last executing test programs: 12m43.811339453s ago: executing program 1 (id=218): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='m\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fedbdf25660000000c009900040000002e0000000400b8000800b7009a0000000800a000ff0700000800a0000bc20000080022015e0300000500190106000000050018011600000008009f000200000005001901050000000800b70008000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x40840) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0xd67d, 0x40, 0x1}, &(0x7f0000000280), &(0x7f0000000100)=0x0) syz_usb_connect$cdc_ncm(0x5, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x2, 0x1, 0x5, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "4594edee2154"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x9, 0x623, 0x5}, {0x6, 0x24, 0x1a, 0x5, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x81, 0xe0, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @acm={0x4, 0x24, 0x2, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x7fff}, @acm={0x4, 0x24, 0x2, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa, 0x1, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0xe8, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7f, 0x0, 0xb9}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0x5, 0x0, 0x4, 0x20, 0x7}, 0xc3, &(0x7f0000000700)={0x5, 0xf, 0xc3, 0x1, [@generic={0xbe, 0x10, 0xa, "5e5da7a195581433b8cfbd217cbc3ca71d123e5a6b4c8583509f15102ac618dc32d249bd949c3f538bba4315398608e56dadafd2e225258c93b4df6d27a145861517ec3ccc908adac9995a3028fa470d60507117525b986b6262237b4bc8ee7a710b89d2f22a52e1d526acf5e58c1595e078ab240a0a6a07b02d62345d598c1abd77385f638c38712d5508f5252d84bbf053142f4025e8b1548ddbe9d3a3fbdf4281a13cc1041501356d2bbeea3fb5e7811a1ef32044c5d61fab5a"}]}, 0x2, [{0x8, &(0x7f0000000800)=@string={0x8, 0x3, "47e1fb5ee5bc"}}, {0x68, &(0x7f0000000840)=@string={0x68, 0x3, "89531fe70259171cadf3db0202e4c9e78c9aa84720cfdf20bfac731959afbbb4c2e30fdc23e66a21689b36b36384a180c17c3c6facf25e0653e04ce8bc779ccce0417bcda691be1099ada24fc55699cd0a28131e4e20ca22e77ec407e85088fdc282fb676422"}}]}) r3 = syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x6848, 0x4000, 0x0, 0x142}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) 12m40.519166226s ago: executing program 1 (id=226): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x0, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="1bb300000000fedbdf2501000000", @ANYRES32=0x0], 0x1c}}, 0x0) 12m39.403963652s ago: executing program 1 (id=230): openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)={0x1d, r1}, 0x10, &(0x7f00000006c0)={&(0x7f0000000680)=@can={{0x3, 0x1, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "f2b4fb1ec29c25fa"}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/398]}, 0x206) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x1) io_setup(0x5, &(0x7f0000000000)) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xb, 0x8, 0x20005, 0x722, 0xe72, 0x7, 0x8, 0x38, 0x13, {0xffff945a, 0x1}, 0x3, 0xf0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 12m38.659499661s ago: executing program 1 (id=232): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xb, 0x8, [@multicast2, @remote]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) close(r6) open(&(0x7f0000000000)='.\x00', 0x800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 12m37.714023324s ago: executing program 1 (id=235): keyctl$chown(0x4, 0x0, 0xee00, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r4, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r6, 0x50d, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008054) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 12m37.362463286s ago: executing program 1 (id=237): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000540)='kmem_cache_free\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", '\x00\x00\t\x00', "e96e232f2004a832"}, 0x38) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) 12m37.092160332s ago: executing program 32 (id=237): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000540)='kmem_cache_free\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", '\x00\x00\t\x00', "e96e232f2004a832"}, 0x38) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) 10m43.220193926s ago: executing program 4 (id=532): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mlock(&(0x7f00002fb000/0x4000)=nil, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f00000004c0)) setuid(r5) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r6 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x200}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x3f70, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 10m41.947180558s ago: executing program 4 (id=534): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000400)=@in6={0xa, 0x4e22, 0x0, @empty, 0x8}, 0x80, 0x0}, 0x200ce0c0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='n', 0xfdef}], 0x11}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000000)={'some', 0x20, 0x68bc5d2f, 0x20, 0x4}, 0x2f) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) ioctl$SIOCAX25DELUID(r5, 0x89e2, 0x0) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee01}) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) write(r6, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff020000000a0000", 0x1e5) syz_emit_ethernet(0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaa8c40aaaaaaeeb507030c9608004800006400000000002f9078ac1414bbac141414890754e000000186020000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000000000000000000000080065"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff0400001ca800000000bcf737660b68ff00000000000000000000000000000000000000000200002000000000223506a5b076485c1a93cfd4367dad6009078592da23cb4930f82f2f03b8b2fbeb49b4601c571ce3f44df0919ae237d2ca3ec3101353ad9c825f5aadb22cf7ed21d977962c910b293a59f8a0cf365ad21e1c7e3a07e37334bff2ff84d05738030a8510af", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000"], 0x254}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1001000, 0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x64842, 0x4) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 10m40.370045207s ago: executing program 4 (id=539): r0 = socket$tipc(0x1e, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x14}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040)=0xfffffff9, 0x4) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "7988575801915db29080407e348bd865ca94564bb317d44acb1676d2abc229dc", "a5857bc37aa7c1095d077b38512303291a95b5b09a636eef1a9f90cebd547f9e", "db2c2dc5ea4ad56c028ce741339656e6103d6d812fbae8c104e3835184c6138c", "828c66f67aba6ed78dcd61f7bd7570d458ce4a318928273faf5cdfafc0497ee8", "8cbbcb8943da47021c48642dd5d88ce097557bee945473d41ff5ce8ec9874658", "6f8887adedf20abcbc58386c", 0xfff, 0x651, 0xe, 0x1, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r6, 0xc048aeca, &(0x7f0000000200)) 10m39.316721729s ago: executing program 4 (id=543): gettid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xb, 0x8, [@multicast2, @remote]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) close(r6) open(&(0x7f0000000000)='.\x00', 0x800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 10m38.261210085s ago: executing program 4 (id=547): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000400)=@in6={0xa, 0x4e22, 0x0, @empty, 0x8}, 0x80, 0x0}, 0x200ce0c0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='n', 0xfdef}], 0x11}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000000)={'some', 0x20, 0x68bc5d2f, 0x20, 0x4}, 0x2f) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) ioctl$SIOCAX25DELUID(r5, 0x89e2, 0x0) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee01}) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) write(r6, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff020000000a0000", 0x1e5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff0400001ca800000000bcf737660b68ff00000000000000000000000000000000000000000200002000000000223506a5b076485c1a93cfd4367dad6009078592da23cb4930f82f2f03b8b2fbeb49b4601c571ce3f44df0919ae237d2ca3ec3101353ad9c825f5aadb22cf7ed21d977962c910b293a59f8a0cf365ad21e1c7e3a07e37334bff2ff84d05738030a8510", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1001000, 0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x64842, 0x4) pwritev2(r8, &(0x7f0000000240), 0x0, 0x7c00, 0x0, 0x3) 10m37.72252029s ago: executing program 4 (id=550): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) 10m36.865212007s ago: executing program 33 (id=550): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) 6m28.373046041s ago: executing program 2 (id=1144): r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x88, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000f016ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff880000"]}, 0x106) 6m26.637298428s ago: executing program 2 (id=1148): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r0 = syz_io_uring_setup(0x34b3, 0x0, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x27, 0x1, 0x70bd2c, 0x25dfdbff, {0x5}}, 0x14}}, 0x24000100) sendmsg$rds(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) 6m23.460332069s ago: executing program 2 (id=1152): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000400), 0x4) sendto(0xffffffffffffffff, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) 6m22.080158576s ago: executing program 2 (id=1155): gettid() unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xb, 0x8, [@multicast2, @remote]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) fchdir(r6) close(r6) open(&(0x7f0000000000)='.\x00', 0x800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 6m20.619288269s ago: executing program 2 (id=1161): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mlock(&(0x7f00002fb000/0x4000)=nil, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f00000004c0)) 6m19.541044421s ago: executing program 2 (id=1165): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x200000000006, 0x0, 0x8, 0x7ffc1ffb}]}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x11, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f65be87", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) r6 = dup(r2) r7 = fcntl$dupfd(r1, 0x406, r2) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r6}) r8 = fcntl$dupfd(r7, 0x0, r0) ioctl$VHOST_RESET_OWNER(r8, 0xaf02, 0x0) 6m18.7498458s ago: executing program 34 (id=1165): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x200000000006, 0x0, 0x8, 0x7ffc1ffb}]}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x11, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f65be87", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) r6 = dup(r2) r7 = fcntl$dupfd(r1, 0x406, r2) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r6}) r8 = fcntl$dupfd(r7, 0x0, r0) ioctl$VHOST_RESET_OWNER(r8, 0xaf02, 0x0) 1m4.69047028s ago: executing program 7 (id=1974): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x6, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x1, &(0x7f00000000c0)=0x9, 0x3f) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) r5 = dup(0xffffffffffffffff) syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x2, 0x0, 0x0, r5}, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) socket(0x1a, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m2.247740326s ago: executing program 7 (id=1981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="00000000f507843f344cfe4496554402dc2180dc48b141fffae5f385ed3dd4f23fbb2bdb80d09dc498ed330fe14ce98f84b380bed836d27ed44e1a3b064a4fdf47d70ddfc5d6fdf2534efde7c53733e59deb7d51d79c8c4e63d90dc4e9596d65f9483a63364332359dc92bd2589f288b8cbb06c6340d196732421e99a35520c08da41ced30b21aff6079352b082758618f43018c710be3f4fa6773a9763a185c23e1c9107d8002431f1285276a4f71da5e692a77c8519a448e6b9b67b9d2f4e19fd5f5354cb700b22fb6ede47aef42c0fec06802b35a", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r5, 0x2, 0x1, 0x12, &(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000500020000000200000007000000", @ANYRES32=r9, @ANYBLOB="004002000000000014001a80100005800c000280080001"], 0x34}}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x8, 0x410000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0xff, 0x5, 0x4]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) 1m1.017725811s ago: executing program 7 (id=1986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() llistxattr(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000004c0)={0x0, 0x3, 0x26, 0x5, 0x100, 0x0}) 59.790420622s ago: executing program 7 (id=1988): socket$inet6(0xa, 0x80002, 0x88) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x6, &(0x7f0000002140)=0x0) r2 = eventfd(0x4) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x1ff, r0, 0x0, 0x5d, 0x2, 0x0, 0x1, r2}]) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000008b"]) r8 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89f1, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f000001f480)={0x34, r10, 0x1, 0x0, 0x25dfdbfd, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000000)={0x400, 0xcaed}) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa5d7db9f383e3b978004500001c020000000011049078fffffffc"], 0x0) 46.390012377s ago: executing program 7 (id=1988): socket$inet6(0xa, 0x80002, 0x88) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x6, &(0x7f0000002140)=0x0) r2 = eventfd(0x4) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x1ff, r0, 0x0, 0x5d, 0x2, 0x0, 0x1, r2}]) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000008b"]) r8 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89f1, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f000001f480)={0x34, r10, 0x1, 0x0, 0x25dfdbfd, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000000)={0x400, 0xcaed}) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa5d7db9f383e3b978004500001c020000000011049078fffffffc"], 0x0) 14.095805875s ago: executing program 7 (id=1988): socket$inet6(0xa, 0x80002, 0x88) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x6, &(0x7f0000002140)=0x0) r2 = eventfd(0x4) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x1ff, r0, 0x0, 0x5d, 0x2, 0x0, 0x1, r2}]) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000008b"]) r8 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89f1, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f000001f480)={0x34, r10, 0x1, 0x0, 0x25dfdbfd, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000000)={0x400, 0xcaed}) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa5d7db9f383e3b978004500001c020000000011049078fffffffc"], 0x0) 9.395628287s ago: executing program 5 (id=2148): syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="d633651ec7e5", @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x3}, {0x101}, {0x8}], @llc={@llc={0x2, 0xbc, ']', "32cfb9655a33c177128260d9e1958389f8da8e8ea902390dc1d08b5933b5f1f522450a8fb9bcaf2c3cd7034e8d6e8fdabcb2e6f1a0be1f50f94e42ab381783c5967de0463e4d271f54a466a54c08d9bdeb6172d7161f228e415da1095eb2ea4eecb18202bc"}}}}}}, &(0x7f0000000200)={0x0, 0x3, [0xd84, 0xfc8, 0x421, 0xce1]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 9.138646875s ago: executing program 3 (id=2150): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000380)) 9.080045011s ago: executing program 3 (id=2152): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000307000001000000925070f48587a1522e00000100bded6c5f"], 0x0, 0x0, 0x0}, 0x0) 4.923590225s ago: executing program 5 (id=2159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) 4.53051919s ago: executing program 3 (id=2161): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x400c0) 4.530287889s ago: executing program 6 (id=2162): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 4.42754409s ago: executing program 3 (id=2163): io_setup(0x10000, &(0x7f0000000040)) io_setup(0x853e, &(0x7f0000000080)) 4.168300469s ago: executing program 6 (id=2164): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x53) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x8000000000002ea, 0x20008010) 3.646350237s ago: executing program 3 (id=2165): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x0, 0x6, {0xffffffffffffffff}, {0xee01}, 0x8, 0x3ff}) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x80000) r1 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)='%+9llu \x00'}, 0x20) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000002c0)={0x0, @reserved}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) clock_gettime(0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x24a, 0xfffffffffffffffb, 0x2, 0x4, 0x3, 0x6, 0x0, 0xb}, &(0x7f00000001c0), 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 3.149461208s ago: executing program 0 (id=2166): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) 2.968134713s