last executing test programs: 2m48.376211041s ago: executing program 0 (id=265): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, 0x0, 0x40080c4) 2m47.069090071s ago: executing program 0 (id=266): r0 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xdfc, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0xfe, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0xb, 0x5, 0x1, {0x22, 0x7ca}}, {{{0x9, 0x5, 0x81, 0x3, 0x30, 0x3, 0x8, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x3, 0x4, 0x8}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x8, 0x3, 0x5, 0xff}, 0x9f, &(0x7f0000000140)={0x5, 0xf, 0x9f, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x7, 0x1}, @ptm_cap={0x3}, @generic={0x72, 0x10, 0xb, "aaa178dca9bf22801e73992dfbbba9a3ab5632e3a210e52c6095a43763d666ef24fb620f3a4ef9a89084907e801823f6e17b3b55f54555072fcc4b938e6559d63232a9d038432ae8a8115a207ee879f3da4598d4fbc547489e2adf3423bd9e4b8af847dd80216338724a0ecbdd821a"}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "3515eae5e4602db0560dcdb578973180"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xa, 0xa, 0xa26}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x180a}}]}) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f0000000300)={0x20, 0x30, 0xdc, {0xdc, 0xf, "a0761534876c02f868a5c11cfae84b00a27121b4ce44754898b94fb3b979f2f8cbd2aecbce42481109aeb1464fa05678316568993810ead970f11aeb5e10b1f356ef79efb9591f0f1357019e3d94253cb0156b7bf66d9386d63a0119507b50885b29c9a3e7fe167a7bf9f9f2f95a62718da1581bc6722d38dc8abf346dc88c1cd392b38b896f9f97ce7016235f65dbcca5abbedfbeb7522270d86228e9726db188305a56aad0cdd995775fb3e8afab19d3cd3ce24e7a79802c8a3e3a6c2340cc3245c17d7822ab2ab4de4b3c75fe9f9af373c0c172d73e1eb375"}}, &(0x7f0000000400)={0x0, 0x3, 0x19, @string={0x19, 0x3, "69dd4ce11d721b3a008b2d3e2aa8307e110abb7a2337e0"}}, &(0x7f0000000440)=ANY=[@ANYBLOB="000080458fc600fb198570"], &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x2cd}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000500)={0x40, 0xf, 0x4e, "5e56d12f4d504061e5fda9080fc0635548617bb37e3e96896007f00544fd711c9090acb90f92768396b487e394359b58237bd1bb9f140c1c52ebda63abb514e88a010c08a4f4cd0b7ea1efb320cb"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000600)={0x20, 0x1, 0xe1, "b7240f7d4581557d013ed5c6bb9dd31ed18c1ec3e36bd36b3bd631637dcdda3519d8d4a67ce3078adbf60bfd10aa0b565e6204bb07873b06d280527776476db1964c30d143c3ac03ec5a7f4f78d3f3e03acc0abb01b248a765bbba65e0c050fcc8f4bb7659e83b9c877052d38590827789ce69beded9affe4aafa8da7754c416b990b89757eeae67077c61aae3aa5be74bc06e467dbdf7033b57d9a49c56ee46349d6c5cfb8f43a676b00da44d2980c9d8480acad04bf1ae9bfdc991e7094830b07f6fe9d791e706ab9982c8acb2213fe6bc1d3301ce6eded7eccb2e6ed7974dae"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0xa6}}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x40080) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000100)=0xab) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x27975000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, 0x0, &(0x7f00000002c0)) 2m44.324534403s ago: executing program 0 (id=276): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) io_setup(0x80004, &(0x7f0000000180)) listen(0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001bf40)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000db8a2f7aa1af5a3e08548aab2a89000000001800000018000000020000000000000000000003000000000200000002000000200000000000"], 0x0, 0x32}, 0x28) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m43.037226504s ago: executing program 0 (id=281): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000400)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) 2m42.766982621s ago: executing program 0 (id=284): read$msr(0xffffffffffffffff, &(0x7f0000000080)=""/123, 0x7b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xf, &(0x7f0000000240)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000c40)={0x1c, &(0x7f0000000240)={0x0, 0x16, 0x1, "02"}, 0x0, 0x0}) 2m42.102472967s ago: executing program 0 (id=289): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00008000000024001280090001007866726d0000000014001292080002090000000004004900fdd49c7a41790b94e3dc1777bcd88a"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4048050) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r2, 0x0, 0x0}, 0x20) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x6c}, 0x38) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x0, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000240), {[{{@arp={@multicast1, @multicast1, 0xff, 0xffffff00, 0x9, 0x4, {@empty, {[0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x80, 0x0, 0xff]}}, 0xe4e3, 0x1ff, 0x800, 0x7283, 0x6, 0x8, 'geneve0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0x68}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @private=0xa010101, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @rand_addr=0x64010102, @local, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0xfffffffd, 0x1f, 0x18, 0x8001a8, 0x0}) sendto$inet(r1, 0x0, 0x0, 0xb, 0x0, 0x0) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="091800000100000081"]) 2m26.542509323s ago: executing program 32 (id=289): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00008000000024001280090001007866726d0000000014001292080002090000000004004900fdd49c7a41790b94e3dc1777bcd88a"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4048050) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r2, 0x0, 0x0}, 0x20) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x6c}, 0x38) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x0, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000240), {[{{@arp={@multicast1, @multicast1, 0xff, 0xffffff00, 0x9, 0x4, {@empty, {[0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x80, 0x0, 0xff]}}, 0xe4e3, 0x1ff, 0x800, 0x7283, 0x6, 0x8, 'geneve0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0x68}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @private=0xa010101, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @rand_addr=0x64010102, @local, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0xfffffffd, 0x1f, 0x18, 0x8001a8, 0x0}) sendto$inet(r1, 0x0, 0x0, 0xb, 0x0, 0x0) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="091800000100000081"]) 18.772936924s ago: executing program 4 (id=752): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200010000000009"], 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000080)=""/123, 0x7b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xf, &(0x7f0000000240)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000c40)={0x1c, &(0x7f0000000240)={0x0, 0x16, 0x1, "02"}, 0x0, 0x0}) 15.349432936s ago: executing program 4 (id=761): ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000280)={0x0, 0x8bd6, 0x4, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x11000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff3}, {0xfff3, 0xe}, {0x1, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x0) r2 = socket(0x29, 0x0, 0xfffffffd) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405668, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x59) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f72740000"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) 11.964616561s ago: executing program 4 (id=770): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001bf40)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc92", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.760951668s ago: executing program 2 (id=778): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="20002dbd7000fedbdf251800000008000300", @ANYRES32, @ANYBLOB="0c00990000000007370000000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100000000000a00060008021100000000000a000600ffffffffffff0000"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20004180) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x24048800) 9.645621901s ago: executing program 5 (id=779): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x8002, 0x4}}}}}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240d9d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0208df8e61740b7cf2d4e499d586ed9fcf0fa0ce1f930c3079cffcfd0000000000db7291f100"}, 0xd8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x422000, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000380)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x2, 0x803) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12, 0x81, 0xf6, 0x5}}) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') chdir(&(0x7f0000000280)='./file0\x00') connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x61, @private1, @loopback={0xff00000000000000}, 0x8, 0x0, 0x0, 0x2000001}}) 8.794549613s ago: executing program 2 (id=780): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x3) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x10c) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="63eccd8e0000000000000000b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000025300)=""/102392, 0x18ff8) accept(0xffffffffffffffff, &(0x7f0000000340)=@generic, &(0x7f00000003c0)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040), 0xa9d4, 0x400080) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r6, 0x6, {0x2a00, 0x80010000, 0x0, 0xe7c, 0x0, 0x0, 0x1, 0xf, 0x4, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c9a306003d8a0f4bd006d001400080000007f00"}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000040)={0x0, 0x1, 0xe7, 0x8}) 8.42744648s ago: executing program 5 (id=781): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x3) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x10c) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="63eccd8e0000000000000000b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000025300)=""/102392, 0x18ff8) accept(0xffffffffffffffff, &(0x7f0000000340)=@generic, &(0x7f00000003c0)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040), 0xa9d4, 0x400080) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r6, 0x6, {0x2a00, 0x80010000, 0x0, 0xe7c, 0x0, 0x0, 0x1, 0xf, 0x4, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c9a306003d8a0f4bd006d001400080000007f00"}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000040)={0x0, 0x1, 0xe7, 0x8}) 7.994835562s ago: executing program 2 (id=783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000040)=0x3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 7.076115998s ago: executing program 5 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) recvmmsg(r4, &(0x7f000000cf00), 0x400000000000062, 0x2, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x206, 0x20182) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_BULK(r5, 0x5523, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) dup(0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x47, 0x7, 0x51, 0x4, 0xff, "d06692", 0x7}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 7.074093107s ago: executing program 2 (id=785): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000c40)={0x1c, &(0x7f0000000240)={0x0, 0x16, 0x1, "02"}, 0x0, 0x0}) 6.96021402s ago: executing program 1 (id=786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4004) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000e00)={0x1, [{0x1, 0x478, 0x1, &(0x7f0000000440)="483c80cc44f39beec7cab2bdc6603f651417396074ccd7b44d5df38b9b70b46b6825db709bf2d15b561bbe04dee581862f0bc0da7a9205505215c76fb6d67821b0194cb27af1bdd6feac183aca483abd460fd022b47857532df6bafb9a207ca35ea1a0a01d5a93a9f753ddbab3f268a9b919390eafd4dad98a983eca7aa61f95f3a488c8f06b98a6f7a5a637e740d8"}, {0x1, 0x5a0, 0x8001, &(0x7f0000000640)="af1bb3f9994dcf10e8bbcaf06a0d2ce21bf7a0f3c8c9adee08ce6077cbd045520aec31d3de4aa9a2831a7541c1d88ea9a75e148f335e815bcb3a89c23400f6102fd4ece450135f807a455b9a738e8704ad90405e0ed7a36128b3239536cfc2765893411a37f7a976941e971025c2be26ee68b316e2f3caaac7a2d38f94ad16c9e68e98ce8eac72e3437af92c591f26bc99c543598102cf949b4ac76bdfd1bf857b815efc3ae809e77f3a636f54f0c8d45bd681fa"}, {0x1, 0x2f8, 0x1, &(0x7f0000000700)="cc351cbb6e5a0e7c70f8a364be879d618025b8336b8ffa438a49f6f1ea3d4b04479434fd07d0e82ef513952ec1a099be2103baddf982098aa50a7f845347a1d9699b64b39aececf8b361f7c7ce97a2c34556febd9d7df79168e6683f2198da"}, {0x0, 0x8, 0x1, &(0x7f00000007c0)=' '}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x80000001, &(0x7f0000000880)}, {0x3, 0x3e0, 0xfffffffd, &(0x7f0000000900)="a9ae869af3e33e14ce06363e419d6b2bd82e011377e5dd043c53a368dd61b71f45a831c9ed8c6b30814973fc48b502cf8c9262f1b3b52c707e81142c26e53b9556949ab3ed7f0cb99b0317859a994c6cef48411cec8eba4445a0ab19e99129226928f59ffd55bd4d59dfbd6d4c044c067a43203b6a7b9ceb2a6bd5c9"}, {0x1, 0x3c8, 0x2, &(0x7f00000009c0)="78f85c1361b1c5c8d12ad97ebbbf41b7fc371c5dd7d0611c30060c4b84de3fd16cc6c85ecec3d7fb240cb975f1aa18a4fa926f9b0eb43141a8f8ad2000c84b315cc8afb6b8402f6ed9bf63cd5652d7fc74c4ee756666697d6a0a84ea5dc26cd761e86e8099b344a212d7be5e8eafa654353737e63b512b25a4"}, {0x1, 0x1f0, 0x1, &(0x7f0000000a40)="c9d76dadada1f87ad66cde363dcac1c654efb4b1ef57c86d500a590ab24108e95215651d8c4c6cb99041e1db289fc089a324b6389ff760e11cfbfa0b4e42"}, {0x2, 0x10, 0x71375cd3, &(0x7f0000000a80)="1add"}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x0, &(0x7f0000000b00)}, {0x1, 0x0, 0x1, 0x0}, {0x0, 0x0, 0x6, &(0x7f0000000c00)}, {0x1, 0x0, 0x1ff, &(0x7f0000000cc0)}, {0x2, 0x0, 0x2c4, 0x0}]}) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000131401"], 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x40000014) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file7/file0\x00', &(0x7f0000000c00)=""/128, 0x80) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/157, 0x9d) 4.9001511s ago: executing program 1 (id=788): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) landlock_create_ruleset(&(0x7f0000000100)={0x815, 0x2, 0x2, 0x80, 0x1}, 0x30, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="01", 0x400000}]) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d", 0x7, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x8001, 0x0, 0x1, 0x0, 0x6, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x1100, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd8, 0x3, 0x8, 0x5, 0x0, 0x0, {0xb, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x39ca392b}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x200400d0}, 0x4) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') setresuid(0x0, 0xee01, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 4.897144211s ago: executing program 5 (id=790): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x8cff, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000010001b6f00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.696239977s ago: executing program 3 (id=791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x32b26950acee1f0d}, 0x20004450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc001001b, 0x0, 0x102}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x1, 0x7, 0x8, @private2, @local, 0x7800, 0x700, 0x3, 0x8000}}) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xb24, 0x1, 0xffff, 0x22001, 0xffffffffffffffff, 0x1000, '\x00', r7, r8, 0x4, 0x4, 0x4, 0x5}, 0x50) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000540)=0x18dc, 0x4) r10 = syz_open_dev$loop(&(0x7f00000001c0), 0x768b4741, 0x80000) ioctl$LOOP_SET_FD(r10, 0x4c00, r5) recvmmsg(r9, &(0x7f0000006dc0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000, 0x0, 0x0, 0x0, 0xf0ffffff}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r11}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000017c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB="18010000070a0101"], 0x118}, 0x1, 0x0, 0x0, 0x20080010}, 0x24000082) 4.682739374s ago: executing program 1 (id=792): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x2) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x20) getpid() openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80840, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6", 0x1}], 0x1}}], 0x3, 0x2090) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0xb7, 0x0, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd110010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54c", 0x0, 0x31, 0x6000000000000000}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10) 4.05417406s ago: executing program 5 (id=793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x3, 0x1ff, {{0x10, 0x4, 0x1, 0x9, 0x40, 0x65, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp_prespec={0x44, 0x2c, 0x4d, 0x3, 0xd, [{@empty, 0x8001}, {@multicast2, 0x5}, {@multicast2, 0xa2d}, {@rand_addr=0x64010100}, {@rand_addr=0x64010101, 0x3}]}]}}}}}) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x4) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async, rerun: 64) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011bc74d45b11f094fac0000fbdbdf2580140028426c6f000000000000000000", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x10) 3.999037578s ago: executing program 2 (id=794): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x40044160, 0x3) close(r3) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r4, 0x10, 0x70bd26, 0x25dfdbfc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x944) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x853, 0x148, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0xff7f, 0x57, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000001040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x0, 0x2, 0x77, {0x1d, 0x4, "000000003c215fef28b15d3627ca4d36322e123368290000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x78, 0x32, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e20, 0x3ff, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private1, 0x4d6, 0x6c}, @in=@remote, {0xfffffffffffffffd, 0x9, 0x100006, 0xffff, 0x8251c, 0x9, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xe, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4845}, 0x10) close_range(r0, r0, 0x0) r8 = socket(0x2b, 0x1, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) bind$rds(r8, 0x0, 0x0) write$snddsp(r3, &(0x7f0000000900)="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", 0xfa1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x1010, r1, 