last executing test programs: 9.726105996s ago: executing program 3 (id=434): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x80010, r0, 0x73b7000) close(r0) 9.574277502s ago: executing program 3 (id=435): fsopen(&(0x7f0000000080)='fuse\x00', 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8400) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x1f00, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}}}, 0x24}}, 0x0) 8.915390527s ago: executing program 0 (id=438): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x45, 0x0, &(0x7f0000000140)) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x50) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) setsockopt$ax25_int(r4, 0x101, 0x1, &(0x7f0000000280)=0x80000099, 0x4) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f0000000000)={0x7, 0x934e, 0x6, 0x9, 0xfffffff7, 0x6}) 8.853363538s ago: executing program 3 (id=440): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r0 = socket$inet6(0xa, 0x805, 0x0) recvmmsg(r0, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2020, 0x0) (async) recvmmsg(r0, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2020, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000002180)=""/4103, 0x1007, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) (async) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)={"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"}) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b7"], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b7"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x102a, &(0x7f0000000140)=ANY=[@ANYBLOB='huge=always,mpol=i']) chdir(&(0x7f0000000240)='./file0\x00') (async) chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000140)={0x2afe, 0x7, 0x80, 0x2, 0xc0, "d171a6307f026900", 0x40, 0x68e}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000, 0x1001f0) (async) fallocate(0xffffffffffffffff, 0x0, 0x1000, 0x1001f0) socket(0x10, 0x3, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x400000, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x20000000}, 0x38) 8.723795657s ago: executing program 3 (id=442): syz_usb_connect(0x3, 0x223, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xb7, 0x65, 0x63, 0x20, 0x4e2, 0x1400, 0x8c22, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x211, 0x1, 0x3, 0x1, 0x8, 0x9, [{{0x9, 0x4, 0xe7, 0x3, 0xc, 0x2, 0xe0, 0x63, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x57}, [@processing_unit={0x7, 0x24, 0x7, 0x6, 0x4, 0x3}]}], [{{0x9, 0x5, 0x4, 0x4, 0x3ff, 0xb, 0x1a, 0x8}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x0, 0xd, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0xffff}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x3, 0x1, 0x8}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0xa5, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x0, 0xb, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x2, 0x2, 0x4, [@generic={0x43, 0xf, "f22e91fd29c4358a33102e5b619e4ed4d71274e42228cf8c70ca511b2f5ff966be6640bfec1d6957db98e1516d2e6ffd1e46974e9dce10eb72cd348f373d13eb52"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0xc, 0x80, 0x5, [@generic={0xda, 0x24, "387d42c2a5bf8d170f18bd4b2c7a563f0a2ac73db46d13018fabc8429b209aad45c78f2202d521046ec42837489b875ac579a29c3cf033115113b12550954d26722d291972e3944b189545399a9f36dc8e58ce263e0a7d07d1b5527c2b953b3716f21c59e4b2d474fc5e52a50617fc50af7f5cc3454e1596b289c792308b0a1bf7aa981150812b70a163d2639b869b8990db22473562e01b7cd0f0bf3bfbb86bd9452957b9ad2840316c0629ab6a6edc265edeed7030163d20aeac4ba6980d98c0177cc4510514147b7f06ea1d9ba97ff62acf0a87e4867d"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x2, 0x73, 0x6}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x0, 0x8, 0x3}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0xf, 0x0, 0xf, [@generic={0x2e, 0x7, "7fec1a3809835c0accd1f0af6a9efaafd12dcc422cad7b5c089ef1979682d8d94184dcec77fa6aab67eed2cf"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x1}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x8, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x9}, @generic={0x1c, 0x8, "8b15375ccc9ff25d8fe5f4cdc35ffa7624179a72860ecd4a0291"}]}}, {{0x9, 0x5, 0x9b, 0x3, 0x40, 0x3, 0x2, 0x2}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x310, 0xc, 0x2, 0x44, 0x10}, 0x4b, &(0x7f00000009c0)={0x5, 0xf, 0x4b, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0xc06f, 0xf, 0x8, [0xff000f, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "8885430808158882f6e82d7d715dc3c8"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "474d7656c58b0fb39be348b6baa5fe23"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x8, 0x8, 0x2374}]}, 0x2, [{0x32, &(0x7f0000000a40)=@string={0x32, 0x3, "c3f25124a928678b3be1ccdd02d1f0e8d4f7b3cadd49aa4330dc57585f5b8cebaf9f10729f1adda0204192dc9785bb2b"}}, {0x5, &(0x7f0000000a80)=@string={0x5, 0x3, "ac9e1f"}}]}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000019c0)={{&(0x7f0000ff1000/0xc000)=nil, 0xc000}, 0x1}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001ac0)={0xa}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001b00), 0x111, 0xa}}, 0x20) 8.722857285s ago: executing program 4 (id=443): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) brk(0x55555ede5ffe) 8.585588145s ago: executing program 4 (id=445): socket(0x10, 0x3, 0x0) request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0xfffffffffffffffb) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000208000b400000000050000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000180001800c0001"], 0xe0}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.928450631s ago: executing program 4 (id=448): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x700, 0x20, 0x10, 0x4, {{0x2f, 0x4, 0x2, 0x3d, 0xbc, 0x67, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x2b, 0xa1, [@rand_addr=0x64010100, @multicast1, @remote, @broadcast, @rand_addr=0x64010101, @empty, @local, @private=0xa010100, @rand_addr=0x64010101, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0xfd, 0x3, 0x6, [{@multicast1, 0x8}, {@multicast1, 0x705}, {@multicast1, 0x80000000}, {@loopback, 0x7f}]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x12, "7df306349affffffec0000089a79ee3c"}, @ra={0x94, 0x4}, @cipso={0x86, 0x30, 0x2, [{0x5, 0xa, "07d0ee42bd78389e"}, {0x6, 0x11, "41a12f7c8aaf90a76e9eae50edd026"}, {0x5, 0x7, "522a189093"}, {0x6, 0x8, "b19ce4e6c2bd"}]}, @rr={0x7, 0xf, 0x79, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x82, 0x99}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000c00)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="4024df3e45a292354e4c3f6a9f831cc5324276ba0e3e06b2d127756b637c12d0f9e962a1d1ccb8d5f847127d932b81f52106230000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="41de8a23ce3870494fdb7ededb14e53da9b37f1debfc0a3e4157227032a8f6e346f30c5569c11076b4acb1f19b26a07b1fb3fb79015ad1dd8397e3b17c260c8b993c0dc9cb1e9c3804bceee6817b62547f40d76266a92c8628911b21398ccb7b0403faeb2cb442a76b8c8a8d27d90e706b7526c4fd06afb73db5bbb2b7506371d52540ca8d035cf8b1fd408a0f4c483c8e2d0db3318fff01ed27503936e0f388225fc02a"], 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000c80)=@newtfilter={0x958, 0x2c, 0x300, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xd, 0xb}, {0x1, 0xa}, {0xfff2, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_fw={{0x7}, {0x914, 0x2, [@TCA_FW_ACT={0xf4, 0x4, [@m_ife={0xf0, 0x6, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x7fff}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, @TCA_IFE_DMAC={0xa, 0x3, @random="62a21335a5a2"}, @TCA_IFE_DMAC={0xa, 0x3, @random="71f85d57efa0"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x581, 0x0, 0x6, 0x8, 0x8}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, @TCA_IFE_DMAC={0xa, 0x3, @random="5c860daa2cf3"}]}, {0x2f, 0x6, "455fd471a7b57fbc3ad00138622e7972c66e1612e2cffb87fb7e8b375c411ff6c7ae69ff84c2b3f119e808"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_POLICE={0x81c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0x6, 0x9, 0x2, 0x4, 0x7, 0x2, 0x2, 0x9, 0x9, 0x1, 0x6, 0x9, 0x200, 0xbc93, 0xfffffe01, 0x3, 0x4, 0x4000, 0x80, 0x800, 0x6, 0x1, 0x0, 0x71d, 0xf91, 0x4, 0x4, 0x8, 0x509c, 0x81, 0x8, 0x2, 0x5af, 0xc, 0x7, 0x9, 0x4, 0x8520, 0x4e, 0x401, 0x9, 0x0, 0x8, 0xa6d, 0x7, 0x5, 0x4, 0xf, 0xff, 0x80000000, 0x1000, 0x8f, 0x1, 0x7, 0x9, 0x31df, 0x3, 0x8, 0x4, 0xfffffc00, 0xfffffff7, 0x4, 0x80, 0x8, 0x5, 0xe, 0x6b8a8c61, 0x979, 0x200, 0x0, 0x9, 0x7, 0x0, 0x5, 0x5, 0x3, 0x6, 0x800, 0x5, 0x4, 0xfffffffb, 0x9, 0x4bb, 0xfff, 0xffff8001, 0x8, 0x10001, 0x41, 0x9, 0xd962, 0x671, 0x3, 0xfffffffe, 0x2, 0xd26, 0x5, 0x0, 0x6, 0x9, 0xd, 0x1, 0x5, 0x7f, 0x81, 0x80, 0x0, 0x1, 0x40, 0xfff, 0x2, 0xe6f2, 0x5, 0xd7d1, 0xb26, 0x1, 0x6, 0x1, 0x8, 0x1, 0xfffffffc, 0x80000001, 0x25, 0x8, 0x4a, 0x9, 0x1, 0x4, 0xffffffff, 0x7e7e, 0x5, 0x81, 0x8, 0x3, 0x6, 0xc4a2, 0x6, 0x9, 0x4, 0x6, 0xd, 0x9, 0x7, 0x5, 0x5eff, 0x6, 0x401, 0x4, 0x80000000, 0x1, 0x5, 0x4, 0x10, 0x9, 0xff800000, 0x9, 0xa7c8, 0x6, 0x3, 0x8, 0xfffff173, 0x6, 0xf, 0x2, 0x9, 0x1, 0x8, 0x4, 0x10000, 0x6, 0x4, 0xffff21b6, 0x9, 0xf2fbd6e, 0x80, 0x1ff, 0x200, 0x3, 0xffffffff, 0x800, 0x4, 0x9, 0x5, 0xc60, 0x7, 0xfffffeff, 0x5, 0x1, 0x10000, 0xb733, 0x2, 0xfff, 0x80000000, 0x8, 0x1566, 0xd2e, 0x7fff, 0x2, 0x6, 0x3ff, 0x5, 0x200, 0x3, 0x0, 0x8, 0xe94, 0x2, 0x7fff, 0x9, 0xfffff25e, 0x0, 0x80, 0x0, 0x8, 0x1, 0x9, 0xa, 0x9, 0x0, 0x3, 0xaf37, 0xd8d7, 0x6, 0x8000, 0x3, 0x9, 0x3, 0x3, 0x8001, 0x2, 0x1, 0x40, 0x8, 0x7, 0xfffffffe, 0x9, 0x9, 0x6, 0x69, 0xef, 0x5, 0x395, 0x2, 0x7, 0x1, 0x2, 0x5, 0x6, 0x18, 0x2, 0x6e5cd074, 0xffffffff, 0xff, 0x1, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x7ff, 0xfffff07a, 0x9, 0x3, 0x9, 0xe93, 0x5, 0x3, 0x2, 0xa, 0x3, 0x3, 0x78, 0x3, 0x80, 0x10000, 0x64, 0x0, 0xe, 0x80000001, 0xffffffff, 0x18, 0x400, 0x9, 0x4, 0x0, 0xb, 0xfd, 0x2, 0x7f, 0x7, 0x7ff, 0x9, 0x5, 0xff1e, 0x4, 0x1000000, 0x1f062f7, 0xb36, 0x2, 0x8, 0x6, 0x5, 0xc5, 0x6, 0x9, 0x8, 0x80000000, 0x7, 0x7, 0x7, 0x2, 0x40, 0x10000, 0x101, 0x5, 0x0, 0x2, 0x6, 0x1, 0x100000, 0x5, 0xfffffffc, 0x4, 0xa3c, 0x1, 0x10000, 0x5e5, 0x9, 0xe1, 0x7, 0x1, 0xa, 0x4, 0x1, 0x8, 0x1, 0x200, 0xfffffff2, 0x2, 0x5, 0x3cd, 0xffff, 0xe3, 0x10, 0x0, 0x31, 0x9, 0x1, 0x80, 0x6, 0x8, 0x1, 0x6, 0x64c, 0x800, 0x65ee, 0x2, 0x10001, 0x5, 0x5, 0x4, 0x3eb6, 0xdb6f, 0x9, 0x3, 0x0, 0x80, 0x28cc, 0xffff, 0x5, 0xd79, 0x80, 0x4, 0x7ff, 0xee2, 0xfffff000, 0x5, 0xd, 0xfffffffa, 0x7, 0x101, 0x0, 0x4, 0x107059c7, 0x4, 0x837, 0x2, 0x7, 0x7, 0x1, 0x325e, 0x9, 0x0, 0x4, 0x6, 0xe, 0x8, 0xe, 0x8, 0x6, 0x2, 0x7, 0x5f4, 0x5, 0x3, 0x9, 0x4, 0x5, 0x3, 0x6, 0x7, 0x9, 0x7, 0x8, 0x6, 0xf4, 0x5, 0xa, 0x6, 0x3, 0x8, 0x4, 0x8, 0x3, 0xfff, 0x3, 0x1, 0x10001, 0x6, 0x400, 0x40, 0x9, 0x7, 0x7, 0xa1a2, 0xcc4, 0x6d91, 0x0, 0x1, 0x1, 0x4, 0x1f5f8898, 0x7, 0x4, 0x2, 0x0, 0x4, 0x1, 0x9, 0x0, 0x6, 0x5, 0x2, 0x50000, 0xe, 0xffffffff, 0x7, 0x6, 0x7, 0x0, 0x18e0, 0x80000000, 0x80000000, 0x8001, 0x4, 0x1, 0x50, 0xd3, 0x5e04, 0xd, 0xffff, 0x3, 0x1, 0x2a23, 0x9, 0x2, 0x9, 0x6, 0x8, 0x0, 0x9, 0x1, 0x5, 0xff, 0x5, 0x8, 0x7, 0x2, 0x5, 0x0, 0x41f3, 0xdacc, 0x5, 0x0, 0x3, 0x8000, 0x9, 0x6, 0x5, 0x4, 0x80000001, 0x1, 0x2, 0x80000000, 0x4, 0x1, 0x80000001, 0x5, 0x401, 0xf, 0x401, 0x80000001, 0x9, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xcb}, @TCA_RATE={0x6, 0x5, {0x1, 0xb}}]}, 0x958}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {0x3f}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900010000000000000000000a00000000000058d3eeed446e0ec3a3b35ba7fe"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) socket$nl_generic(0x10, 0x3, 0x10) 5.823364544s ago: executing program 2 (id=450): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1b0000001c0001"], 0x30}}, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x1000) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e072401000000000905820910000000000725"], 0x0) 5.671242208s ago: executing program 0 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001800600060086dd"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 5.453689539s ago: executing program 0 (id=453): creat(&(0x7f0000000040)='./file0\x00', 0x10c) r0 = socket$inet(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x4d, 0x39]}}]}) 5.275563088s ago: executing program 1 (id=454): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x19f2, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x8000000}, 0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r3, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.209921133s ago: executing program 0 (id=455): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) r4 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) io_uring_enter(r4, 0x2000000, 0x2, 0xf, &(0x7f0000000000)={[0x400000]}, 0x18) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000200)={0x0, 0x7, 0xfffffffc, 0x8, 0x3, [], [0x2, 0x0, 0x3, 0x2b7], [0xffffffff, 0x4ea, 0x8000, 0x2], [0x4, 0x7, 0x7fffffffffffffff, 0x1]}) 5.201215273s ago: executing program 3 (id=456): syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[@ANYBLOB="591a1d9a2bdb0180c2250000080045000078000000000029907800000000000000d6f78e000009000000000000000000000000000000bfd8a5dd2002c02142c4391145badd28fd7f80c3d94ebe798204d84d44400c0ffc0e896f38da000000000000000bb10000086d2e000000000000000000bb3b2195c4b058706558a70864bef1f0524a72"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000100)="a7", 0xfec7}, {&(0x7f0000000880)="9f3846581b1b5159fa75b369536aed7fc089b18592fd1bd099864f1ed35c7046e78c84f4cf0e59594f6dac655efbe84343ff8c186af752f7691c612987b6c089fc2ac412de8edab1f67d0300a1acf9ef331f2b436ff4322adcde8648bcd1e193eb1cb83b0ff2de12d2", 0xfdb9}, {&(0x7f0000000300)='b', 0x1}], 0x28, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000340)={0x0}) 4.857471869s ago: executing program 1 (id=457): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000a0001004155444954"], 0xb4}}, 0x0) 4.850298408s ago: executing program 4 (id=458): r0 = syz_io_uring_setup(0xfb2, &(0x7f00000002c0)={0x0, 0xbb06, 0x20, 0x2, 0x2c3}, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000700)={&(0x7f0000002000), 0x0, 0x2}, 0x1) socket$inet(0x2, 0x2, 0x1) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000010000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') 4.799868647s ago: executing program 3 (id=459): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$rfkill(0xffffff9c, &(0x7f00000000c0), 0x8080, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='reiserfs\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000700)='./file0\x00', 0x2081, 0x135) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = openat(r2, &(0x7f00000006c0)='./file0\x00', 0x60900, 0x108) getdents64(r3, &(0x7f0000000100)=""/70, 0x46) poll(&(0x7f0000000280)=[{r2, 0x2000}, {r1, 0x90}, {0xffffffffffffffff, 0x831c}], 0x3, 0x20000004) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000300)={0x14, &(0x7f0000000180)={0x0, 0x23, 0xaa, {0xaa, 0x11, "217e23adc2893c029d7b457f2df070085cfd17c1683c5c1a4ba4e6958f0c515946f13398e98c7605ddb6b77ea3c8fed39aae3995dcdd8592122bcb2defb0818d1a788e41ca36ad04a7bc389af47459dbae152987131d2d41ed228e2ae96318ec01f39048b3489c3b52e8d056419bc002de07f4fbf2bec945043fd94cd0afadba41d5a3a28cc1ad5b3275c9216548dbeb92a98d5099d1121bf41c05eaf1706c1e744799f6d3245959"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x44, &(0x7f0000000340)={0x0, 0x9, 0x95, "6294065b557781759d14f6e94817bc37c38db85754090a844bb4de8c81da0110340e7095a9c68405436e19b2bd15ae9bc48f9908f94d2512067c9b8115c11ac43763fa0374882ff31807b2ee2e84773214981e81cd31a370e5d406479dc261548b700e9de5db9c0fc2406955e7185ea98942475aea03836e955ab169c70892e788f6d515d24857261f28afce8e6ff83021eee3b733"}, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0xd, 0x9, 0xf, 0xac9b, 0x59, 0x2, 0x8001, 0x7, 0xc, 0x3, 0x5}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000500)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0xb}, &(0x7f0000000600)={0x20, 0x89, 0x2, 0x1}}) openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f00000000c0)={0x2}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="400a03000000277ec8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.537421627s