ago: executing program 0 (id=2167): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x300000000) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) 2.894531159s ago: executing program 5 (id=2168): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) splice(r6, 0x0, r8, 0x0, 0x2000, 0x0) 2.795003301s ago: executing program 0 (id=2169): syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="d633651ec7e5", @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x3}, {0x101}, {0x8}], @llc={@llc={0x2, 0xbc, ']', "32cfb9655a33c177128260d9e1958389f8da8e8ea902390dc1d08b5933b5f1f522450a8fb9bcaf2c3cd7034e8d6e8fdabcb2e6f1a0be1f50f94e42ab381783c5967de0463e4d271f54a466a54c08d9bdeb6172d7161f228e415da1095eb2ea4eecb18202bc"}}}}}}, &(0x7f0000000200)={0x0, 0x3, [0xd84, 0xfc8, 0x421, 0xce1]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.434090012s ago: executing program 0 (id=2170): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[], 0x3ce0}, 0x1, 0x0, 0x0, 0x4024011}, 0x40084) 2.25508902s ago: executing program 6 (id=2171): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x30d803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000280)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept4(r1, 0x0, 0x0, 0x0) 1.610490476s ago: executing program 5 (id=2172): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x30d803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000280)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 1.23189118s ago: executing program 6 (id=2173): r0 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/816]}, 0x3a8) 1.19848678s ago: executing program 0 (id=2174): ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xf322}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0xc, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x49c781}) io_uring_enter(r0, 0x3516, 0x4, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) listen(r3, 0xa1) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) 1.103570108s ago: executing program 6 (id=2175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.043846415s ago: executing program 5 (id=2176): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000004f50985f80000000000000000000006b8d0456d23927b356275eaf440a43806bf2cfef25937299557f0a4600"/72], 0x50) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0'}, 0xb) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) 757.556034ms ago: executing program 6 (id=2177): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040bd28050900000000000109022400010000600009041000020300020009210200020122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 618.455953ms ago: executing program 0 (id=2178): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000004f50985f80000000000000000000006b8d0456d23927b356275eaf440a43806bf2cfef25937299557f0a4600"/72], 0x50) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0'}, 0xb) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = fanotify_init(0x200, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f0000000200)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000007080)=ANY=[], 0x9) 64.000052ms ago: executing program 5 (id=2179): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ab0429c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=2180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000240)={0x0, 0xda0, &(0x7f0000000080)="142f", 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) kernel console output (not intermixed with test programs): 781.858320][ T29] audit: type=1326 audit(1737507706.851:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14321 comm="syz.5.1802" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7bcb85d29 code=0x0 [ 781.867922][ T970] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 781.909872][ T970] usb 1-1: can't read configurations, error -61 [ 782.057590][ T970] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 782.247795][ T970] usb 1-1: Using ep0 maxpacket: 32 [ 782.253537][ T970] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 782.264747][ T970] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 782.275935][ T970] usb 1-1: can't read configurations, error -61 [ 782.298803][ T970] usb usb1-port1: attempt power cycle [ 782.470736][T14320] loop9: detected capacity change from 0 to 1 [ 782.616121][T14320] loop9: [POWERTEC] p1 p2 p3 [ 782.657910][ T970] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 782.693036][T14330] FAULT_INJECTION: forcing a failure. [ 782.693036][T14330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.706435][T14330] CPU: 1 UID: 0 PID: 14330 Comm: syz.6.1804 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 782.716853][T14330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 782.726909][T14330] Call Trace: [ 782.730186][T14330] [ 782.733120][T14330] dump_stack_lvl+0x16c/0x1f0 [ 782.737815][T14330] should_fail_ex+0x497/0x5b0 [ 782.742507][T14330] _copy_from_user+0x2e/0xd0 [ 782.747100][T14330] do_ipt_set_ctl+0x8e1/0xbe0 [ 782.751787][T14330] ? trace_contention_end+0xee/0x140 [ 782.757086][T14330] ? __mutex_lock+0x1cc/0xa60 [ 782.761768][T14330] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 782.766970][T14330] ? __mutex_unlock_slowpath+0x164/0x690 [ 782.772617][T14330] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 782.778625][T14330] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 782.784618][T14330] nf_setsockopt+0x8a/0xf0 [ 782.789047][T14330] ip_setsockopt+0xcb/0xf0 [ 782.793493][T14330] tcp_setsockopt+0xa4/0x100 [ 782.798101][T14330] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 782.804004][T14330] do_sock_setsockopt+0x222/0x480 [ 782.809034][T14330] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 782.814591][T14330] ? lock_acquire+0x2f/0xb0 [ 782.819114][T14330] __sys_setsockopt+0x1a0/0x230 [ 782.823972][T14330] __x64_sys_setsockopt+0xbd/0x160 [ 782.829091][T14330] ? do_syscall_64+0x91/0x250 [ 782.833770][T14330] ? lockdep_hardirqs_on+0x7c/0x110 [ 782.838979][T14330] do_syscall_64+0xcd/0x250 [ 782.843484][T14330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.849388][T14330] RIP: 0033:0x7f9c0ff85d29 [ 782.853804][T14330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.873413][T14330] RSP: 002b:00007f9c10dc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 782.881827][T14330] RAX: ffffffffffffffda RBX: 00007f9c10176160 RCX: 00007f9c0ff85d29 [ 782.889801][T14330] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000006 [ 782.897773][T14330] RBP: 00007f9c10dc2090 R08: 00000000000002b8 R09: 0000000000000000 [ 782.905745][T14330] R10: 0000000020000780 R11: 0000000000000246 R12: 0000000000000001 [ 782.913714][T14330] R13: 0000000000000000 R14: 00007f9c10176160 R15: 00007ffc7bd9e8a8 [ 782.921703][T14330] [ 782.964110][ T29] audit: type=1400 audit(1737507707.961:2773): avc: denied { write } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.975131][T14320] loop9: p1 start 251723956 is beyond EOD, [ 782.986439][ T29] audit: type=1400 audit(1737507707.961:2774): avc: denied { remove_name } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.992595][ T970] usb 1-1: Using ep0 maxpacket: 32 [ 783.016392][T14320] truncated [ 783.025381][ T970] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 783.030006][T14320] loop9: p2 start 1661300723 is beyond EOD, truncated [ 783.038331][ T970] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 783.042757][ T29] audit: type=1400 audit(1737507707.961:2775): avc: denied { rename } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 783.076433][T14320] loop9: p3 start 2635344306 is beyond EOD, truncated [ 783.083467][ T970] usb 1-1: can't read configurations, error -61 [ 783.111985][ T29] audit: type=1400 audit(1737507707.961:2776): avc: denied { add_name } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 783.251596][ T29] audit: type=1400 audit(1737507707.961:2777): avc: denied { unlink } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 783.277507][ T970] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 783.279573][ T29] audit: type=1400 audit(1737507707.961:2778): avc: denied { create } for pid=5173 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 783.348114][ T970] usb 1-1: Using ep0 maxpacket: 32 [ 783.361750][ T970] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 783.376432][ T970] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 783.384642][ T970] usb 1-1: can't read configurations, error -61 [ 783.392054][ T970] usb usb1-port1: unable to enumerate USB device [ 783.901956][T14342] FAULT_INJECTION: forcing a failure. [ 783.901956][T14342] name failslab, interval 1, probability 0, space 0, times 0 [ 783.997577][T14342] CPU: 1 UID: 0 PID: 14342 Comm: syz.3.1809 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 784.008033][T14342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 784.018093][T14342] Call Trace: [ 784.021360][T14342] [ 784.024287][T14342] dump_stack_lvl+0x16c/0x1f0 [ 784.028966][T14342] should_fail_ex+0x497/0x5b0 [ 784.033639][T14342] ? fs_reclaim_acquire+0xae/0x150 [ 784.038827][T14342] should_failslab+0xc2/0x120 [ 784.043496][T14342] __kmalloc_noprof+0xcb/0x510 [ 784.048249][T14342] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 784.053891][T14342] tomoyo_realpath_from_path+0xb9/0x720 [ 784.059436][T14342] ? tomoyo_path_number_perm+0x235/0x590 [ 784.065062][T14342] ? tomoyo_path_number_perm+0x235/0x590 [ 784.070691][T14342] tomoyo_path_number_perm+0x248/0x590 [ 784.076144][T14342] ? tomoyo_path_number_perm+0x235/0x590 [ 784.081768][T14342] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 784.087762][T14342] ? __pfx_lock_release+0x10/0x10 [ 784.092781][T14342] ? trace_lock_acquire+0x14e/0x1f0 [ 784.097971][T14342] ? lock_acquire+0x2f/0xb0 [ 784.102474][T14342] ? __fget_files+0x40/0x3a0 [ 784.107063][T14342] ? __fget_files+0x206/0x3a0 [ 784.111732][T14342] security_file_ioctl+0x9b/0x240 [ 784.116754][T14342] __x64_sys_ioctl+0xb7/0x200 [ 784.121429][T14342] do_syscall_64+0xcd/0x250 [ 784.125921][T14342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.131819][T14342] RIP: 0033:0x7fb637b85d29 [ 784.136228][T14342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.155821][T14342] RSP: 002b:00007fb638901038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.164225][T14342] RAX: ffffffffffffffda RBX: 00007fb637d75fa0 RCX: 00007fb637b85d29 [ 784.172183][T14342] RDX: 0000000000000000 RSI: 0000000000005000 RDI: 0000000000000003 [ 784.180139][T14342] RBP: 00007fb638901090 R08: 0000000000000000 R09: 0000000000000000 [ 784.188100][T14342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.196055][T14342] R13: 0000000000000000 R14: 00007fb637d75fa0 R15: 00007fffb0edaee8 [ 784.204024][T14342] [ 784.244947][T14342] ERROR: Out of memory at tomoyo_realpath_from_path. [ 785.857558][ T5814] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 786.037836][ T5814] usb 4-1: config 0 has an invalid descriptor of length 86, skipping remainder of the config [ 786.067460][ T5814] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 786.077065][ T5814] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 786.130090][T14360] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 786.449222][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.809480][ T5814] usb 4-1: config 0 descriptor?? [ 787.193624][T14352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.207790][T14352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.646664][T14377] FAULT_INJECTION: forcing a failure. [ 788.646664][T14377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.678616][T14378] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1819'. [ 788.687957][T14377] CPU: 1 UID: 0 PID: 14377 Comm: syz.6.1821 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 788.698384][T14377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 788.708444][T14377] Call Trace: [ 788.711730][T14377] [ 788.714649][T14377] dump_stack_lvl+0x16c/0x1f0 [ 788.719317][T14377] should_fail_ex+0x497/0x5b0 [ 788.723985][T14377] strncpy_from_user+0x3b/0x2d0 [ 788.728834][T14377] getname_flags.part.0+0x8f/0x550 [ 788.733966][T14377] getname+0x8d/0xe0 [ 788.737875][T14377] __x64_sys_statx+0x19f/0x1e0 [ 788.742652][T14377] do_syscall_64+0xcd/0x250 [ 788.747137][T14377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.753021][T14377] RIP: 0033:0x7f9c0ff85d29 [ 788.757423][T14377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.777027][T14377] RSP: 002b:00007f9c10e04038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 788.785425][T14377] RAX: ffffffffffffffda RBX: 00007f9c10175fa0 RCX: 00007f9c0ff85d29 [ 788.793382][T14377] RDX: 0000000000000100 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 788.801340][T14377] RBP: 00007f9c10e04090 R08: 0000000000000000 R09: 0000000000000000 [ 788.809307][T14377] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 788.817261][T14377] R13: 0000000000000000 R14: 00007f9c10175fa0 R15: 00007ffc7bd9e8a8 [ 788.825223][T14377] [ 789.596480][ T5814] usb 4-1: string descriptor 0 read error: -71 [ 789.655877][ T5814] usb 4-1: USB disconnect, device number 75 [ 790.417549][ T970] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 790.617482][ T970] usb 6-1: Using ep0 maxpacket: 32 [ 790.625559][ T970] usb 6-1: too many configurations: 47, using maximum allowed: 8 [ 790.637269][ T970] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 790.653955][ T970] usb 6-1: can't read configurations, error -61 [ 790.807534][ T970] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 790.977773][ T970] usb 6-1: Using ep0 maxpacket: 32 [ 790.992973][ T970] usb 6-1: too many configurations: 47, using maximum allowed: 8 [ 791.032147][ T970] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 791.054721][ T970] usb 6-1: can't read configurations, error -61 [ 791.450852][ T970] usb usb6-port1: attempt power cycle [ 791.857892][ T970] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 792.250042][ T970] usb 6-1: Using ep0 maxpacket: 32 [ 792.262376][ T970] usb 6-1: too many configurations: 47, using maximum allowed: 8 [ 792.329186][ T970] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 792.336784][ T970] usb 6-1: can't read configurations, error -61 [ 793.095191][ T970] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 793.394688][ T970] usb 6-1: device not accepting address 58, error -71 [ 793.401744][ T970] usb usb6-port1: unable to enumerate USB device [ 794.171549][T14429] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 794.245077][T14429] syz.6.1832: attempt to access beyond end of device [ 794.245077][T14429] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 795.019390][T14422] kvm: pic: non byte write [ 795.868657][T14436] FAULT_INJECTION: forcing a failure. [ 795.868657][T14436] name failslab, interval 1, probability 0, space 0, times 0 [ 795.886267][T14436] CPU: 1 UID: 0 PID: 14436 Comm: syz.6.1835 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 795.896700][T14436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 795.906764][T14436] Call Trace: [ 795.910054][T14436] [ 795.912989][T14436] dump_stack_lvl+0x16c/0x1f0 [ 795.917740][T14436] should_fail_ex+0x497/0x5b0 [ 795.922439][T14436] ? fs_reclaim_acquire+0xae/0x150 [ 795.927565][T14436] should_failslab+0xc2/0x120 [ 795.932252][T14436] __kmalloc_noprof+0xcb/0x510 [ 795.937025][T14436] ? d_absolute_path+0x137/0x1b0 [ 795.941973][T14436] ? rcu_is_watching+0x12/0xc0 [ 795.946749][T14436] tomoyo_encode2+0x100/0x3e0 [ 795.951432][T14436] tomoyo_encode+0x29/0x50 [ 795.955844][T14436] tomoyo_realpath_from_path+0x19d/0x720 [ 795.961474][T14436] tomoyo_path_number_perm+0x248/0x590 [ 795.966920][T14436] ? tomoyo_path_number_perm+0x235/0x590 [ 795.972544][T14436] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 795.978541][T14436] ? __pfx_lock_release+0x10/0x10 [ 795.983559][T14436] ? trace_lock_acquire+0x14e/0x1f0 [ 795.988747][T14436] ? lock_acquire+0x2f/0xb0 [ 795.993240][T14436] ? __fget_files+0x40/0x3a0 [ 795.997821][T14436] ? __fget_files+0x206/0x3a0 [ 796.002491][T14436] security_file_ioctl+0x9b/0x240 [ 796.007520][T14436] __x64_sys_ioctl+0xb7/0x200 [ 796.012210][T14436] do_syscall_64+0xcd/0x250 [ 796.016707][T14436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.022606][T14436] RIP: 0033:0x7f9c0ff85d29 [ 796.027011][T14436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.046608][T14436] RSP: 002b:00007f9c10e04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 796.055008][T14436] RAX: ffffffffffffffda RBX: 00007f9c10175fa0 RCX: 00007f9c0ff85d29 [ 796.062970][T14436] RDX: 0000000020000100 RSI: 0000000040047452 RDI: 0000000000000004 [ 796.070928][T14436] RBP: 00007f9c10e04090 R08: 0000000000000000 R09: 0000000000000000 [ 796.078885][T14436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.086842][T14436] R13: 0000000000000000 R14: 00007f9c10175fa0 R15: 00007ffc7bd9e8a8 [ 796.094807][T14436] [ 797.055562][T14436] ERROR: Out of memory at tomoyo_realpath_from_path. [ 797.086233][ T29] audit: type=1400 audit(1737507722.081:2779): avc: denied { search } for pid=5485 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.703088][T14445] input: syz0 as /devices/virtual/input/input60 [ 797.734313][ T29] audit: type=1400 audit(1737507722.081:2780): avc: denied { read } for pid=5485 comm="dhcpcd" name="n216" dev="tmpfs" ino=8611 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 797.769228][ T29] audit: type=1400 audit(1737507722.081:2781): avc: denied { open } for pid=5485 comm="dhcpcd" path="/run/udev/data/n216" dev="tmpfs" ino=8611 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 797.792877][ T29] audit: type=1400 audit(1737507722.711:2782): avc: denied { getattr } for pid=5485 comm="dhcpcd" path="/run/udev/data/n216" dev="tmpfs" ino=8611 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 798.503750][T14468] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 798.538053][ T29] audit: type=1400 audit(1737507723.501:2783): avc: denied { remount } for pid=14464 comm="syz.0.1843" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 799.518431][T14476] fuse: Bad value for 'fd' [ 799.587540][ T29] audit: type=1400 audit(1737507723.591:2784): avc: denied { name_bind } for pid=14460 comm="syz.3.1842" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 799.769743][T14486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1845'. [ 799.935728][ T29] audit: type=1400 audit(1737507724.521:2785): avc: denied { read } for pid=14473 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 800.329068][ T29] audit: type=1400 audit(1737507724.521:2786): avc: denied { open } for pid=14473 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 800.722123][ T29] audit: type=1400 audit(1737507724.521:2787): avc: denied { getattr } for pid=14473 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 800.849673][ T29] audit: type=1400 audit(1737507725.641:2788): avc: denied { connect } for pid=14483 comm="syz.6.