ T7208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.474899][ T30] kauditd_printk_skb: 816 callbacks suppressed [ 179.474915][ T30] audit: type=1400 audit(1747706070.190:3798): avc: denied { search } for pid=7236 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.512414][ T30] audit: type=1400 audit(1747706070.190:3799): avc: denied { search } for pid=7236 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.540394][ T30] audit: type=1400 audit(1747706070.190:3800): avc: denied { search } for pid=7236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.542070][ T7236] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.569567][ T30] audit: type=1400 audit(1747706070.190:3801): avc: denied { read } for pid=7236 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.572553][ T7236] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 179.605707][ T30] audit: type=1400 audit(1747706070.190:3802): avc: denied { read open } for pid=7236 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.608339][ T7236] audit: backlog limit exceeded [ 179.635705][ T30] audit: type=1400 audit(1747706070.190:3803): avc: denied { getattr } for pid=7236 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.642585][ T7236] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.490687][ T7284] mmap: syz.3.297 (7284) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 182.527387][ T7286] netlink: 'syz.0.294': attribute type 12 has an invalid length. [ 182.659469][ T7286] netlink: 132 bytes leftover after parsing attributes in process `syz.0.294'. [ 184.325087][ T7312] netlink: 244 bytes leftover after parsing attributes in process `syz.1.300'. [ 184.485201][ T30] kauditd_printk_skb: 1334 callbacks suppressed [ 184.485231][ T30] audit: type=1400 audit(1747706075.200:5136): avc: denied { search } for pid=7307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.542566][ T30] audit: type=1400 audit(1747706075.230:5137): avc: denied { search } for pid=7307 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.614928][ T30] audit: type=1400 audit(1747706075.240:5138): avc: denied { bpf } for pid=7287 comm="syz.5.298" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.752645][ T30] audit: type=1400 audit(1747706075.240:5139): avc: denied { prog_run } for pid=7287 comm="syz.5.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 184.799953][ T30] audit: type=1400 audit(1747706075.250:5140): avc: denied { module_request } for pid=7287 comm="syz.5.298" kmod="net-pf-10-proto-10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 184.922942][ T30] audit: type=1400 audit(1747706075.290:5141): avc: denied { execmem } for pid=7304 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 185.027597][ T30] audit: type=1400 audit(1747706075.440:5142): avc: denied { recv } for pid=7315 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.0.64 dest=37850 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 185.217002][ T30] audit: type=1400 audit(1747706075.440:5143): avc: denied { recv } for pid=7315 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.0.64 dest=37850 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 185.385308][ T30] audit: type=1400 audit(1747706075.440:5144): avc: denied { recv } for pid=7315 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.0.64 dest=37850 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 185.653763][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 185.654583][ T30] audit: type=1400 audit(1747706075.450:5145): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.661385][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 187.168515][ T7339] netlink: 36 bytes leftover after parsing attributes in process `syz.1.306'. [ 187.821413][ T7351] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.307'. [ 187.833963][ T58] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 188.026743][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 188.132438][ T58] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 188.161188][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.207279][ T58] usb 3-1: Product: syz [ 188.225133][ T58] usb 3-1: Manufacturer: syz [ 188.229806][ T58] usb 3-1: SerialNumber: syz [ 188.359778][ T58] usb 3-1: config 0 descriptor?? [ 188.382040][ T58] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 188.399312][ T5809] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 188.895262][ T58] gspca_sonixj: reg_w1 err -110 [ 188.906958][ T58] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 189.063713][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 