0x7000) syz_open_dev$ptys(0xc, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, 0x4043}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) 3.973907309s ago: executing program 4 (id=795): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) read$FUSE(r1, &(0x7f0000001100)={0x2020}, 0x2020) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f00000001c0)=0x1, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffcad) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r5 = dup2(r4, r3) ioctl$BLKRRPART(r5, 0x4d13, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) syz_open_dev$MSR(&(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x3}, 0x48) syz_open_dev$vbi(&(0x7f0000000440), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xe0042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r6) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1000, 0x0) syz_open_dev$media(0x0, 0x10, 0x101000) syz_open_dev$media(0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20001d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x5, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) 3.859388305s ago: executing program 5 (id=796): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001bf40)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc92", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.764016661s ago: executing program 3 (id=797): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x0, 0x2) 3.56100428s ago: executing program 3 (id=798): syz_open_dev$usbfs(&(0x7f0000000280), 0x76, 0x60203) pipe(&(0x7f0000000200)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$unix(0x1, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x5, 0x4, 0x4, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8000000006, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9000", @ANYRES16=r6, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r7, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) io_uring_setup(0x669c, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r7, 0x0, &(0x7f0000000440)='/', 0x1, 0xa}) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2, &(0x7f0000000180)=0xdf9, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x20000000) 3.498027913s ago: executing program 1 (id=799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4004) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000e00)={0x1, [{0x1, 0x478, 0x1, &(0x7f0000000440)="483c80cc44f39beec7cab2bdc6603f651417396074ccd7b44d5df38b9b70b46b6825db709bf2d15b561bbe04dee581862f0bc0da7a9205505215c76fb6d67821b0194cb27af1bdd6feac183aca483abd460fd022b47857532df6bafb9a207ca35ea1a0a01d5a93a9f753ddbab3f268a9b919390eafd4dad98a983eca7aa61f95f3a488c8f06b98a6f7a5a637e740d8"}, {0x1, 0x5a0, 0x8001, &(0x7f0000000640)="af1bb3f9994dcf10e8bbcaf06a0d2ce21bf7a0f3c8c9adee08ce6077cbd045520aec31d3de4aa9a2831a7541c1d88ea9a75e148f335e815bcb3a89c23400f6102fd4ece450135f807a455b9a738e8704ad90405e0ed7a36128b3239536cfc2765893411a37f7a976941e971025c2be26ee68b316e2f3caaac7a2d38f94ad16c9e68e98ce8eac72e3437af92c591f26bc99c543598102cf949b4ac76bdfd1bf857b815efc3ae809e77f3a636f54f0c8d45bd681fa"}, {0x1, 0x2f8, 0x1, &(0x7f0000000700)="cc351cbb6e5a0e7c70f8a364be879d618025b8336b8ffa438a49f6f1ea3d4b04479434fd07d0e82ef513952ec1a099be2103baddf982098aa50a7f845347a1d9699b64b39aececf8b361f7c7ce97a2c34556febd9d7df79168e6683f2198da"}, {0x0, 0x8, 0x1, &(0x7f00000007c0)=' '}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x80000001, &(0x7f0000000880)}, {0x3, 0x3e0, 0xfffffffd, &(0x7f0000000900)="a9ae869af3e33e14ce06363e419d6b2bd82e011377e5dd043c53a368dd61b71f45a831c9ed8c6b30814973fc48b502cf8c9262f1b3b52c707e81142c26e53b9556949ab3ed7f0cb99b0317859a994c6cef48411cec8eba4445a0ab19e99129226928f59ffd55bd4d59dfbd6d4c044c067a43203b6a7b9ceb2a6bd5c9"}, {0x1, 0x3c8, 0x2, &(0x7f00000009c0)="78f85c1361b1c5c8d12ad97ebbbf41b7fc371c5dd7d0611c30060c4b84de3fd16cc6c85ecec3d7fb240cb975f1aa18a4fa926f9b0eb43141a8f8ad2000c84b315cc8afb6b8402f6ed9bf63cd5652d7fc74c4ee756666697d6a0a84ea5dc26cd761e86e8099b344a212d7be5e8eafa654353737e63b512b25a4"}, {0x1, 0x1f0, 0x1, &(0x7f0000000a40)="c9d76dadada1f87ad66cde363dcac1c654efb4b1ef57c86d500a590ab24108e95215651d8c4c6cb99041e1db289fc089a324b6389ff760e11cfbfa0b4e42"}, {0x2, 0x10, 0x71375cd3, &(0x7f0000000a80)="1add"}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x0, &(0x7f0000000b00)}, {0x1, 0x0, 0x1, 0x0}, {0x0, 0x0, 0x6, &(0x7f0000000c00)}, {0x1, 0x0, 0x1ff, &(0x7f0000000cc0)}, {0x2, 0x0, 0x2c4, 0x0}]}) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000131401"], 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x40000014) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file7/file0\x00', &(0x7f0000000c00)=""/128, 0x80) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/157, 0x9d) 2.399804009s ago: executing program 3 (id=800): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r6 = dup(r4) inotify_rm_watch(r6, r5) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x3, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x2}, {0x8, 0x6558, 0x2}}}}}}, 0x0) socket(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2.220364541s ago: executing program 1 (id=801): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x2) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x20) getpid() openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80840, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6", 0x1}], 0x1}}], 0x3, 0x2090) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0xb7, 0x0, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd110010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54c", 0x0, 0x31, 0x6000000000000000}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10) 1.084828672s ago: executing program 3 (id=802): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090026000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) sendmmsg$alg(r1, &(0x7f0000006340)=[{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000380)="1eb1", 0x2}], 0x1, 0x0, 0x0, 0x4090}], 0x1, 0x800) 653.096119ms ago: executing program 4 (id=803): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000700000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) flock(r1, 0x5) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000000)="04cd2d52ce50e7e2083c117454c4b2297decbf4c000bb68fcdf71ba677764a521337bc50318483d5baebbbaf9ea7dc1cc173f99d31") (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 569.157827ms ago: executing program 1 (id=804): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000100fe80000000000000000000000000003204000280186574491cf565577b3fbed33dbc3f5e5ef650568d5da2bee94da619ef4dca095a288e2b6824babcda0b118deb985325b7d60c36541de0bb5528e8a14a2b256e811255469f4a02d3a61d144136fab14822868030f1dacdfb990cc45e010e547c82df14db055cdf7e574c3237fd32fd70e930bf88f0e88c184b981de60233"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000240)={0x16, &(0x7f00000009c0)=[{0x18, '\x00', @buffer={"04c21236b0319ddb6ecc708db75c6170d55f931c30c8c0d10ea0a3563bd5bda5", 0x20}, 0x8}, {0x2b, '\x00', @st={0x4, [{0x2, @uvalue=0x6}, {0x3, @uvalue=0x800000006}, {0x3, @svalue=0x7fff}, {0x1}]}, 0x4}, {0x9, '\x00', @buffer={"54bbf7126f6088d9c19ed88c6131ddb5031d965b8a211ddb246c66a64e29275c", 0x20}, 0x4}, {0x3, '\x00', @buffer={"0d1de3721d116db36daac92e621268a731e355f1d2e62c5afe97b443a3a4d419", 0x20}, 0x10000}, {0x41, '\x00', @st={0x4, [{0x0, @svalue=0xa3d2}, {0x1, @uvalue=0x5}, {0x2, @uvalue=0x1e6}, {0x1, @svalue=0x5}]}, 0x8}, {0x2d, '\x00', @buffer={"af787ced1e8d933c921572e777ec00b557a2cb90013f6b77c3320856920cc837", 0x20}, 0xa0f4}]}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r3, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x15, r4}) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x40040) socket$rxrpc(0x21, 0x2, 0x2) sendfile(r6, r6, 0x0, 0x101002000ff) userfaultfd(0x80001) r8 = socket$rds(0x15, 0x5, 0x0) r9 = eventfd2(0x51cc, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e72000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000b30000/0x400000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r9}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r10 = io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x757e, 0x1f410, 0x0, 0x6c, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, r0}, 0x94) io_uring_enter(r10, 0x2cbe, 0x366, 0x31, 0x0, 0x0) bind$rds(r8, 0x0, 0x0) 382.673258ms ago: executing program 3 (id=805): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 652.635µs ago: executing program 4 (id=806): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB="4c0000000000000000000000070000000100863700000003029c4c21928c0007c67dee7e9a0206dd9d057b07049a47010e892d47babbee3ce2061bcd54020cfce9c88196f9ca6c923e00000000000000140000000000000000000000070000009404010000000000140000"], 0x80}, 0xc810) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000de2f86e28aca67476a20fe94ad8939088f1499a9909e08a3f76ee73cf567ff76552066a534e71d55d9e46f7f541c5d5be01355af9019d348eb4b5856c87cea746a5fe53a52b57584c6fd174c5f568b8596497f0d4d98fa5d6e7d26e87e203f25e6907775f538fecf16f8cdb8b70484cba26c062f1ad52f80a5acded20e3e29"], 0x50) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x4080) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) creat(0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}}, 0x0) r6 = epoll_create1(0x0) epoll_pwait2(r6, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000340)={0x20000005}) socket$inet(0x2, 0x4000000000000001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x0) unshare(0x20000400) 0s ago: executing program 2 (id=807): syz_open_dev$usbfs(&(0x7f0000000280), 0x76, 0x60203) pipe(&(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$unix(0x1, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x5, 0x4, 0x4, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8000000006, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r7, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) io_uring_setup(0x669c, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r7, 0x0, &(0x7f0000000440)='/', 0x1, 0xa}) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x20000000) kernel console output (not intermixed with test programs): root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 227.139160][ T30] audit: type=1400 audit(1784717664.606:995): avc: denied { create } for pid=7359 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.181564][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.219602][ T30] audit: type=1400 audit(1784717664.666:996): avc: denied { create } for pid=7359 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 227.242649][ T5725] usb 5-1: config 0 descriptor?? [ 227.250698][ T30] audit: type=1400 audit(1784717664.686:997): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.251750][ T5725] cp210x 5-1:0.0: cp210x converter detected [ 227.298440][ T30] audit: type=1400 audit(1784717664.686:998): avc: denied { open } for pid=5610 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.577728][ T7372] CIFS mount error: No usable UNC path provided in device string! [ 227.577728][ T7372] [ 227.588110][ T7372] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 227.847177][ T5725] usb 5-1: cp210x converter now attached to ttyUSB0 [ 227.945897][ T5725] usb 5-1: USB disconnect, device number 17 [ 227.971131][ T5725] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 227.991602][ T5725] cp210x 5-1:0.0: device disconnected [ 228.030019][ T7360] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.039365][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.810577][ T7360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.843508][ T5718] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 228.846401][ T7360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.117537][ T7360] bond1: left allmulticast mode [ 229.125119][ T7360] geneve2: left promiscuous mode [ 229.130184][ T7360] geneve2: left allmulticast mode [ 229.138565][ T7368] virt_wifi0: entered promiscuous mode [ 229.153858][ T7368] virt_wifi0: entered allmulticast mode [ 229.193355][ T5891] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.240647][ T5891] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.319039][ T5891] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.352510][ T5891] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.574045][ T5742] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 229.793245][ T5742] usb 6-1: Using ep0 maxpacket: 32 [ 229.805912][ T5742] usb 6-1: config 11 has an invalid interface number: 161 but max is 0 [ 229.821891][ T5742] usb 6-1: config 11 has no interface number 0 [ 229.848915][ T5742] usb 6-1: config 11 interface 161 has no altsetting 0 [ 230.160397][ T5742] usb 6-1: New USB device found, idVendor=10d2, idProduct=81d2, bcdDevice=11.e5 [ 230.190026][ T5742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.216974][ T5742] usb 6-1: Product: syz [ 230.231477][ T5742] usb 6-1: Manufacturer: syz [ 230.248231][ T5742] usb 6-1: SerialNumber: syz [ 230.544399][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 230.544410][ T30] audit: type=1400 audit(1784717668.046:1058): avc: denied { bind } for pid=7395 comm="syz.5.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 230.614919][ T5742] usblcd 6-1:11.161: USBLCD model not supported. [ 230.641500][ T30] audit: type=1400 audit(1784717668.066:1059): avc: denied { ioctl } for pid=7395 comm="syz.5.406" path="socket:[16507]" dev="sockfs" ino=16507 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 230.644021][ T5742] usb 6-1: USB disconnect, device number 3 [ 231.325670][ T30] audit: type=1400 audit(1784717668.756:1060): avc: denied { read } for pid=7420 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 231.472578][ T30] audit: type=1400 audit(1784717668.966:1061): avc: denied { write } for pid=7425 comm="syz.2.416" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 231.564287][ T5758] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 231.726495][ T5758] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 231.744782][ T5758] usb 5-1: config 0 has no interface number 0 [ 231.762619][ T5758] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.798910][ T5758] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 231.824712][ T5758] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 231.853234][ T5758] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 231.869287][ T7436] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 231.874787][ T5758] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 231.903108][ T5758] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.929305][ T30] audit: type=1400 audit(1784717669.426:1062): avc: denied { create } for pid=7425 comm="syz.2.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 231.952065][ T5758] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 231.967854][ T7436] overlay: Unknown parameter 'euid' [ 231.968677][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.982292][ T30] audit: type=1400 audit(1784717669.426:1063): avc: denied { write } for pid=7425 comm="syz.2.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.008793][ T5758] usb 5-1: config 0 descriptor?? [ 232.015047][ T7422] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 232.039128][ T5758] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 232.051750][ T30] audit: type=1400 audit(1784717669.426:1064): avc: denied { create } for pid=7435 comm="syz.5.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 232.078434][ T30] audit: type=1400 audit(1784717669.426:1065): avc: denied { create } for pid=7435 comm="syz.5.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.108301][ T30] audit: type=1400 audit(1784717669.456:1066): avc: denied { connect } for pid=7435 comm="syz.5.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.130683][ T30] audit: type=1400 audit(1784717669.456:1067): avc: denied { write } for pid=7435 comm="syz.5.