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 802.845183][T14531] input: syz0 as /devices/virtual/input/input61 [ 803.649873][T14534] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 803.690629][T14534] syz.0.1852: attempt to access beyond end of device [ 803.690629][T14534] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 804.489816][T14540] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 805.014239][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 805.014256][ T29] audit: type=1326 audit(1737507730.011:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 805.132997][ T29] audit: type=1326 audit(1737507730.051:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 805.597503][ T29] audit: type=1326 audit(1737507730.051:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 805.862848][ T29] audit: type=1326 audit(1737507730.051:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 806.490784][ T29] audit: type=1326 audit(1737507730.051:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 806.859230][ T29] audit: type=1326 audit(1737507730.051:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 806.930041][ T29] audit: type=1326 audit(1737507730.051:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 806.987120][ T29] audit: type=1326 audit(1737507730.051:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 807.077244][ T29] audit: type=1326 audit(1737507730.051:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 807.400284][T14590] input: syz0 as /devices/virtual/input/input62 [ 808.059205][ T29] audit: type=1326 audit(1737507730.051:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 808.131637][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.252029][T14602] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 809.284855][T14602] fuse: Bad value for 'fd' [ 809.308467][T14603] FAULT_INJECTION: forcing a failure. [ 809.308467][T14603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.322135][T14603] CPU: 1 UID: 0 PID: 14603 Comm: syz.0.1865 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 809.332564][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 809.342618][T14603] Call Trace: [ 809.345875][T14603] [ 809.348784][T14603] dump_stack_lvl+0x16c/0x1f0 [ 809.353449][T14603] should_fail_ex+0x497/0x5b0 [ 809.358125][T14603] _copy_from_user+0x2e/0xd0 [ 809.362719][T14603] ucma_resolve_route+0x85/0x200 [ 809.367643][T14603] ? __pfx_ucma_resolve_route+0x10/0x10 [ 809.373173][T14603] ? __pfx_ucma_resolve_route+0x10/0x10 [ 809.378703][T14603] ucma_write+0x1f9/0x330 [ 809.383013][T14603] ? __pfx_ucma_write+0x10/0x10 [ 809.387848][T14603] ? bpf_lsm_file_permission+0x9/0x10 [ 809.393203][T14603] ? security_file_permission+0x71/0x210 [ 809.398825][T14603] ? __pfx_ucma_write+0x10/0x10 [ 809.403653][T14603] vfs_write+0x24c/0x1150 [ 809.407964][T14603] ? __fget_files+0x1fc/0x3a0 [ 809.412621][T14603] ? __pfx_lock_release+0x10/0x10 [ 809.417629][T14603] ? __pfx_vfs_write+0x10/0x10 [ 809.422377][T14603] ? lock_acquire+0x2f/0xb0 [ 809.426858][T14603] ? __fget_files+0x40/0x3a0 [ 809.431427][T14603] ? __fget_files+0x206/0x3a0 [ 809.436089][T14603] ksys_write+0x207/0x250 [ 809.440397][T14603] ? __pfx_ksys_write+0x10/0x10 [ 809.445231][T14603] do_syscall_64+0xcd/0x250 [ 809.449714][T14603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.455592][T14603] RIP: 0033:0x7fefe7385d29 [ 809.460004][T14603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.479591][T14603] RSP: 002b:00007fefe81f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 809.487982][T14603] RAX: ffffffffffffffda RBX: 00007fefe7576080 RCX: 00007fefe7385d29 [ 809.495931][T14603] RDX: 0000000000000010 RSI: 0000000020000500 RDI: 0000000000000004 [ 809.503892][T14603] RBP: 00007fefe81f5090 R08: 0000000000000000 R09: 0000000000000000 [ 809.511841][T14603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.519792][T14603] R13: 0000000000000000 R14: 00007fefe7576080 R15: 00007fffc16c5b78 [ 809.527752][T14603] [ 810.295161][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 810.295176][ T29] audit: type=1326 audit(1737507735.291:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14611 comm="syz.0.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe7385d29 code=0x7ffc0000 [ 810.430309][ T29] audit: type=1326 audit(1737507735.291:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14611 comm="syz.0.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe7385d29 code=0x7ffc0000 [ 810.586248][ T29] audit: type=1400 audit(1737507735.351:2832): avc: denied { create } for pid=14608 comm="syz.3.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 810.607981][ T29] audit: type=1400 audit(1737507735.361:2833): avc: denied { write } for pid=14608 comm="syz.3.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 810.653127][ T29] audit: type=1400 audit(1737507735.361:2834): avc: denied { nlmsg_write } for pid=14608 comm="syz.3.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 812.420151][T14640] input: syz0 as /devices/virtual/input/input63 [ 813.452601][ T29] audit: type=1400 audit(1737507738.441:2835): avc: denied { create } for pid=14646 comm="syz.6.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 813.961383][ T29] audit: type=1400 audit(1737507738.931:2836): avc: denied { connect } for pid=14646 comm="syz.6.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 814.737452][T10982] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 814.927449][T10982] usb 7-1: device descriptor read/64, error -71 [ 815.177706][T10982] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 815.317690][T10982] usb 7-1: device descriptor read/64, error -71 [ 815.438401][T10982] usb usb7-port1: attempt power cycle [ 815.494920][ T29] audit: type=1326 audit(1737507740.491:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.5.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 815.527049][ T29] audit: type=1326 audit(1737507740.521:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.5.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 815.556174][ T29] audit: type=1326 audit(1737507740.521:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.5.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 815.782985][ T29] audit: type=1326 audit(1737507740.521:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.5.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 815.817866][T10982] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 815.834285][ T29] audit: type=1326 audit(1737507740.521:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.5.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 815.859417][T10982] usb 7-1: device descriptor read/8, error -71 [ 816.736678][T11415] Bluetooth: hci4: command 0x0406 tx timeout [ 816.747856][T10982] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 816.775725][T14699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1884'. [ 817.020821][ T29] audit: type=1326 audit(1737507740.521:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.5.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 817.421620][T10982] usb 7-1: device not accepting address 33, error -71 [ 817.583187][ T29] audit: type=1326 audit(1737507740.521:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.5.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 817.614749][T10982] usb usb7-port1: unable to enumerate USB device [ 817.750561][ T29] audit: type=1326 audit(1737507740.521:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.5.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 817.776617][ T29] audit: type=1326 audit(1737507740.521:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.5.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 818.408653][T14712] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 818.577748][ T29] audit: type=1326 audit(1737507740.521:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.5.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 819.371375][T14723] input: syz0 as /devices/virtual/input/input64 [ 820.564191][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 820.564208][ T29] audit: type=1400 audit(1737507745.561:2898): avc: denied { create } for pid=14688 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 820.670697][T14739] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 821.082207][ T29] audit: type=1400 audit(1737507745.611:2899): avc: denied { write } for pid=14688 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=8812 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 821.158753][ T29] audit: type=1400 audit(1737507745.611:2900): avc: denied { append } for pid=14688 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=8812 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 821.183573][ T29] audit: type=1400 audit(1737507745.661:2901): avc: denied { create } for pid=14733 comm="syz.7.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 821.257426][ T29] audit: type=1400 audit(1737507745.671:2902): avc: denied { create } for pid=14733 comm="syz.7.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 821.281694][ T29] audit: type=1400 audit(1737507745.671:2903): avc: denied { write } for pid=14733 comm="syz.7.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 821.600449][ T29] audit: type=1400 audit(1737507745.681:2904): avc: denied { write } for pid=14733 comm="syz.7.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 822.263660][ T29] audit: type=1400 audit(1737507745.991:2905): avc: denied { map_read map_write } for pid=14729 comm="syz.3.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 822.424175][ T29] audit: type=1400 audit(1737507745.991:2906): avc: denied { read } for pid=14729 comm="syz.3.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 822.650838][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1896'. [ 822.892372][ T29] audit: type=1400 audit(1737507746.141:2907): avc: denied { create } for pid=14740 comm="syz.6.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 823.902222][T14773] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 825.592302][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 825.592317][ T29] audit: type=1326 audit(1737507750.591:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0ff85d29 code=0x7ffc0000 [ 825.597449][T14789] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1903'. [ 825.600653][ T29] audit: type=1326 audit(1737507750.601:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0ff85d29 code=0x7ffc0000 [ 825.688261][T14789] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1903'. [ 825.717937][T14789] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1903'. [ 825.788116][T14789] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1903'. [ 825.880780][ T29] audit: type=1326 audit(1737507750.661:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f9c0ff85d29 code=0x7ffc0000 [ 826.026376][ T29] audit: type=1326 audit(1737507750.661:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0ff85d29 code=0x7ffc0000 [ 826.285829][ T29] audit: type=1326 audit(1737507750.661:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c0ff85d29 code=0x7ffc0000 [ 826.368335][ T29] audit: type=1326 audit(1737507750.661:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0ff85d29 code=0x7ffc0000 [ 826.392057][ T29] audit: type=1326 audit(1737507750.661:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9c0ff87bbc code=0x7ffc0000 [ 827.207229][ T29] audit: type=1400 audit(1737507750.711:2980): avc: denied { ioctl } for pid=14790 comm="syz.6.1904" path="socket:[43415]" dev="sockfs" ino=43415 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 827.234610][ T29] audit: type=1326 audit(1737507750.831:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9c0ff87af4 code=0x7ffc0000 [ 827.320049][ T29] audit: type=1326 audit(1737507750.831:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.6.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0ff85d29 code=0x7ffc0000 [ 828.339610][T14830] kvm: pic: non byte write [ 828.430531][T14824] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1911'. [ 828.828259][T14844] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 828.848325][T14844] syz.0.1913: attempt to access beyond end of device [ 828.848325][T14844] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 829.739360][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1915'. [ 830.243698][T14855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1917'. [ 830.635930][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 830.635947][ T29] audit: type=1400 audit(1737507755.591:3028): avc: denied { open } for pid=14859 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.654575][ T29] audit: type=1400 audit(1737507755.591:3029): avc: denied { getattr } for pid=14859 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.082201][ T29] audit: type=1400 audit(1737507758.051:3030): avc: denied { create } for pid=14882 comm="syz.7.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 833.303774][ T29] audit: type=1400 audit(1737507758.061:3031): avc: denied { bind } for pid=14882 comm="syz.7.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 833.504811][ T29] audit: type=1400 audit(1737507758.061:3032): avc: denied { create } for pid=14882 comm="syz.7.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 833.602571][ T29] audit: type=1400 audit(1737507758.071:3033): avc: denied { bind } for pid=14882 comm="syz.7.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 834.319509][T10982] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 834.347845][ T29] audit: type=1400 audit(1737507758.071:3034): avc: denied { write } for pid=14882 comm="syz.7.1922" path="socket:[43719]" dev="sockfs" ino=43719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 834.437874][ T29] audit: type=1400 audit(1737507758.121:3035): avc: denied { create } for pid=14882 comm="syz.7.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 834.507537][T10982] usb 1-1: Using ep0 maxpacket: 16 [ 834.518072][ T29] audit: type=1400 audit(1737507758.121:3036): avc: denied { setopt } for pid=14882 comm="syz.7.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 834.527917][T10982] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 834.555875][T10982] usb 1-1: config 0 has no interface number 0 [ 834.556802][ T29] audit: type=1400 audit(1737507758.121:3037): avc: denied { bind } for pid=14882 comm="syz.7.