189.186742][ T5809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 189.238820][ T5809] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 189.354403][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.435578][ T5809] usb 2-1: config 0 descriptor?? [ 189.544739][ T30] kauditd_printk_skb: 314 callbacks suppressed [ 189.544751][ T30] audit: type=1400 audit(1747706080.260:5460): avc: denied { ioctl } for pid=7366 comm="syz.5.311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.809167][ T5856] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 189.865547][ T30] audit: type=1400 audit(1747706080.330:5461): avc: denied { ioctl } for pid=7366 comm="syz.5.311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.999784][ T30] audit: type=1400 audit(1747706080.490:5462): avc: denied { ioctl } for pid=7363 comm="syz.0.312" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 190.163978][ T5856] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 190.174718][ T5856] usb 6-1: config 0 has no interface number 0 [ 190.180825][ T5856] usb 6-1: config 0 interface 41 has no altsetting 0 [ 190.183718][ T30] audit: type=1400 audit(1747706080.520:5463): avc: denied { ioctl } for pid=7342 comm="syz.2.308" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.287618][ T5809] usbhid 2-1:0.0: can't add hid device: -71 [ 190.293628][ T5809] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 190.315176][ T5856] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 190.341287][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.341480][ T5809] usb 2-1: USB disconnect, device number 7 [ 190.410379][ T5856] usb 6-1: Product: syz [ 190.418109][ T58] usb 3-1: USB disconnect, device number 13 [ 190.428309][ T30] audit: type=1400 audit(1747706080.580:5464): avc: denied { ioctl } for pid=7366 comm="syz.5.311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.454091][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.497844][ T5856] usb 6-1: Manufacturer: syz [ 190.502465][ T5856] usb 6-1: SerialNumber: syz [ 190.628686][ T5856] usb 6-1: config 0 descriptor?? [ 190.703754][ T30] audit: type=1400 audit(1747706080.800:5465): avc: denied { ioctl } for pid=7366 comm="syz.5.311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.888029][ T30] audit: type=1400 audit(1747706080.800:5466): avc: denied { ioctl } for pid=7366 comm="syz.5.311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.060352][ T30] audit: type=1400 audit(1747706080.800:5467): avc: denied { ioctl } for pid=7366 comm="syz.5.311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.123106][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 191.129912][ C0] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 192.989310][ T7386] tipc: Started in network mode [ 192.998118][ T7386] tipc: Node identity 16ef25953736, cluster identity 4711 [ 193.048992][ T7386] tipc: Enabled bearer , priority 0 [ 193.725521][ T7366] tipc: Disabling bearer [ 193.841013][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.848240][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.864724][ T5856] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 193.892361][ T5856] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 194.004077][ T5856] usb 6-1: USB disconnect, device number 4 [ 194.049151][ T7377] udevd[7377]: setting mode of /dev/bus/usb/006/004 to 020664 failed: No such file or directory [ 194.198092][ T7377] udevd[7377]: setting owner of /dev/bus/usb/006/004 to uid=0, gid=0 failed: No such file or directory [ 194.483744][ T5914] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 194.549244][ T7409] FAULT_INJECTION: forcing a failure. [ 194.549244][ T7409] name failslab, interval 1, probability 0, space 0, times 0 [ 194.562129][ T30] kauditd_printk_skb: 286 callbacks suppressed [ 194.562142][ T30] audit: type=1400 audit(1747706085.270:5702): avc: denied { search } for pid=7403 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.590514][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.599745][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 194.643765][ T7409] CPU: 1 UID: 0 PID: 7409 Comm: syz.2.318 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 194.643791][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.643800][ T7409] Call Trace: [ 194.643806][ T7409] [ 194.643813][ T7409] dump_stack_lvl+0x16c/0x1f0 [ 194.643842][ T7409] should_fail_ex+0x512/0x640 [ 194.643864][ T7409] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 194.643891][ T7409] should_failslab+0xc2/0x120 [ 194.643910][ T7409] __kmalloc_cache_noprof+0x6a/0x3e0 [ 194.643936][ T7409] ? rtnl_newlink+0x11b/0x2000 [ 194.643965][ T7409] ? __pfx_rtnl_newlink+0x10/0x10 [ 194.643984][ T7409] rtnl_newlink+0x11b/0x2000 [ 194.644011][ T7409] ? __pfx_rtnl_newlink+0x10/0x10 [ 194.644029][ T7409] ? find_held_lock+0x2b/0x80 [ 194.644050][ T7409] ? avc_has_perm_noaudit+0x117/0x3b0 [ 194.644074][ T7409] ? avc_has_perm_noaudit+0x149/0x3b0 [ 194.644099][ T7409] ? __lock_acquire+0x5ca/0x1ba0 [ 194.644138][ T7409] ? find_held_lock+0x2b/0x80 [ 194.644157][ T7409] ? __pfx_rtnl_newlink+0x10/0x10 [ 194.644176][ T7409] ? __pfx_rtnl_newlink+0x10/0x10 [ 194.644194][ T7409] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 194.644215][ T7409] ? __pfx_rtnl_newlink+0x10/0x10 [ 194.644235][ T7409] rtnetlink_rcv_msg+0x95b/0xe90 [ 194.644258][ T7409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 194.644280][ T7409] ? find_held_lock+0x2b/0x80 [ 194.644301][ T7409] ? try_to_wake_up+0xa25/0x1680 [ 194.644323][ T7409] ? do_raw_spin_unlock+0x172/0x230 [ 194.644346][ T7409] netlink_rcv_skb+0x16a/0x440 [ 194.644368][ T7409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 194.644391][ T7409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.644411][ T7409] ? find_held_lock+0x2b/0x80 [ 194.644452][ T7409] netlink_unicast+0x53d/0x7f0 [ 194.644476][ T7409] ? __pfx_netlink_unicast+0x10/0x10 [ 194.644505][ T7409] netlink_sendmsg+0x8d1/0xdd0 [ 194.644531][ T7409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.644562][ T7409] ____sys_sendmsg+0xa95/0xc70 [ 194.644587][ T7409] ? copy_msghdr_from_user+0x10a/0x160 [ 194.644607][ T7409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.644643][ T7409] ___sys_sendmsg+0x134/0x1d0 [ 194.644664][ T7409] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.644713][ T7409] __sys_sendmsg+0x16d/0x220 [ 194.644734][ T7409] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.644761][ T7409] ? rcu_is_watching+0x12/0xc0 [ 194.644788][ T7409] do_syscall_64+0xcd/0x260 [ 194.644821][ T7409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.644839][ T7409] RIP: 0033:0x7f7f5d98e969 [ 194.644853][ T7409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.644869][ T7409] RSP: 002b:00007f7f5e7e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.644887][ T7409] RAX: ffffffffffffffda RBX: 00007f7f5dbb5fa0 RCX: 00007f7f5d98e969 [ 194.644898][ T7409] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 194.644908][ T7409] RBP: 00007f7f5e7e0090 R08: 0000000000000000 R09: 0000000000000000 [ 194.644917][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.644926][ T7409] R13: 0000000000000000 R14: 00007f7f5dbb5fa0 R15: 00007ffc573345e8 [ 194.644954][ T7409] [ 194.959169][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.978881][ T30] audit: type=1400 audit(1747706085.270:5703): avc: denied { search } for pid=7403 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.001740][ T30] audit: type=1400 audit(1747706085.270:5704): avc: denied { search } for pid=7403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.003732][ T5914] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 195.024829][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.025419][ T30] audit: type=1400 audit(1747706085.270:5705): avc: denied { search } for pid=7403 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.063724][ T30] audit: type=1400 audit(1747706085.290:5706): avc: denied { ioctl } for pid=7404 comm="syz.3.317" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.088465][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.094779][ T30] audit: type=1400 audit(1747706085.550:5707): avc: denied { recv } for pid=6414 comm="kworker/u8:9" saddr=10.128.0.169 src=30006 daddr=10.128.0.64 dest=37850 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 195.120205][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.128062][ T30] audit: type=1400 audit(1747706085.690:5708): avc: denied { read } for pid=7410 comm="syz.1.321" name="cec1" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.167317][ T5914] usb 4-1: config 0 has no interface number 0 [ 195.173791][ T30] audit: type=1400 audit(1747706085.690:5709): avc: denied { read open } for pid=7410 comm="syz.1.321" path="/dev/cec1" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.263293][ T5914] usb 4-1: config 0 interface 41 has no altsetting 0 [ 195.306268][ T30] audit: type=1400 audit(1747706085.700:5710): avc: denied { create } for pid=7406 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.368633][ T5914] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 