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.236866][ T9] usb 5-1: USB disconnect, device number 18 [ 232.271692][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 233.938525][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 234.324398][ T7458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7458 comm=syz.2.426 [ 234.527738][ T7464] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 234.536597][ T7464] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 235.645148][ T7486] overlayfs: failed to resolve './file0': -2 [ 235.764259][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 235.764277][ T30] audit: type=1400 audit(1784717673.266:1079): avc: denied { create } for pid=7480 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 235.827974][ T30] audit: type=1400 audit(1784717673.316:1080): avc: denied { ioctl } for pid=7480 comm="syz.2.431" path="socket:[17509]" dev="sockfs" ino=17509 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 235.915290][ T30] audit: type=1400 audit(1784717673.406:1081): avc: denied { read } for pid=7493 comm="syz.4.434" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 235.996498][ T7494] netlink: 32 bytes leftover after parsing attributes in process `syz.5.433'. [ 236.000975][ T30] audit: type=1400 audit(1784717673.406:1082): avc: denied { open } for pid=7493 comm="syz.4.434" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 236.124442][ T30] audit: type=1400 audit(1784717673.456:1083): avc: denied { sys_module } for pid=7487 comm="syz.5.433" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 236.249188][ T30] audit: type=1400 audit(1784717673.476:1084): avc: denied { getopt } for pid=7487 comm="syz.5.433" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 236.335768][ T30] audit: type=1400 audit(1784717673.566:1085): avc: denied { map } for pid=7490 comm="syz.1.432" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 236.448504][ T30] audit: type=1400 audit(1784717673.566:1086): avc: denied { read write } for pid=7490 comm="syz.1.432" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 236.570663][ T30] audit: type=1400 audit(1784717673.926:1087): avc: denied { write } for pid=7490 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 236.654159][ T30] audit: type=1400 audit(1784717673.926:1088): avc: denied { connect } for pid=7490 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 236.814872][ T7510] jfs: Unknown parameter 'disca"d' [ 237.293349][ T803] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 237.455870][ T803] usb 3-1: Using ep0 maxpacket: 16 [ 237.560537][ T803] usb 3-1: config 0 has no interfaces? [ 237.568587][ T803] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 237.578179][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.586350][ T803] usb 3-1: Product: syz [ 237.590606][ T803] usb 3-1: Manufacturer: syz [ 237.596710][ T803] usb 3-1: SerialNumber: syz [ 237.604930][ T803] usb 3-1: config 0 descriptor?? [ 238.092987][ T803] usb 3-1: USB disconnect, device number 13 [ 238.399610][ T7524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.478485][ T7531] overlayfs: failed to clone lowerpath [ 238.653262][ T7539] netlink: 32 bytes leftover after parsing attributes in process `syz.4.445'. [ 238.775136][ T7548] netlink: 'syz.2.447': attribute type 10 has an invalid length. [ 238.818930][ T7548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 238.841667][ T7548] team0: Port device netdevsim1 added [ 238.933219][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 239.136638][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.160074][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.170929][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 239.182327][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.212959][ T10] usb 4-1: config 0 descriptor?? [ 239.243329][ T5718] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 239.340172][ T7558] netlink: 32 bytes leftover after parsing attributes in process `syz.5.449'. [ 239.404519][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 239.422587][ T5718] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 239.441339][ T5718] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.465096][ T5718] usb 5-1: config 0 has no interface number 0 [ 239.482957][ T5718] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 239.506762][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.526530][ T5718] usb 5-1: Product: syz [ 239.538489][ T5718] usb 5-1: Manufacturer: syz [ 239.556962][ T5718] usb 5-1: SerialNumber: syz [ 239.570797][ T5718] usb 5-1: config 0 descriptor?? [ 239.597571][ T5718] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 239.621104][ T5718] cx231xx 5-1:0.1: Not found matching IAD interface [ 239.650127][ T10] hid_parser_main: 7 callbacks suppressed [ 239.650147][ T10] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 239.752629][ T10] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 239.794938][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0006/input/input11 [ 239.811763][ T5718] usb 5-1: USB disconnect, device number 19 [ 240.296802][ T7567] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 240.307233][ T10] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 240.324060][ T7567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.338405][ T10] usb 4-1: USB disconnect, device number 17 [ 240.478628][ T7571] fido_id[7571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 240.714892][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.453'. [ 240.899588][ T5742] IPVS: starting estimator thread 0... [ 241.010588][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 241.010603][ T30] audit: type=1400 audit(1784717678.506:1123): avc: denied { write } for pid=7579 comm="syz.5.453" lport=6165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.217601][ T7596] IPVS: using max 50 ests per chain, 120000 per kthread [ 241.253321][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 241.313714][ T5742] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 241.342251][ T30] audit: type=1400 audit(1784717678.836:1124): avc: denied { write } for pid=7601 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 241.434558][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 241.441277][ T10] usb 4-1: config 0 has no interfaces? [ 241.449537][ T10] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 241.472917][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.483620][ T5742] usb 3-1: Using ep0 maxpacket: 8 [ 241.484014][ T10] usb 4-1: Product: syz [ 241.494712][ T7605] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 241.502842][ T10] usb 4-1: Manufacturer: syz [ 241.502950][ T5742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.507679][ T10] usb 4-1: SerialNumber: syz [ 241.606509][ T5742] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 241.623052][ T5742] usb 3-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 241.633679][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.652842][ T5742] usb 3-1: config 0 descriptor?? [ 241.702832][ T7611] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7610] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7611] [ 241.844290][ T10] usb 4-1: config 0 descriptor?? [ 242.100880][ T5742] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 242.112507][ T7601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.123523][ T5742] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 242.147175][ T10] usb 4-1: USB disconnect, device number 18 [ 242.149290][ T5742] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 242.174897][ T5742] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 242.210339][ T5742] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 242.236436][ T5742] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 242.249126][ T5742] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 242.261243][ T5742] cypress 0003:04B4:BCA1.0007: unknown main item tag 0x0 [ 242.392482][ T5742] cypress 0003:04B4:BCA1.0007: hidraw0: USB HID v0.81 Device [HID 04b4:bca1] on usb-dummy_hcd.2-1/input0 [ 242.514450][ T5742] usb 3-1: USB disconnect, device number 14 [ 243.389171][ T7624] fido_id[7624]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 244.056778][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 244.371441][ T30] audit: type=1400 audit(1784717681.526:1125): avc: denied { unlink } for pid=7626 comm="syz.4.466" name="#10" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 244.424791][ T30] audit: type=1400 audit(1784717681.546:1126): avc: denied { mount } for pid=7626 comm="syz.4.466" name="/" dev="overlay" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 244.456067][ T7637] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 244.477070][ T30] audit: type=1400 audit(1784717681.556:1127): avc: denied { write } for pid=7626 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 244.501587][ T7637] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 244.518038][ T30] audit: type=1400 audit(1784717682.016:1128): avc: denied { execute } for pid=7634 comm="syz.1.468" path="/101/bus/file1" dev="tmpfs" ino=561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 244.687306][ T30] audit: type=1400 audit(1784717682.186:1129): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 244.894820][ T5742] Process accounting resumed [ 244.919313][ T30] audit: type=1400 audit(1784717682.416:1130): avc: denied { bind } for pid=7643 comm="syz.5.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 244.942106][ T30] audit: type=1400 audit(1784717682.416:1131): avc: denied { name_bind } for pid=7643 comm="syz.5.470" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 244.964650][ T30] audit: type=1400 audit(1784717682.416:1132): avc: denied { node_bind } for pid=7643 comm="syz.5.470" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 244.995978][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 245.024513][ T7640] Process accounting resumed [ 245.297724][ T7660] netlink: 32 bytes leftover after parsing attributes in process `syz.3.476'. [ 245.344130][ T7662] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 245.473325][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 245.543222][ T803] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 245.643607][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 245.665224][ T10] usb 3-1: config 0 has no interfaces? [ 245.672771][ T10] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 245.696002][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.711945][ T10] usb 3-1: Product: syz [ 245.723257][ T803] usb 2-1: Using ep0 maxpacket: 32 [ 245.728471][ T10] usb 3-1: Manufacturer: syz [ 245.738570][ T10] usb 3-1: SerialNumber: syz [ 245.746432][ T803] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 245.767518][ T803] usb 2-1: config 0 has no interface number 0 [ 245.774531][ T10] usb 3-1: config 0 descriptor?? [ 245.792346][ T803] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 245.823012][ T803] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 245.943192][ T803] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 245.964744][ T803] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.033981][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 246.318739][ T5718] usb 3-1: USB disconnect, device number 15 [ 246.449645][ T803] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 246.477872][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.498753][ T803] usb 2-1: Product: syz [ 246.509200][ T803] usb 2-1: Manufacturer: syz [ 246.523723][ T803] usb 2-1: SerialNumber: syz [ 246.540509][ T803] usb 2-1: config 0 descriptor?? [ 246.555119][ T7661] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 246.572485][ T803] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input12 [ 246.607545][ T4961] usb 2-1: BOGUS urb xfer, pipe 1 != type 3 [ 247.386074][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 247.386089][ T30] audit: type=1400 audit(1784717684.886:1135): avc: denied { checkpoint_restore } for pid=7682 comm="syz.3.482" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 247.513551][ T7686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 247.840498][ T30] audit: type=1400 audit(1784717685.336:1136): avc: denied { map } for pid=7682 comm="syz.3.482" path="pipe:[5263]" dev="pipefs" ino=5263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 248.275062][ T803] usb 2-1: USB disconnect, device number 17 [ 248.390045][ T30] audit: type=1400 audit(1784717685.886:1137): avc: denied { write } for pid=7695 comm="syz.4.485" path="socket:[17939]" dev="sockfs" ino=17939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 248.481544][ T30] audit: type=1400 audit(1784717685.886:1138): avc: denied { ioctl } for pid=7682 comm="syz.3.482" path="socket:[16926]" dev="sockfs" ino=16926 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 248.571519][ T30] audit: type=1400 audit(1784717685.916:1139): avc: denied { read } for pid=7695 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 248.753567][ T5718] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 248.776297][ T7709] netlink: 16 bytes leftover after parsing attributes in process `syz.5.488'. [ 249.753613][ T30] audit: type=1400 audit(1784717687.206:1140): avc: denied { ioctl } for pid=7710 comm="syz.3.490" path="socket:[16959]" dev="sockfs" ino=16959 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.897999][ T5718] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 250.156736][ T30] audit: type=1400 audit(1784717687.426:1141): avc: denied { bind } for pid=7710 comm="syz.3.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 250.201902][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.213410][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.221474][ T5718] usb 5-1: Product: syz [ 250.226856][ T5718] usb 5-1: Manufacturer: syz [ 250.580254][ T5718] usb 5-1: SerialNumber: syz [ 250.619473][ T5718] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 250.661765][ T30] audit: type=1400 audit(1784717688.146:1142): avc: denied { firmware_load } for pid=804 comm="kworker/1:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 250.747536][ T804] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 250.943296][ T5718] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 251.103417][ T5718] usb 6-1: Using ep0 maxpacket: 16 [ 251.121723][ T5718] usb 6-1: config 0 has no interfaces? [ 251.140275][ T5718] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 251.166055][ T7719] IPVS: set_ctl: invalid protocol: 175 172.20.20.187:0 [ 251.177926][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.209178][ T5718] usb 6-1: Product: syz [ 251.239801][ T7704] syz.4.489 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 251.255216][ T5718] usb 6-1: Manufacturer: syz [ 251.276710][ T5718] usb 6-1: SerialNumber: syz [ 251.302962][ T5718] usb 6-1: config 0 descriptor?? [ 251.350941][ T30] audit: type=1400 audit(1784717688.846:1143): avc: denied { listen } for pid=7721 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 251.440767][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.470893][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 251.482664][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.584250][ T803] usb 6-1: USB disconnect, device number 4 [ 251.634837][ T30] audit: type=1400 audit(1784717689.136:1144): avc: denied { mounton } for pid=7703 comm="syz.4.489" path="/proc/280/task" dev="proc" ino=16985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 252.103250][ T804] usb 5-1: Service connection timeout for: 256 [ 252.121058][ T804] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 252.165508][ T804] ath9k_htc: Failed to initialize the device [ 252.236665][ T804] usb 5-1: ath9k_htc: USB layer deinitialized [ 252.305726][ T803] usb 5-1: USB disconnect, device number 20 [ 252.587054][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 252.587092][ T30] audit: type=1400 audit(1784717690.086:1146): avc: denied { map } for pid=7733 comm="syz.5.496" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.626171][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 252.643233][ T30] audit: type=1400 audit(1784717690.086:1147): avc: denied { execute } for pid=7733 comm="syz.5.496" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.687554][ T30] audit: type=1400 audit(1784717690.176:1148): avc: denied { setopt } for pid=7733 comm="syz.5.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.947976][ T30] audit: type=1400 audit(1784717690.446:1149): avc: denied { mount } for pid=7738 comm="syz.4.497" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 253.023483][ T5718] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 253.036459][ T30] audit: type=1400 audit(1784717690.476:1150): avc: denied { sqpoll } for pid=7738 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 253.107884][ T7739] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 253.187153][ T5718] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 253.209985][ T5718] usb 6-1: config 0 interface 0 has no altsetting 0 [ 253.244930][ T5718] usb 6-1: config 0 interface 0 has no altsetting 0 [ 253.277334][ T5718] usb 6-1: config 0 interface 0 has no altsetting 0 [ 253.299254][ T5718] usb 6-1: config 0 interface 0 has no altsetting 0 [ 253.320522][ T5718] usb 6-1: config 0 interface 0 has no altsetting 0 [ 253.344494][ T5718] usb 6-1: config 0 interface 0 has no altsetting 0 [ 253.367737][ T5718] usb 6-1: config 0 interface 0 has no altsetting 0 [ 253.393881][ T5718] usb 6-1: config 0 interface 0 has no altsetting 0 [ 253.420251][ T5718] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 253.448908][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 253.475655][ T5718] usb 6-1: Product: syz [ 253.488669][ T5718] usb 6-1: Manufacturer: syz [ 253.501183][ T5718] usb 6-1: SerialNumber: syz [ 253.528897][ T5718] usb 6-1: config 0 descriptor?? [ 253.594705][ T30] audit: type=1400 audit(1784717691.096:1151): avc: denied { create } for pid=7745 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 253.697530][ T30] audit: type=1400 audit(1784717691.096:1152): avc: denied { bind } for pid=7745 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 253.743479][ T30] audit: type=1400 audit(1784717691.096:1153): avc: denied { listen } for pid=7745 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 253.783425][ T30] audit: type=1400 audit(1784717691.096:1154): avc: denied { read } for pid=7745 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 253.861067][ T30] audit: type=1400 audit(1784717691.356:1155): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 253.997300][ T5718] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 254.069282][ T7755] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.119278][ T5742] hid-generic 0800:70BD28:25DFDBFB.0008: hidraw0: HID v0.17 Device [syz1] on syz0 [ 254.221115][ T5718] usb 2-1: device descriptor read/64, error -71 [ 254.356596][ T5742] usb 6-1: USB disconnect, device number 5 [ 254.377912][ T7761] fido_id[7761]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 254.473214][ T5718] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 254.633234][ T5718] usb 2-1: device descriptor read/64, error -71 [ 254.734921][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 255.075262][ T5718] usb usb2-port1: attempt power cycle [ 255.415231][ T5718] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 255.478596][ T5718] usb 2-1: device descriptor read/8, error -71 [ 255.631789][ T7786] overlayfs: failed to resolve './file1/file0': -2 [ 255.703204][ T803] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 255.733296][ T5718] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 255.773699][ T5718] usb 2-1: device descriptor read/8, error -71 [ 255.832858][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.868333][ T803] usb 4-1: Using ep0 maxpacket: 16 [ 255.885382][ T803] usb 4-1: config 0 has no interfaces? [ 255.893946][ T5718] usb usb2-port1: unable to enumerate USB device [ 255.900667][ T803] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 255.932669][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.953094][ T803] usb 4-1: Product: syz [ 255.967850][ T803] usb 4-1: Manufacturer: syz [ 256.623176][ T803] usb 4-1: SerialNumber: syz [ 256.637415][ T803] usb 4-1: config 0 descriptor?? [ 256.812047][ T7799] dummy0: entered promiscuous