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 834.576102][T10982] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.662988][T10982] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.689183][T10982] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 834.732081][T10982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.785788][T10982] usb 1-1: config 0 descriptor?? [ 835.063671][T14914] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1928'. [ 836.253233][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 836.253251][ T29] audit: type=1400 audit(1737507761.251:3057): avc: denied { read write } for pid=14948 comm="syz.7.1932" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 836.450212][ T29] audit: type=1400 audit(1737507761.281:3058): avc: denied { open } for pid=14948 comm="syz.7.1932" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 836.550483][T14951] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 836.576783][T14951] syz.3.1930: attempt to access beyond end of device [ 836.576783][T14951] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 836.805291][T14953] fuse: Bad value for 'fd' [ 837.084005][T14957] xt_TCPMSS: Only works on TCP SYN packets [ 837.459092][T14965] FAULT_INJECTION: forcing a failure. [ 837.459092][T14965] name failslab, interval 1, probability 0, space 0, times 0 [ 837.472153][T14965] CPU: 1 UID: 0 PID: 14965 Comm: syz.3.1934 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 837.482577][T14965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 837.492634][T14965] Call Trace: [ 837.495912][T14965] [ 837.498845][T14965] dump_stack_lvl+0x16c/0x1f0 [ 837.503538][T14965] should_fail_ex+0x497/0x5b0 [ 837.508224][T14965] ? fs_reclaim_acquire+0xae/0x150 [ 837.513343][T14965] should_failslab+0xc2/0x120 [ 837.518029][T14965] __kmalloc_noprof+0xcb/0x510 [ 837.522801][T14965] ? d_absolute_path+0x137/0x1b0 [ 837.527755][T14965] ? rcu_is_watching+0x12/0xc0 [ 837.532533][T14965] tomoyo_encode2+0x100/0x3e0 [ 837.537222][T14965] tomoyo_encode+0x29/0x50 [ 837.541646][T14965] tomoyo_realpath_from_path+0x19d/0x720 [ 837.547297][T14965] tomoyo_path_number_perm+0x248/0x590 [ 837.552760][T14965] ? tomoyo_path_number_perm+0x235/0x590 [ 837.558401][T14965] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 837.564415][T14965] ? __pfx_lock_release+0x10/0x10 [ 837.569443][T14965] ? trace_lock_acquire+0x14e/0x1f0 [ 837.574653][T14965] ? lock_acquire+0x2f/0xb0 [ 837.579164][T14965] ? __fget_files+0x40/0x3a0 [ 837.583763][T14965] ? __fget_files+0x206/0x3a0 [ 837.588447][T14965] security_file_ioctl+0x9b/0x240 [ 837.593482][T14965] __x64_sys_ioctl+0xb7/0x200 [ 837.598175][T14965] do_syscall_64+0xcd/0x250 [ 837.602683][T14965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.608587][T14965] RIP: 0033:0x7fb637b85d29 [ 837.613001][T14965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.632613][T14965] RSP: 002b:00007fb6359f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.641029][T14965] RAX: ffffffffffffffda RBX: 00007fb637d76160 RCX: 00007fb637b85d29 [ 837.649001][T14965] RDX: 0000000020000040 RSI: 00000000c4c85513 RDI: 0000000000000005 [ 837.656970][T14965] RBP: 00007fb6359f6090 R08: 0000000000000000 R09: 0000000000000000 [ 837.664941][T14965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.672912][T14965] R13: 0000000000000000 R14: 00007fb637d76160 R15: 00007fffb0edaee8 [ 837.680900][T14965] [ 837.685305][T14965] ERROR: Out of memory at tomoyo_realpath_from_path. [ 838.219702][T14966] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 838.246837][T14964] syz.7.1932: attempt to access beyond end of device [ 838.246837][T14964] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 838.345427][T10982] usbhid 1-1:0.1: can't add hid device: -71 [ 838.367506][T10982] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 838.408208][T10982] usb 1-1: USB disconnect, device number 73 [ 838.552421][ T29] audit: type=1400 audit(1737507763.541:3059): avc: denied { create } for pid=14974 comm="syz.6.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 838.579583][ T29] audit: type=1400 audit(1737507763.551:3060): avc: denied { connect } for pid=14974 comm="syz.6.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 838.632567][ T29] audit: type=1400 audit(1737507763.551:3061): avc: denied { read } for pid=14974 comm="syz.6.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 838.727525][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 839.369786][ T29] audit: type=1400 audit(1737507763.661:3062): avc: denied { write } for pid=14974 comm="syz.6.1939" path="socket:[43897]" dev="sockfs" ino=43897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 839.647767][ T9] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 839.666635][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.835203][ T9] usb 6-1: config 0 descriptor?? [ 841.294496][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1944'. [ 841.832909][T14972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.982095][T10982] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 842.147670][T14972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.185109][ T9] usb 6-1: Cannot set autoneg [ 842.189948][ T9] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 842.227853][ T9] usb 6-1: USB disconnect, device number 59 [ 842.247629][T10982] usb 7-1: Using ep0 maxpacket: 16 [ 842.273102][T10982] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.296515][T10982] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 842.306744][T10982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.315339][ T29] audit: type=1400 audit(1737507767.291:3063): avc: denied { mount } for pid=14999 comm="syz.7.1946" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 842.315347][T10982] usb 7-1: Product: syz [ 842.315368][T10982] usb 7-1: Manufacturer: syz [ 842.352505][T10982] usb 7-1: SerialNumber: syz [ 842.374241][T10982] usb 7-1: config 0 descriptor?? [ 842.397545][ T5865] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 842.557468][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 842.565564][ T5865] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 842.576258][ T5865] usb 4-1: config 0 has no interface number 0 [ 842.583542][ T5865] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.609331][ T5865] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.619594][ T5865] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 842.628771][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.640491][ T5865] usb 4-1: config 0 descriptor?? [ 842.987652][ T9] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 843.061857][ T29] audit: type=1400 audit(1737507768.061:3064): avc: denied { create } for pid=15003 comm="syz.3.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 843.139808][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 843.158778][ T9] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 843.172930][ T9] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 843.182481][ T9] usb 6-1: Product: syz [ 843.186758][ T9] usb 6-1: Manufacturer: syz [ 843.196857][ T9] usb 6-1: SerialNumber: syz [ 843.207813][ T9] usb 6-1: config 0 descriptor?? [ 843.293616][ T5865] uclogic 0003:28BD:0071.000C: failed retrieving string descriptor #100: -71 [ 843.337033][ T5865] uclogic 0003:28BD:0071.000C: failed retrieving pen parameters: -71 [ 843.382375][ T5865] uclogic 0003:28BD:0071.000C: pen probing failed: -71 [ 843.942785][T15009] FAULT_INJECTION: forcing a failure. [ 843.942785][T15009] name failslab, interval 1, probability 0, space 0, times 0 [ 843.957408][ T5865] uclogic 0003:28BD:0071.000C: failed probing parameters: -71 [ 843.957498][ T5865] uclogic 0003:28BD:0071.000C: probe with driver uclogic failed with error -71 [ 843.964816][ T5865] usb 4-1: USB disconnect, device number 76 [ 843.988810][ T29] audit: type=1400 audit(1737507768.961:3065): avc: denied { egress } for pid=15008 comm="syz.5.1949" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 844.039252][T15009] CPU: 0 UID: 0 PID: 15009 Comm: syz.5.1949 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 844.049692][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 844.059750][T15009] Call Trace: [ 844.063029][T15009] [ 844.065961][T15009] dump_stack_lvl+0x16c/0x1f0 [ 844.070661][T15009] should_fail_ex+0x497/0x5b0 [ 844.075351][T15009] ? fs_reclaim_acquire+0xae/0x150 [ 844.080471][T15009] should_failslab+0xc2/0x120 [ 844.085157][T15009] __kmalloc_noprof+0xcb/0x510 [ 844.089936][T15009] ? d_absolute_path+0x137/0x1b0 [ 844.094888][T15009] ? rcu_is_watching+0x12/0xc0 [ 844.099667][T15009] tomoyo_encode2+0x100/0x3e0 [ 844.104363][T15009] tomoyo_encode+0x29/0x50 [ 844.108793][T15009] tomoyo_realpath_from_path+0x19d/0x720 [ 844.114448][T15009] tomoyo_path_number_perm+0x248/0x590 [ 844.119917][T15009] ? tomoyo_path_number_perm+0x235/0x590 [ 844.125559][T15009] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 844.131571][T15009] ? __pfx_lock_release+0x10/0x10 [ 844.136605][T15009] ? trace_lock_acquire+0x14e/0x1f0 [ 844.141815][T15009] ? lock_acquire+0x2f/0xb0 [ 844.146326][T15009] ? __fget_files+0x40/0x3a0 [ 844.150924][T15009] ? __fget_files+0x206/0x3a0 [ 844.155594][T15009] security_file_ioctl+0x9b/0x240 [ 844.160612][T15009] __x64_sys_ioctl+0xb7/0x200 [ 844.165285][T15009] do_syscall_64+0xcd/0x250 [ 844.169775][T15009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.175663][T15009] RIP: 0033:0x7fe7bcb85d29 [ 844.180063][T15009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.199661][T15009] RSP: 002b:00007fe7bd982038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 844.208061][T15009] RAX: ffffffffffffffda RBX: 00007fe7bcd75fa0 RCX: 00007fe7bcb85d29 [ 844.216020][T15009] RDX: 0000000020000180 RSI: 0000000080dc5521 RDI: 0000000000000004 [ 844.223976][T15009] RBP: 00007fe7bd982090 R08: 0000000000000000 R09: 0000000000000000 [ 844.231935][T15009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.239894][T15009] R13: 0000000000000000 R14: 00007fe7bcd75fa0 R15: 00007ffdcd03a658 [ 844.247863][T15009] [ 844.251964][T15009] ERROR: Out of memory at tomoyo_realpath_from_path. [ 844.269267][ T29] audit: type=1400 audit(1737507768.961:3066): avc: denied { sendto } for pid=15008 comm="syz.5.1949" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 844.331205][ T970] usb 6-1: USB disconnect, device number 60 [ 845.352308][ T5865] usb 7-1: USB disconnect, device number 34 [ 846.027690][ T29] audit: type=1400 audit(1737507771.011:3067): avc: denied { create } for pid=15032 comm="syz.3.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 846.181273][ T29] audit: type=1400 audit(1737507771.161:3068): avc: denied { write } for pid=15032 comm="syz.3.1955" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 846.621070][ T8] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 846.637835][ T29] audit: type=1400 audit(1737507771.171:3069): avc: denied { connect } for pid=15032 comm="syz.3.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 846.791039][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 846.811361][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 846.825781][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 846.851399][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 846.864470][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.883514][ T8] usb 1-1: config 0 descriptor?? [ 846.910102][ T8] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 846.944696][ T8] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 847.007493][ T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 848.002808][ T9] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 848.258925][ T29] audit: type=1400 audit(1737507773.261:3070): avc: denied { ioctl } for pid=15054 comm="syz.5.1963" path="socket:[44329]" dev="sockfs" ino=44329 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 848.309753][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.382858][T15062] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1956'. [ 848.795885][ T29] audit: type=1400 audit(1737507773.511:3071): avc: denied { read } for pid=15036 comm="syz.0.1956" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 848.829914][ T9] usb 8-1: config 0 descriptor?? [ 848.862891][ T29] audit: type=1400 audit(1737507773.511:3072): avc: denied { open } for pid=15036 comm="syz.0.1956" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 848.894496][ T29] audit: type=1400 audit(1737507773.741:3073): avc: denied { accept } for pid=15054 comm="syz.5.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 848.922398][ T8] usb 1-1: USB disconnect, device number 74 [ 848.932856][ T29] audit: type=1400 audit(1737507773.851:3074): avc: denied { bind } for pid=15061 comm="syz.6.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 849.146772][ T29] audit: type=1400 audit(1737507774.041:3075): avc: denied { setopt } for pid=15065 comm="syz.3.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 849.792986][ T29] audit: type=1400 audit(1737507774.791:3076): avc: denied { create } for pid=15072 comm="syz.5.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 850.539411][T15076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.549292][T15076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.597468][ T29] audit: type=1400 audit(1737507774.811:3077): avc: denied { listen } for pid=15072 comm="syz.5.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 850.618291][ T9] usb 8-1: Cannot set autoneg [ 850.623162][ T9] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 850.642052][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1969'. [ 850.656870][ T9] usb 8-1: USB disconnect, device number 19 [ 850.667786][ T29] audit: type=1326 audit(1737507775.641:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15077 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0ff85d29 code=0x7ffc0000 [ 850.692995][ T29] audit: type=1326 audit(1737507775.641:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15077 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0ff85d29 code=0x7ffc0000 [ 852.426505][T15110] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 853.607186][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 853.607202][ T29] audit: type=1326 audit(1737507778.601:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 854.114442][ T29] audit: type=1326 audit(1737507778.641:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 854.166620][T15126] FAULT_INJECTION: forcing a failure. [ 854.166620][T15126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.232884][T15126] CPU: 1 UID: 0 PID: 15126 Comm: syz.0.1977 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 854.243315][T15126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 854.253373][T15126] Call Trace: [ 854.256653][T15126] [ 854.259583][T15126] dump_stack_lvl+0x16c/0x1f0 [ 854.264275][T15126] should_fail_ex+0x497/0x5b0 [ 854.268974][T15126] _copy_from_user+0x2e/0xd0 [ 854.273574][T15126] kstrtouint_from_user+0xd7/0x1c0 [ 854.278695][T15126] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 854.284432][T15126] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 854.290075][T15126] proc_fail_nth_write+0x84/0x250 [ 854.295109][T15126] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 854.300749][T15126] ? ksys_write+0x12b/0x250 [ 854.305261][T15126] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 854.310903][T15126] vfs_write+0x24c/0x1150 [ 854.315237][T15126] ? __fget_files+0x1fc/0x3a0 [ 854.319918][T15126] ? __pfx___mutex_lock+0x10/0x10 [ 854.324943][T15126] ? __pfx_vfs_write+0x10/0x10 [ 854.329724][T15126] ? __fget_files+0x206/0x3a0 [ 854.334417][T15126] ksys_write+0x12b/0x250 [ 854.338750][T15126] ? __pfx_ksys_write+0x10/0x10 [ 854.343614][T15126] do_syscall_64+0xcd/0x250 [ 854.348120][T15126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.354022][T15126] RIP: 0033:0x7fefe73847df [ 854.358441][T15126] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 854.378056][T15126] RSP: 002b:00007fefe81f5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 854.386477][T15126] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fefe73847df [ 854.394450][T15126] RDX: 0000000000000001 RSI: 00007fefe81f50a0 RDI: 0000000000000009 [ 854.402421][T15126] RBP: 00007fefe81f5090 R08: 0000000000000000 R09: 0000000000000000 [ 854.410397][T15126] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 854.418371][T15126] R13: 0000000000000000 R14: 00007fefe7576080 R15: 00007fffc16c5b78 [ 854.426362][T15126] [ 854.477437][ T29] audit: type=1326 audit(1737507778.641:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 854.700191][T15131] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1981'. [ 854.709560][T15131] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1981'. [ 854.793837][ T29] audit: type=1326 audit(1737507778.641:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 