ago: executing program 0 (id=460): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x200000000000004, 0xfffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) shutdown(r1, 0x6da80e86889b8b7e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getpid() socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0x3) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) read$dsp(r5, &(0x7f0000000300)=""/79, 0x4f) 3.126939549s ago: executing program 1 (id=461): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0043, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = inotify_init1(0x0) inotify_init() inotify_init() r3 = socket$inet6(0xa, 0x806, 0x3) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r5) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4620, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) listen(r4, 0x3000000) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xa2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r2, r6, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="4008080000000807ca23dc66d6f1d2dc2d519ab17cf539daf7057ce23521200d160ff440f040eefe6b726daa"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002201000000907d016b0602de17e9de0cf2ebd48b2ea1dcea6f5355f81e218d28ac53c6452d441561531866264a07ef06125819804843"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) 2.501550836s ago: executing program 2 (id=462): socket$kcm(0x10, 0x2, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000940)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8003a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0xe3, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x5, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x9, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x5, 0x8004, 0x5, 0xfffffff3, 0x129432e5, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x7, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x1000008, 0x9, 0x6, 0x47, 0x4, 0x1, 0xfe080000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x100bc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0xba, 0xfffffffe, 0x102, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0xfffffff9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1c9, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x7, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffe, 0x0, 0x7fff, 0x101, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x40, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x8, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x10007, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x80000200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 1.40255979s ago: executing program 2 (id=463): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x204000, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x204000, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r4, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r6}, 0x10) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.084449654s ago: executing program 2 (id=464): r0 = socket(0x10, 0x3, 0x0) setresuid(0xee01, 0xee00, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.060652027s ago: executing program 4 (id=465): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x74, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x44000}, 0x20004880) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 953.766979ms ago: executing program 1 (id=466): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) recvmsg$unix(0xffffffffffffffff, 0x0, 0x566e105bf7b091e4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000768000/0x2000)=nil, 0x2000, 0xb635773f07ebbeec, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) syz_emit_ethernet(0xae, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) prlimit64(r1, 0x9, 0x0, 0x0) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) r7 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r7, &(0x7f00003e8000/0x1000)=nil, 0xc000) write$rfkill(r6, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 922.006983ms ago: executing program 2 (id=467): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x19f2, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x8000000}, 0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r3, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 705.837512ms ago: executing program 2 (id=468): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002680)=0xa7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002640)="6dd8eed1e34ae4f2a2", 0x9}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r2, &(0x7f0000000100), 0x4001) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x240801, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000000480)={0x9335, 0x4, &(0x7f0000000380)=[0x0, 0x8, 0xb, 0x6], &(0x7f00000003c0)=[0xfffe, 0x4, 0x400, 0x42, 0x1, 0x5], &(0x7f0000000400)=[0x6c91, 0x1], &(0x7f0000000440)=[0x5, 0x5, 0x0, 0x7, 0x3cb6, 0xa, 0x4, 0x0, 0xabd7, 0x7]}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 271.20648ms ago: executing program 1 (id=469): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b400f96dff36791090000000792da3ad2b52d90c3e00006300001f00000000006adb6f61d89f2e6dbfabc0facb7a57fc7090b864566fecb778"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000001300)=0x3) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) semtimedop(0x0, &(0x7f0000000040)=[{0x1, 0xfffc}], 0x1f4, 0x0) (async, rerun: 32) semctl$IPC_RMID(0x0, 0x0, 0x0) (async, rerun: 32) landlock_restrict_self(0xffffffffffffffff, 0x0) (async) landlock_restrict_self(0xffffffffffffffff, 0x0) (async) openat$pfkey(0xffffffffffffff9c, 0x0, 0x103b43, 0x0) (async, rerun: 32) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$PIO_SCRNMAP(r3, 0x4b4b, &(0x7f0000002080)) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)={0xffff, 0x5, 0x90f, 0x4, 0x16, "6ea31e10d33a70bfe0f97923aeedd6c69e721b"}) (async) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x80000000, &(0x7f0000000540)) setsockopt$inet_int(r4, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet_opts(r4, 0x0, 0x2, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_misc(r5, &(0x7f00000003c0)="38c1669c6450872d6a72dd3ae8423e72947ed1d94639c9d26135bfb0afec8512334d44912aa5db12f002a1a70cb5c2d85c989406eb0f66d22236ad493c7970f2c2697e76edb48c71b39229b01a717ba3fdca9938806b7d47f169611c920d0d1889ec8a653008dc9db93c0d39581b380ebe99eebf733a2aabaf28a5bf5c02fd52097e2d3b0d9ed1", 0x87) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x11) 129.645475ms ago: executing program 1 (id=470): syz_usb_connect(0x3, 0x223, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xb7, 0x65, 0x63, 0x20, 0x4e2, 0x1400, 0x8c22, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x211, 0x1, 0x3, 0x1, 0x8, 0x9, [{{0x9, 0x4, 0xe7, 0x3, 0xc, 0x2, 0xe0, 0x63, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x57}, [@processing_unit={0x7, 0x24, 0x7, 0x6, 0x4, 0x3}]}], [{{0x9, 0x5, 0x4, 0x4, 0x3ff, 0xb, 0x1a, 0x8}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x0, 0xd, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0xffff}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x3, 0x1, 0x8}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0xa5, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x0, 0xb, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x2, 0x2, 0x4, [@generic={0x43, 0xf, "f22e91fd29c4358a33102e5b619e4ed4d71274e42228cf8c70ca511b2f5ff966be6640bfec1d6957db98e1516d2e6ffd1e46974e9dce10eb72cd348f373d13eb52"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0xc, 0x80, 0x5, [@generic={0xda, 0x24, "387d42c2a5bf8d170f18bd4b2c7a563f0a2ac73db46d13018fabc8429b209aad45c78f2202d521046ec42837489b875ac579a29c3cf033115113b12550954d26722d291972e3944b189545399a9f36dc8e58ce263e0a7d07d1b5527c2b953b3716f21c59e4b2d474fc5e52a50617fc50af7f5cc3454e1596b289c792308b0a1bf7aa981150812b70a163d2639b869b8990db22473562e01b7cd0f0bf3bfbb86bd9452957b9ad2840316c0629ab6a6edc265edeed7030163d20aeac4ba6980d98c0177cc4510514147b7f06ea1d9ba97ff62acf0a87e4867d"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x2, 0x73, 0x6}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x0, 0x8, 0x3}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0xf, 0x0, 0xf, [@generic={0x2e, 0x7, "7fec1a3809835c0accd1f0af6a9efaafd12dcc422cad7b5c089ef1979682d8d94184dcec77fa6aab67eed2cf"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x1}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x8, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x9}, @generic={0x1c, 0x8, "8b15375ccc9ff25d8fe5f4cdc35ffa7624179a72860ecd4a0291"}]}}, {{0x9, 0x5, 0x9b, 0x3, 0x40, 0x3, 0x2, 0x2}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x310, 0xc, 0x2, 0x44, 0x10}, 0x4b, &(0x7f00000009c0)={0x5, 0xf, 0x4b, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0xc06f, 0xf, 0x8, [0xff000f, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "8885430808158882f6e82d7d715dc3c8"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "474d7656c58b0fb39be348b6baa5fe23"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x8, 0x8, 0x2374}]}, 0x2, [{0x32, &(0x7f0000000a40)=@string={0x32, 0x3, "c3f25124a928678b3be1ccdd02d1f0e8d4f7b3cadd49aa4330dc57585f5b8cebaf9f10729f1adda0204192dc9785bb2b"}}, {0x5, &(0x7f0000000a80)=@string={0x5, 0x3, "ac9e1f"}}]}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000019c0)={{&(0x7f0000ff1000/0xc000)=nil, 0xc000}, 0x1}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001ac0)={0xa}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001b00), 0x111, 0xa}}, 0x20) 14.392478ms ago: executing program 4 (id=471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18) msgctl$IPC_SET(0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1048c, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f00000002c0)='./file0\x00') chdir(&(0x7f00000003c0)='./bus\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1a000000", @ANYRES16=r6, @ANYBLOB="37ef000000000000000005000000"], 0x14}}, 0x0) 0s ago: executing program 0 (id=472): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xce83, 0x0, 0x0, 0x0, 0xc}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x10, 0x900000, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000f80)={0xa, 0x4e20, 0x0, @empty, 0xb851}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$getown(r3, 0x9) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000002c0)}], 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xd, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d648777", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0x7c81, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc2, &(0x7f0000000300)=""/194, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.098623][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.109712][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.124721][ T5828] veth0_vlan: entered promiscuous mode [ 61.145296][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.151871][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.165844][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.171594][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.175903][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.193490][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.203322][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.213847][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.224473][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.234622][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.243969][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.253102][ T5819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.261838][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.282023][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.290847][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.299541][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.308792][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.322388][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.324145][ T5828] veth1_vlan: entered promiscuous mode [ 61.335875][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.397774][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.405627][ T5828] veth0_macvtap: entered promiscuous mode [ 61.408246][ T5828] veth1_macvtap: entered promiscuous mode [ 61.417631][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.447105][ T30] audit: type=1400 audit(1745246719.182:112): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.xPQE0g/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 61.471980][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.472002][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.472010][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.472022][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.472030][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.472041][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.472049][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.472059][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.472983][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.484891][ T30] audit: type=1400 audit(1745246719.182:113): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.585083][ T30] audit: type=1400 audit(1745246719.182:114): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.xPQE0g/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.592042][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.619981][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.627326][ T30] audit: type=1400 audit(1745246719.182:115): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.650648][ T30] audit: type=1400 audit(1745246719.182:116): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.xPQE0g/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 61.690594][ T30] audit: type=1400 audit(1745246719.182:117): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.xPQE0g/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 61.703909][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.735717][ T30] audit: type=1400 audit(1745246719.182:118): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.755556][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.755968][ T30] audit: type=1400 audit(1745246719.362:119): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 61.788703][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.788723][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.788732][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.788742][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.788751][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.805169][ T30] audit: type=1400 audit(1745246719.362:120): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="gadgetfs" ino=7370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 61.819884][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.823346][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.868157][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.910541][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.919780][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.929248][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.941072][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.954221][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.963033][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.353947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 62.408895][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.414061][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.428038][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.435782][ T5823] Bluetooth: hci0: command tx timeout [ 62.460673][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.510094][ T5823] Bluetooth: hci1: command tx timeout [ 62.555421][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.585738][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.593150][ T5823] Bluetooth: hci3: command tx timeout [ 62.600070][ T5823] Bluetooth: hci4: command tx timeout [ 62.605484][ T5825] Bluetooth: hci2: command tx timeout [ 