mode [ 256.855487][ T9] usb 4-1: USB disconnect, device number 19 [ 257.700198][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 257.700214][ T30] audit: type=1400 audit(1784717695.196:1180): avc: denied { write } for pid=7814 comm="syz.1.517" path="socket:[17182]" dev="sockfs" ino=17182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 257.798931][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 257.983211][ T803] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 258.208377][ T803] usb 4-1: Using ep0 maxpacket: 8 [ 258.225656][ T803] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 258.330153][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 258.636267][ T803] usb 4-1: config 0 has no interface number 0 [ 258.645406][ T803] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 258.654618][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.662638][ T803] usb 4-1: Product: syz [ 258.667589][ T803] usb 4-1: Manufacturer: syz [ 258.672676][ T803] usb 4-1: SerialNumber: syz [ 258.688318][ T803] usb 4-1: config 0 descriptor?? [ 259.030110][ T803] uvcvideo 4-1:0.31: Found Unit with invalid ID 0 [ 259.063111][ T803] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 259.076376][ T803] uvcvideo 4-1:0.31: No valid video chain found. [ 259.090742][ T803] usb 4-1: USB disconnect, device number 20 [ 259.141431][ T30] audit: type=1400 audit(1784717696.636:1181): avc: denied { mmap_zero } for pid=7831 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 259.266763][ T7842] netlink: 32 bytes leftover after parsing attributes in process `syz.1.524'. [ 259.883593][ T5718] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 260.394064][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 260.409031][ T5718] usb 2-1: config 0 has no interfaces? [ 260.440835][ T5718] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 260.457586][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.482225][ T5718] usb 2-1: Product: syz [ 260.494312][ T5718] usb 2-1: Manufacturer: syz [ 260.506584][ T5718] usb 2-1: SerialNumber: syz [ 260.525865][ T5718] usb 2-1: config 0 descriptor?? [ 260.669419][ T30] audit: type=1400 audit(1784717698.166:1182): avc: denied { write } for pid=7863 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 260.752794][ T5718] usb 2-1: USB disconnect, device number 22 [ 261.224266][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.531'. [ 261.395433][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'. [ 261.747729][ T7885] netlink: 32 bytes leftover after parsing attributes in process `syz.4.535'. [ 261.796869][ T30] audit: type=1400 audit(1784717699.286:1183): avc: denied { watch watch_reads } for pid=7871 comm="syz.3.532" path="/110" dev="tmpfs" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 262.125023][ T7897] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7897 comm=syz.4.539 [ 262.141846][ T30] audit: type=1400 audit(1784717699.616:1184): avc: denied { nlmsg_write } for pid=7896 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 262.199724][ T7899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.268878][ T30] audit: type=1400 audit(1784717699.626:1185): avc: denied { connect } for pid=7896 comm="syz.4.539" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.403400][ T30] audit: type=1400 audit(1784717699.816:1186): avc: denied { create } for pid=7901 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 262.753204][ T5718] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 262.779025][ T30] audit: type=1400 audit(1784717700.276:1187): avc: denied { write } for pid=7906 comm="syz.5.542" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 262.933181][ T5718] usb 5-1: Using ep0 maxpacket: 16 [ 262.948269][ T5718] usb 5-1: config 1 has an invalid descriptor of length 175, skipping remainder of the config [ 262.965541][ T5718] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.013839][ T5718] usb 5-1: config 1 interface 0 has no altsetting 0 [ 263.038821][ T5718] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 263.068221][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.084520][ T5718] usb 5-1: Product: syz [ 263.123020][ T5718] usb 5-1: Manufacturer: syz [ 263.134758][ T5718] usb 5-1: SerialNumber: syz [ 263.169969][ T5718] usb 5-1: 0:1 : does not exist [ 263.184982][ T5718] usb 5-1: unit 6 not found! [ 263.189767][ T5718] usb 5-1: unit 12 not found! [ 263.357273][ T5718] usb 5-1: unit 101 not found! [ 263.357710][ T803] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 263.362138][ T5718] usb 5-1: unit 189 not found! [ 263.533268][ T803] usb 4-1: Using ep0 maxpacket: 8 [ 263.540999][ T803] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.554339][ T803] usb 4-1: config 0 has no interface number 0 [ 263.592501][ T803] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.615389][ T803] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 263.634663][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.677985][ T803] usb 4-1: config 0 descriptor?? [ 263.737633][ T803] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 263.771891][ T5718] usb 5-1: USB disconnect, device number 21 [ 264.121486][ T6370] udevd[6370]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.823838][ T30] audit: type=1400 audit(1784717702.316:1188): avc: denied { ioctl } for pid=7924 comm="syz.4.546" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19496 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 265.304721][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.547'. [ 265.861084][ T7938] bond2: entered allmulticast mode [ 266.083222][ T5718] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 266.123223][ T9] usb 4-1: USB disconnect, device number 21 [ 266.243890][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 266.251200][ T5718] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 266.264562][ T5718] usb 2-1: config 0 has no interface number 0 [ 266.274019][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.548'. [ 266.282957][ T5718] usb 2-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 266.303190][ T5718] usb 2-1: config 0 interface 246 altsetting 255 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 266.323782][ T5718] usb 2-1: config 0 interface 246 has no altsetting 0 [ 266.338864][ T5718] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 266.350288][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.366573][ T5718] usb 2-1: Product: syz [ 266.374839][ T5718] usb 2-1: Manufacturer: syz [ 266.383730][ T5718] usb 2-1: SerialNumber: syz [ 266.399728][ T5718] usb 2-1: config 0 descriptor?? [ 266.453353][ T5758] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 266.556024][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.550'. [ 266.577372][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.552'. [ 266.904825][ T5758] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 266.923258][ T5758] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 266.941144][ T5758] usb 3-1: config 0 has no interface number 0 [ 266.944384][ T7937] netlink: 'syz.1.549': attribute type 1 has an invalid length. [ 266.947341][ T30] audit: type=1400 audit(1784717704.436:1189): avc: denied { block_suspend } for pid=7936 comm="syz.1.549" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.979757][ T5758] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 267.018118][ T5758] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.047711][ T5718] usb 2-1: USB disconnect, device number 23 [ 267.142719][ T5758] usb 3-1: config 0 interface 52 has no altsetting 0 [ 267.158869][ T5758] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 267.175441][ T5758] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 267.183787][ T5758] usb 3-1: Manufacturer: syz [ 267.206276][ T5758] usb 3-1: config 0 descriptor?? [ 267.218106][ T5758] hub 3-1:0.52: bad descriptor, ignoring hub [ 267.227549][ T5758] hub 3-1:0.52: probe with driver hub failed with error -5 [ 267.317963][ T7959] netlink: 36 bytes leftover after parsing attributes in process `syz.4.553'. [ 267.634034][ T5758] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input13 [ 267.863603][ T5706] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 268.043225][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 268.060877][ T5706] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.102192][ T5706] usb 5-1: config 0 interface 0 has no altsetting 0 [ 268.115499][ T5706] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 268.125500][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.128293][ T7970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.557'. [ 268.145376][ T5706] usb 5-1: config 0 descriptor?? [ 268.284948][ T803] usb 3-1: USB disconnect, device number 16 [ 268.692809][ T5706] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 268.911605][ T7991] smc: net device vlan1 applied user defined pnetid SYZ2 [ 269.077546][ T30] audit: type=1400 audit(1784717706.496:1190): avc: denied { write } for pid=7987 comm="syz.1.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 269.251929][ T30] audit: type=1400 audit(1784717706.746:1191): avc: denied { read write } for pid=7995 comm="syz.2.562" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 269.281156][ T7998] syz_tun: entered allmulticast mode [ 269.332121][ T30] audit: type=1400 audit(1784717706.746:1192): avc: denied { open } for pid=7995 comm="syz.2.562" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 269.366728][ T803] usb 5-1: USB disconnect, device number 22 [ 269.539860][ T30] audit: type=1400 audit(1784717707.036:1193): avc: denied { read } for pid=8003 comm="syz.4.563" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 270.213179][ T30] audit: type=1400 audit(1784717707.066:1194): avc: denied { open } for pid=8003 comm="syz.4.563" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 270.439535][ T7985] syz_tun: left allmulticast mode [ 271.469567][ T8045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.570'. [ 271.645915][ T5758] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 271.729520][ T30] audit: type=1400 audit(1784717709.226:1195): avc: denied { write } for pid=8055 comm="syz.2.573" path="socket:[18732]" dev="sockfs" ino=18732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.813240][ T5758] usb 2-1: Using ep0 maxpacket: 32 [ 271.830136][ T5758] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 271.852189][ T5758] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 271.866773][ T5758] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.883426][ T5758] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 271.899908][ T30] audit: type=1400 audit(1784717709.396:1196): avc: denied { shutdown } for pid=8038 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.901274][ T5758] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 271.946080][ T30] audit: type=1400 audit(1784717709.436:1197): avc: denied { read } for pid=8038 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.949111][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.007047][ T5758] usb 2-1: config 0 descriptor?? [ 272.037838][ T30] audit: type=1400 audit(1784717709.536:1198): avc: denied { accept } for pid=8038 comm="syz.4.568" lport=39175 faddr=::ffff:172.30.0.5 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 272.078637][ T803] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 272.111382][ T30] audit: type=1400 audit(1784717709.566:1199): avc: denied { setopt } for pid=8038 comm="syz.4.568" lport=39175 faddr=::ffff:172.30.0.5 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 272.299770][ T5758] usb 2-1: USB disconnect, device number 24 [ 272.316942][ T803] usb 4-1: Using ep0 maxpacket: 16 [ 272.327429][ T803] usb 4-1: unable to get BOS descriptor or descriptor too short [ 272.329279][ T803] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 272.329304][ T803] usb 4-1: config 9 has no interface number 0 [ 272.329329][ T803] usb 4-1: config 9 interface 57 has no altsetting 0 [ 272.332759][ T803] usb 4-1: string descriptor 0 read error: -22 [ 272.332854][ T803] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 272.332874][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.757143][ T8074] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 272.757408][ T8074] SELinux: failed to load policy [ 272.823460][ T8074] syzkaller0: entered promiscuous mode [ 272.823481][ T8074] syzkaller0: entered allmulticast mode [ 272.833820][ T5758] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 272.990223][ T5758] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 272.990251][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.990270][ T5758] usb 2-1: Product: syz [ 272.990285][ T5758] usb 2-1: Manufacturer: syz [ 272.990300][ T5758] usb 2-1: SerialNumber: syz [ 272.997604][ T5758] usb 2-1: config 0 descriptor?? [ 273.006188][ T5758] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 273.042690][ T803] (null): keene_cmd_main failed (-71) [ 273.263769][ T803] video4linux radio48: keene_cmd_main failed (-71) [ 273.299816][ T803] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 273.318096][ T8081] overlay: Bad value for 'uuid' [ 273.441596][ T803] usb 4-1: USB disconnect, device number 22 [ 273.753542][ T5758] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 273.778970][ T5758] sq905c 2-1:0.0: Reading version command failed [ 273.800584][ T5758] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 273.980252][ T8101] netlink: 32 bytes leftover after parsing attributes in process `syz.2.583'. [ 274.124570][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 274.124575][ T803] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 274.124589][ T30] audit: type=1400 audit(1784717711.546:1251): avc: denied { execmem } for pid=8102 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 274.277332][ T30] audit: type=1400 audit(1784717711.776:1252): avc: denied { mount } for pid=8102 comm="syz.4.585" name="/" dev="autofs" ino=18810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 274.287976][ T8111] FAULT_INJECTION: forcing a failure. [ 274.287976][ T8111] name failslab, interval 1, probability 0, space 0, times 0 [ 274.315845][ T8111] CPU: 0 UID: 0 PID: 8111 Comm: syz.4.585 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.315872][ T8111] Tainted: [L]=SOFTLOCKUP [ 274.315877][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 274.315887][ T8111] Call Trace: [ 274.315895][ T8111] [ 274.315902][ T8111] dump_stack_lvl+0x100/0x190 [ 274.315926][ T8111] should_fail_ex.cold+0x5/0xa [ 274.315947][ T8111] should_failslab+0xc2/0x120 [ 274.315966][ T8111] __kmalloc_noprof+0xfc/0x820 [ 274.315982][ T8111] ? rcu_is_watching+0x12/0xc0 [ 274.316004][ T8111] ? tomoyo_encode2+0xfb/0x3c0 [ 274.316033][ T8111] tomoyo_encode2+0xfb/0x3c0 [ 274.316060][ T8111] tomoyo_encode+0x29/0x50 [ 274.316083][ T8111] tomoyo_realpath_from_path+0x18c/0x690 [ 274.316115][ T8111] tomoyo_path_number_perm+0x23c/0x580 [ 274.316135][ T8111] ? tomoyo_path_number_perm+0x22e/0x580 [ 274.316156][ T8111] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 274.316175][ T8111] ? kasan_save_stack+0x3f/0x50 [ 274.316192][ T8111] ? kasan_save_free_info+0x3b/0x70 [ 274.316213][ T8111] ? __kasan_slab_free+0x5f/0x80 [ 274.316248][ T8111] ? current_check_access_path+0x269/0x430 [ 274.316269][ T8111] ? __pfx_current_check_access_path+0x10/0x10 [ 274.316290][ T8111] ? putname+0xb1/0x110 [ 274.316315][ T8111] tomoyo_path_mknod+0x164/0x190 [ 274.316332][ T8111] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 274.316347][ T8111] ? putname+0xb1/0x110 [ 274.316363][ T8111] ? __asan_memcpy+0x3c/0x60 [ 274.316384][ T8111] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 274.316408][ T8111] security_path_mknod+0x161/0x300 [ 274.316426][ T8111] unix_bind+0x311/0x1650 [ 274.316446][ T8111] ? __pfx_unix_bind+0x10/0x10 [ 274.316469][ T8111] __sys_bind+0x1a9/0x260 [ 274.316496][ T8111] ? __pfx___sys_bind+0x10/0x10 [ 274.316519][ T8111] ? __fget_files+0x21f/0x3d0 [ 274.316546][ T8111] ? __pfx_ksys_write+0x10/0x10 [ 274.316573][ T8111] __x64_sys_bind+0x72/0xb0 [ 274.316596][ T8111] ? lockdep_hardirqs_on+0x78/0x100 [ 274.316624][ T8111] do_syscall_64+0x115/0x870 [ 274.316639][ T8111] ? clear_bhb_loop+0x40/0x90 [ 274.316660][ T8111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.316683][ T8111] RIP: 0033:0x7f9a3d59de99 [ 274.316699][ T8111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.316717][ T8111] RSP: 002b:00007f9a3e4ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 274.316734][ T8111] RAX: ffffffffffffffda RBX: 00007f9a3d826180 RCX: 00007f9a3d59de99 [ 274.316746][ T8111] RDX: 000000000000006e RSI: 0000200000000000 RDI: 0000000000000006 [ 274.316756][ T8111] RBP: 00007f9a3e4ef090 R08: 0000000000000000 R09: 0000000000000000 [ 274.316766][ T8111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.316776][ T8111] R13: 00007f9a3d826218 R14: 00007f9a3d826180 R15: 00007ffd14937e18 [ 274.316800][ T8111] [ 274.319078][ T8111] ERROR: Out of memory at tomoyo_realpath_from_path. [ 274.337339][ T30] audit: type=1400 audit(1784717711.776:1253): avc: denied { create } for pid=8102 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 274.710175][ T30] audit: type=1400 audit(1784717711.776:1254): avc: denied { write } for pid=8102 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 274.906089][ T10] usb 2-1: USB disconnect, device number 25 [ 274.913838][ T30] audit: type=1400 audit(1784717712.396:1255): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 274.955513][ T803] usb 4-1: unable to get BOS descriptor or descriptor too short [ 274.965598][ T803] usb 4-1: not running at top speed; connect to a high speed hub [ 275.001821][ T803] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 275.039551][ T803] usb 4-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 275.054191][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.066359][ T30] audit: type=1400 audit(1784717712.566:1256): avc: denied { name_bind } for pid=8117 comm="syz.5.589" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 275.095672][ T803] usb 4-1: Product: syz [ 275.100253][ T803] usb 4-1: Manufacturer: syz [ 275.105232][ T803] usb 4-1: SerialNumber: syz [ 275.118238][ T30] audit: type=1400 audit(1784717712.566:1257): avc: denied { node_bind } for pid=8117 comm="syz.5.589" saddr=::ffff:172.20.20.34 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 275.147175][ T8116] IPv6: addrconf: prefix option has invalid lifetime [ 275.158937][ T30] audit: type=1400 audit(1784717712.586:1258): avc: denied { read } for pid=8119 comm="syz.2.590" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 275.206571][ T30] audit: type=1400 audit(1784717712.586:1259): avc: denied { open } for pid=8119 comm="syz.2.590" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 275.232671][ T30] audit: type=1400 audit(1784717712.586:1260): avc: denied { ioctl } for pid=8119 comm="syz.2.590" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 275.682941][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 275.980226][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 276.153642][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 276.210547][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.274615][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 276.369675][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.473337][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.623099][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 276.673824][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.830846][ T9] usb 3-1: Product: syz [ 276.890851][ T9] usb 3-1: Manufacturer: syz [ 276.937287][ T9] usb 3-1: SerialNumber: syz [ 276.975194][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 277.195941][ T9] usb 3-1: config 0 descriptor?? [ 277.240233][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.303055][ T9] appledisplay 3-1:0.0: Submitting URB failed [ 277.368349][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 277.377927][ T9] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -5 [ 277.483972][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.326805][ T10] usb 6-1: config 0 descriptor?? [ 278.674115][ T8154] vlan0: entered promiscuous mode [ 278.688166][ T8154] bond_slave_1: entered promiscuous mode [ 278.710577][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 278.741065][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 278.753857][ T803] usb 4-1: USB disconnect, device number 23 [ 278.829476][ T10] usb 6-1: USB disconnect, device number 6 [ 278.850310][ T6813] udevd[6813]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.986902][ T29] usb 3-1: USB disconnect, device number 17 [ 279.261515][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 279.261548][ T30] audit: type=1400 audit(1784717716.756:1276): avc: denied { watch } for pid=8164 comm="syz.4.599" path="/108" dev="tmpfs" ino=610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 279.292309][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 279.600261][ T8172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.601'. [ 279.731966][ T30] audit: type=1400 audit(1784717717.226:1277): avc: denied { create } for pid=8177 comm="syz.3.602" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 279.758966][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.781717][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 279.803270][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.818156][ T10] usb 6-1: config 0 descriptor?? [ 279.895338][ T10] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 279.915031][ T10] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input14 [ 279.990546][ T30] audit: type=1400 audit(1784717717.486:1278): avc: denied { read } for pid=4961 comm="acpid" name="mouse1" dev="devtmpfs" ino=3117 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 280.013394][ T29] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 280.046784][ T10] usb 6-1: USB disconnect, device number 7 [ 280.052616][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 280.169652][ T5758] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 280.198580][ T30] audit: type=1400 audit(1784717717.486:1279): avc: denied { open } for pid=4961 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3117 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 280.346168][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 280.564041][ T5758] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.586884][ T30] audit: type=1400 audit(1784717717.486:1280): avc: denied { ioctl } for pid=4961 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3117 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 280.594448][ T29] usb 4-1: config 0 has no interfaces? [ 280.614563][ T30] audit: type=1400 audit(1784717717.566:1281): avc: denied { write } for pid=8183 comm="syz.4.605" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 280.655307][ T8186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.666658][ T5758] usb 2-1: config 0 has no interfaces? [ 280.677625][ T30] audit: type=1400 audit(1784717717.736:1282): avc: denied { create } for pid=8183 comm="syz.4.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 280.686020][ T5758] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 280.790162][ T29] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 280.817140][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.827560][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.829151][ T30] audit: type=1400 audit(1784717717.746:1283): avc: denied { connect } for pid=8181 comm="syz.5.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.860932][ T30] audit: type=1400 audit(1784717717.756:1284): avc: denied { bind } for pid=8183 comm="syz.4.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 280.919240][ T29] usb 4-1: Product: syz [ 280.928840][ T29] usb 4-1: Manufacturer: syz [ 280.955804][ T5758] usb 2-1: config 0 descriptor?? [ 280.965497][ T29] usb 4-1: SerialNumber: syz [ 281.004175][ T30] audit: type=1400 audit(1784717717.796:1285): avc: denied { read write } for pid=8181 comm="syz.5.604" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 281.006064][ T29] usb 4-1: config 0 descriptor?? [ 281.243782][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 281.676347][ T29] usb 4-1: USB disconnect, device number 24 [ 282.020805][ T8210] netlink: 32 bytes leftover after parsing attributes in process `syz.2.612'. [ 282.543684][ T8228] 0x000000000000-0x000000020000 : "" [ 282.674884][ T8228] ftl_cs: FTL header not found. [ 282.693914][ T5725] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 282.968236][ T803] usb 2-1: USB disconnect, device number 26 [ 283.010306][ T5725] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 283.027082][ T5725] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 283.041111][ T5725] usb 3-1: config 220 has no interface number 2 [ 283.056582][ T5725] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 283.087917][ T5725] usb 3-1: config 220 interface 0 has no altsetting 0 [ 283.094842][ T5725] usb 3-1: config 220 interface 76 has no altsetting 0 [ 283.102674][ T5725] usb 3-1: config 220 interface 1 has no altsetting 0 [ 283.113580][ T5725] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 283.124046][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.132330][ T5725] usb 3-1: Product: syz [ 283.137560][ T5725] usb 3-1: Manufacturer: syz [ 283.143059][ T5725] usb 3-1: SerialNumber: syz [ 283.303291][ T803] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 283.379899][ T5725] usb 3-1: selecting invalid altsetting 0 [ 283.390070][ T5725] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 283.411752][ T5725] uvcvideo 3-1:220.0: No valid video chain found. [ 283.447809][ T5725] usb 3-1: selecting invalid altsetting 0 [ 283.466127][ T803] usb 2-1: Using ep0 maxpacket: 8 [ 283.487913][ T5725] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 283.504329][ T803] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 283.513583][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.531758][ T803] usb 2-1: Product: syz [ 283.550825][ T5725] usb 3-1: USB disconnect, device number 18 [ 283.568093][ T803] usb 2-1: Manufacturer: syz [ 283.594618][ T803] usb 2-1: SerialNumber: syz [ 284.267447][ T803] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 284.355942][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 284.355957][ T30] audit: type=1400 audit(1784717721.856:1305): avc: denied { module_load } for pid=8240 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 284.407016][ T803] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 284.446785][ T803] usb 2-1: unable to issue vendor read request (ret = -71) [ 284.460347][ T30] audit: type=1400 audit(1784717721.906:1306): avc: denied { read write } for pid=8244 comm="syz.3.622" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 284.494928][ T803] usb 2-1: unable to issue vendor read request (ret = -71) [ 284.502949][ T803] usb 2-1: unable to issue vendor read request (ret = -71) [ 284.511372][ T30] audit: type=1400 audit(1784717721.906:1307): avc: denied { open } for pid=8244 comm="syz.3.622" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 284.535648][ T803] usb 2-1: unable to issue vendor read request (ret = -71) [ 284.573258][ T30] audit: type=1400 audit(1784717721.916:1308): avc: denied { read write } for pid=8246 comm="syz.4.623" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 284.739519][ T803] usb 2-1: USB disconnect, device number 27 [ 284.754243][ T30] audit: type=1400 audit(1784717721.916:1309): avc: denied { open } for pid=8246 comm="syz.4.623" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 285.313739][ T30] audit: type=1400 audit(1784717721.926:1310): avc: denied { ioctl } for pid=8244 comm="syz.3.622" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 285.374395][ T30] audit: type=1400 audit(1784717722.166:1311): avc: denied { ioctl } for pid=8246 comm="syz.4.623" path="/dev/input/mice" dev="devtmpfs" ino=917 ioctlcmd=0x7ab scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 286.471120][ T30] audit: type=1400 audit(1784717723.966:1312): avc: denied { create } for pid=8264 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 286.559246][ T30] audit: type=1400 audit(1784717723.996:1313): avc: denied { connect } for pid=8264 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 286.681437][ T8273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.626'. [ 286.775744][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 287.124331][ T30] audit: type=1400 audit(1784717723.996:1314): avc: denied { getopt } for pid=8264 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 287.884488][ T8285] syzkaller1: entered promiscuous mode [ 287.926924][ T8285] syzkaller1: entered allmulticast mode [ 288.249308][ T5725] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 288.503503][ T5725] usb 3-1: Using ep0 maxpacket: 8 [ 288.512911][ T5725] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.522165][ T5725] usb 3-1: config 0 has no interface number 0 [ 288.539263][ T5725] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 288.659199][ T5725] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 288.687532][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.109892][ T5725] usb 3-1: config 0 descriptor?? [ 289.120073][ T5725] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 289.547749][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 289.968185][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 289.968218][ T30] audit: type=1400 audit(1784717726.996:1332): avc: denied { mount } for pid=8305 comm="syz.1.636" name="/" dev="overlay" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 290.172006][ T30] audit: type=1400 audit(1784717727.036:1333): avc: denied { create } for pid=8305 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 290.192798][ T30] audit: type=1400 audit(1784717727.046:1334): avc: denied { write } for pid=8305 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 290.251933][ T30] audit: type=1400 audit(1784717727.366:1335): avc: denied { create } for pid=8289 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 290.389225][ T30] audit: type=1400 audit(1784717727.366:1336): avc: denied { bind } for pid=8289 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 290.415877][ T8320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56838 sclass=netlink_route_socket pid=8320 comm=syz.1.639 [ 290.420314][ T8319] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 290.457744][ T30] audit: type=1400 audit(1784717727.366:1337): avc: denied { node_bind } for pid=8289 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 290.490926][ T8322] FAULT_INJECTION: forcing a failure. [ 290.490926][ T8322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.521570][ T8322] CPU: 0 UID: 0 PID: 8322 Comm: syz.5.638 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.521602][ T8322] Tainted: [L]=SOFTLOCKUP [ 290.521608][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 290.521618][ T8322] Call Trace: [ 290.521625][ T8322] [ 290.521631][ T8322] dump_stack_lvl+0x100/0x190 [ 290.521658][ T8322] should_fail_ex.cold+0x5/0xa [ 290.521681][ T8322] _copy_to_user+0x32/0xd0 [ 290.521708][ T8322] simple_read_from_buffer+0xcb/0x170 [ 290.521740][ T8322] proc_fail_nth_read+0x1af/0x230 [ 290.521767][ T8322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.521793][ T8322] ? rw_verify_area+0xce/0x6d0 [ 290.521816][ T8322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.521840][ T8322] vfs_read+0x1e4/0xb40 [ 290.521867][ T8322] ? __pfx_vfs_read+0x10/0x10 [ 290.521890][ T8322] ? __fget_files+0x215/0x3d0 [ 290.521913][ T8322] ? __fget_files+0x21f/0x3d0 [ 290.521936][ T8322] ksys_read+0x12a/0x250 [ 290.521960][ T8322] ? __pfx_ksys_read+0x10/0x10 [ 290.521992][ T8322] do_syscall_64+0x115/0x870 [ 290.522008][ T8322] ? clear_bhb_loop+0x40/0x90 [ 290.522030][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.522047][ T8322] RIP: 0033:0x7fa0bdb5e6ce [ 290.522062][ T8322] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 290.522080][ T8322] RSP: 002b:00007fa0be9a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.522098][ T8322] RAX: ffffffffffffffda RBX: 00007fa0be9a16c0 RCX: 00007fa0bdb5e6ce [ 290.522108][ T8322] RDX: 000000000000000f RSI: 00007fa0be9a10a0 RDI: 0000000000000008 [ 290.522118][ T8322] RBP: 00007fa0be9a1090 R08: 0000000000000000 R09: 0000000000000000 [ 290.522127][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.522136][ T8322] R13: 00007fa0bde26218 R14: 00007fa0bde26180 R15: 00007ffc166aacb8 [ 290.522158][ T8322] [ 290.877537][ T30] audit: type=1400 audit(1784717727.366:1338): avc: denied { read } for pid=8289 comm="syz.2.632" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 290.922961][ T30] audit: type=1400 audit(1784717727.366:1339): avc: denied { open } for pid=8289 comm="syz.2.632" path="/dev/sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 290.948611][ T30] audit: type=1400 audit(1784717727.366:1340): avc: denied { map } for pid=8289 comm="syz.2.632" path="socket:[19984]" dev="sockfs" ino=19984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 290.973315][ T30] audit: type=1400 audit(1784717727.676:1341): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 291.003199][ T5725] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 291.091456][ T8324] netlink: 36 bytes leftover after parsing attributes in process `syz.5.640'. [ 291.153393][ T5725] usb 2-1: Using ep0 maxpacket: 32 [ 291.178650][ T5725] usb 2-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 291.198684][ T5742] usb 3-1: USB disconnect, device number 19 [ 291.217528][ T8331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.232470][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.252502][ T5725] usb 2-1: Product: syz [ 291.294006][ T5725] usb 2-1: Manufacturer: syz [ 291.306734][ T5725] usb 2-1: SerialNumber: syz [ 291.484041][ T6370] udevd[6370]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.716962][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.724665][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.018501][ T5742] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 292.284863][ T5742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.367804][ T5742] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.410075][ T5742] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 292.435717][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.468006][ T5742] usb 3-1: config 0 descriptor?? [ 292.748684][ T8334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.808561][ T8334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.233216][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 293.254637][ T5742] microsoft 0003:045E:00F9.000A: unknown main item tag 0x0 [ 293.261942][ T5742] microsoft 0003:045E:00F9.000A: unknown main item tag 0x0 [ 293.269545][ T5742] microsoft 0003:045E:00F9.000A: unknown main item tag 0x0 [ 293.308781][ T803] usb 2-1: USB disconnect, device number 28 [ 293.341844][ T5742] microsoft 0003:045E:00F9.000A: unknown main item tag 0x0 [ 293.380103][ T5742] microsoft 0003:045E:00F9.000A: unknown main item tag 0x0 [ 293.393202][ T5725] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 293.426550][ T5742] microsoft 0003:045E:00F9.000A: unknown main item tag 0x0 [ 293.463173][ T5742] microsoft 0003:045E:00F9.000A: unknown main item tag 0x0 [ 293.496275][ T5742] microsoft 0003:045E:00F9.000A: unknown main item tag 0x0 [ 293.547303][ T5725] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 293.569620][ T5742] microsoft 0003:045E:00F9.000A: unknown main item tag 0x0 [ 293.593904][ T5742] microsoft 0003:045E:00F9.000A: unknown main item tag 0x0 [ 293.610706][ T5725] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 293.653432][ T5742] microsoft 0003:045E:00F9.000A: collection stack underflow [ 293.655440][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 29295, setting to 64 [ 293.700427][ T5725] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.733592][ T5742] microsoft 0003:045E:00F9.000A: item 0 0 0 12 parsing failed [ 293.748121][ T5725] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 