855.396793][ T29] audit: type=1326 audit(1737507778.641:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 855.534785][ T29] audit: type=1326 audit(1737507778.641:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 855.775704][T10432] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 856.193838][ T29] audit: type=1326 audit(1737507778.641:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 856.223945][ T29] audit: type=1326 audit(1737507778.641:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 856.266579][ T29] audit: type=1326 audit(1737507778.641:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 856.359427][ T29] audit: type=1326 audit(1737507778.641:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb637b85d29 code=0x7ffc0000 [ 856.396289][T10432] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 856.405671][T10432] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.424697][T10432] usb 6-1: config 0 descriptor?? [ 856.429783][ T970] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 856.787763][ T970] usb 1-1: Using ep0 maxpacket: 16 [ 856.806061][ T970] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 857.481563][ T970] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 857.499970][ T970] usb 1-1: Product: syz [ 857.504289][ T970] usb 1-1: Manufacturer: syz [ 857.512982][ T970] usb 1-1: SerialNumber: syz [ 857.539074][ T970] usb 1-1: config 0 descriptor?? [ 858.005650][T15143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.035141][T15143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.410158][T15171] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 858.624341][T10432] usb 6-1: Cannot set autoneg [ 858.738078][T10432] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 858.977673][T10432] usb 6-1: USB disconnect, device number 61 [ 859.032878][ T970] usb 1-1: USB disconnect, device number 75 [ 859.915764][T15189] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 859.931538][T15189] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 859.939971][T15189] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 859.950868][T15193] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 859.959631][T15193] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 859.970749][T15193] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 859.990729][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 859.990739][ T29] audit: type=1400 audit(1737507784.981:3121): avc: denied { mounton } for pid=15188 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 860.212705][ T29] audit: type=1326 audit(1737507785.201:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 860.241444][T15188] chnl_net:caif_netlink_parms(): no params data found [ 860.256453][ T29] audit: type=1326 audit(1737507785.201:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 860.281625][ T29] audit: type=1326 audit(1737507785.201:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 860.305598][ T29] audit: type=1326 audit(1737507785.201:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 860.330311][ T29] audit: type=1326 audit(1737507785.201:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 860.355002][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1994'. [ 860.382002][ T29] audit: type=1326 audit(1737507785.211:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 860.950027][ T29] audit: type=1326 audit(1737507785.211:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bcb85d29 code=0x7ffc0000 [ 860.986642][ T29] audit: type=1326 audit(1737507785.211:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe7bcb87bbc code=0x7ffc0000 [ 861.177610][ T29] audit: type=1326 audit(1737507785.211:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe7bcb87af4 code=0x7ffc0000 [ 861.572622][T15188] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.623028][T15188] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.667571][T15188] bridge_slave_0: entered allmulticast mode [ 861.674564][T15188] bridge_slave_0: entered promiscuous mode [ 861.683052][T15188] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.690281][T15188] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.697797][T15188] bridge_slave_1: entered allmulticast mode [ 861.728521][T15188] bridge_slave_1: entered promiscuous mode [ 861.798520][T15226] overlayfs: overlapping lowerdir path [ 862.027578][T15193] Bluetooth: hci4: command tx timeout [ 862.160073][T15188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.313305][T15188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.112952][T15188] team0: Port device team_slave_0 added [ 863.157034][T15188] team0: Port device team_slave_1 added [ 863.404522][T15188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.527736][T15188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.591211][T15188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.633894][T15188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.649551][T15188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.677529][T15188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.694820][T15248] kvm: pic: non byte write [ 863.721985][T15188] hsr_slave_0: entered promiscuous mode [ 863.732427][T15188] hsr_slave_1: entered promiscuous mode [ 863.746037][T15188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.761650][T15250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2007'. [ 863.772838][T15188] Cannot create hsr debugfs directory [ 863.817901][T15257] FAULT_INJECTION: forcing a failure. [ 863.817901][T15257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.831809][T15257] CPU: 0 UID: 0 PID: 15257 Comm: syz.5.2009 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 863.842235][T15257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 863.852281][T15257] Call Trace: [ 863.855539][T15257] [ 863.858450][T15257] dump_stack_lvl+0x16c/0x1f0 [ 863.863116][T15257] should_fail_ex+0x497/0x5b0 [ 863.867789][T15257] _copy_from_user+0x2e/0xd0 [ 863.872365][T15257] copy_from_sockptr_offset.constprop.0+0x157/0x190 [ 863.878940][T15257] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 863.886038][T15257] ? __local_bh_enable_ip+0xa4/0x120 [ 863.891314][T15257] packet_setsockopt+0x1672/0x2360 [ 863.896420][T15257] ? __pfx_packet_setsockopt+0x10/0x10 [ 863.901863][T15257] ? __pfx_sock_has_perm+0x10/0x10 [ 863.906959][T15257] ? selinux_netlbl_socket_setsockopt+0x184/0x470 [ 863.913355][T15257] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 863.920106][T15257] ? selinux_socket_setsockopt+0x6a/0x80 [ 863.925725][T15257] ? __pfx_packet_setsockopt+0x10/0x10 [ 863.931169][T15257] do_sock_setsockopt+0x222/0x480 [ 863.936178][T15257] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 863.941710][T15257] ? lock_acquire+0x2f/0xb0 [ 863.946210][T15257] __sys_setsockopt+0x1a0/0x230 [ 863.951048][T15257] __x64_sys_setsockopt+0xbd/0x160 [ 863.956140][T15257] ? do_syscall_64+0x91/0x250 [ 863.960795][T15257] ? lockdep_hardirqs_on+0x7c/0x110 [ 863.965976][T15257] do_syscall_64+0xcd/0x250 [ 863.970461][T15257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.976339][T15257] RIP: 0033:0x7fe7bcb85d29 [ 863.980731][T15257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.000321][T15257] RSP: 002b:00007fe7bd982038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 864.008727][T15257] RAX: ffffffffffffffda RBX: 00007fe7bcd75fa0 RCX: 00007fe7bcb85d29 [ 864.016677][T15257] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 864.024633][T15257] RBP: 00007fe7bd982090 R08: 000000000000001c R09: 0000000000000000 [ 864.032590][T15257] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 864.040543][T15257] R13: 0000000000000000 R14: 00007fe7bcd75fa0 R15: 00007ffdcd03a658 [ 864.048503][T15257] [ 864.108925][T15193] Bluetooth: hci4: command tx timeout [ 865.252994][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 865.376945][ T29] audit: type=1400 audit(1737507790.241:3155): avc: denied { create } for pid=15260 comm="syz.0.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 865.490928][ T29] audit: type=1400 audit(1737507790.241:3156): avc: denied { write } for pid=15260 comm="syz.0.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 865.513080][ T29] audit: type=1400 audit(1737507790.241:3157): avc: denied { create } for pid=15260 comm="syz.0.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 865.784840][ T5814] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 865.812700][T10982] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 865.829185][T15188] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.846375][T15274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 865.861618][T15274] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 865.925614][T15188] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.943431][T15270] kvm: pic: non byte write [ 865.949738][ T5814] usb 6-1: Using ep0 maxpacket: 32 [ 865.955646][ T5814] usb 6-1: too many configurations: 47, using maximum allowed: 8 [ 865.966808][ T5814] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 865.980961][ T5814] usb 6-1: can't read configurations, error -61 [ 865.987409][T10982] usb 1-1: Using ep0 maxpacket: 32 [ 865.999826][T10982] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 866.024361][T15188] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.047185][T10982] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 866.059775][T10982] usb 1-1: can't read configurations, error -61 [ 866.080279][T15276] kvm: pic: non byte write [ 866.104088][T15188] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.127595][ T5814] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 866.189726][T10982] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 866.197470][T15193] Bluetooth: hci4: command tx timeout [ 866.222803][T15188] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 866.233086][T15188] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 866.243028][T15188] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 866.253048][T15188] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 866.300977][T15188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.307485][ T5814] usb 6-1: Using ep0 maxpacket: 32 [ 866.315169][ T5814] usb 6-1: too many configurations: 47, using maximum allowed: 8 [ 866.316738][T15188] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.332100][ T5814] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 866.341006][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.348111][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.349173][ T5814] usb 6-1: can't read configurations, error -61 [ 866.356872][T10982] usb 1-1: Using ep0 maxpacket: 32 [ 866.362790][ T5814] usb usb6-port1: attempt power cycle [ 866.373335][T10982] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 866.383421][T10982] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 866.385659][T10875] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.398095][T10875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.412656][T10982] usb 1-1: can't read configurations, error -61 [ 866.421592][T10982] usb usb1-port1: attempt power cycle [ 866.474500][ T29] audit: type=1400 audit(1737507791.471:3158): avc: denied { sys_module } for pid=15188 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 866.561188][T15188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.717758][ T5814] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 866.761914][ T5814] usb 6-1: Using ep0 maxpacket: 32 [ 866.767210][T15188] veth0_vlan: entered promiscuous mode [ 866.773852][ T5814] usb 6-1: too many configurations: 47, using maximum allowed: 8 [ 866.777544][T10982] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 866.786472][T15188] veth1_vlan: entered promiscuous mode [ 866.809901][ T5814] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 866.820644][T10982] usb 1-1: Using ep0 maxpacket: 32 [ 866.823870][ T5814] usb 6-1: can't read configurations, error -61 [ 866.847583][T10982] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 866.864681][T10982] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 866.869368][T15188] veth0_macvtap: entered promiscuous mode [ 866.884147][T10982] usb 1-1: can't read configurations, error -61 [ 866.889649][T15188] veth1_macvtap: entered promiscuous mode [ 866.912461][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.929592][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.943062][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.975874][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.996359][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.006944][ T5814] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 867.017603][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.027492][T10982] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 867.036098][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.037118][ T29] audit: type=1400 audit(1737507792.031:3159): avc: denied { map } for pid=15295 comm="syz.3.2017" path="socket:[46089]" dev="sockfs" ino=46089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 867.051118][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.080869][T10982] usb 1-1: Using ep0 maxpacket: 32 [ 867.087404][ T5814] usb 6-1: Using ep0 maxpacket: 32 [ 867.096645][ T5814] usb 6-1: too many configurations: 47, using maximum allowed: 8 [ 867.099162][T10982] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 867.107958][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.122341][ T29] audit: type=1400 audit(1737507792.031:3160): avc: denied { read } for pid=15295 comm="syz.3.2017" path="socket:[46089]" dev="sockfs" ino=46089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 867.128345][ T5814] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 867.147769][T10982] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 867.165965][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.183159][ T5814] usb 6-1: can't read configurations, error -61 [ 867.198188][T15188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.237669][T10982] usb 1-1: can't read configurations, error -61 [ 867.246461][T10982] usb usb1-port1: unable to enumerate USB device [ 867.249839][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.322646][ T5814] usb usb6-port1: unable to enumerate USB device [ 867.336157][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.349261][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.361122][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.374048][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.404716][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.420943][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.437211][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.447119][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.463459][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.482278][T15188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.540665][T15188] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.638904][T15188] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.678892][T15188] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.771494][T15188] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.132558][ T29] audit: type=1400 audit(1737507792.961:3161): avc: denied { ioctl } for pid=15304 comm="syz.6.2019" path="socket:[45789]" dev="sockfs" ino=45789 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 868.269523][T15193] Bluetooth: hci4: command tx timeout [ 868.422453][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.465807][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.579681][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.598343][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.635138][ T29] audit: type=1400 audit(1737507793.621:3162): avc: denied { mounton } for pid=15188 comm="syz-executor" path="/root/syzkaller.rJxXfZ/syz-tmp" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 868.734077][ T29] audit: type=1400 audit(1737507793.621:3163): avc: denied { mount } for pid=15188 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 868.768174][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2024'. [ 868.792282][ T29] audit: type=1400 audit(1737507793.631:3164): avc: denied { mount } for pid=15188 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 869.016712][T15324] kvm: pic: non byte write [ 869.334353][T15329] bridge_slave_0: left allmulticast mode [ 869.340163][T15329] bridge_slave_0: left promiscuous mode [ 869.345866][T15329] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.375442][T15324] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2023'. [ 869.386712][T15329] bridge_slave_1: left allmulticast mode [ 869.393289][T15329] bridge_slave_1: left promiscuous mode [ 869.409452][T15329] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.435719][T15329] bond0: (slave bond_slave_0): Releasing backup interface [ 869.498895][T15329] bond0: (slave bond_slave_1): Releasing backup interface [ 869.550454][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.583115][T15338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2027'. [ 869.947313][T15329] team0: Port device team_slave_0 removed [ 870.253276][T15329] team0: Port device team_slave_1 removed [ 870.398162][T15329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.407541][T15329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.420496][T15329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.429594][T15329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.472181][T15329] bond2: (slave gretap1): Releasing active interface [ 870.666433][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 870.666450][ T29] audit: type=1400 audit(1737507795.651:3191): avc: denied { setopt } for pid=15346 comm="syz.5.2031" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 870.736148][T10875] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.760837][ T29] audit: type=1400 audit(1737507795.651:3192): avc: denied { write } for pid=15346 comm="syz.5.2031" path="socket:[47142]" dev="sockfs" ino=47142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 872.267174][T10875] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.267195][ T29] audit: type=1400 audit(1737507798.241:3193): avc: denied { map } for pid=15368 comm="syz.6.2036" path="socket:[46303]" dev="sockfs" ino=46303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 873.975877][ T29] audit: type=1400 audit(1737507798.971:3194): avc: denied { accept } for pid=15377 comm="syz.5.