62.612625][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.632519][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.687927][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.728371][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.070614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 63.160696][ T5869] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.169554][ T5898] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.320239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.350012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.378025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.432462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 63.456622][ T5869] usb 2-1: config 0 has no interfaces? [ 63.511064][ T5898] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 63.630483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 63.666209][ T5869] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 63.677426][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.690111][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.700296][ T5898] usb 3-1: Product: syz [ 63.704992][ T5898] usb 3-1: Manufacturer: syz [ 63.709657][ T5869] usb 2-1: Product: syz [ 63.726245][ T5898] usb 3-1: SerialNumber: syz [ 63.734772][ T5869] usb 2-1: Manufacturer: syz [ 63.755123][ T5869] usb 2-1: SerialNumber: syz [ 63.761424][ T5898] usb 3-1: config 0 descriptor?? [ 63.890094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 64.080148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.299604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.520000][ T5823] Bluetooth: hci0: command tx timeout [ 64.590094][ T5823] Bluetooth: hci1: command tx timeout [ 64.620270][ T5869] usb 2-1: config 0 descriptor?? [ 64.670176][ T5823] Bluetooth: hci4: command tx timeout [ 64.675611][ T5823] Bluetooth: hci2: command tx timeout [ 64.837761][ T5928] overlay: Bad value for 'upperdir' [ 65.101096][ T5823] Bluetooth: hci3: command tx timeout [ 65.139388][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 65.139401][ T30] audit: type=1400 audit(1745246722.622:147): avc: denied { ioctl } for pid=5925 comm="syz.3.7" path="/dev/video3" dev="devtmpfs" ino=934 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 65.206609][ T30] audit: type=1400 audit(1745246722.932:148): avc: denied { create } for pid=5933 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.247310][ T30] audit: type=1400 audit(1745246722.942:149): avc: denied { write } for pid=5933 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.291067][ T30] audit: type=1400 audit(1745246722.942:150): avc: denied { read write } for pid=5933 comm="syz.0.8" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.339636][ T30] audit: type=1400 audit(1745246722.942:151): avc: denied { open } for pid=5933 comm="syz.0.8" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.375417][ T30] audit: type=1400 audit(1745246723.032:152): avc: denied { create } for pid=5933 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.541453][ T5898] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 65.640230][ T5898] asix 3-1:0.0: probe with driver asix failed with error -71 [ 65.642777][ T30] audit: type=1400 audit(1745246723.032:153): avc: denied { getopt } for pid=5933 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.701028][ T5898] usb 3-1: USB disconnect, device number 2 [ 65.728056][ T30] audit: type=1400 audit(1745246723.032:154): avc: denied { connect } for pid=5933 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.011223][ T30] audit: type=1400 audit(1745246723.032:155): avc: denied { name_connect } for pid=5933 comm="syz.0.8" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 66.148568][ T5921] usb 2-1: USB disconnect, device number 2 [ 66.169343][ T30] audit: type=1400 audit(1745246723.072:156): avc: denied { map_create } for pid=5933 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.319152][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 66.926613][ T5952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12'. [ 67.614993][ T5968] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.634542][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 67.765441][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 67.811113][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 68.020009][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 68.020047][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 68.020054][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 68.587269][ T5976] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 68.665088][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 68.998912][ T5976] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 70.294103][ T5999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22'. [ 71.020970][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.027504][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.066343][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 72.066408][ T30] audit: type=1400 audit(1745246729.802:205): avc: denied { create } for pid=6013 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.076983][ T30] audit: type=1400 audit(1745246730.812:206): avc: denied { create } for pid=6022 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 73.096228][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.355281][ T30] audit: type=1400 audit(1745246731.092:207): avc: denied { create } for pid=6026 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.363471][ T30] audit: type=1400 audit(1745246731.132:208): avc: denied { bind } for pid=6026 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.390022][ T30] audit: type=1400 audit(1745246731.142:209): avc: denied { listen } for pid=6026 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.411038][ T30] audit: type=1400 audit(1745246731.902:210): avc: denied { mounton } for pid=6028 comm="syz.0.31" path="/6/file0" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.169540][ T30] audit: type=1400 audit(1745246732.442:211): avc: denied { create } for pid=6034 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.177745][ T5921] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.600043][ T30] audit: type=1400 audit(1745246732.442:212): avc: denied { bind } for pid=6034 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.652818][ T30] audit: type=1400 audit(1745246732.442:213): avc: denied { write } for pid=6034 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.680075][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 75.701181][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.723035][ T30] audit: type=1400 audit(1745246732.962:214): avc: denied { create } for pid=6035 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 75.743280][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.763652][ T5921] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 75.791343][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.843130][ T5921] usb 5-1: config 0 descriptor?? [ 76.203835][ T974] cfg80211: failed to load regulatory.db [ 76.331148][ T5921] usbhid 5-1:0.0: can't add hid device: -71 [ 76.337174][ T5921] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 76.397745][ T5921] usb 5-1: USB disconnect, device number 2 [ 76.533008][ T6057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.39'. [ 76.710981][ T5869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.109934][ T5914] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.160432][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 77.321251][ T5869] usb 1-1: config 3 has an invalid interface number: 231 but max is 0 [ 77.442691][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 77.454347][ T5869] usb 1-1: config 3 has an invalid descriptor of length 158, skipping remainder of the config [ 77.500849][ T5869] usb 1-1: config 3 has no interface number 0 [ 77.696747][ T5914] usb 3-1: config 3 has an invalid interface number: 231 but max is 0 [ 77.714166][ T5914] usb 3-1: config 3 has an invalid descriptor of length 220, skipping remainder of the config [ 77.729763][ T5869] usb 1-1: config 3 interface 231 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 77.750320][ T5914] usb 3-1: config 3 has no interface number 0 [ 77.756450][ T5914] usb 3-1: config 3 interface 231 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 77.773587][ T5869] usb 1-1: config 3 interface 231 has no altsetting 0 [ 77.810335][ T5869] usb 1-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=8c.22 [ 77.820890][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.841878][ T5914] usb 3-1: config 3 interface 231 has no altsetting 0 [ 77.856318][ T5869] usb 1-1: Product: syz [ 77.864330][ T5914] usb 3-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=8c.22 [ 77.876485][ T5869] usb 1-1: Manufacturer: 麬 [ 77.881508][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.889592][ T5869] usb 1-1: SerialNumber: syz [ 77.898177][ T5914] usb 3-1: Product: syz [ 77.906241][ T5914] usb 3-1: Manufacturer: 麬 [ 77.911643][ T5914] usb 3-1: SerialNumber: syz [ 78.353709][ T5914] xr_serial 3-1:3.231: skipping garbage [ 78.359389][ T5869] xr_serial 1-1:3.231: skipping garbage [ 78.368386][ T5914] xr_serial 3-1:3.231: skipping garbage [ 78.388593][ T5869] xr_serial 1-1:3.231: skipping garbage [ 78.415920][ T5914] xr_serial 3-1:3.231: skipping garbage [ 78.431097][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 78.431113][ T30] audit: type=1400 audit(1745246736.162:218): avc: denied { append } for pid=6073 comm="syz.4.44" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.968207][ T5869] xr_serial 1-1:3.231: skipping garbage [ 80.012214][ T5914] xr_serial 3-1:3.231: skipping garbage [ 80.023261][ T5869] xr_serial 1-1:3.231: skipping garbage [ 80.028981][ T5869] xr_serial 1-1:3.231: skipping garbage [ 80.030066][ T30] audit: type=1400 audit(1745246736.202:219): avc: denied { read write } for pid=6073 comm="syz.4.44" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.045188][ T5869] xr_serial 1-1:3.231: skipping garbage [ 80.063527][ T5869] xr_serial 1-1:3.231: skipping garbage [ 80.103983][ T30] audit: type=1400 audit(1745246736.202:220): avc: denied { open } for pid=6073 comm="syz.4.44" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.130153][ T5914] usb 3-1: USB disconnect, device number 3 [ 80.194038][ T5869] usb 1-1: USB disconnect, device number 2 [ 80.304776][ T30] audit: type=1400 audit(1745246736.212:221): avc: denied { create } for pid=6073 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.335738][ T30] audit: type=1400 audit(1745246736.222:222): avc: denied { setopt } for pid=6073 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.419512][ T5921] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.647090][ T5921] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 80.776282][ T30] audit: type=1400 audit(1745246736.982:223): avc: denied { ioctl } for pid=6073 comm="syz.4.44" path="socket:[7950]" dev="sockfs" ino=7950 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.819544][ T5921] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 80.840547][ T5921] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 80.869323][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.907148][ T6080] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 80.925996][ T5921] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.193470][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 81.211742][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 81.222162][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 81.234262][ T5921] usb 5-1: USB disconnect, device number 3 [ 81.596716][ T30] audit: type=1400 audit(1745246739.292:224): avc: denied { write } for pid=6090 comm="syz.2.50" name="fib_trie" dev="proc" ino=4026532958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 82.044339][ T6101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.52'. [ 82.271011][ T30] audit: type=1400 audit(1745246739.362:225): avc: denied { bind } for pid=6090 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.471347][ T30] audit: type=1326 audit(1745246740.202:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.4.56" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29d698e169 code=0x0 [ 82.530059][ T30] audit: type=1400 audit(1745246740.242:227): avc: denied { name_bind } for pid=6113 comm="syz.1.58" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 82.579926][ T5921] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.602881][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 83.602902][ T30] audit: type=1400 audit(1745246741.112:229): avc: denied { read } for pid=6113 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.674535][ T5921] usb 4-1: config 0 has no interfaces? [ 84.049415][ T5921] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 84.054706][ T5869] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.172087][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.196627][ T30] audit: type=1400 audit(1745246741.932:230): avc: denied { create } for pid=6127 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.220129][ T5921] usb 4-1: Product: syz [ 84.224331][ T5921] usb 4-1: Manufacturer: syz [ 84.281832][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 84.290500][ T6131] netlink: 64 bytes leftover after parsing attributes in process `syz.1.61'. [ 84.331682][ T6131] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 84.440299][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.61'. [ 84.449503][ T6132] openvswitch: netlink: Missing key (keys=40, expected=80) [ 84.525762][ T30] audit: type=1400 audit(1745246742.022:231): avc: denied { write } for pid=6129 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.526015][ T30] audit: type=1400 audit(1745246742.032:232): avc: denied { nlmsg_write } for pid=6129 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.526198][ T30] audit: type=1400 audit(1745246742.142:233): avc: denied { create } for pid=6129 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 84.526336][ T30] audit: type=1400 audit(1745246742.172:234): avc: denied { ioctl } for pid=6129 comm="syz.1.61" path="socket:[8057]" dev="sockfs" ino=8057 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 84.629975][ T6133] netlink: 64 bytes leftover after parsing attributes in process `syz.4.60'. [ 84.695311][ T6134] netlink: 16 bytes leftover after parsing attributes in process `syz.4.60'. [ 84.695424][ T6134] openvswitch: netlink: Missing key (keys=40, expected=80) [ 84.777649][ T5869] usb 1-1: config 3 has an invalid interface number: 231 but max is 0 [ 84.777679][ T5869] usb 1-1: config 3 has an invalid descriptor of length 158, skipping remainder of the config [ 84.777690][ T5869] usb 1-1: config 3 has no interface number 0 [ 84.777708][ T5869] usb 1-1: config 3 interface 231 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 84.777723][ T5869] usb 1-1: config 3 interface 231 has no altsetting 0 [ 84.780145][ T5869] usb 1-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=8c.22 [ 84.780162][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.780173][ T5869] usb 1-1: Product: syz [ 84.780181][ T5869] usb 1-1: Manufacturer: 麬 [ 84.780190][ T5869] usb 1-1: SerialNumber: syz [ 84.793766][ T6133] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 84.821985][ T5921] usb 4-1: SerialNumber: syz [ 84.832778][ T5921] usb 4-1: config 0 descriptor?? [ 85.055438][ T5869] xr_serial 1-1:3.231: skipping garbage [ 85.055462][ T5869] xr_serial 1-1:3.231: skipping garbage [ 85.055475][ T5869] xr_serial 1-1:3.231: skipping garbage [ 85.055487][ T5869] xr_serial 1-1:3.231: skipping garbage [ 85.055499][ T5869] xr_serial 1-1:3.231: skipping garbage [ 85.055510][ T5869] xr_serial 1-1:3.231: skipping garbage [ 85.055522][ T5869] xr_serial 1-1:3.231: skipping garbage [ 85.059426][ T5869] usb 1-1: USB disconnect, device number 3 [ 85.107811][ T6140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.63'. [ 85.759591][ T30] audit: type=1400 audit(1745246743.102:235): avc: denied { bind } for pid=6135 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 86.086652][ T10] usb 4-1: USB disconnect, device number 2 [ 86.190219][ T30] audit: type=1400 audit(1745246743.922:236): avc: denied { setopt } for pid=6148 comm="syz.4.