293.793667][ T5742] microsoft 0003:045E:00F9.000A: parse failed [ 293.794946][ T5725] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 293.832701][ T5725] usb 4-1: Manufacturer: syz [ 293.842155][ T5725] usb 4-1: SerialNumber: syz [ 293.842825][ T5742] microsoft 0003:045E:00F9.000A: probe with driver microsoft failed with error -22 [ 293.951557][ T5725] usb 4-1: config 0 descriptor?? [ 293.974774][ T8343] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 294.126483][ T5742] usb 3-1: USB disconnect, device number 20 [ 294.204605][ T5725] usb 4-1: USB disconnect, device number 25 [ 294.528260][ T8374] netlink: 'syz.5.652': attribute type 1 has an invalid length. [ 295.018540][ T8377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.653'. [ 295.941574][ T5758] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 296.155323][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.168637][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.182035][ T8399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.233238][ T5758] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 296.297866][ T5758] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.320047][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.376796][ T5758] usb 2-1: config 0 descriptor?? [ 296.533257][ T5742] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 296.723464][ T5742] usb 6-1: Using ep0 maxpacket: 16 [ 296.828125][ T5742] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 296.994582][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 296.994924][ T30] audit: type=1400 audit(1784717734.336:1353): avc: denied { read } for pid=8406 comm="syz.3.662" dev="nsfs" ino=4026533208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 297.056533][ T30] audit: type=1400 audit(1784717734.336:1354): avc: denied { open } for pid=8406 comm="syz.3.662" path="net:[4026533208]" dev="nsfs" ino=4026533208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 297.073912][ T5742] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 297.079898][ T30] audit: type=1400 audit(1784717734.336:1355): avc: denied { create } for pid=8406 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 297.214870][ T5758] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 297.256318][ T30] audit: type=1400 audit(1784717734.336:1356): avc: denied { read } for pid=8406 comm="syz.3.662" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 297.260340][ T5742] usb 6-1: config 0 interface 0 has no altsetting 0 [ 297.326930][ T5758] usb 2-1: USB disconnect, device number 29 [ 297.331641][ T30] audit: type=1400 audit(1784717734.346:1357): avc: denied { ioctl } for pid=8401 comm="syz.5.660" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.368048][ T5742] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 297.381704][ T5742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.390153][ T5742] usb 6-1: Product: syz [ 297.396513][ T5742] usb 6-1: Manufacturer: syz [ 297.408470][ T5742] usb 6-1: SerialNumber: syz [ 297.438295][ T8410] fido_id[8410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 297.453254][ T30] audit: type=1400 audit(1784717734.556:1358): avc: denied { prog_load } for pid=8389 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 297.520832][ T30] audit: type=1400 audit(1784717734.556:1359): avc: denied { bpf } for pid=8389 comm="syz.1.658" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 297.586958][ T30] audit: type=1400 audit(1784717734.556:1360): avc: denied { perfmon } for pid=8389 comm="syz.1.658" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 297.651739][ T30] audit: type=1400 audit(1784717734.686:1361): avc: denied { prog_run } for pid=8389 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 297.700964][ T30] audit: type=1400 audit(1784717734.736:1362): avc: denied { create } for pid=8403 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 297.777118][ T5742] usb 6-1: config 0 descriptor?? [ 298.282572][ T8426] No source specified [ 300.059566][ T5742] usb 6-1: USB disconnect, device number 8 [ 300.142269][ T8436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.669'. [ 300.380438][ T8443] 8021q: VLANs not supported on wg0 [ 300.509504][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 300.543334][ T5742] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 300.773950][ T29] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 300.829220][ T5742] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 300.848445][ T5742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.866608][ T5742] usb 6-1: Product: syz [ 300.876049][ T5742] usb 6-1: Manufacturer: syz [ 300.885817][ T5742] usb 6-1: SerialNumber: syz [ 300.905165][ T5742] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 300.926154][ T5718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 300.993336][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 301.004500][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.021054][ T29] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 301.053505][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 301.069488][ T29] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 301.093211][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.107584][ T29] usb 5-1: Product: syz [ 301.115920][ T29] usb 5-1: Manufacturer: syz [ 301.124832][ T29] usb 5-1: SerialNumber: syz [ 301.141602][ T29] usb 5-1: config 0 descriptor?? [ 301.158639][ T29] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 301.615591][ T29] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 301.651186][ T29] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 301.738666][ T29] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 301.990396][ T8438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.018140][ T8438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.127542][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 302.127558][ T30] audit: type=1400 audit(1784717739.626:1438): avc: denied { mounton } for pid=8437 comm="syz.5.670" path="/proc/237/task" dev="proc" ino=20889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 302.157987][ T30] audit: type=1400 audit(1784717739.666:1439): avc: denied { mount } for pid=8437 comm="syz.5.670" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 302.185257][ T5718] usb 6-1: Service connection timeout for: 256 [ 302.207866][ T5718] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 302.234985][ T30] audit: type=1400 audit(1784717739.736:1440): avc: denied { create } for pid=8442 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 302.291031][ T30] audit: type=1400 audit(1784717739.736:1441): avc: denied { setopt } for pid=8442 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 302.373886][ T5718] ath9k_htc: Failed to initialize the device [ 302.391950][ T5718] usb 6-1: ath9k_htc: USB layer deinitialized [ 302.428894][ T30] audit: type=1400 audit(1784717739.786:1442): avc: denied { execmem } for pid=8462 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 302.545469][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 302.850033][ T30] audit: type=1400 audit(1784717740.006:1443): avc: denied { mounton } for pid=8462 comm="syz.3.676" path="/136/bus" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 302.873201][ T30] audit: type=1400 audit(1784717740.016:1444): avc: denied { unlink } for pid=8462 comm="syz.3.676" name="#1e" dev="tmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 302.882415][ T29] usb 6-1: USB disconnect, device number 9 [ 302.906426][ T803] usb 5-1: USB disconnect, device number 23 [ 302.915379][ T30] audit: type=1400 audit(1784717740.026:1445): avc: denied { mount } for pid=8462 comm="syz.3.676" name="/" dev="overlay" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 302.956832][ T30] audit: type=1400 audit(1784717740.036:1446): avc: denied { create } for pid=8462 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 302.980852][ T30] audit: type=1400 audit(1784717740.046:1447): avc: denied { write } for pid=8462 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 303.080611][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 303.091990][ T8470] binder: 8467:8470 ioctl 4c0a 0 returned -22 [ 304.107463][ T8479] smc: net device vlan1 applied user defined pnetid SYZ2 [ 304.384670][ T8488] netlink: 32 bytes leftover after parsing attributes in process `syz.5.679'. [ 304.701029][ T5742] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 305.186439][ T5742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.222649][ T5742] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 305.347589][ T5742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.421538][ T5742] usb 2-1: config 0 descriptor?? [ 305.649542][ T29] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 305.688549][ T5742] usbhid 2-1:0.0: can't add hid device: -71 [ 305.695846][ T5742] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 305.715501][ T5742] usb 2-1: USB disconnect, device number 30 [ 306.309626][ T29] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 306.401194][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.417613][ T29] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 306.440014][ T29] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 306.463184][ T29] usb 6-1: Manufacturer: syz [ 306.473012][ T29] usb 6-1: config 0 descriptor?? [ 306.693583][ T5742] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 306.716731][ T8549] smc: net device vlan1 applied user defined pnetid SYZ2 [ 307.014669][ T29] rc_core: IR keymap rc-hauppauge not found [ 307.123252][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 307.505685][ T29] Registered IR keymap rc-empty [ 307.832723][ T29] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 307.867040][ T5742] usb 2-1: device descriptor read/all, error -71 [ 307.879926][ T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input15 [ 307.926699][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 307.926714][ T30] audit: type=1400 audit(1784717745.426:1474): avc: denied { read } for pid=4961 comm="acpid" name="event4" dev="devtmpfs" ino=3166 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.186904][ T29] usb 6-1: USB disconnect, device number 10 [ 308.203565][ T30] audit: type=1400 audit(1784717745.426:1475): avc: denied { open } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3166 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.269088][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'. [ 309.040412][ T30] audit: type=1400 audit(1784717745.426:1476): avc: denied { ioctl } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3166 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.067309][ T30] audit: type=1400 audit(1784717745.456:1477): avc: denied { read write } for pid=8560 comm="syz.2.689" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 309.195241][ T30] audit: type=1400 audit(1784717745.456:1478): avc: denied { open } for pid=8560 comm="syz.2.689" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 309.212969][ T8573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.225314][ T30] audit: type=1400 audit(1784717745.476:1479): avc: denied { ioctl } for pid=8560 comm="syz.2.689" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 309.982528][ T30] audit: type=1400 audit(1784717745.496:1480): avc: denied { create } for pid=8560 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 310.003994][ T30] audit: type=1400 audit(1784717745.496:1481): avc: denied { bind } for pid=8560 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 310.024847][ T30] audit: type=1400 audit(1784717746.706:1482): avc: denied { name_bind } for pid=8571 comm="syz.4.692" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 310.132501][ T30] audit: type=1400 audit(1784717746.826:1483): avc: denied { allowed } for pid=8571 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 311.265958][ T29] IPVS: starting estimator thread 0... [ 311.373230][ T8587] IPVS: using max 38 ests per chain, 91200 per kthread [ 312.202932][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 313.224755][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.698'. [ 314.136430][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 314.136449][ T30] audit: type=1400 audit(1784717750.776:1491): avc: denied { ioctl } for pid=8589 comm="syz.5.698" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 314.250910][ T30] audit: type=1400 audit(1784717751.076:1492): avc: denied { ioctl } for pid=8594 comm="syz.1.699" path="socket:[21068]" dev="sockfs" ino=21068 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 314.334399][ T30] audit: type=1400 audit(1784717751.116:1493): avc: denied { write } for pid=8594 comm="syz.1.699" name="ip6_mr_cache" dev="proc" ino=4026532913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 315.573694][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.700'. [ 315.790392][ T30] audit: type=1400 audit(1784717753.286:1494): avc: denied { map } for pid=8618 comm="syz.4.704" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 315.930574][ T30] audit: type=1400 audit(1784717753.286:1495): avc: denied { read write } for pid=8618 comm="syz.4.704" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 316.541482][ T30] audit: type=1400 audit(1784717754.036:1496): avc: denied { create } for pid=8625 comm="syz.5.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 316.738741][ T30] audit: type=1400 audit(1784717754.046:1497): avc: denied { read write } for pid=8627 comm="syz.4.705" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 316.893239][ T30] audit: type=1400 audit(1784717754.046:1498): avc: denied { open } for pid=8627 comm="syz.4.705" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 317.022033][ T30] audit: type=1400 audit(1784717754.236:1499): avc: denied { read } for pid=8625 comm="syz.5.706" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 317.202584][ T30] audit: type=1400 audit(1784717754.236:1500): avc: denied { open } for pid=8625 comm="syz.5.706" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 319.089609][ T8634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 319.106495][ T8634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 319.113724][ T8634] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 319.224181][ T8634] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 319.274239][ T8634] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 319.280617][ T8634] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 319.297286][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 319.580031][ T8634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 319.611258][ T8634] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 319.651333][ T8634] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 319.663311][ T8634] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 319.709684][ T8634] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 319.747981][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'. [ 319.889304][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 319.889314][ T30] audit: type=1400 audit(1784717757.386:1506): avc: denied { unmount } for pid=7124 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 320.097560][ T30] audit: type=1400 audit(1784717757.596:1507): avc: denied { read write } for pid=8658 comm="syz.3.712" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 320.205681][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 320.613862][ T5758] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 320.853996][ T30] audit: type=1400 audit(1784717757.626:1508): avc: denied { open } for pid=8658 comm="syz.3.712" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 320.960375][ T30] audit: type=1400 audit(1784717758.456:1509): avc: denied { connect } for pid=8672 comm="syz.1.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.993088][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 321.024674][ T5758] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 321.033433][ T5758] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.044836][ T5758] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 321.054740][ T5758] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 321.062836][ T5758] usb 6-1: Manufacturer: syz [ 321.125249][ T5758] usb 6-1: config 0 descriptor?? [ 321.255697][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'. [ 321.589070][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 321.589088][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 321.633694][ T5758] rc_core: IR keymap rc-hauppauge not found [ 321.633917][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 321.647667][ T5758] Registered IR keymap rc-empty [ 321.667763][ T5758] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 321.697855][ T5758] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input16 [ 321.708676][ T5628] Bluetooth: hci5: command 0x0405 tx timeout [ 321.802551][ T30] audit: type=1400 audit(1784717759.296:1510): avc: denied { read } for pid=8680 comm="syz.1.717" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 322.273978][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 322.282793][ T10] usb 6-1: USB disconnect, device number 11 [ 322.291628][ T30] audit: type=1400 audit(1784717759.296:1511): avc: denied { open } for pid=8680 comm="syz.1.717" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 322.363583][ T30] audit: type=1400 audit(1784717759.396:1512): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 322.387627][ T30] audit: type=1400 audit(1784717759.746:1513): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.426268][ T30] audit: type=1400 audit(1784717759.746:1514): avc: denied { open } for pid=5617 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.523368][ T30] audit: type=1400 audit(1784717759.746:1515): avc: denied { ioctl } for pid=5617 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 323.743689][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 323.749751][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 323.755772][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 323.783524][ T5628] Bluetooth: hci5: command 0x0405 tx timeout [ 324.340395][ T8693] 8021q: VLANs not supported on wg0 [ 324.916242][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 324.916259][ T30] audit: type=1400 audit(1784717761.896:1543): avc: denied { create } for pid=8694 comm="syz.3.