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 874.242271][T10875] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.444965][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 874.517176][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 874.582263][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 874.603071][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 874.664041][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 874.680145][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 875.010419][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 875.357529][ T5814] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 875.761973][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 875.784710][T15405] FAULT_INJECTION: forcing a failure. [ 875.784710][T15405] name failslab, interval 1, probability 0, space 0, times 0 [ 875.803671][ T5814] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 875.825042][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.833496][T15405] CPU: 1 UID: 0 PID: 15405 Comm: syz.6.2042 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 875.843929][T15405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 875.853981][T15405] Call Trace: [ 875.857258][T15405] [ 875.860187][T15405] dump_stack_lvl+0x16c/0x1f0 [ 875.864878][T15405] should_fail_ex+0x497/0x5b0 [ 875.869564][T15405] ? fs_reclaim_acquire+0xae/0x150 [ 875.874682][T15405] should_failslab+0xc2/0x120 [ 875.879372][T15405] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 875.884752][T15405] ? do_epoll_ctl+0x1185/0x35d0 [ 875.889612][T15405] do_epoll_ctl+0x1185/0x35d0 [ 875.894293][T15405] ? find_held_lock+0x2d/0x110 [ 875.899076][T15405] ? __pfx_do_epoll_ctl+0x10/0x10 [ 875.904114][T15405] ? __might_fault+0xe3/0x190 [ 875.908821][T15405] ? __x64_sys_epoll_ctl+0x15d/0x1e0 [ 875.914108][T15405] __x64_sys_epoll_ctl+0x15d/0x1e0 [ 875.919219][T15405] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 875.924860][T15405] do_syscall_64+0xcd/0x250 [ 875.929368][T15405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.935271][T15405] RIP: 0033:0x7f9c0ff85d29 [ 875.939685][T15405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.959295][T15405] RSP: 002b:00007f9c10e04038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 875.967708][T15405] RAX: ffffffffffffffda RBX: 00007f9c10175fa0 RCX: 00007f9c0ff85d29 [ 875.975685][T15405] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 875.983654][T15405] RBP: 00007f9c10e04090 R08: 0000000000000000 R09: 0000000000000000 [ 875.991628][T15405] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 875.999601][T15405] R13: 0000000000000000 R14: 00007f9c10175fa0 R15: 00007ffc7bd9e8a8 [ 876.007588][T15405] [ 876.054734][ T5814] usb 4-1: config 0 descriptor?? [ 876.056667][T10875] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.062237][ T5814] appletouch 4-1:0.0: Could not find int-in endpoint [ 876.077772][ T5814] appletouch 4-1:0.0: probe with driver appletouch failed with error -5 [ 876.190955][T15408] input: syz0 as /devices/virtual/input/input65 [ 876.227648][ T29] audit: type=1400 audit(1737507801.161:3195): avc: denied { ioctl } for pid=15400 comm="syz.0.2041" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 876.745867][ T5814] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 876.748322][T15193] Bluetooth: hci4: command tx timeout [ 876.763480][ T29] audit: type=1400 audit(1737507801.351:3196): avc: denied { read } for pid=5176 comm="acpid" name="event4" dev="devtmpfs" ino=3606 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 876.862782][ T29] audit: type=1400 audit(1737507801.351:3197): avc: denied { open } for pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3606 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 877.004044][ T29] audit: type=1400 audit(1737507801.351:3198): avc: denied { ioctl } for pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3606 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 877.363747][T10875] bridge_slave_1: left allmulticast mode [ 877.402338][T10875] bridge_slave_1: left promiscuous mode [ 877.463484][T10875] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.505126][T10875] bridge_slave_0: left allmulticast mode [ 877.546544][T10875] bridge_slave_0: left promiscuous mode [ 877.569935][T10875] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.752812][ T5866] usb 4-1: USB disconnect, device number 77 [ 878.169834][ T29] audit: type=1400 audit(1737507803.141:3199): avc: denied { create } for pid=15421 comm="syz.5.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 878.352137][ T29] audit: type=1400 audit(1737507803.141:3200): avc: denied { bind } for pid=15421 comm="syz.5.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 878.534975][T15418] Set syz1 is full, maxelem 65536 reached [ 878.551549][ T29] audit: type=1400 audit(1737507803.141:3201): avc: denied { write } for pid=15421 comm="syz.5.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 878.687947][ T29] audit: type=1400 audit(1737507803.611:3202): avc: denied { write } for pid=15426 comm="syz.3.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 878.927480][T15193] Bluetooth: hci4: command tx timeout [ 878.973621][ T29] audit: type=1400 audit(1737507803.761:3203): avc: denied { connect } for pid=15426 comm="syz.3.2046" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 879.528439][ T5864] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 879.573472][T10875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.584027][T10875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.594235][T10875] bond0 (unregistering): Released all slaves [ 879.640791][T15388] chnl_net:caif_netlink_parms(): no params data found [ 879.693397][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.723476][ T5864] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 879.770535][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.799531][ T5864] usb 6-1: config 0 descriptor?? [ 879.843669][ T5864] pwc: Askey VC010 type 2 USB webcam detected. [ 879.951524][ T29] audit: type=1400 audit(1737507804.951:3204): avc: denied { ioctl } for pid=15447 comm="syz.0.2054" path="socket:[46533]" dev="sockfs" ino=46533 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 880.117733][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 880.269297][ T5864] pwc: recv_control_msg error -32 req 02 val 2b00 [ 880.301555][ T5864] pwc: recv_control_msg error -32 req 02 val 2700 [ 880.338342][ T5864] pwc: recv_control_msg error -32 req 02 val 2c00 [ 880.345527][ T5864] pwc: recv_control_msg error -32 req 04 val 1000 [ 880.374232][ T5864] pwc: recv_control_msg error -32 req 04 val 1300 [ 880.418242][ T5864] pwc: recv_control_msg error -32 req 04 val 1400 [ 880.454425][ T5864] pwc: recv_control_msg error -32 req 02 val 2000 [ 880.465017][ T5864] pwc: recv_control_msg error -32 req 02 val 2100 [ 880.587068][ T5864] pwc: recv_control_msg error -32 req 04 val 1500 [ 880.604525][T10875] hsr_slave_0: left promiscuous mode [ 880.613268][T10875] hsr_slave_1: left promiscuous mode [ 880.663466][T10875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.047697][T15193] Bluetooth: hci4: command tx timeout [ 881.244169][ T5864] pwc: recv_control_msg error -71 req 02 val 2400 [ 881.264458][T10875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.277537][ T5864] pwc: recv_control_msg error -71 req 02 val 2600 [ 881.305229][ T5864] pwc: recv_control_msg error -71 req 02 val 2900 [ 881.316683][T10875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.330352][T10875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.344252][ T5864] pwc: recv_control_msg error -71 req 02 val 2800 [ 881.389637][ T5864] pwc: recv_control_msg error -71 req 04 val 1100 [ 881.413272][ T5864] pwc: recv_control_msg error -71 req 04 val 1200 [ 881.439985][ T5864] pwc: Registered as video103. [ 881.487011][T10875] veth1_macvtap: left promiscuous mode [ 881.494013][ T5864] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input66 [ 881.516520][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 881.516534][ T29] audit: type=1400 audit(1737507806.511:3206): avc: denied { read write } for pid=15481 comm="syz.0.2061" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 881.530801][T10875] veth0_macvtap: left promiscuous mode [ 881.597461][T10875] veth1_vlan: left promiscuous mode [ 881.609371][T10875] veth0_vlan: left promiscuous mode [ 881.628162][ T29] audit: type=1400 audit(1737507806.511:3207): avc: denied { open } for pid=15481 comm="syz.0.2061" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 881.727734][ T5864] usb 6-1: USB disconnect, device number 66 [ 883.068297][T15193] Bluetooth: hci4: command tx timeout [ 883.079284][ T5864] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 883.248696][ T5864] usb 7-1: Using ep0 maxpacket: 8 [ 883.261645][ T5864] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 883.276864][ T5864] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 883.308579][ T5864] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 883.344996][ T5864] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.385425][ T5864] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 883.413922][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.661129][ T5864] usb 7-1: usb_control_msg returned -32 [ 883.666888][ T5864] usbtmc 7-1:16.0: can't read capabilities [ 883.668474][T10875] team0 (unregistering): Port device team_slave_1 removed [ 883.722484][T10875] team0 (unregistering): Port device team_slave_0 removed [ 883.787813][ T29] audit: type=1400 audit(1737507808.781:3208): avc: denied { write } for pid=15500 comm="syz.0.2065" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 884.016172][ T29] audit: type=1400 audit(1737507809.011:3209): avc: denied { write } for pid=15492 comm="syz.6.2062" name="usbtmc0" dev="devtmpfs" ino=3613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 884.034905][T15506] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 884.049714][ T5814] usb 7-1: USB disconnect, device number 35 [ 884.277884][T15388] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.285100][T15388] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.292347][T15388] bridge_slave_0: entered allmulticast mode [ 884.303524][T15388] bridge_slave_0: entered promiscuous mode [ 884.347838][T15388] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.360231][T15388] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.375301][T15388] bridge_slave_1: entered allmulticast mode [ 884.398268][T15388] bridge_slave_1: entered promiscuous mode [ 884.507409][ T29] audit: type=1400 audit(1737507809.501:3210): avc: denied { read } for pid=15511 comm="syz.3.2070" laddr=::1 lport=255 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 884.533603][T15388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.574628][T15388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.673758][T15388] team0: Port device team_slave_0 added [ 884.694388][T15388] team0: Port device team_slave_1 added [ 885.659031][T15514] delete_channel: no stack [ 886.055064][ T29] audit: type=1400 audit(1737507810.031:3211): avc: denied { create } for pid=15514 comm="syz.0.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 886.117481][ T29] audit: type=1400 audit(1737507810.051:3212): avc: denied { create } for pid=15514 comm="syz.0.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 886.224879][ T29] audit: type=1400 audit(1737507810.091:3213): avc: denied { read append } for pid=15514 comm="syz.0.2072" name="sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 886.345911][ T29] audit: type=1400 audit(1737507810.091:3214): avc: denied { open } for pid=15514 comm="syz.0.2072" path="/dev/sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 886.420202][ T29] audit: type=1400 audit(1737507810.111:3215): avc: denied { write } for pid=15514 comm="syz.0.2072" name="sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 886.477911][T15388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.484872][T15388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.614053][T15388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.675555][ T29] audit: type=1400 audit(1737507811.651:3216): avc: denied { watch_mount } for pid=15546 comm="syz.6.2080" path="/294" dev="tmpfs" ino=1704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 886.737549][T15388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.761925][T15388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.203467][T15388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.495020][T15388] hsr_slave_0: entered promiscuous mode [ 887.503374][ T29] audit: type=1400 audit(1737507812.501:3217): avc: denied { ioctl } for pid=15562 comm="syz.5.2083" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 887.636075][T15388] hsr_slave_1: entered promiscuous mode [ 887.666321][T15388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 888.061825][T15388] Cannot create hsr debugfs directory [ 888.624261][ T29] audit: type=1400 audit(1737507813.621:3218): avc: denied { bind } for pid=15586 comm="syz.6.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 888.653959][T15584] syzkaller0: entered promiscuous mode [ 888.697400][T15584] syzkaller0: entered allmulticast mode [ 888.751896][ T29] audit: type=1400 audit(1737507813.751:3219): avc: denied { relabelfrom } for pid=15583 comm="syz.5.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 888.802019][ T29] audit: type=1400 audit(1737507813.751:3220): avc: denied { ioctl } for pid=15579 comm="syz.3.2088" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=47643 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 888.857781][ T29] audit: type=1400 audit(1737507813.771:3221): avc: denied { relabelto } for pid=15583 comm="syz.5.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 889.038324][ T5866] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 889.209067][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.222251][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.237942][ T5866] usb 7-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 889.247030][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.265872][ T5866] usb 7-1: config 0 descriptor?? [ 891.100701][ T29] audit: type=1400 audit(1737507816.101:3222): avc: denied { connect } for pid=15609 comm="syz.3.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 891.321135][ T29] audit: type=1400 audit(1737507816.311:3223): avc: denied { read } for pid=15609 comm="syz.3.2098" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 891.356065][ T29] audit: type=1400 audit(1737507816.311:3224): avc: denied { open } for pid=15609 comm="syz.3.2098" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 891.854600][ T29] audit: type=1400 audit(1737507816.781:3225): avc: denied { shutdown } for pid=15613 comm="syz.0.