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.389997][ T30] audit: type=1400 audit(1745246744.102:237): avc: denied { create } for pid=6144 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.193024][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.67'. [ 88.527110][ T30] audit: type=1400 audit(1745246746.262:238): avc: denied { setopt } for pid=6163 comm="syz.3.68" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.158075][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 89.172234][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 89.190525][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 89.311897][ T6175] /dev/nullb0: Can't open blockdev [ 89.526194][ T6180] netlink: 64 bytes leftover after parsing attributes in process `syz.2.73'. [ 89.648471][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.73'. [ 89.657790][ T6181] openvswitch: netlink: Missing key (keys=40, expected=80) [ 89.727875][ T6180] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 89.929102][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.76'. [ 90.799511][ T30] audit: type=1400 audit(1745246748.452:239): avc: granted { setsecparam } for pid=6185 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 91.263891][ T30] audit: type=1400 audit(1745246748.982:240): avc: denied { bind } for pid=6195 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.594679][ T30] audit: type=1400 audit(1745246748.982:241): avc: denied { name_bind } for pid=6195 comm="syz.3.78" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 91.618192][ T30] audit: type=1400 audit(1745246748.982:242): avc: denied { node_bind } for pid=6195 comm="syz.3.78" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 92.647130][ T30] audit: type=1400 audit(1745246748.982:243): avc: denied { accept } for pid=6195 comm="syz.3.78" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.798553][ T30] audit: type=1400 audit(1745246750.392:244): avc: denied { bind } for pid=6211 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.419868][ T30] audit: type=1400 audit(1745246750.972:245): avc: denied { name_bind } for pid=6211 comm="syz.3.83" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 93.468201][ T30] audit: type=1400 audit(1745246750.972:246): avc: denied { node_bind } for pid=6211 comm="syz.3.83" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 94.517980][ T30] audit: type=1400 audit(1745246752.102:247): avc: granted { setsecparam } for pid=6226 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 94.794435][ T6243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.91'. [ 94.999929][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.161453][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.172675][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 95.198870][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.227238][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.276483][ T6240] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.299506][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 95.491504][ T10] usb 4-1: USB disconnect, device number 3 [ 97.926612][ T5869] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.111786][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.104'. [ 98.299893][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 98.315985][ T5869] usb 5-1: config 3 has an invalid interface number: 231 but max is 0 [ 98.339166][ T5869] usb 5-1: config 3 has an invalid descriptor of length 207, skipping remainder of the config [ 98.352804][ T5869] usb 5-1: config 3 has no interface number 0 [ 98.484608][ T5869] usb 5-1: config 3 interface 231 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 99.510442][ T5869] usb 5-1: config 3 interface 231 has no altsetting 0 [ 99.519594][ T5869] usb 5-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=8c.22 [ 100.339932][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.360172][ T5869] usb 5-1: Product: syz [ 100.364385][ T5869] usb 5-1: Manufacturer: 麬 [ 100.369015][ T5869] usb 5-1: SerialNumber: syz [ 100.902801][ T5869] xr_serial 5-1:3.231: skipping garbage [ 100.908408][ T5869] xr_serial 5-1:3.231: skipping garbage [ 100.944002][ T5869] xr_serial 5-1:3.231: skipping garbage [ 100.971664][ T5869] usb 5-1: USB disconnect, device number 4 [ 101.077813][ T30] audit: type=1400 audit(1745246758.812:248): avc: denied { create } for pid=6313 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 101.251944][ T6319] ======================================================= [ 101.251944][ T6319] WARNING: The mand mount option has been deprecated and [ 101.251944][ T6319] and is ignored by this kernel. Remove the mand [ 101.251944][ T6319] option from the mount to silence this warning. [ 101.251944][ T6319] ======================================================= [ 101.286803][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.512641][ T30] audit: type=1400 audit(1745246758.992:249): avc: denied { remount } for pid=6307 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.532612][ T30] audit: type=1400 audit(1745246759.042:250): avc: denied { bind } for pid=6307 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 101.622179][ T30] audit: type=1400 audit(1745246759.352:251): avc: denied { name_bind } for pid=6313 comm="syz.4.112" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 101.643268][ T5898] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.669677][ T6320] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(59674141536944) <= P.seqno(0) <= S.SWH(59674141537018)) and (P.ackno exists or LAWL(33602890590126) <= P.ackno(33602890590127) <= S.AWH(33602890590127), sending SYNC... [ 101.689918][ T30] audit: type=1400 audit(1745246759.352:252): avc: denied { node_bind } for pid=6313 comm="syz.4.112" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 102.039928][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 102.056453][ T5898] usb 4-1: config 3 has an invalid interface number: 231 but max is 0 [ 102.065688][ T30] audit: type=1400 audit(1745246759.392:253): avc: denied { listen } for pid=6313 comm="syz.4.112" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 102.143857][ T5898] usb 4-1: config 3 has an invalid descriptor of length 207, skipping remainder of the config [ 102.159924][ T30] audit: type=1400 audit(1745246759.392:254): avc: denied { connect } for pid=6313 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 102.185389][ T5898] usb 4-1: config 3 has no interface number 0 [ 102.197352][ T5898] usb 4-1: config 3 interface 231 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 102.202097][ T30] audit: type=1400 audit(1745246759.392:255): avc: denied { name_connect } for pid=6313 comm="syz.4.112" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 102.233156][ T30] audit: type=1400 audit(1745246759.402:256): avc: denied { setopt } for pid=6313 comm="syz.4.112" laddr=::1 lport=40470 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 102.278254][ T5898] usb 4-1: config 3 interface 231 has no altsetting 0 [ 102.291955][ T30] audit: type=1400 audit(1745246759.402:257): avc: denied { accept } for pid=6313 comm="syz.4.112" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 102.329621][ T5898] usb 4-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=8c.22 [ 102.339407][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.347609][ T5898] usb 4-1: Product: syz [ 102.382945][ T5898] usb 4-1: Manufacturer: 麬 [ 102.419905][ T5898] usb 4-1: SerialNumber: syz [ 102.556577][ T6336] batman_adv: batadv0: Adding interface: gretap1 [ 102.566673][ T6336] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.905283][ T5898] xr_serial 4-1:3.231: skipping garbage [ 102.924945][ T6336] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 102.937065][ T5898] xr_serial 4-1:3.231: skipping garbage [ 102.958125][ T5898] xr_serial 4-1:3.231: skipping garbage [ 102.975529][ T5898] usb 4-1: USB disconnect, device number 4 [ 103.278699][ T6348] lo speed is unknown, defaulting to 1000 [ 103.293185][ T6348] lo speed is unknown, defaulting to 1000 [ 103.304492][ T6348] lo speed is unknown, defaulting to 1000 [ 103.748755][ T6348] infiniband sz1: set active [ 103.753585][ T6348] infiniband sz1: added lo [ 103.766881][ T974] lo speed is unknown, defaulting to 1000 [ 103.822022][ T6348] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 103.825298][ T6348] infiniband sz1: Couldn't open port 1 [ 103.859736][ T6348] RDS/IB: sz1: added [ 103.864026][ T6348] smc: adding ib device sz1 with port count 1 [ 103.870572][ T6348] smc: ib device sz1 port 1 has pnetid [ 103.878026][ T6348] lo speed is unknown, defaulting to 1000 [ 103.967957][ T6348] lo speed is unknown, defaulting to 1000 [ 104.055488][ T6348] lo speed is unknown, defaulting to 1000 [ 104.136811][ T6348] lo speed is unknown, defaulting to 1000 [ 104.217699][ T6348] lo speed is unknown, defaulting to 1000 [ 104.339378][ T5870] lo speed is unknown, defaulting to 1000 [ 106.107484][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 106.107515][ T30] audit: type=1400 audit(1745246763.842:266): avc: denied { write } for pid=6366 comm="syz.2.127" path="socket:[9068]" dev="sockfs" ino=9068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 106.741113][ T6371] capability: warning: `syz.2.127' uses deprecated v2 capabilities in a way that may be insecure [ 106.797999][ T30] audit: type=1400 audit(1745246763.882:267): avc: denied { nlmsg_read } for pid=6366 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 106.919420][ T30] audit: type=1326 audit(1745246764.632:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.2.127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d6f98e169 code=0x0 [ 108.627235][ T30] audit: type=1400 audit(1745246766.292:269): avc: denied { watch watch_reads } for pid=6402 comm="syz.1.135" path="/32" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 108.731676][ T6404] netlink: 64 bytes leftover after parsing attributes in process `syz.2.134'. [ 108.763513][ T6404] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 109.005652][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.134'. [ 109.014693][ T6410] openvswitch: netlink: Missing key (keys=40, expected=80) [ 110.050320][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 110.059280][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 110.071134][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 110.259678][ T6419] netlink: 64 bytes leftover after parsing attributes in process `syz.3.139'. [ 110.280826][ T6419] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 110.334139][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.139'. [ 110.343367][ T6420] openvswitch: netlink: Missing key (keys=40, expected=80) [ 111.794345][ T30] audit: type=1400 audit(1745246769.532:270): avc: granted { setsecparam } for pid=6430 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 112.207113][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 112.226055][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 112.243906][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 112.389923][ T30] audit: type=1400 audit(1745246770.042:271): avc: granted { setsecparam } for pid=6439 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 114.426126][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.153'. [ 115.008372][ T6474] netlink: 64 bytes leftover after parsing attributes in process `syz.0.156'. [ 115.009736][ T6475] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 115.237034][ T6473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.156'. [ 115.246516][ T6473] openvswitch: netlink: Missing key (keys=40, expected=80) [ 115.330479][ T5898] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.600922][ T6482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.158'. [ 115.656116][ T5898] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 115.665912][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.675555][ T5898] usb 4-1: Product: syz [ 115.679766][ T5898] usb 4-1: Manufacturer: syz [ 115.755512][ T5898] usb 4-1: SerialNumber: syz [ 116.370369][ T5898] usb 4-1: config 0 descriptor?? [ 116.926068][ T30] audit: type=1326 audit(1745246774.662:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.4.165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29d698e169 code=0x0 [ 117.159974][ T5898] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.516656][ T5898] asix 4-1:0.0: probe with driver asix failed with error -71 [ 117.528136][ T5898] usb 4-1: USB disconnect, device number 5 [ 118.018247][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'. [ 118.440783][ T6519] netlink: 'syz.1.169': attribute type 1 has an invalid length. [ 118.510765][ T30] audit: type=1400 audit(1745246776.242:273): avc: denied { execute } for pid=6518 comm="syz.1.169" path="/41/pids.events" dev="tmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.185428][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.176'. [ 121.833223][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 122.105708][ T6567] netlink: 'syz.2.183': attribute type 1 has an invalid length. [ 122.328412][ T6573] netlink: 64 bytes leftover after parsing attributes in process `syz.3.185'. [ 122.434983][ T6573] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 123.517850][ T6572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.185'. [ 123.527422][ T6572] openvswitch: netlink: Missing key (keys=40, expected=80) [ 124.172625][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 124.491806][ T30] audit: type=1400 audit(1745246782.232:274): avc: denied { write } for pid=6600 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.800130][ T6613] netlink: 'syz.3.198': attribute type 1 has an invalid length. [ 124.850001][ T5909] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.102230][ T5909] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 125.112391][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.120714][ T5909] usb 2-1: Product: syz [ 125.125791][ T5909] usb 2-1: Manufacturer: syz [ 125.131410][ T5909] usb 2-1: SerialNumber: syz [ 125.301377][ T5909] usb 2-1: config 0 descriptor?? [ 125.630224][ T5898] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.110100][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 126.119737][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.135218][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.145538][ T5898] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 126.165185][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.196046][ T5898] usb 1-1: config 0 descriptor?? [ 126.877163][ T30] audit: type=1400 audit(1745246784.082:275): avc: denied { mount } for pid=6627 comm="syz.3.202" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 126.889043][ T5909] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 126.918457][ T5909] asix 2-1:0.0: probe with driver asix failed with error -71 [ 126.936577][ T5909] usb 2-1: USB disconnect, device number 3 [ 127.052370][ T30] audit: type=1400 audit(1745246784.792:276): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 128.784172][ T5898] usbhid 1-1:0.0: can't add hid device: -71 [ 128.790714][ T5898] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 129.026829][ T5898] usb 1-1: USB disconnect, device number 4 [ 129.112662][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.205'. [ 129.529026][ T6666] netlink: 'syz.0.211': attribute type 1 has an invalid length. [ 129.612629][ T6670] netlink: 64 bytes leftover after parsing attributes in process `syz.4.213'. [ 129.663910][ T6670] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 129.822403][ T6670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.213'. [ 129.831852][ T6670] openvswitch: netlink: Missing key (keys=40, expected=80) [ 129.919955][ T5869] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.665669][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 131.034977][ T5869] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.049883][ T5869] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.083317][ T5869] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.379735][ T6693] sz1: rxe_newlink: already configured on lo [ 131.460109][ T5867] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.517275][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.525438][ T5869] usb 4-1: Product: syz [ 131.529621][ T5869] usb 4-1: Manufacturer: syz [ 131.534319][ T5869] usb 4-1: SerialNumber: syz [ 131.818320][ T5867] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 131.827665][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.835913][ T5867] usb 2-1: Product: syz [ 131.840270][ T5867] usb 2-1: Manufacturer: syz [ 131.844884][ T5867] usb 2-1: SerialNumber: syz [ 131.851785][ T30] audit: type=1400 audit(1745246789.592:277): avc: denied { read append } for pid=6695 comm="syz.4.220" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.876822][ T6667] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 131.905186][ T6699] 9pnet_fd: Insufficient options for proto=fd [ 131.916222][ T6697] lo speed is unknown, defaulting to 1000 [ 131.922195][ T6697] lo speed is unknown, defaulting to 1000 [ 131.928777][ T6697] lo speed is unknown, defaulting to 1000 [ 131.937068][ T6697] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.948351][ T6697] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 131.961115][ T5867] usb 2-1: config 0 descriptor?? [ 131.967216][ T6667] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 131.970517][ T6697] lo speed is unknown, defaulting to 1000 [ 131.982744][ T6697] lo speed is unknown, defaulting to 1000 [ 131.990443][ T6697] lo speed is unknown, defaulting to 1000 [ 131.997314][ T6697] lo speed is unknown, defaulting to 1000 [ 132.004341][ T6697] lo speed is unknown, defaulting to 1000 [ 132.042810][ T30] audit: type=1400 audit(1745246789.592:278): avc: denied { open } for pid=6695 comm="syz.4.220" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.424483][ T30] audit: type=1400 audit(1745246789.652:279): avc: denied { setopt } for pid=6695 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.433722][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.433789][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.457946][ T5867] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 132.458108][ T5867] asix 2-1:0.0: probe with driver asix failed with error -71 [ 132.463483][ T5867] usb 2-1: USB disconnect, device number 4 [ 132.475694][ T6704] Zero length message leads to an empty skb [ 132.806930][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.222'. [ 133.066021][ T5869] usb 4-1: 0:2 : does not exist [ 133.090409][ T5869] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 133.186332][ T5869] usb 4-1: USB disconnect, device number 6 [ 133.512683][ T6721] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 133.692645][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.740350][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.225'. [ 133.913863][ T30] audit: type=1400 audit(1745246791.652:280): avc: denied { write } for pid=6726 comm="syz.1.227" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 133.936847][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.945921][ T6728] process 'syz.1.227' launched '/dev/fd/6' with NULL argv: empty string added [ 134.044014][ T30] audit: type=1400 audit(1745246791.732:281): avc: denied { execute_no_trans } for pid=6726 comm="syz.1.227" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.069311][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.854080][ T6733] netlink: 64 bytes leftover after parsing attributes in process `syz.3.229'. [ 134.868986][ T30] audit: type=1400 audit(1745246791.862:282): avc: denied { rename } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.994926][ T6733] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 135.043640][ T30] audit: type=1400 audit(1745246791.872:283): avc: denied { unlink } for pid=5179 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.201766][ T5823] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 135.419360][ T6727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.229'. [ 135.428305][ T6727] openvswitch: netlink: Missing key (keys=40, expected=80) [ 135.456131][ T30] audit: type=1400 audit(1745246792.602:284): avc: denied { create } for pid=5179 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.480988][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 135.727804][ T30] audit: type=1400 audit(1745246793.462:285): avc: denied { write } for pid=6738 comm="syz.0.233" path="socket:[10753]" dev="sockfs" ino=10753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.750863][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.848913][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 136.534736][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 136.859111][ T6765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.237'. [ 139.700462][ T5898] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 139.708835][ T6789] netlink: 64 bytes leftover after parsing attributes in process `syz.0.244'. [ 139.855823][ T6788] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 139.889892][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 139.906839][ T5898] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 139.929445][ T6788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.244'. [ 139.938363][ T6788] openvswitch: netlink: Missing key (keys=40, expected=80) [ 139.951302][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.989031][ T5898] usb 4-1: Product: syz [ 139.998519][ T5898] usb 4-1: Manufacturer: syz [ 140.022191][ T5898] usb 4-1: SerialNumber: syz [ 140.034634][ T5898] usb 4-1: config 0 descriptor?? [ 140.113081][ T6792] warning: `syz.0.245' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 140.127686][ T30] audit: type=1400 audit(1745246797.862:286): avc: denied { bind } for pid=6791 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.195393][ T30] audit: type=1400 audit(1745246797.872:287): avc: denied { connect } for pid=6791 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.247019][ T30] audit: type=1400 audit(1745246797.902:288): avc: denied { write } for pid=6791 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.268141][ T30] audit: type=1400 audit(1745246797.902:289): avc: denied { read } for pid=6791 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.292890][ T5898] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.308299][ T30] audit: type=1400 audit(1745246797.972:290): avc: denied { write } for pid=6791 comm="syz.0.245" path="socket:[10874]" dev="sockfs" ino=10874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.644932][ T6802] xt_hashlimit: size too large, truncated to 1048576 [ 141.481249][ T5898] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 141.687478][ T30] audit: type=1400 audit(1745246798.472:291): avc: denied { connect } for pid=6794 comm="syz.1.246" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.691435][ T6801] tty tty23: ldisc open failed (-12), clearing slot 22 [ 141.703064][ T30] audit: type=1400 audit(1745246798.472:292): avc: denied { write } for pid=6794 comm="syz.1.246" laddr=::1 lport=60 faddr=::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.018385][ T30] audit: type=1400 audit(1745246799.752:293): avc: denied { getopt } for pid=6807 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.314504][ T6815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'. [ 142.686890][ T30] audit: type=1400 audit(1745246800.422:294): avc: denied { name_bind } for pid=6824 comm="syz.1.253" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 143.094972][ T5869] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 143.152292][ T30] audit: type=1400 audit(1745246800.892:295): avc: denied { ioctl } for pid=6819 comm="syz.2.251" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 143.156286][ T6828] rtc_cmos 00:00: Alarms can be up to one day in the future [ 143.177169][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.223886][ T5898] rtc_cmos 00:00: Alarms can be up to one day in the future [ 143.238975][ T5898] rtc_cmos 00:00: Alarms can be up to one day in the future [ 143.258365][ T5898] rtc_cmos 00:00: Alarms can be up to one day in the future [ 143.265904][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 143.282633][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.308416][ T5898] rtc_cmos 00:00: Alarms can be up to one day in the future [ 143.318656][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.340377][ T5898] rtc rtc0: __rtc_set_alarm: err=-22 [ 143.345879][ T5869] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 143.363270][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.617137][ T6837] netlink: 64 bytes leftover after parsing attributes in process `syz.0.255'. [ 143.664638][ T6837] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 143.699861][ T5869] usb 5-1: config 0 descriptor?? [ 143.882542][ T5870] usb 4-1: USB disconnect, device number 7 [ 144.159076][ T6842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.856556][ T6851] netlink: 64 bytes leftover after parsing attributes in process `syz.1.258'. [ 144.970203][ T6851] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 145.136080][ T6851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.258'. [ 145.145593][ T6851] openvswitch: netlink: Missing key (keys=40, expected=80) [ 145.514645][ T5870] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 145.691673][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 145.711759][ T5870] usb 1-1: config 3 has an invalid interface number: 231 but max is 0 [ 145.723780][ T5870] usb 1-1: config 3 has an invalid descriptor of length 207, skipping remainder of the config [ 145.747419][ T5870] usb 1-1: config 3 has no interface number 0 [ 145.767202][ T5870] usb 1-1: config 3 interface 231 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 145.830767][ T5869] usbhid 5-1:0.0: can't add hid device: -71 [ 145.834860][ T5870] usb 1-1: config 3 interface 231 has no altsetting 0 [ 145.836784][ T5869] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 145.864339][ T5869] usb 5-1: USB disconnect, device number 5 [ 145.887029][ T5870] usb 1-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=8c.22 [ 145.898026][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.909360][ T5870] usb 1-1: Product: syz [ 145.926077][ T5870] usb 1-1: Manufacturer: 麬 [ 145.931616][ T5870] usb 1-1: SerialNumber: syz [ 145.945733][ T6866] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.964206][ T6869] vxcan1: tx address claim with dlc 0 [ 145.980329][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 145.980342][ T30] audit: type=1400 audit(1745246803.702:297): avc: denied { bind } for pid=6867 comm="syz.4.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.029720][ T6866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.063879][ T30] audit: type=1400 audit(1745246803.702:298): avc: denied { write } for pid=6867 comm="syz.4.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.151295][ T6875] netlink: 64 bytes leftover after parsing attributes in process `syz.4.266'. [ 146.196124][ T5870] xr_serial 1-1:3.231: skipping garbage [ 146.200710][ T6875] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 146.539960][ T5870] xr_serial 1-1:3.231: skipping garbage [ 146.555096][ T5870] xr_serial 1-1:3.231: skipping garbage [ 146.703952][ T6879] team0: Device gre1 is of different type [ 146.815717][ T5870] usb 1-1: USB disconnect, device number 5 [ 147.677491][ T30] audit: type=1800 audit(1745246805.392:299): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.269" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 147.716694][ T6888] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.722912][ T6888] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 147.826150][ T6888] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.832174][ T6888] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 147.845288][ T6888] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.851284][ T6888] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 147.864429][ T6888] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.870968][ T6888] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 147.883768][ T6888] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 147.889740][ T6888] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 148.251871][ T6877] PKCS7: Unknown OID: [4] 0.38.11253.7578(bad) [ 148.258120][ T6877] PKCS7: Only support pkcs7_signedData type [ 148.276184][ T6877] wg1: entered promiscuous mode [ 148.281110][ T6877] wg1: entered allmulticast mode [ 148.314414][ T30] audit: type=1400 audit(1745246805.992:300): avc: denied { write } for pid=6876 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 148.752663][ T30] audit: type=1400 audit(1745246806.492:301): avc: denied { view } for pid=6903 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 148.837807][ T6907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.275'. [ 148.853547][ T6904] lo speed is unknown, defaulting to 1000 [ 148.893719][ T30] audit: type=1400 audit(1745246806.552:302): avc: denied { read } for pid=6902 comm="syz.4.273" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.973468][ T30] audit: type=1400 audit(1745246806.552:303): avc: denied { open } for pid=6902 comm="syz.4.273" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.998958][ T6911] Invalid source name [ 149.003376][ T6911] UBIFS error (pid: 6911): cannot open "ubifs", error -22 [ 149.018861][ T30] audit: type=1400 audit(1745246806.562:304): avc: denied { map } for pid=6902 comm="syz.4.273" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.081706][ T6913] vlan2: entered promiscuous mode [ 149.105292][ T6913] bridge0: entered promiscuous mode [ 149.111299][ T6913] vlan2: entered allmulticast mode [ 149.125032][ T6913] bridge0: entered allmulticast mode [ 149.209494][ T6904] lo speed is unknown, defaulting to 1000 [ 149.325339][ T6917] netlink: 64 bytes leftover after parsing attributes in process `syz.1.278'. [ 149.404996][ T6919] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 149.625653][ T6922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.759220][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.278'. [ 149.776409][ T6916] openvswitch: netlink: Missing key (keys=40, expected=80) [ 151.572643][ T6954] netlink: 64 bytes leftover after parsing attributes in process `syz.4.286'. [ 151.609512][ T6954] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 151.898337][ T6957] netlink: 'syz.2.287': attribute type 10 has an invalid length. [ 152.002992][ T6957] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 152.156540][ T6970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.291'. [ 152.338088][ T30] audit: type=1400 audit(1745246810.072:305): avc: denied { name_connect } for pid=6977 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 152.514500][ T30] audit: type=1400 audit(1745246810.102:306): avc: denied { listen } for pid=6977 comm="syz.1.294" lport=49235 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.769040][ T30] audit: type=1400 audit(1745246810.112:307): avc: denied { listen } for pid=6974 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.179574][ T6978] sctp: failed to load transform for md5: -2 [ 153.557688][ T30] audit: type=1326 audit(1745246811.292:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26f18e169 code=0x7ffc0000 [ 153.664368][ T30] audit: type=1326 audit(1745246811.322:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc26f18e169 code=0x7ffc0000 [ 154.334582][ T30] audit: type=1326 audit(1745246811.322:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26f18e169 code=0x7ffc0000 [ 154.336787][ T7008] netlink: 84 bytes leftover after parsing attributes in process `syz.0.300'. [ 154.435003][ T30] audit: type=1326 audit(1745246811.322:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc26f18e169 code=0x7ffc0000 [ 154.468257][ T7008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.300'. [ 154.558886][ T974] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 154.615295][ T7015] netlink: 36 bytes leftover after parsing attributes in process `syz.3.304'. [ 154.634067][ T30] audit: type=1400 audit(1745246811.322:312): avc: denied { kexec_image_load } for pid=6994 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 154.657401][ T30] audit: type=1326 audit(1745246811.322:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26f18e169 code=0x7ffc0000 [ 154.681391][ T30] audit: type=1326 audit(1745246811.322:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.0.