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 324.943068][ T30] audit: type=1400 audit(1784717761.906:1544): avc: denied { create } for pid=8694 comm="syz.3.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 324.963873][ T30] audit: type=1400 audit(1784717761.906:1545): avc: denied { write } for pid=8694 comm="syz.3.721" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 324.984602][ T30] audit: type=1400 audit(1784717761.986:1546): avc: denied { create } for pid=8694 comm="syz.3.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 325.109119][ T30] audit: type=1400 audit(1784717761.986:1547): avc: denied { write } for pid=8694 comm="syz.3.721" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 325.182671][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 325.573315][ T30] audit: type=1400 audit(1784717762.676:1548): avc: denied { ioctl } for pid=8702 comm="syz.1.724" path="socket:[21303]" dev="sockfs" ino=21303 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.630201][ T30] audit: type=1400 audit(1784717762.676:1549): avc: denied { write } for pid=8702 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 325.783192][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 325.800244][ T30] audit: type=1400 audit(1784717762.966:1550): avc: denied { read write } for pid=8707 comm="syz.5.725" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 325.853233][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 325.864140][ T5614] Bluetooth: hci5: command 0x0405 tx timeout [ 325.905377][ T30] audit: type=1400 audit(1784717762.966:1551): avc: denied { open } for pid=8707 comm="syz.5.725" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 326.026406][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 326.052668][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.066037][ T30] audit: type=1400 audit(1784717762.976:1552): avc: denied { read write } for pid=8692 comm="syz.4.720" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 326.237156][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.728'. [ 326.550761][ T10] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 326.627899][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 326.674401][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 326.761852][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.796233][ T10] usb 5-1: Product: syz [ 326.959120][ T10] usb 5-1: Manufacturer: syz [ 326.971467][ T10] usb 5-1: SerialNumber: syz [ 327.001592][ T10] usb 5-1: config 0 descriptor?? [ 327.016127][ T10] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 327.269539][ T10] snd_usb_toneport 5-1:0.0: set_interface failed [ 327.283314][ T5725] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 327.299353][ T10] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 327.406620][ T10] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 328.403325][ T10] usb 5-1: USB disconnect, device number 24 [ 328.573186][ T5725] usb 6-1: Using ep0 maxpacket: 16 [ 328.585762][ T5725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 328.604929][ T5725] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 328.614224][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.628588][ T5725] usb 6-1: Product: syz [ 328.639228][ T5725] usb 6-1: Manufacturer: syz [ 328.665229][ T5725] usb 6-1: SerialNumber: syz [ 328.705392][ T5725] usb 6-1: config 0 descriptor?? [ 328.741278][ T5725] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 328.779082][ T5725] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 329.933395][ T5725] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 330.133283][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 330.133301][ T30] audit: type=1400 audit(1784717767.616:1579): avc: denied { search } for pid=8757 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.332603][ T30] audit: type=1400 audit(1784717767.616:1580): avc: denied { search } for pid=8757 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.429915][ T30] audit: type=1400 audit(1784717767.616:1581): avc: denied { search } for pid=8757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.471157][ T30] audit: type=1400 audit(1784717767.616:1582): avc: denied { search } for pid=8757 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.637477][ T30] audit: type=1400 audit(1784717767.626:1583): avc: denied { read } for pid=8762 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.661683][ T30] audit: type=1400 audit(1784717767.626:1584): avc: denied { read open } for pid=8762 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.690790][ T30] audit: type=1400 audit(1784717767.626:1585): avc: denied { getattr } for pid=8762 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.730735][ T30] audit: type=1400 audit(1784717767.626:1586): avc: denied { getattr } for pid=8762 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 330.891400][ T5725] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 331.674083][ T5725] em28xx 6-1:0.0: board has no eeprom [ 331.684768][ T30] audit: type=1400 audit(1784717767.876:1587): avc: denied { read } for pid=8764 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 331.822391][ T5725] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 331.830372][ T5725] em28xx 6-1:0.0: dvb set to bulk mode. [ 331.836239][ T10] em28xx 6-1:0.0: Binding DVB extension [ 331.850897][ T30] audit: type=1400 audit(1784717767.876:1588): avc: denied { open } for pid=8764 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 332.175863][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 332.195214][ T5725] usb 6-1: USB disconnect, device number 12 [ 332.560444][ T5725] em28xx 6-1:0.0: Disconnecting em28xx [ 332.621289][ T10] em28xx 6-1:0.0: Registering input extension [ 332.645323][ T5725] em28xx 6-1:0.0: Closing input extension [ 332.916102][ T5725] em28xx 6-1:0.0: Freeing device [ 332.944862][ T8754] bond0: entered promiscuous mode [ 332.949939][ T8754] bond_slave_0: entered promiscuous mode [ 332.955694][ T8754] bond_slave_1: entered promiscuous mode [ 333.148829][ T8751] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.172193][ T8751] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 333.273606][ T8751] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.297302][ T8751] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 333.340843][ T8751] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 333.358758][ T8751] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 333.402594][ T8751] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.419346][ T8751] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 334.199159][ T8751] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 334.209365][ T8751] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 335.988309][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 335.988324][ T30] audit: type=1400 audit(1784717773.486:1610): avc: denied { write } for pid=8815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.512483][ T30] audit: type=1400 audit(1784717773.766:1611): avc: denied { append } for pid=8862 comm="syz.2.747" name="cec0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 336.605657][ T29] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 337.031016][ T30] audit: type=1400 audit(1784717774.526:1612): avc: denied { write } for pid=8865 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.137728][ T30] audit: type=1400 audit(1784717774.636:1613): avc: denied { read write } for pid=8850 comm="syz.5.745" name="vbi0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 337.246033][ T30] audit: type=1400 audit(1784717774.636:1614): avc: denied { open } for pid=8850 comm="syz.5.745" path="/dev/vbi0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 337.270112][ T30] audit: type=1400 audit(1784717774.706:1615): avc: denied { create } for pid=8871 comm="syz.3.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.274033][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 337.310781][ T30] audit: type=1400 audit(1784717774.806:1616): avc: denied { ioctl } for pid=8850 comm="syz.5.745" path="/dev/vbi0" dev="devtmpfs" ino=955 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 337.379627][ T8874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.671416][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.699626][ T29] usb 3-1: config 0 has no interfaces? [ 337.721150][ T29] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 337.742710][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.770671][ T29] usb 3-1: Product: syz [ 337.783869][ T29] usb 3-1: Manufacturer: syz [ 337.804055][ T29] usb 3-1: SerialNumber: syz [ 337.820811][ T29] usb 3-1: config 0 descriptor?? [ 338.532728][ T8895] netlink: 'syz.2.747': attribute type 2 has an invalid length. [ 338.562127][ T8895] netlink: 'syz.2.747': attribute type 2 has an invalid length. [ 338.600744][ T8898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.636530][ T8898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.653838][ T30] audit: type=1400 audit(1784717776.156:1617): avc: denied { write } for pid=8878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.799837][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 339.046335][ T30] audit: type=1400 audit(1784717776.546:1618): avc: denied { create } for pid=8904 comm="syz.5.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 339.185879][ T30] audit: type=1400 audit(1784717776.666:1619): avc: denied { getopt } for pid=8904 comm="syz.5.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 339.368549][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 339.383244][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 339.392369][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.409145][ T10] usb 5-1: config 0 descriptor?? [ 339.920134][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.756'. [ 340.463077][ T8916] ceph: No mds server is up or the cluster is laggy [ 340.811791][ T10] libceph: connect (1)[c::]:6789 error -101 [ 340.858009][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 340.892869][ T803] usb 3-1: USB disconnect, device number 21 [ 340.961520][ T8929] kvm: emulating exchange as write [ 340.998880][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 340.998895][ T30] audit: type=1400 audit(1784717778.346:1629): avc: denied { accept } for pid=8925 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 341.036070][ T30] audit: type=1400 audit(1784717778.536:1630): avc: denied { read write } for pid=8922 comm="syz.5.758" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 341.068376][ T30] audit: type=1400 audit(1784717778.536:1631): avc: denied { open } for pid=8922 comm="syz.5.758" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 341.125436][ T5725] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 341.624824][ T10] libceph: connect (1)[c::]:6789 error -101 [ 341.630879][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 341.649329][ T30] audit: type=1400 audit(1784717779.146:1632): avc: denied { allowed } for pid=8922 comm="syz.5.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 341.670007][ T30] audit: type=1400 audit(1784717779.146:1633): avc: denied { create } for pid=8922 comm="syz.5.758" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 341.715828][ T5739] usb 5-1: USB disconnect, device number 25 [ 341.793162][ T5725] usb 2-1: Using ep0 maxpacket: 32 [ 341.799761][ T5725] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 341.808527][ T5725] usb 2-1: config 0 has no interface number 0 [ 341.819608][ T5725] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 341.828785][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.869045][ T5725] usb 2-1: Product: syz [ 341.878099][ T5725] usb 2-1: Manufacturer: syz [ 341.897547][ T30] audit: type=1400 audit(1784717779.376:1634): avc: denied { create } for pid=8938 comm="syz.4.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 341.926068][ T5725] usb 2-1: SerialNumber: syz [ 341.942638][ T5725] usb 2-1: config 0 descriptor?? [ 342.076444][ T30] audit: type=1400 audit(1784717779.576:1635): avc: denied { create } for pid=8939 comm="syz.2.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 342.203198][ T5739] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 343.177674][ T5706] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 343.230158][ T30] audit: type=1400 audit(1784717780.726:1636): avc: denied { write } for pid=8915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.321258][ T30] audit: type=1400 audit(1784717780.786:1637): avc: denied { write } for pid=8958 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.344380][ T5706] usb 6-1: Using ep0 maxpacket: 16 [ 343.359159][ T5739] usb 5-1: device descriptor read/64, error -71 [ 343.360943][ T5706] usb 6-1: config 0 has no interfaces? [ 343.391069][ T5706] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 343.404273][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.565464][ T5725] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 343.576664][ T5725] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 343.586079][ T30] audit: type=1400 audit(1784717780.906:1638): avc: denied { create } for pid=8960 comm="syz.2.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 343.606232][ T5706] usb 6-1: Product: syz [ 343.611503][ T5706] usb 6-1: Manufacturer: syz [ 343.616365][ T5725] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 343.624752][ T5739] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 343.640631][ T5706] usb 6-1: SerialNumber: syz [ 343.645861][ T5725] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 343.659144][ T5725] usb 2-1: USB disconnect, device number 33 [ 343.684122][ T5706] usb 6-1: config 0 descriptor?? [ 343.718176][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 344.156583][ T5725] usb 6-1: USB disconnect, device number 13 [ 344.165015][ T5739] usb 5-1: device descriptor read/64, error -71 [ 344.293738][ T804] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 344.301594][ T5739] usb usb5-port1: attempt power cycle [ 344.568751][ T804] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 344.583721][ T804] usb 4-1: New USB device found, idVendor=0524, idProduct=a4a1, bcdDevice= 0.40 [ 344.593055][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 344.603704][ T804] usb 4-1: SerialNumber: syz [ 344.675253][ T8988] syz_tun: entered allmulticast mode [ 344.702489][ T5739] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 345.054613][ T5739] usb 5-1: device descriptor read/8, error -71 [ 346.170519][ T804] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 346.274476][ T804] usb 4-1: USB disconnect, device number 26 [ 346.803171][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 346.803185][ T30] audit: type=1400 audit(1784717784.296:1651): avc: denied { create } for pid=9011 comm="syz.5.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 346.872453][ T9012] random: crng reseeded on system resumption [ 346.906139][ T30] audit: type=1400 audit(1784717784.356:1652): avc: denied { connect } for pid=9011 comm="syz.5.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 347.078801][ T30] audit: type=1400 audit(1784717784.366:1653): avc: denied { write } for pid=9011 comm="syz.5.775" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 347.154549][ T9015] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 347.180281][ T30] audit: type=1400 audit(1784717784.366:1654): avc: denied { open } for pid=9011 comm="syz.5.775" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 347.230753][ T9018] No such timeout policy "syz1" [ 347.247270][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 347.276157][ T30] audit: type=1400 audit(1784717784.656:1655): avc: denied { mounton } for pid=9014 comm="syz.2.776" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 347.394530][ T30] audit: type=1400 audit(1784717784.716:1656): avc: denied { create } for pid=9017 comm="syz.3.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 347.429032][ T30] audit: type=1400 audit(1784717784.726:1657): avc: denied { bind } for pid=9017 comm="syz.3.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 347.522092][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 347.876331][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 348.085189][ T30] audit: type=1400 audit(1784717785.576:1658): avc: denied { module_load } for pid=9023 comm="syz.5.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 348.539748][ T30] audit: type=1400 audit(1784717786.036:1659): avc: denied { write } for pid=9017 comm="syz.3.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 348.572789][ T9018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.777'. [ 350.766375][ T5725] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 351.796242][ T5725] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 351.805546][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.824262][ T5725] usb 3-1: config 0 descriptor?? [ 351.841788][ T5725] cp210x 3-1:0.0: cp210x converter detected [ 351.925782][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.786'. [ 352.258583][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.790'. [ 352.275604][ T30] audit: type=1400 audit(1784717789.776:1660): avc: denied { write } for pid=9062 comm="syz.1.788" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 352.334406][ T30] audit: type=1400 audit(1784717789.776:1661): avc: denied { setattr } for pid=9062 comm="syz.1.788" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 352.380125][ T9063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.391033][ T5725] usb 3-1: cp210x converter now attached to ttyUSB0 [ 352.516730][ T5725] usb 3-1: USB disconnect, device number 22 [ 352.548444][ T5725] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 352.557527][ T5725] cp210x 3-1:0.0: device disconnected [ 352.706989][ T30] audit: type=1400 audit(1784717790.196:1662): avc: denied { setopt } for pid=9068 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 352.730453][ T9067] vlan2: entered allmulticast mode [ 352.735702][ T9067] erspan0: entered allmulticast mode [ 352.744562][ T9067] bond1: (slave vlan2): Error -34 calling dev_set_mtu [ 352.821550][ T30] audit: type=1400 audit(1784717790.206:1663): avc: denied { read } for pid=9068 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 352.910843][ T9070] netlink: 260 bytes leftover after parsing attributes in process `syz.3.791'. [ 353.124983][ T30] audit: type=1400 audit(1784717790.626:1664): avc: denied { create } for pid=9082 comm="syz.5.