195.399091][ T30] audit: type=1400 audit(1747706085.700:5711): avc: denied { ioctl } for pid=7406 comm="syz.0.319" path="socket:[14398]" dev="sockfs" ino=14398 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.423692][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.777332][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.793810][ T5914] usb 4-1: Product: syz [ 195.797997][ T5914] usb 4-1: Manufacturer: syz [ 195.802600][ T5914] usb 4-1: SerialNumber: syz [ 195.827470][ T5914] usb 4-1: config 0 descriptor?? [ 195.893985][ T5124] Bluetooth: hci4: command 0x0405 tx timeout [ 196.505504][ T7408] bond0: (slave bond_slave_0): Releasing backup interface [ 196.983808][ T5809] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 197.146445][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 197.204105][ T7430] netlink: zone id is out of range [ 197.212158][ T7430] netlink: zone id is out of range [ 197.218364][ T7430] netlink: zone id is out of range [ 197.223496][ T7430] netlink: zone id is out of range [ 197.228650][ T7430] netlink: zone id is out of range [ 197.295393][ T7430] netlink: set zone limit has 4 unknown bytes [ 197.453912][ T5809] usb 3-1: Using ep0 maxpacket: 8 [ 197.671401][ T5809] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 197.752326][ T5809] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 198.043975][ T5809] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.119561][ T5809] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.166382][ T5809] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 198.239841][ T5809] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 198.274319][ T5809] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 198.301140][ T7431] tipc: Enabled bearer , priority 0 [ 198.322322][ T7433] syzkaller1: entered promiscuous mode [ 198.327835][ T7433] syzkaller1: entered allmulticast mode [ 198.463959][ T5809] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.490098][ T5809] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.512336][ T5809] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 199.090441][ T24] IPVS: starting estimator thread 0... [ 199.135580][ T5809] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 199.204209][ T7439] IPVS: using max 74 ests per chain, 177600 per kthread [ 199.225218][ T5809] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 199.272057][ T5809] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.294752][ T2148] tipc: Node number set to 4151826516 [ 199.319457][ T5809] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 199.335924][ T7405] tipc: Disabling bearer [ 199.407427][ T7441] netlink: 'syz.1.326': attribute type 1 has an invalid length. [ 199.459417][ T5809] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 199.565625][ T30] kauditd_printk_skb: 448 callbacks suppressed [ 199.565640][ T30] audit: type=1400 audit(1747706090.280:6160): avc: denied { read write } for pid=6653 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.663786][ T5809] usb 3-1: string descriptor 0 read error: -71 [ 199.715359][ T5809] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 199.724623][ T5914] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 199.743905][ T5914] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 199.779369][ T7441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.781602][ T5914] usb 4-1: USB disconnect, device number 11 [ 199.804053][ T30] audit: type=1400 audit(1747706090.310:6161): avc: denied { search } for pid=7415 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.853713][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.909071][ T30] audit: type=1400 audit(1747706090.320:6162): avc: denied { read write open } for pid=6653 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.959123][ T7442] ip6erspan0: entered promiscuous mode [ 199.963815][ T5809] usb 3-1: can't set config #168, error -71 [ 200.006495][ T5809] usb 3-1: USB disconnect, device number 14 [ 200.037557][ T7446] FAULT_INJECTION: forcing a failure. [ 200.037557][ T7446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.066278][ T30] audit: type=1400 audit(1747706090.320:6163): avc: denied { ioctl } for pid=6653 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.133119][ T7446] CPU: 0 UID: 0 PID: 7446 Comm: syz.5.327 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 200.133145][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.133156][ T7446] Call Trace: [ 200.133161][ T7446] [ 200.133169][ T7446] dump_stack_lvl+0x16c/0x1f0 [ 200.133199][ T7446] should_fail_ex+0x512/0x640 [ 200.133229][ T7446] _copy_to_user+0x32/0xd0 [ 200.133256][ T7446] __x64_sys_times+0xce/0x180 [ 200.133282][ T7446] ? __pfx___x64_sys_times+0x10/0x10 [ 200.133306][ T7446] ? __pfx_ksys_write+0x10/0x10 [ 200.133336][ T7446] ? rcu_is_watching+0x12/0xc0 [ 200.133356][ T7446] ? do_syscall_64+0x91/0x260 [ 200.133383][ T7446] do_syscall_64+0xcd/0x260 [ 200.133409][ T7446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.133427][ T7446] RIP: 0033:0x7fe5fa78e969 [ 200.133441][ T7446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.133457][ T7446] RSP: 002b:00007fe5fb6bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000064 [ 200.133475][ T7446] RAX: ffffffffffffffda RBX: 00007fe5fa9b5fa0 RCX: 00007fe5fa78e969 [ 200.133486][ T7446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 200.133497][ T7446] RBP: 00007fe5fb6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 200.133507][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.133518][ T7446] R13: 0000000000000001 R14: 00007fe5fa9b5fa0 R15: 00007ffc4eb95838 [ 200.133541][ T7446] [ 200.324276][ T30] audit: type=1400 audit(1747706090.330:6164): avc: denied { search } for pid=7415 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.347587][ T30] audit: type=1400 audit(1747706090.330:6165): avc: denied { search } for pid=7415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.370762][ T30] audit: type=1400 audit(1747706090.330:6166): avc: denied { search } for pid=7415 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.394048][ T30] audit: type=1400 audit(1747706090.340:6167): avc: denied { getattr } for pid=7415 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 200.420365][ T30] audit: type=1400 audit(1747706090.340:6168): avc: denied { recv } for pid=5817 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.64 dest=37850 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 200.452522][ T30] audit: type=1400 audit(1747706090.350:6169): avc: denied { recv } for pid=5817 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.64 dest=37850 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 201.526946][ T7451] SELinux: failed to load policy [ 203.897585][ T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 203.907360][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 203.907385][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.907399][ T54] Workqueue: hci5 hci_rx_work [ 203.907419][ T54] Call Trace: [ 203.907426][ T54] [ 203.907433][ T54] dump_stack_lvl+0x16c/0x1f0 [ 203.907462][ T54] sysfs_warn_dup+0x7f/0xa0 [ 203.907480][ T54] sysfs_create_dir_ns+0x24b/0x2b0 [ 203.907496][ T54] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 203.907512][ T54] ? find_held_lock+0x2b/0x80 [ 203.907541][ T54] ? do_raw_spin_unlock+0x172/0x230 [ 203.907563][ T54] kobject_add_internal+0x2c4/0x9b0 [ 203.907586][ T54] kobject_add+0x16e/0x240 [ 203.907603][ T54] ? __pfx_kobject_add+0x10/0x10 [ 203.907621][ T54] ? do_raw_spin_unlock+0x172/0x230 [ 203.907643][ T54] ? kobject_put+0xab/0x5a0 [ 203.907679][ T54] device_add+0x288/0x1a70 [ 203.907704][ T54] ? __pfx_dev_set_name+0x10/0x10 [ 203.907730][ T54] ? __pfx_device_add+0x10/0x10 [ 203.907755][ T54] ? mgmt_send_event_skb+0x2fb/0x460 [ 203.907791][ T54] hci_conn_add_sysfs+0x17e/0x230 [ 203.907812][ T54] le_conn_complete_evt+0x1075/0x1d70 [ 203.907848][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 203.907882][ T54] ? hci_event_packet+0x43c/0x1190 [ 203.907916][ T54] hci_le_conn_complete_evt+0x23c/0x370 [ 203.907950][ T54] hci_le_meta_evt+0x2f6/0x5e0 [ 203.907967][ T54] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 203.908000][ T54] hci_event_packet+0x66c/0x1190 [ 203.908029][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 203.908049][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 203.908080][ T54] ? kcov_remote_start+0x3c9/0x6d0 [ 203.908098][ T54] ? lockdep_hardirqs_on+0x7c/0x110 [ 203.908131][ T54] hci_rx_work+0x2c5/0x16b0 [ 203.908150][ T54] ? rcu_is_watching+0x12/0xc0 [ 203.908177][ T54] process_one_work+0x9cf/0x1b70 [ 203.908209][ T54] ? __pfx_process_one_work+0x10/0x10 [ 203.908238][ T54] ? assign_work+0x1a0/0x250 [ 203.908260][ T54] worker_thread+0x6c8/0xf10 [ 203.908292][ T54] ? __pfx_worker_thread+0x10/0x10 [ 203.908312][ T54] kthread+0x3c2/0x780 [ 203.908331][ T54] ? __pfx_kthread+0x10/0x10 [ 203.908346][ T54] ? __pfx_kthread+0x10/0x10 [ 203.908360][ T54] ? __pfx_kthread+0x10/0x10 [ 203.908375][ T54] ? __pfx_kthread+0x10/0x10 [ 203.908390][ T54] ? rcu_is_watching+0x12/0xc0 [ 203.908412][ T54] ? __pfx_kthread+0x10/0x10 [ 203.908428][ T54] ret_from_fork+0x45/0x80 [ 203.908445][ T54] ? __pfx_kthread+0x10/0x10 [ 203.908461][ T54] ret_from_fork_asm+0x1a/0x30 [ 203.908499][ T54] [ 204.190328][ T54] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 204.204522][ T54] Bluetooth: hci5: failed to register connection device [ 204.273879][ T7494] FAULT_INJECTION: forcing a failure. [ 204.273879][ T7494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.287032][ T7494] CPU: 0 UID: 0 PID: 7494 Comm: syz.0.336 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 204.287056][ T7494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.287067][ T7494] Call Trace: [ 204.287073][ T7494] [ 204.287080][ T7494] dump_stack_lvl+0x16c/0x1f0 [ 204.287109][ T7494] should_fail_ex+0x512/0x640 [ 204.287138][ T7494] _copy_from_user+0x2e/0xd0 [ 204.287164][ T7494] copy_msghdr_from_user+0x98/0x160 [ 204.287185][ T7494] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 204.287207][ T7494] ? __pfx__kstrtoull+0x10/0x10 [ 204.287221][ T7494] ? irqentry_exit+0x3b/0x90 [ 204.287244][ T7494] ___sys_sendmsg+0xfe/0x1d0 [ 204.287261][ T7494] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.287285][ T7494] ? find_held_lock+0x2b/0x80 [ 204.287315][ T7494] __sys_sendmmsg+0x200/0x420 [ 204.287333][ T7494] ? __pfx___sys_sendmmsg+0x10/0x10 [ 204.287355][ T7494] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.287384][ T7494] ? fput+0x70/0xf0 [ 204.287399][ T7494] ? ksys_write+0x1b9/0x240 [ 204.287420][ T7494] ? __pfx_ksys_write+0x10/0x10 [ 204.287444][ T7494] __x64_sys_sendmmsg+0x9c/0x100 [ 204.287459][ T7494] ? lockdep_hardirqs_on+0x7c/0x110 [ 204.287478][ T7494] do_syscall_64+0xcd/0x260 [ 204.287499][ T7494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.287514][ T7494] RIP: 0033:0x7f9ee458e969 [ 204.287525][ T7494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.287539][ T7494] RSP: 002b:00007f9ee5330038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 204.287553][ T7494] RAX: ffffffffffffffda RBX: 00007f9ee47b6160 RCX: 00007f9ee458e969 [ 204.287562][ T7494] RDX: 0400000000000203 RSI: 0000200000004400 RDI: 0000000000000005 [ 204.287571][ T7494] RBP: 00007f9ee5330090 R08: 0000000000000000 R09: 0000000000000000 [ 204.287580][ T7494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.287588][ T7494] R13: 0000000000000000 R14: 00007f9ee47b6160 R15: 00007ffe9d10ef88 [ 204.287606][ T7494] [ 204.566410][ T54] ================================================================== [ 204.574508][ T54] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x22a/0x240 [ 204.584146][ T54] Read of size 8 at addr ffff888062b80588 by task kworker/u9:0/54 [ 204.591943][ T54] [ 204.594264][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 204.594288][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.594302][ T54] Workqueue: hci5 hci_rx_work [ 204.594325][ T54] Call Trace: [ 204.594333][ T54] [ 204.594340][ T54] dump_stack_lvl+0x116/0x1f0 [ 204.594368][ T54] print_report+0xc3/0x670 [ 204.594388][ T54] ? __virt_addr_valid+0x5e/0x590 [ 204.594415][ T54] ? __phys_addr+0xc6/0x150 [ 204.594440][ T54] ? l2cap_sock_new_connection_cb+0x22a/0x240 [ 204.594461][ T54] kasan_report+0xe0/0x110 [ 204.594480][ T54] ? l2cap_sock_new_connection_cb+0x22a/0x240 [ 204.594503][ T54] l2cap_sock_new_connection_cb+0x22a/0x240 [ 204.594524][ T54] l2cap_connect_cfm+0x4c4/0xf80 [ 204.594555][ T54] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 204.594585][ T54] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 204.594611][ T54] le_conn_complete_evt+0x1662/0x1d70 [ 204.594640][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 204.594668][ T54] ? hci_event_packet+0x43c/0x1190 [ 204.594699][ T54] hci_le_conn_complete_evt+0x23c/0x370 [ 204.594730][ T54] hci_le_meta_evt+0x2f6/0x5e0 [ 204.594747][ T54] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 204.594777][ T54] hci_event_packet+0x66c/0x1190 [ 204.594804][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 204.594823][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 204.594852][ T54] ? kcov_remote_start+0x3c9/0x6d0 [ 204.594875][ T54] ? lockdep_hardirqs_on+0x7c/0x110 [ 204.594904][ T54] hci_rx_work+0x2c5/0x16b0 [ 204.594922][ T54] ? rcu_is_watching+0x12/0xc0 [ 204.594945][ T54] process_one_work+0x9cf/0x1b70 [ 204.594971][ T54] ? __pfx_process_one_work+0x10/0x10 [ 204.594997][ T54] ? assign_work+0x1a0/0x250 [ 204.595016][ T54] worker_thread+0x6c8/0xf10 [ 204.595042][ T54] ? __pfx_worker_thread+0x10/0x10 [ 204.595062][ T54] kthread+0x3c2/0x780 [ 204.595079][ T54] ? __pfx_kthread+0x10/0x10 [ 204.595095][ T54] ? __pfx_kthread+0x10/0x10 [ 204.595112][ T54] ? __pfx_kthread+0x10/0x10 [ 204.595128][ T54] ? __pfx_kthread+0x10/0x10 [ 204.595145][ T54] ? rcu_is_watching+0x12/0xc0 [ 204.595166][ T54] ? __pfx_kthread+0x10/0x10 [ 204.595183][ T54] ret_from_fork+0x45/0x80 [ 204.595201][ T54] ? __pfx_kthread+0x10/0x10 [ 204.595218][ T54] ret_from_fork_asm+0x1a/0x30 [ 204.595250][ T54] [ 204.595257][ T54] [ 204.825368][ T54] Allocated by task 54: [ 204.829506][ T54] kasan_save_stack+0x33/0x60 [ 204.834171][ T54] kasan_save_track+0x14/0x30 [ 204.838830][ T54] __kasan_kmalloc+0xaa/0xb0 [ 204.843409][ T54] __kmalloc_noprof+0x223/0x510 [ 204.848245][ T54] sk_prot_alloc+0x1a8/0x2a0 [ 204.852833][ T54] sk_alloc+0x36/0xc20 [ 204.856887][ T54] bt_sock_alloc+0x3b/0x3a0 [ 204.861398][ T54] l2cap_sock_alloc.constprop.0+0x33/0x1d0 [ 204.867191][ T54] l2cap_sock_new_connection_cb+0x101/0x240 [ 204.873067][ T54] l2cap_connect_cfm+0x4c4/0xf80 [ 204.877993][ T54] le_conn_complete_evt+0x1662/0x1d70 [ 204.883792][ T54] hci_le_conn_complete_evt+0x23c/0x370 [ 204.889327][ T54] hci_le_meta_evt+0x2f6/0x5e0 [ 204.894075][ T54] hci_event_packet+0x66c/0x1190 [ 204.899000][ T54] hci_rx_work+0x2c5/0x16b0 [ 204.903482][ T54] process_one_work+0x9cf/0x1b70 [ 204.908403][ T54] worker_thread+0x6c8/0xf10 [ 204.912975][ T54] kthread+0x3c2/0x780 [ 204.917028][ T54] ret_from_fork+0x45/0x80 [ 204.921427][ T54] ret_from_fork_asm+0x1a/0x30 [ 204.926181][ T54] [ 204.928485][ T54] Freed by task 7484: [ 204.932442][ T54] kasan_save_stack+0x33/0x60 [ 204.937102][ T54] kasan_save_track+0x14/0x30 [ 204.941760][ T54] kasan_save_free_info+0x3b/0x60 [ 204.946770][ T54] __kasan_slab_free+0x51/0x70 [ 204.951516][ T54] kfree+0x2b6/0x4d0 [ 204.955399][ T54] __sk_destruct+0x740/0x980 [ 204.959971][ T54] sk_destruct+0xc2/0xf0 [ 204.964194][ T54] __sk_free+0xf4/0x3e0 [ 204.968330][ T54] sk_free+0x6a/0x90 [ 204.972206][ T54] l2cap_sock_kill+0x171/0x2d0 [ 204.976956][ T54] l2cap_sock_cleanup_listen+0x3d/0x2a0 [ 204.982500][ T54] l2cap_sock_release+0x5c/0x210 [ 204.987432][ T54] __sock_release+0xb0/0x270 [ 204.992005][ T54] sock_close+0x1c/0x30 [ 204.996146][ T54] __fput+0x3ff/0xb70 [ 205.000113][ T54] task_work_run+0x150/0x240 [ 205.004687][ T54] get_signal+0x1d1/0x26d0 [ 205.009089][ T54] arch_do_signal_or_restart+0x8f/0x7d0 [ 205.014625][ T54] syscall_exit_to_user_mode+0x150/0x2a0 [ 205.020243][ T54] do_syscall_64+0xda/0x260 [ 205.024743][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.030628][ T54] [ 205.032935][ T54] The buggy address belongs to the object at ffff888062b80000 [ 205.032935][ T54] which belongs to the cache kmalloc-2k of size 2048 [ 205.046977][ T54] The buggy address is located 1416 bytes inside of [ 205.046977][ T54] freed 2048-byte region [ffff888062b80000, ffff888062b80800) [ 205.060938][ T54] [ 205.063246][ T54] The buggy address belongs to the physical page: [ 205.069635][ T54] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62b80 [ 205.078379][ T54] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 205.086857][ T54] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 205.094382][ T54] page_type: f5(slab) [ 205.098348][ T54] raw: 00fff00000000040 ffff88801b442000 dead000000000100 dead000000000122 [ 205.106913][ T54] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 205.115480][ T54] head: 00fff00000000040 ffff88801b442000 dead000000000100 dead000000000122 [ 205.124134][ T54] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 205.132787][ T54] head: 00fff00000000003 ffffea00018ae001 00000000ffffffff 00000000ffffffff [ 205.141438][ T54] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 205.150087][ T54] page dumped because: kasan: bad access detected [ 205.156476][ T54] page_owner tracks the page as allocated [ 205.162169][ T54] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5811, tgid 5811 (syz-executor), ts 61288562900, free_ts 15783751190 [ 205.183341][ T54] post_alloc_hook+0x181/0x1b0 [ 205.188101][ T54] get_page_from_freelist+0x135c/0x3920 [ 205.193626][ T54] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 205.199517][ T54] alloc_pages_mpol+0x1fb/0x550 [ 205.204350][ T54] new_slab+0x244/0x340 [ 205.208494][ T54] ___slab_alloc+0xd9c/0x1940 [ 205.213156][ T54] __slab_alloc.constprop.0+0x56/0xb0 [ 205.218515][ T54] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 205.224928][ T54] kmalloc_reserve+0xef/0x2c0 [ 205.229592][ T54] pskb_expand_head+0x22d/0x10b0 [ 205.234518][ T54] netlink_trim+0x22d/0x310 [ 205.239002][ T54] netlink_broadcast_filtered+0xca/0xf10 [ 205.244620][ T54] nlmsg_notify+0x9e/0x220 [ 205.249021][ T54] rtmsg_ifinfo+0x174/0x1a0 [ 205.253507][ T54] register_netdevice+0x1bdd/0x2270 [ 205.258689][ T54] register_netdev+0x34/0x50 [ 205.263264][ T54] page last free pid 1 tgid 1 stack trace: [ 205.269048][ T54] __free_frozen_pages+0x69d/0xff0 [ 205.274149][ T54] free_contig_range+0x135/0x3f0 [ 205.279075][ T54] destroy_args+0x66f/0x830 [ 205.283926][ T54] debug_vm_pgtable+0x130e/0x2d50 [ 205.288934][ T54] do_one_initcall+0x120/0x6e0 [ 205.293685][ T54] kernel_init_freeable+0x5c2/0x900 [ 205.298866][ T54] kernel_init+0x1c/0x2b0 [ 205.303180][ T54] ret_from_fork+0x45/0x80 [ 205.307582][ T54] ret_from_fork_asm+0x1a/0x30 [ 205.312340][ T54] [ 205.314644][ T54] Memory state around the buggy address: [ 205.320254][ T54] ffff888062b80480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.328295][ T54] ffff888062b80500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.336337][ T54] >ffff888062b80580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.344377][ T54] ^ [ 205.348683][ T54] ffff888062b80600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.356723][ T54] ffff888062b80680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.364766][ T54] ================================================================== [ 205.379618][ T30] kauditd_printk_skb: 290 callbacks suppressed [ 205.379907][ T30] audit: type=1400 audit(1747706096.090:6460): avc: denied { recv } for pid=7490 comm="syz.0.336" saddr=10.128.0.169 src=30006 daddr=10.128.0.64 dest=37850 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 205.419353][ T30] audit: type=1400 audit(1747706096.090:6461): avc: denied { recv } for pid=7490 comm="syz.0.336" saddr=10.128.0.169 src=30006 daddr=10.128.0.64 dest=37850 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 205.450664][ T54] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 205.457894][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 205.468129][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.478171][ T54] Workqueue: hci5 hci_rx_work [ 205.483359][ T54] Call Trace: [ 205.486621][ T54] [ 205.489535][ T54] dump_stack_lvl+0x3d/0x1f0 [ 205.494120][ T54] panic+0x71c/0x800 [ 205.498007][ T54] ? __pfx_panic+0x10/0x10 [ 205.502415][ T54] ? mark_held_locks+0x49/0x80 [ 205.507171][ T54] ? preempt_schedule_thunk+0x16/0x30 [ 205.512525][ T54] ? l2cap_sock_new_connection_cb+0x22a/0x240 [ 205.518578][ T54] ? preempt_schedule_common+0x44/0xc0 [ 205.524032][ T54] ? l2cap_sock_new_connection_cb+0x22a/0x240 [ 205.530084][ T54] check_panic_on_warn+0xab/0xb0 [ 205.535004][ T54] end_report+0x107/0x170 [ 205.539317][ T54] kasan_report+0xee/0x110 [ 205.543722][ T54] ? l2cap_sock_new_connection_cb+0x22a/0x240 [ 205.549775][ T54] l2cap_sock_new_connection_cb+0x22a/0x240 [ 205.555653][ T54] l2cap_connect_cfm+0x4c4/0xf80 [ 205.560583][ T54] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 205.566035][ T54] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 205.571484][ T54] le_conn_complete_evt+0x1662/0x1d70 [ 205.576857][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 205.582566][ T54] ? hci_event_packet+0x43c/0x1190 [ 205.587671][ T54] hci_le_conn_complete_evt+0x23c/0x370 [ 205.593208][ T54] hci_le_meta_evt+0x2f6/0x5e0 [ 205.597955][ T54] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 205.604017][ T54] hci_event_packet+0x66c/0x1190 [ 205.608945][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 205.614214][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 205.619592][ T54] ? kcov_remote_start+0x3c9/0x6d0 [ 205.624706][ T54] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.629912][ T54] hci_rx_work+0x2c5/0x16b0 [ 205.634419][ T54] ? rcu_is_watching+0x12/0xc0 [ 205.639182][ T54] process_one_work+0x9cf/0x1b70 [ 205.644114][ T54] ? __pfx_process_one_work+0x10/0x10 [ 205.649487][ T54] ? assign_work+0x1a0/0x250 [ 205.654071][ T54] worker_thread+0x6c8/0xf10 [ 205.658668][ T54] ? __pfx_worker_thread+0x10/0x10 [ 205.663772][ T54] kthread+0x3c2/0x780 [ 205.667831][ T54] ? __pfx_kthread+0x10/0x10 [ 205.672409][ T54] ? __pfx_kthread+0x10/0x10 [ 205.676985][ T54] ? __pfx_kthread+0x10/0x10 [ 205.681562][ T54] ? __pfx_kthread+0x10/0x10 [ 205.686143][ T54] ? rcu_is_watching+0x12/0xc0 [ 205.690897][ T54] ? __pfx_kthread+0x10/0x10 [ 205.695471][ T54] ret_from_fork+0x45/0x80 [ 205.699873][ T54] ? __pfx_kthread+0x10/0x10 [ 205.704446][ T54] ret_from_fork_asm+0x1a/0x30 [ 205.709204][ T54] [ 205.712393][ T54] Kernel Offset: disabled [ 205.716703][ T54] Rebooting in 86400 seconds..