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc26f18e169 code=0x7ffc0000 [ 154.704484][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.839854][ T974] usb 5-1: Using ep0 maxpacket: 32 [ 154.917735][ T7021] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 154.949177][ T974] usb 5-1: config 3 has an invalid interface number: 231 but max is 0 [ 154.958122][ T974] usb 5-1: config 3 has an invalid descriptor of length 207, skipping remainder of the config [ 154.974423][ T974] usb 5-1: config 3 has no interface number 0 [ 154.981588][ T974] usb 5-1: config 3 interface 231 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 155.001275][ T974] usb 5-1: config 3 interface 231 has no altsetting 0 [ 155.065174][ T7021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.219880][ T974] usb 5-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=8c.22 [ 155.360448][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.368607][ T974] usb 5-1: Product: syz [ 155.375564][ T974] usb 5-1: Manufacturer: 麬 [ 155.380426][ T974] usb 5-1: SerialNumber: syz [ 156.039329][ T974] xr_serial 5-1:3.231: skipping garbage [ 156.067340][ T974] xr_serial 5-1:3.231: skipping garbage [ 156.368031][ T974] xr_serial 5-1:3.231: skipping garbage [ 156.608476][ T974] usb 5-1: USB disconnect, device number 6 [ 156.610212][ T5914] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 157.075933][ T5914] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 157.126174][ T5914] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 157.188293][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 157.230430][ T5914] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 157.269163][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 157.317587][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 157.835162][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 157.852829][ T5914] usb 4-1: string descriptor 0 read error: -22 [ 157.871966][ T5914] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 157.888252][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.258085][ T5914] usb 4-1: config 0 descriptor?? [ 158.287933][ T5914] hub 4-1:0.0: bad descriptor, ignoring hub [ 158.296121][ T5914] hub 4-1:0.0: probe with driver hub failed with error -5 [ 158.318670][ T5914] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 158.353891][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 158.353909][ T30] audit: type=1400 audit(1745246816.092:329): avc: denied { read } for pid=5182 comm="acpid" name="mouse1" dev="devtmpfs" ino=2822 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.373397][ T7053] vlan2: entered promiscuous mode [ 158.387879][ T7053] ip6gretap0: entered promiscuous mode [ 158.508663][ T30] audit: type=1400 audit(1745246816.092:330): avc: denied { open } for pid=5182 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2822 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.558661][ T7054] trusted_key: encrypted_key: master key parameter 'S# D(WV3aH9D~' is invalid [ 158.783718][ T30] audit: type=1400 audit(1745246816.322:331): avc: denied { append } for pid=7034 comm="syz.3.309" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 158.895738][ T30] audit: type=1400 audit(1745246816.322:332): avc: denied { ioctl } for pid=7034 comm="syz.3.309" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 159.172851][ T30] audit: type=1800 audit(1745246816.732:333): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.318" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 159.321622][ T30] audit: type=1400 audit(1745246817.062:334): avc: denied { write } for pid=7050 comm="syz.1.314" path="socket:[12261]" dev="sockfs" ino=12261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 159.385407][ T30] audit: type=1400 audit(1745246817.092:335): avc: denied { map } for pid=7050 comm="syz.1.314" path="/proc/287/net/kcm" dev="proc" ino=4026533466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 159.409665][ T30] audit: type=1400 audit(1745246817.092:336): avc: denied { execute } for pid=7050 comm="syz.1.314" path="/proc/287/net/kcm" dev="proc" ino=4026533466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 159.515613][ T5914] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 160.159366][ T5898] usb 4-1: USB disconnect, device number 8 [ 160.255834][ T30] audit: type=1400 audit(1745246817.882:337): avc: denied { getopt } for pid=7074 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 160.312243][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 160.371684][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.419898][ T5909] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 160.427549][ T5914] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 160.474818][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.523675][ T5914] usb 5-1: config 0 descriptor?? [ 160.614509][ T5909] usb 3-1: config 0 has an invalid interface number: 33 but max is 0 [ 160.642928][ T5909] usb 3-1: config 0 has no interface number 0 [ 160.655171][ T5909] usb 3-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=f6.9e [ 160.671684][ T7094] FAULT_INJECTION: forcing a failure. [ 160.671684][ T7094] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 160.690010][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.698185][ T5909] usb 3-1: Product: syz [ 160.708404][ T5909] usb 3-1: Manufacturer: syz [ 160.714552][ T7094] CPU: 0 UID: 0 PID: 7094 Comm: syz.1.327 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 160.714576][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.714586][ T7094] Call Trace: [ 160.714591][ T7094] [ 160.714597][ T7094] dump_stack_lvl+0x16c/0x1f0 [ 160.714625][ T7094] should_fail_ex+0x512/0x640 [ 160.714647][ T7094] _copy_to_user+0x32/0xd0 [ 160.714672][ T7094] simple_read_from_buffer+0xcb/0x170 [ 160.714697][ T7094] proc_fail_nth_read+0x197/0x270 [ 160.714723][ T7094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.714748][ T7094] ? rw_verify_area+0xcf/0x680 [ 160.714769][ T7094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.714793][ T7094] vfs_read+0x1de/0xc70 [ 160.714824][ T7094] ? __pfx___mutex_lock+0x10/0x10 [ 160.714847][ T7094] ? __pfx_vfs_read+0x10/0x10 [ 160.714875][ T7094] ? __fget_files+0x20e/0x3c0 [ 160.714897][ T7094] ksys_read+0x12a/0x240 [ 160.714910][ T7094] ? __pfx_ksys_read+0x10/0x10 [ 160.714930][ T7094] ? rcu_is_watching+0x12/0xc0 [ 160.714956][ T7094] do_syscall_64+0xcd/0x260 [ 160.714979][ T7094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.714994][ T7094] RIP: 0033:0x7f3b0ed8cb7c [ 160.715006][ T7094] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 160.715020][ T7094] RSP: 002b:00007f3b0fb91030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.715035][ T7094] RAX: ffffffffffffffda RBX: 00007f3b0efb5fa0 RCX: 00007f3b0ed8cb7c [ 160.715044][ T7094] RDX: 000000000000000f RSI: 00007f3b0fb910a0 RDI: 000000000000000c [ 160.715052][ T7094] RBP: 00007f3b0fb91090 R08: 0000000000000000 R09: 0000000000000000 [ 160.715061][ T7094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.715069][ T7094] R13: 0000000000000000 R14: 00007f3b0efb5fa0 R15: 00007ffce28a6298 [ 160.715089][ T7094] [ 160.903597][ T5909] usb 3-1: SerialNumber: syz [ 160.923556][ T30] audit: type=1400 audit(1745246818.652:338): avc: denied { create } for pid=7087 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 160.942782][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.951036][ T5909] usb 3-1: config 0 descriptor?? [ 161.244558][ T5898] usb 3-1: USB disconnect, device number 4 [ 161.362297][ T5914] usbhid 5-1:0.0: can't add hid device: -71 [ 161.375805][ T5914] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 161.467470][ T5914] usb 5-1: USB disconnect, device number 7 [ 161.817403][ T7118] trusted_key: encrypted_key: insufficient parameters specified [ 162.230359][ T7128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7128 comm=syz.1.334 [ 162.399162][ T7131] kAFS: No cell specified [ 163.455234][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 163.455273][ T30] audit: type=1400 audit(1745246821.192:343): avc: granted { setsecparam } for pid=7136 comm="syz.0.341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 163.559902][ T974] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 163.790693][ T974] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 164.520256][ T974] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.535887][ T974] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.546977][ T974] usb 2-1: config 0 interface 0 has no altsetting 0 [ 164.560756][ T974] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.579925][ T974] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.591250][ T974] usb 2-1: config 0 interface 0 has no altsetting 0 [ 164.600158][ T974] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.614816][ T974] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.625868][ T974] usb 2-1: config 0 interface 0 has no altsetting 0 [ 164.633946][ T974] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.646100][ T974] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.667856][ T974] usb 2-1: config 0 interface 0 has no altsetting 0 [ 164.675689][ T974] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.685182][ T974] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.701784][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 164.717118][ T974] usb 2-1: config 0 interface 0 has no altsetting 0 [ 164.791538][ T974] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 164.805185][ T974] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 164.857679][ T974] usb 2-1: config 0 interface 0 has no altsetting 0 [ 164.952851][ T974] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.043462][ T974] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.108691][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.346'. [ 165.115842][ T974] usb 2-1: config 0 interface 0 has no altsetting 0 [ 165.171302][ T974] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.208725][ T974] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.243567][ T974] usb 2-1: config 0 interface 0 has no altsetting 0 [ 165.390707][ T974] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 165.484522][ T974] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 165.512210][ T974] usb 2-1: Product: syz [ 165.526734][ T974] usb 2-1: Manufacturer: syz [ 165.531595][ T974] usb 2-1: SerialNumber: syz [ 165.539905][ T974] usb 2-1: config 0 descriptor?? [ 165.545068][ T48] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 165.685874][ T30] audit: type=1400 audit(1745246823.402:344): avc: denied { map } for pid=7166 comm="syz.3.350" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 165.994932][ T30] audit: type=1400 audit(1745246823.412:345): avc: denied { execute } for pid=7166 comm="syz.3.350" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 166.047318][ T974] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 166.140136][ T48] usb 3-1: device descriptor read/64, error -71 [ 166.529913][ T48] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 166.578041][ T7143] o2cb: This node has not been configured. [ 166.585701][ T30] audit: type=1400 audit(1745246824.302:346): avc: denied { write } for pid=7142 comm="syz.1.339" name="/" dev="ocfs2_dlmfs" ino=13627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.609489][ T7143] o2cb: Cluster check failed. Fix errors before retrying. [ 166.621010][ T7143] (syz.1.339,7143,0):user_dlm_register:674 ERROR: status = -22 [ 166.651654][ T7143] (syz.1.339,7143,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 166.662510][ T30] audit: type=1400 audit(1745246824.302:347): avc: denied { add_name } for pid=7142 comm="syz.1.339" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.690187][ T48] usb 3-1: device descriptor read/64, error -71 [ 166.698846][ T5869] usb 2-1: USB disconnect, device number 5 [ 166.728896][ T7186] hub 6-0:1.0: USB hub found [ 166.742632][ T7186] hub 6-0:1.0: 1 port detected [ 166.809297][ T48] usb usb3-port1: attempt power cycle [ 166.811778][ T30] audit: type=1400 audit(1745246824.312:348): avc: denied { create } for pid=7142 comm="syz.1.339" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 166.831710][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'. [ 166.837618][ T30] audit: type=1400 audit(1745246824.312:349): avc: denied { associate } for pid=7142 comm="syz.1.339" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 166.865720][ T5869] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 167.369927][ T48] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 167.840359][ T48] usb 3-1: device descriptor read/8, error -71 [ 168.121569][ T48] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 168.289468][ T7200] bond0: entered promiscuous mode [ 168.294618][ T7200] bond_slave_0: entered promiscuous mode [ 168.301186][ T7200] bond_slave_1: entered promiscuous mode [ 168.470722][ T30] audit: type=1400 audit(1745246826.002:350): avc: denied { setopt } for pid=7194 comm="syz.4.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.600087][ T48] usb 3-1: device descriptor read/8, error -71 [ 168.756554][ T48] usb usb3-port1: unable to enumerate USB device [ 168.913989][ T7215] netlink: 64 bytes leftover after parsing attributes in process `syz.1.359'. [ 168.944237][ T7215] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 169.014336][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.359'. [ 169.024707][ T7216] openvswitch: netlink: Missing key (keys=40, expected=80) [ 169.166247][ T7212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.317437][ T30] audit: type=1400 audit(1745246827.052:351): avc: denied { getopt } for pid=7211 comm="syz.4.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.339779][ T30] audit: type=1400 audit(1745246827.052:352): avc: denied { write } for pid=7211 comm="syz.4.