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 353.181381][ T30] audit: type=1400 audit(1784717790.646:1665): avc: denied { setopt } for pid=9082 comm="syz.5.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 353.225809][ T30] audit: type=1400 audit(1784717790.646:1666): avc: denied { bind } for pid=9082 comm="syz.5.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 353.302141][ T30] audit: type=1400 audit(1784717790.646:1667): avc: denied { write } for pid=9085 comm="syz.4.795" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 353.398041][ T30] audit: type=1400 audit(1784717790.646:1668): avc: denied { open } for pid=9085 comm="syz.4.795" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 353.483895][ T804] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 353.598779][ T30] audit: type=1400 audit(1784717790.646:1669): avc: denied { ioctl } for pid=9085 comm="syz.4.795" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 353.739665][ T804] usb 3-1: config 1 interface 0 has no altsetting 0 [ 353.895852][ T804] usb 3-1: string descriptor 0 read error: -22 [ 354.069792][ T804] usb 3-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 354.193911][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'. [ 354.577194][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.328258][ T9159] netlink: 144 bytes leftover after parsing attributes in process `syz.3.802'. [ 356.456509][ T804] usbhid 3-1:1.0: can't add hid device: -71 [ 356.514667][ T804] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 356.610005][ T804] usb 3-1: USB disconnect, device number 23 [ 356.698411][ T9169] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 356.759647][ T9169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.063542][ T31] INFO: task kworker/0:6:5804 blocked for more than 143 seconds. [ 357.079045][ T31] Tainted: G L syzkaller #0 [ 357.085769][ T5739] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 357.095018][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.104356][ T31] task:kworker/0:6 state:D stack:23592 pid:5804 tgid:5804 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 357.124424][ T31] Workqueue: usb_hub_wq hub_event [ 357.134335][ T31] Call Trace: [ 357.137736][ T31] [ 357.145659][ T31] __schedule+0x125c/0x6730 [ 357.150299][ T31] ? __pfx___schedule+0x10/0x10 [ 357.162022][ T31] ? find_held_lock+0x2b/0x80 [ 357.172190][ T31] ? schedule+0x225/0x2c0 [ 357.182332][ T31] schedule+0xdd/0x2c0 [ 357.187193][ T31] schedule_timeout+0x1b2/0x280 [ 357.192462][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 357.202651][ T31] ? mark_held_locks+0x40/0x70 [ 357.256933][ T5739] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 357.268850][ T31] __wait_for_common+0x2e7/0x4c0 [ 358.141428][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.153228][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 358.158807][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 358.182799][ T31] ? __pfx_device_del+0x10/0x10 [ 358.192510][ T5739] usb 4-1: config 0 descriptor?? [ 358.197636][ T31] ? kobject_put+0xb9/0x640 [ 358.204571][ T31] i2c_del_adapter+0x1d4/0x2d0 [ 358.208409][ T5739] cp210x 4-1:0.0: cp210x converter detected [ 358.221074][ T31] dvb_usbv2_exit.isra.0+0x4aa/0xb70 [ 358.226827][ T31] dvb_usbv2_probe+0x669/0x970 [ 358.238231][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 358.245720][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 358.252605][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 358.259227][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 358.267289][ T31] ? __pm_runtime_set_status+0x13c/0x970 [ 358.275022][ T31] usb_probe_interface+0x303/0x8f0 [ 358.281242][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 358.288075][ T31] really_probe+0x241/0xa60 [ 358.294918][ T31] __driver_probe_device+0x20e/0x450 [ 358.301265][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 358.308442][ T31] driver_probe_device+0x4a/0x140 [ 358.314784][ T31] __device_attach_driver+0x1df/0x320 [ 358.320255][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 358.326598][ T31] bus_for_each_drv+0x159/0x1e0 [ 358.331584][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 358.338166][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 358.344678][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 358.350597][ T31] __device_attach+0x1e4/0x4d0 [ 358.356725][ T31] ? __pfx___device_attach+0x10/0x10 [ 358.364292][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 358.370589][ T31] device_initial_probe+0xaf/0xd0 [ 358.376916][ T31] bus_probe_device+0x64/0x160 [ 358.382775][ T31] device_add+0x121d/0x1970 [ 358.419264][ T5739] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 358.457968][ T5739] cp210x 4-1:0.0: querying part number failed [ 358.464368][ T31] ? __pfx_device_add+0x10/0x10 [ 358.473174][ T31] ? mark_held_locks+0x40/0x70 [ 358.487500][ T31] usb_set_configuration+0xd97/0x1c60 [ 358.500003][ T5739] usb 4-1: cp210x converter now attached to ttyUSB0 [ 358.507019][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 358.525246][ T31] usb_generic_driver_probe+0xa1/0xe0 [ 358.537810][ T5739] usb 4-1: USB disconnect, device number 27 [ 358.543864][ T31] usb_probe_device+0xef/0x400 [ 358.562176][ T5739] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 358.573171][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 358.592304][ T31] really_probe+0x241/0xa60 [ 358.597826][ T5739] cp210x 4-1:0.0: device disconnected [ 358.618828][ T31] __driver_probe_device+0x20e/0x450 [ 358.647016][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 358.663263][ T31] driver_probe_device+0x4a/0x140 [ 358.674931][ T31] __device_attach_driver+0x1df/0x320 [ 358.681239][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 358.687498][ T31] bus_for_each_drv+0x159/0x1e0 [ 358.692390][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 358.698068][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 358.703627][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 358.709477][ T31] __device_attach+0x1e4/0x4d0 [ 358.714772][ T31] ? __pfx___device_attach+0x10/0x10 [ 358.720100][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 358.725333][ T31] device_initial_probe+0xaf/0xd0 [ 358.730363][ T31] bus_probe_device+0x64/0x160 [ 358.735152][ T31] device_add+0x121d/0x1970 [ 358.739655][ T31] ? __pfx_device_add+0x10/0x10 [ 358.744610][ T31] ? add_device_randomness+0xc9/0x110 [ 358.750027][ T31] usb_new_device.cold+0x685/0x115c [ 358.755434][ T31] ? _mutex_trylock_nest_lock+0x2e1/0x310 [ 358.761149][ T31] ? do_raw_spin_lock+0x128/0x260 [ 358.766206][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 358.771404][ T31] ? mark_held_locks+0x40/0x70 [ 358.776214][ T31] hub_event+0x30a3/0x4a60 [ 358.780652][ T31] ? __pfx_hub_event+0x10/0x10 [ 358.785469][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 358.791110][ T31] ? rcu_is_watching+0x12/0xc0 [ 358.796118][ T31] process_one_work+0xa23/0x1940 [ 358.801075][ T31] ? __pfx_process_one_work+0x10/0x10 [ 358.806540][ T31] ? __pfx_hub_event+0x10/0x10 [ 358.811321][ T31] worker_thread+0x5ef/0xe50 [ 358.816104][ T31] ? __pfx_worker_thread+0x10/0x10 [ 358.821221][ T31] ? kthread+0x13a/0x450 [ 358.825481][ T31] ? __pfx_worker_thread+0x10/0x10 [ 358.830591][ T31] kthread+0x370/0x450 [ 358.835220][ T31] ? __pfx_kthread+0x10/0x10 [ 358.839833][ T31] ret_from_fork+0x72b/0xd50 [ 358.844449][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 358.849556][ T31] ? __switch_to+0x800/0x10f0 [ 358.854495][ T31] ? __pfx_kthread+0x10/0x10 [ 358.859101][ T31] ret_from_fork_asm+0x1a/0x30 [ 358.864009][ T31] [ 358.867067][ T31] INFO: task syz.0.289:6951 blocked for more than 145 seconds. [ 358.874635][ T31] Tainted: G L syzkaller #0 [ 358.881257][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.890111][ T31] task:syz.0.289 state:D stack:28776 pid:6951 tgid:6941 ppid:5608 task_flags:0x400040 flags:0x00080002 [ 358.902240][ T31] Call Trace: [ 358.905830][ T31] [ 358.908784][ T31] __schedule+0x125c/0x6730 [ 358.913310][ T31] ? __pfx___schedule+0x10/0x10 [ 358.918172][ T31] ? find_held_lock+0x2b/0x80 [ 358.922832][ T31] ? schedule+0x225/0x2c0 [ 358.927379][ T31] schedule+0xdd/0x2c0 [ 358.931466][ T31] schedule_preempt_disabled+0x13/0x30 [ 358.936946][ T31] __mutex_lock+0xccc/0x1bd0 [ 358.941538][ T31] ? usbdev_open+0x1b6/0x870 [ 358.946145][ T31] ? klist_put+0xcb/0x1d0 [ 358.950468][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 358.955529][ T31] ? _raw_spin_unlock+0x28/0x50 [ 358.960393][ T31] ? kobject_put+0xb9/0x640 [ 358.964975][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 358.970274][ T31] ? usbdev_open+0x9d/0x870 [ 358.974864][ T31] ? usbdev_open+0x1b6/0x870 [ 358.979464][ T31] usbdev_open+0x1b6/0x870 [ 358.984052][ T31] ? do_raw_spin_lock+0x128/0x260 [ 358.989105][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 358.994095][ T31] ? chrdev_open+0x589/0x6a0 [ 358.998681][ T31] ? chrdev_open+0x589/0x6a0 [ 359.003292][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 359.008228][ T31] chrdev_open+0x234/0x6a0 [ 359.012619][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 359.017583][ T31] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 359.023933][ T31] do_dentry_open+0x6ab/0x14d0 [ 359.028705][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 359.033823][ T31] vfs_open+0x82/0x3f0 [ 359.037917][ T31] path_openat+0x2873/0x4280 [ 359.042528][ T31] ? __pfx_path_openat+0x10/0x10 [ 359.047572][ T31] do_file_open+0x20e/0x430 [ 359.052081][ T31] ? __pfx_do_file_open+0x10/0x10 [ 359.057123][ T31] ? alloc_fd+0x471/0x7a0 [ 359.061442][ T31] ? do_getname+0x191/0x390 [ 359.066179][ T31] do_sys_openat2+0x10f/0x1e0 [ 359.070870][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 359.076074][ T31] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 359.081787][ T31] ? rcu_is_watching+0x12/0xc0 [ 359.086578][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.091774][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 359.097002][ T31] __x64_sys_openat+0x12d/0x210 [ 359.101858][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 359.107332][ T31] do_syscall_64+0x115/0x870 [ 359.111940][ T31] ? clear_bhb_loop+0x40/0x90 [ 359.116629][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.122511][ T31] RIP: 0033:0x7f9fd135e6ce [ 359.126951][ T31] RSP: 002b:00007f9fd228ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 359.135371][ T31] RAX: ffffffffffffffda RBX: 00007f9fd228b6c0 RCX: 00007f9fd135e6ce [ 359.143481][ T31] RDX: 0000000000008001 RSI: 00007f9fd228ac00 RDI: ffffffffffffff9c [ 359.151477][ T31] RBP: 00007f9fd228ac00 R08: 0000000000000000 R09: 0000000000000000 [ 359.159494][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 359.167569][ T31] R13: 00007f9fd1626128 R14: 00007f9fd1626090 R15: 00007ffda1b539b8 [ 359.175563][ T31] [ 359.178590][ T31] [ 359.178590][ T31] Showing all locks held in the system: [ 359.186374][ T31] 1 lock held by ksoftirqd/0/15: [ 359.191308][ T31] 1 lock held by khungtaskd/31: [ 359.196901][ T31] #0: ffffffff8ebe6180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 359.214923][ T31] 2 locks held by getty/5364: [ 359.219623][ T31] #0: ffff8880381360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 359.231961][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 359.242113][ T31] 5 locks held by kworker/0:6/5804: [ 359.247322][ T31] #0: ffff888020aa5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 359.258262][ T31] #1: ffffc9000535fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 359.269510][ T31] #2: ffff88802b1561d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4a60 [ 359.278431][ T31] #3: ffff88803515d1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 359.287689][ T31] #4: ffff88802b1f51a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 359.296970][ T31] 3 locks held by kworker/u8:15/5897: [ 359.302333][ T31] #0: ffff88801f354940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 359.313098][ T31] #1: ffffc90005a27d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 359.324672][ T31] #2: ffffffff8ebf1c28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 359.334689][ T31] 4 locks held by udevd/6352: [ 359.339360][ T31] #0: ffff88807baac1b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 359.348254][ T31] #1: ffff88805816a480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 359.357682][ T31] #2: ffff888023b7bf08 (kn->active#32){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 359.367319][ T31] #3: ffff88803515d1d8 (&dev->mutex){....}-{4:4}, at: product_show+0x26/0xa0 [ 359.376276][ T31] 1 lock held by syz.0.289/6951: [ 359.381207][ T31] #0: ffff88802b1561d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 359.390210][ T31] [ 359.392530][ T31] ============================================= [ 359.392530][ T31] [ 359.400975][ T31] NMI backtrace for cpu 1 [ 359.400996][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 359.401017][ T31] Tainted: [L]=SOFTLOCKUP [ 359.401022][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 359.401031][ T31] Call Trace: [ 359.401036][ T31] [ 359.401042][ T31] dump_stack_lvl+0x100/0x190 [ 359.401067][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 359.401090][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 359.401114][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 359.401141][ T31] sys_info+0x141/0x190 [ 359.401160][ T31] watchdog+0xcb1/0x1030 [ 359.401184][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 359.401211][ T31] ? __pfx_watchdog+0x10/0x10 [ 359.401231][ T31] ? __kthread_parkme+0x18c/0x230 [ 359.401257][ T31] ? kthread+0x13a/0x450 [ 359.401282][ T31] ? __pfx_watchdog+0x10/0x10 [ 359.401299][ T31] kthread+0x370/0x450 [ 359.401324][ T31] ? __pfx_kthread+0x10/0x10 [ 359.401351][ T31] ret_from_fork+0x72b/0xd50 [ 359.401375][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 359.401400][ T31] ? __switch_to+0x800/0x10f0 [ 359.401416][ T31] ? __pfx_kthread+0x10/0x10 [ 359.401441][ T31] ret_from_fork_asm+0x1a/0x30 [ 359.401475][ T31] [ 359.401481][ T31] Sending NMI from CPU 1 to CPUs 0: [ 359.532238][ C0] NMI backtrace for cpu 0 [ 359.532253][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.532272][ C0] Tainted: [L]=SOFTLOCKUP [ 359.532277][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 359.532285][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 359.532311][ C0] Code: e6 8c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 99 11 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 359.532324][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000242 [ 359.532336][ C0] RAX: 000000000142cb97 RBX: ffffffff8e891480 RCX: ffffffff8bba02d5 [ 359.532345][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a4b71 RDI: ffffffff8c401480 [ 359.532354][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 359.532362][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 359.532371][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 359.532379][ C0] FS: 0000000000000000(0000) GS:ffff888123de6000(0000) knlGS:0000000000000000 [ 359.532393][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.532402][ C0] CR2: 000055824c1b4660 CR3: 0000000073868000 CR4: 00000000003526f0 [ 359.532411][ C0] Call Trace: [ 359.532416][ C0] [ 359.532420][ C0] default_idle+0x9/0x10 [ 359.532434][ C0] default_idle_call+0x6c/0xb0 [ 359.532448][ C0] do_idle+0x3a7/0x5b0 [ 359.532466][ C0] ? __pfx_do_idle+0x10/0x10 [ 359.532493][ C0] cpu_startup_entry+0x4f/0x60 [ 359.532510][ C0] rest_init+0x251/0x260 [ 359.532524][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 359.532541][ C0] start_kernel+0x48e/0x490 [ 359.532555][ C0] x86_64_start_reservations+0x24/0x30 [ 359.532571][ C0] x86_64_start_kernel+0x12b/0x130 [ 359.532585][ C0] common_startup_64+0x13e/0x158 [ 359.532609][ C0] [ 359.533626][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 359.533640][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 359.533661][ T31] Tainted: [L]=SOFTLOCKUP [ 359.533667][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 359.533676][ T31] Call Trace: [ 359.533682][ T31] [ 359.533689][ T31] dump_stack_lvl+0x100/0x190 [ 359.533710][ T31] vpanic+0x552/0x970 [ 359.533726][ T31] ? __pfx_vpanic+0x10/0x10 [ 359.533741][ T31] ? rcu_is_watching+0x12/0xc0 [ 359.533767][ T31] panic+0xd1/0xe0 [ 359.533781][ T31] ? __pfx_panic+0x10/0x10 [ 359.533798][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 359.533820][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 359.533840][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 359.533860][ T31] ? watchdog.cold+0x1ec/0x234 [ 359.533876][ T31] ? watchdog+0xcc1/0x1030 [ 359.533894][ T31] watchdog.cold+0x1fd/0x234 [ 359.533915][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 359.533937][ T31] ? __pfx_watchdog+0x10/0x10 [ 359.533954][ T31] ? __kthread_parkme+0x18c/0x230 [ 359.533983][ T31] ? kthread+0x13a/0x450 [ 359.534004][ T31] ? __pfx_watchdog+0x10/0x10 [ 359.534019][ T31] kthread+0x370/0x450 [ 359.534040][ T31] ? __pfx_kthread+0x10/0x10 [ 359.534063][ T31] ret_from_fork+0x72b/0xd50 [ 359.534085][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 359.534106][ T31] ? __switch_to+0x800/0x10f0 [ 359.534120][ T31] ? __pfx_kthread+0x10/0x10 [ 359.534143][ T31] ret_from_fork_asm+0x1a/0x30 [ 359.534174][ T31] [ 359.872777][ T31] Kernel Offset: disabled [ 359.877076][ T31] Rebooting in 86400 seconds..