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 892.049322][ T29] audit: type=1400 audit(1737507816.831:3226): avc: denied { create } for pid=15613 comm="syz.0.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 892.099645][ T29] audit: type=1400 audit(1737507816.841:3227): avc: denied { setopt } for pid=15613 comm="syz.0.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 892.791329][T15622] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 893.167484][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 893.417408][ T5866] usbhid 7-1:0.0: can't add hid device: -71 [ 893.423430][ T5866] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 893.457626][ T5866] usb 7-1: USB disconnect, device number 36 [ 893.489052][T15611] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 893.495081][T15624] netlink: 'syz.6.2102': attribute type 10 has an invalid length. [ 893.507647][T15611] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 893.543704][T15624] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.551599][T15624] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.562373][T15611] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 893.582597][T15624] bridge0: left promiscuous mode [ 893.599270][T15624] bridge0: left allmulticast mode [ 893.618318][T15624] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.625461][T15624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.632895][T15624] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.640014][T15624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.672291][T15624] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 893.987408][ T970] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 893.995202][ T29] audit: type=1400 audit(1737507818.991:3228): avc: denied { mount } for pid=15638 comm="syz.6.2108" name="/" dev="autofs" ino=47721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 894.187912][ T29] audit: type=1400 audit(1737507819.191:3229): avc: denied { connect } for pid=15647 comm="syz.5.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 894.226058][ T970] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 894.236102][ T970] usb 4-1: config 0 has no interface number 0 [ 894.354820][ T29] audit: type=1400 audit(1737507819.351:3230): avc: denied { connect } for pid=15642 comm="syz.0.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 894.436163][ T970] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.647700][ T970] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.669478][ T29] audit: type=1400 audit(1737507819.351:3231): avc: denied { read } for pid=15642 comm="syz.0.2109" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 894.672397][T15388] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 894.705945][ T970] usb 4-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 894.728570][ T970] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 894.748060][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.780810][T15388] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 894.799663][ T29] audit: type=1400 audit(1737507819.361:3232): avc: denied { open } for pid=15642 comm="syz.0.2109" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 894.825081][ T970] usb 4-1: config 0 descriptor?? [ 894.842210][T15388] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 894.871266][ T29] audit: type=1400 audit(1737507819.361:3233): avc: denied { ioctl } for pid=15642 comm="syz.0.2109" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 894.900802][T15388] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 894.940819][T15657] serio: Serial port pts0 [ 894.961548][ T29] audit: type=1400 audit(1737507819.871:3234): avc: denied { unmount } for pid=8514 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 895.159081][T15388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.196773][T15388] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.313919][ T970] uclogic 0003:28BD:0905.000D: interface is invalid, ignoring [ 895.322764][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.329872][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.400619][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.407743][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.547433][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 895.596394][ T970] usb 4-1: USB disconnect, device number 78 [ 896.235381][T15388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.809944][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 898.971257][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 898.971273][ T29] audit: type=1400 audit(1737507823.971:3244): avc: denied { create } for pid=15734 comm="syz.0.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 898.997465][T15411] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 899.187527][T15411] usb 7-1: Using ep0 maxpacket: 32 [ 899.195338][T15411] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 899.750875][T15730] ebtables: ebtables: counters copy to user failed while replacing table [ 899.785675][T15411] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 899.816014][T15388] veth0_vlan: entered promiscuous mode [ 899.827385][T15411] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 899.873777][T15388] veth1_vlan: entered promiscuous mode [ 899.879911][T15193] Bluetooth: hci4: command 0x0405 tx timeout [ 899.881103][T15411] usb 7-1: Product: syz [ 899.890751][T15411] usb 7-1: Manufacturer: syz [ 899.895367][T15411] usb 7-1: SerialNumber: syz [ 899.908009][T15411] usb 7-1: config 0 descriptor?? [ 899.913959][T15726] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 899.975217][T15388] veth0_macvtap: entered promiscuous mode [ 900.023851][T15388] veth1_macvtap: entered promiscuous mode [ 900.065755][T15388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.137901][T15388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.154231][T15388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.185002][T15388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.210006][T15388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.258304][T15721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.271317][T15388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.297703][T15721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.311699][T15388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.342749][T15388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.386806][T15388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.417156][T15388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.456106][T15388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.494973][T15388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.525951][T15388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.556377][T15388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.581290][T15761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.617294][T15388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.650903][T15761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.671007][T15388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.683011][T15388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.702715][T15388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.730394][T15388] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.757966][T15388] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.767493][ T970] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 900.779125][T15388] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.452042][ T29] audit: type=1400 audit(1737507825.981:3245): avc: denied { ioctl } for pid=15759 comm="syz.3.2127" path="socket:[48196]" dev="sockfs" ino=48196 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 901.495066][T15767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.506056][T15767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.514935][ T970] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.527477][T15388] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.534580][T10982] usb 7-1: USB disconnect, device number 37 [ 901.548663][T15766] netdevsim netdevsim3: Direct firmware load for . [ 901.548663][T15766] failed with error -2 [ 901.559375][T15766] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 901.559375][T15766] [ 901.572288][ T970] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 901.640771][ T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.655266][ T970] usb 6-1: Product: syz [ 901.671536][ T970] usb 6-1: Manufacturer: syz [ 901.688112][ T970] usb 6-1: SerialNumber: syz [ 901.742869][T10877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.766986][T10877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.812697][T15771] No control pipe specified [ 901.823145][T10875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.844541][T10875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.248119][T15778] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2133'. [ 902.322544][T15778] netlink: 'syz.3.2133': attribute type 19 has an invalid length. [ 902.341061][ T29] audit: type=1326 audit(1737507827.341:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.3.2133" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb637b85d29 code=0x0 [ 902.432607][ T1089] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.591676][ T29] audit: type=1400 audit(1737507827.581:3247): avc: denied { append } for pid=15780 comm="syz.6.2134" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 902.622937][ T1089] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.738591][ T1089] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.995729][ T970] cdc_ncm 6-1:1.0: failed to get mac address [ 903.004098][ T970] cdc_ncm 6-1:1.0: bind() failure [ 903.015751][ T970] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 903.029144][ T29] audit: type=1400 audit(1737507828.021:3248): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 903.029776][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 903.060186][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 903.069388][ T970] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 903.084021][ T970] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 903.104086][ T970] usb 6-1: USB disconnect, device number 67 [ 903.168979][T15790] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2135'. [ 903.208288][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 903.235000][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 903.244715][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 903.252914][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 903.585613][ T1089] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.316807][ T1089] bridge_slave_1: left allmulticast mode [ 904.328802][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2141'. [ 904.349027][ T1089] bridge_slave_1: left promiscuous mode [ 904.357588][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.370765][ T1089] bridge_slave_0: left allmulticast mode [ 904.376417][ T1089] bridge_slave_0: left promiscuous mode [ 904.400441][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.447609][T15411] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 904.609862][T15411] usb 1-1: Using ep0 maxpacket: 16 [ 904.629175][T15411] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 904.646427][T15411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.657212][T15411] usb 1-1: Product: syz [ 904.662191][T15411] usb 1-1: Manufacturer: syz [ 904.666903][T15411] usb 1-1: SerialNumber: syz [ 904.690697][T15411] usb 1-1: config 0 descriptor?? [ 904.702425][T15411] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 904.727609][T15411] usb 1-1: Detected FT-X [ 904.928262][T15411] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 905.178613][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.190111][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.201557][ T1089] bond0 (unregistering): Released all slaves [ 905.478592][ T53] Bluetooth: hci4: command tx timeout [ 905.490781][T15411] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 905.678773][T15786] chnl_net:caif_netlink_parms(): no params data found [ 905.729792][T15824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.752839][T15824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.370463][ T29] audit: type=1400 audit(1737507830.831:3249): avc: denied { listen } for pid=15832 comm="syz.6.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 906.405351][ T1089] hsr_slave_0: left promiscuous mode [ 906.411675][ T1089] hsr_slave_1: left promiscuous mode [ 906.418313][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 906.426264][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.485740][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 906.496592][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.547456][ T1089] veth1_macvtap: left promiscuous mode [ 906.553182][ T1089] veth0_macvtap: left promiscuous mode [ 906.561664][ T1089] veth1_vlan: left promiscuous mode [ 906.567156][ T1089] veth0_vlan: left promiscuous mode [ 907.269240][ T970] usb 1-1: USB disconnect, device number 80 [ 907.342310][ T970] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 907.376792][ T970] ftdi_sio 1-1:0.0: device disconnected [ 908.761116][ T53] Bluetooth: hci4: command tx timeout [ 909.224037][ T29] audit: type=1400 audit(1737507833.871:3250): avc: denied { read } for pid=15858 comm="syz.6.2151" path="socket:[48691]" dev="sockfs" ino=48691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 909.555026][T10432] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 909.747429][T10432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.765016][T10432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.787063][T10432] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 909.804175][T10432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.828267][T10432] usb 4-1: config 0 descriptor?? [ 909.847515][ T5863] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 910.038589][ T5863] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 910.039957][ T29] audit: type=1400 audit(1737507835.021:3251): avc: denied { bind } for pid=15876 comm="syz.0.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 910.067288][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.067471][ T5863] usb 7-1: Product: syz [ 910.067489][ T5863] usb 7-1: Manufacturer: syz [ 910.067504][ T5863] usb 7-1: SerialNumber: syz [ 910.072371][ T5863] usb 7-1: config 0 descriptor?? [ 910.166850][ T29] audit: type=1400 audit(1737507835.021:3252): avc: denied { name_bind } for pid=15876 comm="syz.0.2157" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 910.264915][ T29] audit: type=1400 audit(1737507835.021:3253): avc: denied { node_bind } for pid=15876 comm="syz.0.2157" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 910.287916][ T29] audit: type=1400 audit(1737507835.031:3254): avc: denied { listen } for pid=15876 comm="syz.0.2157" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 910.319774][ T29] audit: type=1400 audit(1737507835.091:3255): avc: denied { name_connect } for pid=15876 comm="syz.0.2157" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 910.496638][ T29] audit: type=1400 audit(1737507835.131:3256): avc: denied { accept } for pid=15876 comm="syz.0.2157" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 910.581236][T15876] dccp_close: ABORT with 15584 bytes unread [ 910.593797][ T29] audit: type=1400 audit(1737507835.141:3257): avc: denied { write } for pid=15876 comm="syz.0.2157" laddr=::ffff:127.0.0.1 lport=20000 faddr=::ffff:127.0.0.1 fport=34840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 910.616197][ T5863] usb 7-1: USB disconnect, device number 38 [ 910.763296][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 910.809925][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 910.827534][ T53] Bluetooth: hci4: command tx timeout [ 910.987521][ T5864] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 911.155801][ T5864] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 911.171525][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.182953][ T5864] usb 1-1: Product: syz [ 911.195334][T10432] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #100: -71 [ 911.196857][ T5864] usb 1-1: Manufacturer: syz [ 911.204912][T10432] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 911.216219][ T5864] usb 1-1: SerialNumber: syz [ 911.224338][ T5864] usb 1-1: config 0 descriptor?? [ 911.229671][T10432] uclogic 0003:256C:006D.000E: failed probing pen v1 parameters: -71 [ 911.252474][T10432] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 911.274537][T10432] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 911.291720][T10432] usb 4-1: USB disconnect, device number 79 [ 911.571933][T15786] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.618109][T15786] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.632099][ T29] audit: type=1400 audit(1737507836.621:3258): avc: denied { connect } for pid=15891 comm="syz.6.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 911.677571][T15786] bridge_slave_0: entered allmulticast mode [ 911.713101][T15786] bridge_slave_0: entered promiscuous mode [ 911.715064][ T5864] int51x1 1-1:0.0: probe with driver int51x1 failed with error -22 [ 911.744205][ T29] audit: type=1400 audit(1737507836.631:3259): avc: denied { read } for pid=15891 comm="syz.6.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 911.766785][T15786] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.797954][T15786] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.805198][T15786] bridge_slave_1: entered allmulticast mode [ 911.827111][T15786] bridge_slave_1: entered promiscuous mode [ 912.021417][T15786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.207194][T15786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.425652][T10432] usb 1-1: USB disconnect, device number 81 [ 912.510851][T15786] team0: Port device team_slave_0 added [ 912.559409][T15786] team0: Port device team_slave_1 added [ 912.701523][T15786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.725510][T15786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.774604][ T29] audit: type=1400 audit(1737507837.771:3260): avc: denied { ioctl } for pid=15916 comm="syz.3.2165" path="mnt:[4026532798]" dev="nsfs" ino=4026532798 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 912.779033][T15786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.820258][T15786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.835735][T15786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.862902][ T29] audit: type=1400 audit(1737507837.771:3261): avc: denied { setopt } for pid=15916 comm="syz.3.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 912.890704][T15786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.921686][ T53] Bluetooth: hci4: command tx timeout [ 913.030701][T15786] hsr_slave_0: entered promiscuous mode [ 913.058271][T15786] hsr_slave_1: entered promiscuous mode [ 913.082725][T15786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 913.097413][T15786] Cannot create hsr debugfs directory [ 913.187419][T10982] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 913.317498][T10982] usb 4-1: device descriptor read/64, error -71 [ 913.617846][T10982] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 913.777475][T10982] usb 4-1: device descriptor read/64, error -71 [ 913.889626][T10982] usb usb4-port1: attempt power cycle [ 914.249073][T10982] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 914.392982][T10982] usb 4-1: device descriptor read/8, error -71 [ 914.677016][T10982] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 914.736194][T10982] usb 4-1: device descriptor read/8, error -71 [ 915.080614][T10982] usb usb4-port1: unable to enumerate USB device [ 915.366663][ T29] audit: type=1400 audit(1737507840.361:3262): avc: denied { listen } for pid=15964 comm="syz.0.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 915.417369][T15786] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 915.438403][T15786] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 915.455185][T15786] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 915.472650][T15786] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 915.547452][ T29] audit: type=1400 audit(1737507840.521:3263): avc: denied { accept } for pid=15964 comm="syz.0.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 916.414548][T15984] [ 916.416906][T15984] ============================= [ 916.422204][T15984] WARNING: suspicious RCU usage [ 916.427055][T15984] 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 Not tainted [ 916.434238][T15984] ----------------------------- [ 916.439163][T15984] ./include/linux/kvm_host.h:1036 suspicious rcu_dereference_check() usage! [ 916.448150][T15984] [ 916.448150][T15984] other info that might help us debug this: [ 916.448150][T15984] [ 916.458418][T15984] [ 916.458418][T15984] rcu_scheduler_active = 2, debug_locks = 1 [ 916.466490][T15984] no locks held by syz.3.2180/15984. [ 916.471827][T15984] [ 916.471827][T15984] stack backtrace: [ 916.477840][T15984] CPU: 0 UID: 0 PID: 15984 Comm: syz.3.2180 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 916.488264][T15984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 916.498324][T15984] Call Trace: [ 916.501603][T15984] [ 916.504537][T15984] dump_stack_lvl+0x16c/0x1f0 [ 916.509237][T15984] lockdep_rcu_suspicious+0x210/0x3c0 [ 916.514624][T15984] kvm_vcpu_gfn_to_memslot+0x48c/0x590 [ 916.520109][T15984] kvm_vcpu_write_guest+0x68/0x130 [ 916.525249][T15984] kvm_xen_write_hypercall_page+0x2fa/0x530 [ 916.531156][T15984] ? __pfx_kvm_xen_write_hypercall_page+0x10/0x10 [ 916.537591][T15984] kvm_set_msr_common+0x142a/0x35b0 [ 916.542814][T15984] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 916.548386][T15984] ? __pfx_lock_release+0x10/0x10 [ 916.553424][T15984] ? do_raw_spin_lock+0x12d/0x2c0 [ 916.558484][T15984] vmx_set_msr+0xbdd/0x3d30 [ 916.563006][T15984] ? __pfx_vmx_set_msr+0x10/0x10 [ 916.567958][T15984] ? _raw_spin_unlock+0x28/0x50 [ 916.572813][T15984] ? kvm_clear_async_pf_completion_queue+0x2e1/0x480 [ 916.579486][T15984] kvm_vcpu_reset+0x9ca/0x1a10 [ 916.584246][T15984] ? __pfx_kvm_vcpu_reset+0x10/0x10 [ 916.589442][T15984] ? kvm_set_tsc_khz+0x28b/0x520 [ 916.594379][T15984] kvm_arch_vcpu_create+0x724/0xae0 [ 916.599570][T15984] kvm_vm_ioctl+0xf93/0x3df0 [ 916.604150][T15984] ? security_file_ioctl+0x9b/0x240 [ 916.609348][T15984] ? mark_lock+0xb5/0xc60 [ 916.613670][T15984] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 916.618692][T15984] ? __pfx_mark_lock+0x10/0x10 [ 916.623467][T15984] ? find_held_lock+0x2d/0x110 [ 916.628232][T15984] ? tomoyo_path_number_perm+0x298/0x590 [ 916.633860][T15984] ? __pfx_lock_release+0x10/0x10 [ 916.638879][T15984] ? tomoyo_path_number_perm+0x46d/0x590 [ 916.644505][T15984] ? tomoyo_path_number_perm+0x190/0x590 [ 916.650127][T15984] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 916.656096][T15984] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 916.661984][T15984] ? do_vfs_ioctl+0x513/0x1990 [ 916.666741][T15984] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 916.671772][T15984] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 916.678271][T15984] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 916.685113][T15984] ? __pfx_lock_release+0x10/0x10 [ 916.690134][T15984] ? selinux_file_ioctl+0x180/0x270 [ 916.695330][T15984] ? selinux_file_ioctl+0xb4/0x270 [ 916.700436][T15984] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 916.705453][T15984] __x64_sys_ioctl+0x190/0x200 [ 916.710213][T15984] do_syscall_64+0xcd/0x250 [ 916.714706][T15984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.720596][T15984] RIP: 0033:0x7fb637b85d29 [ 916.724999][T15984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.744604][T15984] RSP: 002b:00007fb638901038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 916.753013][T15984] RAX: ffffffffffffffda RBX: 00007fb637d75fa0 RCX: 00007fb637b85d29 [ 916.760976][T15984] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 916.768935][T15984] RBP: 00007fb637c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 916.776891][T15984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.784848][T15984] R13: 0000000000000000 R14: 00007fb637d75fa0 R15: 00007fffb0edaee8 [ 916.792821][T15984] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 916.808465][ T29] audit: type=1400 audit(1737507841.811:3264): avc: denied { write } for pid=5803 comm="syz-executor" path="pipe:[4726]" dev="pipefs" ino=4726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 916.847570][T15786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.857613][ T5863] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 917.051074][ T5863] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 917.202075][T15786] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.281682][ T5863] usb 7-1: config 0 has no interface number 0 [ 917.307530][ T29] audit: type=1400 audit(1737507841.841:3265): avc: denied { recv } for pid=5484 comm="dhcpcd" saddr=10.128.0.169 src=44268 daddr=10.128.1.190 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 917.356519][ T5863] usb 7-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.469581][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.476702][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.504295][ T5863] usb 7-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.537835][ T5863] usb 7-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 917.567541][ T5863] usb 7-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 917.569499][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.576595][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.583643][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.609202][ T5863] usb 7-1: config 0 descriptor?? [ 918.217700][ T5863] usb 7-1: can't set config #0, error -71 [ 918.293807][ T5863] usb 7-1: USB disconnect, device number 39 [ 918.437109][T10875] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.557215][T10875] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.678279][T10875] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.829284][T10875] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.034462][T10875] bridge_slave_1: left allmulticast mode [ 919.042384][T10875] bridge_slave_1: left promiscuous mode [ 919.055617][T10875] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.064445][T10875] bridge_slave_0: left allmulticast mode [ 919.070570][T10875] bridge_slave_0: left promiscuous mode [ 919.078117][T10875] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.087436][ T29] audit: type=1400 audit(1737507844.081:3266): avc: denied { write } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 919.125132][ T29] audit: type=1400 audit(1737507844.081:3267): avc: denied { remove_name } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 919.164588][ T29] audit: type=1400 audit(1737507844.081:3268): avc: denied { rename } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 919.194363][ T29] audit: type=1400 audit(1737507844.081:3269): avc: denied { add_name } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 919.218090][ T29] audit: type=1400 audit(1737507844.081:3270): avc: denied { unlink } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 919.245737][ T29] audit: type=1400 audit(1737507844.091:3271): avc: denied { create } for pid=5173 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 919.734610][T10875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.746716][T10875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.764736][T10875] bond0 (unregistering): Released all slaves [ 919.991568][T10875] hsr_slave_0: left promiscuous mode [ 919.997953][T10875] hsr_slave_1: left promiscuous mode [ 920.003763][T10875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.014157][T10875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.022077][T10875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.029954][T10875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.053215][T10875] veth1_macvtap: left promiscuous mode [ 920.058815][T10875] veth0_macvtap: left promiscuous mode [ 920.065782][T10875] veth1_vlan: left promiscuous mode [ 920.071639][T10875] veth0_vlan: left promiscuous mode [ 920.635641][T10875] team0 (unregistering): Port device team_slave_1 removed [ 920.701069][T10875] team0 (unregistering): Port device team_slave_0 removed [ 921.301978][T10875] IPVS: stop unused estimator thread 0... [ 921.460755][T10875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.552974][T10875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.646252][T10875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.713265][T10875] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.208728][T10875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.302668][T10875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.373692][T10875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.428532][T10875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.585514][T10875] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.662393][T10875] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.726744][T10875] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.810427][T10875] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.943215][T10875] bridge_slave_1: left allmulticast mode [ 922.949119][T10875] bridge_slave_1: left promiscuous mode [ 922.954829][T10875] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.963716][T10875] bridge_slave_0: left allmulticast mode [ 922.969577][T10875] bridge_slave_0: left promiscuous mode [ 922.975938][T10875] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.986664][T10875] bridge_slave_1: left allmulticast mode [ 922.992808][T10875] bridge_slave_1: left promiscuous mode [ 922.998990][T10875] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.022582][T10875] bridge_slave_0: left allmulticast mode [ 923.028548][T10875] bridge_slave_0: left promiscuous mode [ 923.034221][T10875] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.045369][T10875] bridge_slave_1: left allmulticast mode [ 923.051340][T10875] bridge_slave_1: left promiscuous mode [ 923.056994][T10875] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.065834][T10875] bridge_slave_0: left allmulticast mode [ 923.075277][T10875] bridge_slave_0: left promiscuous mode [ 923.085329][T10875] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.597690][ T5864] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 923.849123][T10875] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 923.986026][T10875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.996029][T10875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.006124][T10875] bond0 (unregistering): Released all slaves [ 924.103709][T10875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.117914][T10875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.127489][T10875] bond0 (unregistering): Released all slaves [ 924.233744][T10875] bond0 (unregistering): Released all slaves [ 924.335159][T10875] bond1 (unregistering): Released all slaves [ 924.438696][T10875] bond2 (unregistering): Released all slaves [ 924.541824][T10875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.552766][T10875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.562625][T10875] bond0 (unregistering): Released all slaves [ 925.266032][T10875] hsr_slave_0: left promiscuous mode [ 925.274412][T10875] hsr_slave_1: left promiscuous mode [ 925.280492][T10875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.289765][T10875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.297284][T10875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.306074][T10875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.316399][T10875] hsr_slave_0: left promiscuous mode [ 925.322394][T10875] hsr_slave_1: left promiscuous mode [ 925.329866][T10875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.339179][T10875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.349268][T10875] hsr_slave_0: left promiscuous mode [ 925.354905][T10875] hsr_slave_1: left promiscuous mode [ 925.364996][T10875] hsr_slave_0: left promiscuous mode [ 925.370830][T10875] hsr_slave_1: left promiscuous mode [ 925.376532][T10875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.384458][T10875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.392774][T10875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.400266][T10875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.434704][T10875] veth1_macvtap: left promiscuous mode [ 925.440288][T10875] veth0_macvtap: left promiscuous mode [ 925.445806][T10875] veth1_vlan: left promiscuous mode [ 925.451120][T10875] veth0_vlan: left promiscuous mode [ 925.458475][T10875] veth1_macvtap: left promiscuous mode [ 925.463989][T10875] veth0_macvtap: left promiscuous mode [ 925.469520][T10875] veth1_vlan: left promiscuous mode [ 925.474713][T10875] veth0_vlan: left promiscuous mode [ 925.481395][T10875] veth1_macvtap: left promiscuous mode [ 925.486883][T10875] veth0_macvtap: left promiscuous mode [ 925.492464][T10875] veth1_vlan: left promiscuous mode [ 925.497908][T10875] veth0_vlan: left promiscuous mode [ 925.916669][T10875] team0 (unregistering): Port device team_slave_1 removed [ 925.952740][T10875] team0 (unregistering): Port device team_slave_0 removed