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.446329][ T30] audit: type=1400 audit(1745246827.182:353): avc: denied { bind } for pid=7219 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.469434][ T7220] netlink: 220 bytes leftover after parsing attributes in process `syz.2.361'. [ 169.669994][ T48] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 169.890118][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 169.947642][ T48] usb 2-1: config index 0 descriptor too short (expected 35065, got 27) [ 170.089892][ T48] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 170.119847][ T48] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.348878][ T48] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 170.428909][ T48] usb 2-1: config 1 has no interface number 0 [ 170.444516][ T48] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 170.455585][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.504597][ T48] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 170.558458][ T30] audit: type=1400 audit(1745246828.282:354): avc: denied { read write } for pid=7238 comm="syz.0.366" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 170.597472][ T30] audit: type=1400 audit(1745246828.292:355): avc: denied { open } for pid=7238 comm="syz.0.366" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 171.484864][ T48] snd_usb_pod 2-1:1.1: set_interface failed [ 171.491911][ T48] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 171.499697][ T48] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 171.533200][ T48] usb 2-1: USB disconnect, device number 6 [ 173.880301][ T30] audit: type=1400 audit(1745246831.612:356): avc: denied { setopt } for pid=7275 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.902803][ T30] audit: type=1400 audit(1745246831.612:357): avc: denied { write } for pid=7275 comm="syz.2.374" name="fd" dev="proc" ino=13882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 173.924002][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.991628][ T5869] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 174.272320][ T30] audit: type=1400 audit(1745246831.612:358): avc: denied { add_name } for pid=7275 comm="syz.2.374" name="0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 174.820362][ T30] audit: type=1400 audit(1745246831.612:359): avc: denied { create } for pid=7275 comm="syz.2.374" name="0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 174.949031][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 174.949062][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 174.962285][ T30] audit: type=1400 audit(1745246831.612:360): avc: denied { associate } for pid=7275 comm="syz.2.374" name="0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 174.962326][ T30] audit: type=1400 audit(1745246832.142:361): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.965794][ T5869] usb 1-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 174.965813][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.965824][ T5869] usb 1-1: Product: syz [ 174.965833][ T5869] usb 1-1: Manufacturer: syz [ 174.965841][ T5869] usb 1-1: SerialNumber: syz [ 174.972237][ T5869] usb 1-1: config 0 descriptor?? [ 175.262066][ T30] audit: type=1400 audit(1745246833.002:362): avc: denied { accept } for pid=7294 comm="syz.4.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 175.313424][ T7295] ipip0: entered promiscuous mode [ 175.378430][ T30] audit: type=1400 audit(1745246833.112:363): avc: denied { mount } for pid=7296 comm="syz.4.380" name="/" dev="autofs" ino=12796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 175.420324][ T5869] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 175.425928][ T30] audit: type=1400 audit(1745246833.162:364): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 175.428178][ T971] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 175.534109][ T7299] overlayfs: conflicting options: userxattr,redirect_dir=on [ 175.580228][ T971] usb 3-1: device descriptor read/64, error -71 [ 175.601238][ T5869] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.612531][ T5869] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 175.623141][ T5869] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 175.645478][ T5869] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 175.665070][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.677184][ T7292] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 175.686542][ T5869] hub 4-1:1.0: bad descriptor, ignoring hub [ 175.693905][ T5869] hub 4-1:1.0: probe with driver hub failed with error -5 [ 175.696469][ T7302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.382'. [ 175.701956][ T5869] cdc_wdm 4-1:1.0: skipping garbage [ 175.716491][ T5869] cdc_wdm 4-1:1.0: skipping garbage [ 175.728356][ T5869] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 175.734376][ T5869] cdc_wdm 4-1:1.0: Unknown control protocol [ 175.844874][ T971] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 176.063966][ T30] audit: type=1400 audit(1745246833.782:365): avc: denied { create } for pid=7291 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 176.165987][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 176.172852][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 176.179191][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 176.185803][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 176.192460][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 176.199127][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 176.289326][ T971] usb 3-1: device descriptor read/64, error -71 [ 176.296390][ T5869] usb 1-1: USB disconnect, device number 6 [ 176.405396][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 176.412036][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 176.418467][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 176.425095][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 176.431745][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 176.438370][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 176.445303][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 176.451934][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 176.458220][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 176.464824][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 176.471148][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 176.477750][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 176.484029][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 176.490630][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 176.497379][ T971] usb usb3-port1: attempt power cycle [ 178.192195][ T48] usb 4-1: USB disconnect, device number 9 [ 178.638592][ T5869] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 178.806253][ T5869] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 179.302599][ T5869] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.319963][ T5869] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 179.329197][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.338117][ T5869] usb 5-1: Product: syz [ 179.603492][ T5869] usb 5-1: Manufacturer: syz [ 179.608104][ T5869] usb 5-1: SerialNumber: syz [ 180.297785][ T7348] tmpfs: Bad value for 'mpol' [ 180.320564][ T5909] IPVS: starting estimator thread 0... [ 180.419980][ T7351] IPVS: using max 47 ests per chain, 112800 per kthread [ 180.524138][ T5869] cdc_subset 5-1:1.0: probe with driver cdc_subset failed with error -22 [ 180.540015][ T5898] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 180.549364][ T5869] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 180.572388][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 180.572399][ T30] audit: type=1400 audit(1745246838.312:370): avc: denied { create } for pid=7354 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 180.603559][ T7355] IPVS: length: 139 != 8 [ 180.620418][ T7357] FAULT_INJECTION: forcing a failure. [ 180.620418][ T7357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.656534][ T7357] CPU: 1 UID: 0 PID: 7357 Comm: syz.0.399 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 180.656556][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.656564][ T7357] Call Trace: [ 180.656570][ T7357] [ 180.656576][ T7357] dump_stack_lvl+0x16c/0x1f0 [ 180.656604][ T7357] should_fail_ex+0x512/0x640 [ 180.656628][ T7357] _copy_to_user+0x32/0xd0 [ 180.656650][ T7357] simple_read_from_buffer+0xcb/0x170 [ 180.656678][ T7357] proc_fail_nth_read+0x197/0x270 [ 180.656706][ T7357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.656731][ T7357] ? rw_verify_area+0xcf/0x680 [ 180.656752][ T7357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.656776][ T7357] vfs_read+0x1de/0xc70 [ 180.656803][ T7357] ? __pfx___mutex_lock+0x10/0x10 [ 180.656825][ T7357] ? __pfx_vfs_read+0x10/0x10 [ 180.656855][ T7357] ? __fget_files+0x20e/0x3c0 [ 180.656876][ T7357] ksys_read+0x12a/0x240 [ 180.656890][ T7357] ? __pfx_ksys_read+0x10/0x10 [ 180.656921][ T7357] do_syscall_64+0xcd/0x260 [ 180.656946][ T7357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.656962][ T7357] RIP: 0033:0x7fc26f18cb7c [ 180.656974][ T7357] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 180.656990][ T7357] RSP: 002b:00007fc26ffee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.657006][ T7357] RAX: ffffffffffffffda RBX: 00007fc26f3b5fa0 RCX: 00007fc26f18cb7c [ 180.657015][ T7357] RDX: 000000000000000f RSI: 00007fc26ffee0a0 RDI: 0000000000000004 [ 180.657024][ T7357] RBP: 00007fc26ffee090 R08: 0000000000000000 R09: 0000000000000000 [ 180.657033][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.657043][ T7357] R13: 0000000000000000 R14: 00007fc26f3b5fa0 R15: 00007ffcb3e99598 [ 180.657065][ T7357] [ 180.658283][ T5869] cdc_ncm 5-1:1.0: bind() failure [ 180.667291][ T7355] lo speed is unknown, defaulting to 1000 [ 180.860076][ T30] audit: type=1400 audit(1745246838.352:371): avc: denied { setopt } for pid=7354 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 180.903754][ T5898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.924099][ T5869] cdc_subset 5-1:1.1: probe with driver cdc_subset failed with error -22 [ 180.940519][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.960419][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 180.996204][ T5869] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 180.997639][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 181.003849][ T5898] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 181.025293][ T5869] cdc_ncm 5-1:1.1: bind() failure [ 181.049917][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 181.060123][ T5869] usb 5-1: USB disconnect, device number 8 [ 181.061226][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 181.088769][ T5898] usb 4-1: SerialNumber: syz [ 181.346717][ T7355] lo speed is unknown, defaulting to 1000 [ 181.489918][ T30] audit: type=1400 audit(1745246839.182:372): avc: denied { setcurrent } for pid=7346 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 181.801339][ T30] audit: type=1401 audit(1745246839.182:373): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 181.875882][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.951241][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.013967][ T5898] usb 4-1: 0:2 : does not exist [ 182.073869][ T5898] usb 4-1: USB disconnect, device number 10 [ 182.543332][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.604912][ T7374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.641330][ T7374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.960196][ T974] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 183.048767][ T30] audit: type=1400 audit(1745246840.782:374): avc: denied { create } for pid=7385 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 183.072406][ T7389] FAULT_INJECTION: forcing a failure. [ 183.072406][ T7389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.085945][ T7389] CPU: 0 UID: 0 PID: 7389 Comm: syz.2.407 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 183.085968][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.085978][ T7389] Call Trace: [ 183.085984][ T7389] [ 183.085990][ T7389] dump_stack_lvl+0x16c/0x1f0 [ 183.086018][ T7389] should_fail_ex+0x512/0x640 [ 183.086041][ T7389] _copy_from_user+0x2e/0xd0 [ 183.086062][ T7389] core_sys_select+0x2c7/0xbe0 [ 183.086085][ T7389] ? __pfx_core_sys_select+0x10/0x10 [ 183.086134][ T7389] ? set_user_sigmask+0x21b/0x2b0 [ 183.086156][ T7389] ? __pfx_set_user_sigmask+0x10/0x10 [ 183.086182][ T7389] do_pselect.constprop.0+0x19f/0x1e0 [ 183.086199][ T7389] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 183.086225][ T7389] __x64_sys_pselect6+0x182/0x240 [ 183.086243][ T7389] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 183.086258][ T7389] ? rcu_is_watching+0x12/0xc0 [ 183.086285][ T7389] do_syscall_64+0xcd/0x260 [ 183.086310][ T7389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.086327][ T7389] RIP: 0033:0x7f7d6f98e169 [ 183.086341][ T7389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.086357][ T7389] RSP: 002b:00007f7d707f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 183.086379][ T7389] RAX: ffffffffffffffda RBX: 00007f7d6fbb6080 RCX: 00007f7d6f98e169 [ 183.086390][ T7389] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040 [ 183.086400][ T7389] RBP: 00007f7d707f8090 R08: 0000000000000000 R09: 0000000000000000 [ 183.086410][ T7389] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 183.086420][ T7389] R13: 0000000000000000 R14: 00007f7d6fbb6080 R15: 00007ffcd9c6bd48 [ 183.086442][ T7389] [ 183.119836][ T974] usb 2-1: Using ep0 maxpacket: 8 [ 183.132179][ T30] audit: type=1400 audit(1745246840.812:375): avc: denied { write } for pid=7385 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 183.151174][ T974] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 183.189968][ T5869] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.196488][ T974] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 183.369926][ T974] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 183.402195][ T974] usb 2-1: Product: syz [ 183.407741][ T974] usb 2-1: Manufacturer: syz [ 183.412491][ T974] usb 2-1: SerialNumber: syz [ 183.422647][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.433381][ T5869] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 183.453815][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.478020][ T5869] usb 1-1: config 0 descriptor?? [ 183.497412][ T5869] pwc: Askey VC010 type 2 USB webcam detected. [ 183.739686][ T974] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 183.760981][ T974] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 183.819223][ T974] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 183.963866][ T5869] pwc: recv_control_msg error -32 req 02 val 2b00 [ 183.975760][ T974] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 183.977031][ T5869] pwc: recv_control_msg error -32 req 02 val 2700 [ 184.001718][ T5869] pwc: recv_control_msg error -32 req 02 val 2c00 [ 184.026914][ T5869] pwc: recv_control_msg error -32 req 04 val 1000 [ 184.790654][ T5869] pwc: recv_control_msg error -32 req 04 val 1300 [ 185.046271][ T5869] pwc: recv_control_msg error -32 req 04 val 1400 [ 185.323105][ T5869] pwc: recv_control_msg error -71 req 02 val 2100 [ 185.358117][ T974] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 185.382956][ T974] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 185.401096][ T974] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 185.403103][ T5869] pwc: recv_control_msg error -71 req 04 val 1500 [ 185.448354][ T971] usb 2-1: USB disconnect, device number 7 [ 185.497910][ T971] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 185.517015][ T5869] pwc: recv_control_msg error -71 req 02 val 2500 [ 185.547104][ T5869] pwc: recv_control_msg error -71 req 02 val 2400 [ 185.556091][ T971] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 185.576069][ T5869] pwc: recv_control_msg error -71 req 02 val 2600 [ 185.583726][ T971] visor 2-1:1.0: device disconnected [ 185.599273][ T5869] pwc: recv_control_msg error -71 req 02 val 2900 [ 185.629234][ T5869] pwc: recv_control_msg error -71 req 02 val 2800 [ 185.691763][ T5869] pwc: recv_control_msg error -71 req 04 val 1100 [ 185.696045][ T5869] pwc: recv_control_msg error -71 req 04 val 1200 [ 185.704380][ T5869] pwc: Registered as video103. [ 186.132211][ T5869] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 186.152425][ T5869] usb 1-1: USB disconnect, device number 7 [ 186.269587][ T7413] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.278092][ T7413] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.299009][ T7413] bridge0: entered allmulticast mode [ 186.324775][ T7416] bridge_slave_1: left allmulticast mode [ 186.387344][ T7416] bridge_slave_1: left promiscuous mode [ 186.398100][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.504940][ T7413] netlink: 76 bytes leftover after parsing attributes in process `syz.1.413'. [ 186.703381][ T7416] bridge_slave_0: left allmulticast mode [ 186.709294][ T7416] bridge_slave_0: left promiscuous mode [ 186.716411][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.966868][ T30] audit: type=1400 audit(1745246844.702:376): avc: denied { write } for pid=7424 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.348040][ T30] audit: type=1400 audit(1745246845.082:377): avc: denied { mount } for pid=7429 comm="syz.1.417" name="/" dev="configfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 187.373207][ T7430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.398444][ T7421] Bluetooth: hci5: Frame reassembly failed (-84) [ 187.407713][ T30] audit: type=1400 audit(1745246845.112:378): avc: denied { search } for pid=7429 comm="syz.1.417" name="/" dev="configfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 187.434257][ T7430] Bluetooth: hci5: Frame reassembly failed (-84) [ 187.476946][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 187.477542][ T30] audit: type=1400 audit(1745246845.112:379): avc: denied { read } for pid=7429 comm="syz.1.417" name="/" dev="configfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 187.507463][ T30] audit: type=1400 audit(1745246845.112:380): avc: denied { open } for pid=7429 comm="syz.1.417" path="/" dev="configfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 187.534840][ T30] audit: type=1400 audit(1745246845.272:381): avc: denied { execute } for pid=7429 comm="syz.1.417" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 187.824002][ T7438] netlink: 64 bytes leftover after parsing attributes in process `syz.3.420'. [ 187.930104][ T7438] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 187.951425][ T7438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.420'. [ 187.960590][ T7438] openvswitch: netlink: Missing key (keys=40, expected=80) [ 188.001000][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 188.182372][ T7442] lo speed is unknown, defaulting to 1000 [ 188.231428][ T10] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 188.240062][ T10] usb 5-1: config 0 has no interface number 0 [ 188.246236][ T10] usb 5-1: config 0 interface 239 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.259571][ T10] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 188.268910][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.281908][ T10] usb 5-1: Product: syz [ 188.289411][ T10] usb 5-1: Manufacturer: syz [ 188.378237][ T10] usb 5-1: SerialNumber: syz [ 188.479912][ T30] audit: type=1400 audit(1745246846.192:382): avc: denied { sqpoll } for pid=7440 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 188.571108][ T10] usb 5-1: config 0 descriptor?? [ 188.952462][ T7442] lo speed is unknown, defaulting to 1000 [ 189.470188][ T5138] Bluetooth: hci5: command 0x1003 tx timeout [ 189.489927][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 190.254778][ T10] usb 5-1: probing VID:PID(2201:012C) [ 190.277349][ T10] usb 5-1: vub300 testing UNKNOWN EndPoint(0) 02 [ 190.308745][ T10] usb 5-1: vub300 ignoring EndPoint(0) 02 [ 190.309330][ T7461] fuse: Bad value for 'fd' [ 190.320443][ T10] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 190.341716][ T10] vub300 5-1:0.239: probe with driver vub300 failed with error -22 [ 190.379713][ T10] usb 5-1: USB disconnect, device number 9 [ 190.437676][ T30] audit: type=1400 audit(1745246848.172:383): avc: denied { ioctl } for pid=7462 comm="syz.3.425" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 191.219909][ T5898] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 191.286492][ T7476] netlink: 'syz.0.428': attribute type 5 has an invalid length. [ 191.319956][ T5823] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 191.381945][ T5898] usb 3-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 191.409876][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 191.416709][ T5898] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 191.426238][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.436876][ T5898] usb 3-1: config 0 descriptor?? [ 191.622532][ T5898] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 191.671079][ T5867] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 191.942030][ T5867] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 191.966053][ T5867] usb 1-1: config 0 has no interface number 0 [ 191.973052][ T5867] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 191.983186][ T5867] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.011790][ T5867] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 192.029895][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.037933][ T5867] usb 1-1: Product: syz [ 192.050326][ T5867] usb 1-1: Manufacturer: syz [ 192.054974][ T5867] usb 1-1: SerialNumber: syz [ 192.078813][ T5867] usb 1-1: config 0 descriptor?? [ 192.085961][ T7476] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 192.114240][ T5867] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 192.151674][ T5867] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 192.213491][ T30] audit: type=1400 audit(1745246849.952:384): avc: denied { read } for pid=7486 comm="syz.3.433" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 192.248943][ T7487] FAULT_INJECTION: forcing a failure. [ 192.248943][ T7487] name failslab, interval 1, probability 0, space 0, times 1 [ 192.269765][ T30] audit: type=1400 audit(1745246849.952:385): avc: denied { open } for pid=7486 comm="syz.3.433" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 192.322730][ T7487] CPU: 1 UID: 0 PID: 7487 Comm: syz.3.433 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 192.322762][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.322773][ T7487] Call Trace: [ 192.322778][ T7487] [ 192.322785][ T7487] dump_stack_lvl+0x16c/0x1f0 [ 192.322816][ T7487] should_fail_ex+0x512/0x640 [ 192.322836][ T7487] ? fs_reclaim_acquire+0xae/0x150 [ 192.322862][ T7487] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 192.322887][ T7487] should_failslab+0xc2/0x120 [ 192.322907][ T7487] __kmalloc_noprof+0xd2/0x510 [ 192.322930][ T7487] tomoyo_realpath_from_path+0xc2/0x6e0 [ 192.322956][ T7487] ? tomoyo_profile+0x47/0x60 [ 192.322975][ T7487] tomoyo_path_number_perm+0x245/0x580 [ 192.322995][ T7487] ? tomoyo_path_number_perm+0x237/0x580 [ 192.323018][ T7487] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 192.323040][ T7487] ? find_held_lock+0x2b/0x80 [ 192.323085][ T7487] ? find_held_lock+0x2b/0x80 [ 192.323105][ T7487] ? hook_file_ioctl_common+0x145/0x410 [ 192.323128][ T7487] ? __fget_files+0x20e/0x3c0 [ 192.323149][ T7487] security_file_ioctl+0x9b/0x240 [ 192.323174][ T7487] __x64_sys_ioctl+0xb7/0x200 [ 192.323198][ T7487] do_syscall_64+0xcd/0x260 [ 192.323224][ T7487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.323241][ T7487] RIP: 0033:0x7f52f438e169 [ 192.323255][ T7487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.323271][ T7487] RSP: 002b:00007f52f51ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.323287][ T7487] RAX: ffffffffffffffda RBX: 00007f52f45b5fa0 RCX: 00007f52f438e169 [ 192.323299][ T7487] RDX: 0000200000000100 RSI: 0000000000002275 RDI: 0000000000000003 [ 192.323309][ T7487] RBP: 00007f52f51ef090 R08: 0000000000000000 R09: 0000000000000000 [ 192.323319][ T7487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.323328][ T7487] R13: 0000000000000000 R14: 00007f52f45b5fa0 R15: 00007fff66487828 [ 192.323351][ T7487] [ 192.323372][ T7487] ERROR: Out of memory at tomoyo_realpath_from_path. [ 192.452197][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 192.603158][ T30] audit: type=1400 audit(1745246850.342:386): avc: denied { ioctl } for pid=7486 comm="syz.3.433" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 192.633853][ T7489] random: crng reseeded on system resumption [ 192.648355][ T5898] usb 1-1: USB disconnect, device number 8 [ 192.672656][ T5898] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 192.703255][ T7491] netlink: 36 bytes leftover after parsing attributes in process `syz.4.430'. [ 192.705522][ T5898] cyberjack 1-1:0.69: device disconnected [ 192.732546][ T30] audit: type=1400 audit(1745246850.372:387): avc: denied { append } for pid=7484 comm="syz.1.432" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 192.790930][ T30] audit: type=1400 audit(1745246850.372:388): avc: denied { open } for pid=7484 comm="syz.1.432" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 192.842932][ T30] audit: type=1400 audit(1745246850.452:389): avc: denied { setopt } for pid=7490 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.874703][ T30] audit: type=1400 audit(1745246850.502:390): avc: denied { map } for pid=7494 comm="syz.3.434" path="socket:[15368]" dev="sockfs" ino=15368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 192.921416][ T30] audit: type=1400 audit(1745246850.502:391): avc: denied { read } for pid=7494 comm="syz.3.434" path="socket:[15368]" dev="sockfs" ino=15368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 192.996642][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 193.005701][ T7498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.038030][ T7498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.523196][ T7508] netlink: 'syz.1.437': attribute type 1 has an invalid length. [ 193.544669][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.555020][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.563506][ T7508] netlink: 75 bytes leftover after parsing attributes in process `syz.1.437'. [ 193.598317][ T30] audit: type=1400 audit(1745246851.332:392): avc: denied { compute_member } for pid=7507 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 193.699296][ T30] audit: type=1400 audit(1745246851.432:393): avc: denied { read } for pid=7517 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 193.820364][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 193.916783][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.927421][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.969896][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 194.204750][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 194.330817][ T10] usb 1-1: config 179 has no interface number 0 [ 194.354536][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 194.381751][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 194.407737][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.739857][ T5867] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 194.799542][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 194.811800][ T974] usb 3-1: USB disconnect, device number 12 [ 194.825151][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 195.027819][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 195.181201][ T5867] usb 4-1: config 3 has an invalid interface number: 231 but max is 0 [ 195.364669][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 195.420456][ T5867] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 195.455608][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.471275][ T7512] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 195.478371][ T5867] usb 4-1: config 3 has no interface number 0 [ 195.515437][ T5867] usb 4-1: config 3 interface 231 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 195.558344][ T5867] usb 4-1: config 3 interface 231 has no altsetting 0 [ 195.614442][ T5867] usb 4-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=8c.22 [ 195.682527][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.708463][ T5867] usb 4-1: Product: syz [ 195.810337][ T7542] netlink: 64 bytes leftover after parsing attributes in process `syz.2.446'. [ 195.813590][ T5867] usb 4-1: Manufacturer: 麬 [ 195.966896][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.984528][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.099441][ T5867] usb 4-1: SerialNumber: syz [ 196.116648][ T48] usb 1-1: USB disconnect, device number 9 [ 196.116696][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 196.139843][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 196.246345][ T7546] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 196.260132][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 196.321442][ T7542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.446'. [ 196.331446][ T7542] openvswitch: netlink: Missing key (keys=40, expected=80) [ 196.358214][ T5867] xr_serial 4-1:3.231: skipping garbage [ 196.438034][ T5867] usb 4-1: USB disconnect, device number 11 [ 196.438483][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 196.460997][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.484377][ T10] usb 5-1: config 0 descriptor?? [ 196.505331][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 196.698552][ T10] gspca_sn9c2028: read1 error 0 [ 196.751296][ T7550] openvswitch: netlink: Missing key (keys=40, expected=100) [ 196.830076][ T5869] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 197.133139][ T7558] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 197.192457][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 197.249078][ T5869] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 197.270273][ T10] gspca_sn9c2028: read1 error -110 [ 197.285826][ T10] gspca_sn9c2028: read1 error -32 [ 197.299005][ T5869] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 197.315909][ T10] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -32 [ 197.488919][ T5869] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.502307][ T10] usb 5-1: USB disconnect, device number 10 [ 197.512223][ T5869] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.589756][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.609938][ T5869] usb 3-1: Product: syz [ 197.614145][ T5869] usb 3-1: Manufacturer: syz [ 198.375744][ T5869] usb 3-1: SerialNumber: syz [ 198.500081][ T971] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 199.110246][ T5869] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 199.132128][ T5869] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 199.189475][ T971] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 199.323296][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.338487][ T971] usb 4-1: Product: syz [ 199.361579][ T971] usb 4-1: Manufacturer: syz [ 199.369709][ T5869] usb 3-1: USB disconnect, device number 13 [ 199.376215][ T971] usb 4-1: SerialNumber: syz [ 199.647434][ T971] usb 4-1: config 0 descriptor?? [ 199.992459][ T6105] udevd[6105]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.287591][ T7594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.001594][ T971] usb 4-1: Firmware version (0.0) predates our first public release. [ 201.011561][ T971] usb 4-1: Please update to version 0.2 or newer [ 201.032211][ T7594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.112945][ T7593] netlink: 64 bytes leftover after parsing attributes in process `syz.4.458'. [ 201.125840][ T7593] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 201.211590][ T7601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.381966][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 201.381984][ T30] audit: type=1400 audit(1745246859.122:397): avc: denied { search } for pid=5491 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.455586][ T30] audit: type=1400 audit(1745246859.132:398): avc: denied { read } for pid=5491 comm="dhcpcd" name="n101" dev="tmpfs" ino=3795 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.482430][ T30] audit: type=1400 audit(1745246859.132:399): avc: denied { open } for pid=5491 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3795 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.651041][ T30] audit: type=1400 audit(1745246859.132:400): avc: denied { getattr } for pid=5491 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3795 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.996256][ T30] audit: type=1800 audit(1745246859.732:401): pid=7617 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.466" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 202.525606][ T7631] lo speed is unknown, defaulting to 1000 [ 202.531533][ T7631] lo speed is unknown, defaulting to 1000 [ 202.537809][ T7631] lo speed is unknown, defaulting to 1000 [ 202.553013][ T7631] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 202.574234][ T7631] lo speed is unknown, defaulting to 1000 [ 202.582025][ T7631] lo speed is unknown, defaulting to 1000 [ 202.589022][ T7631] lo speed is unknown, defaulting to 1000 [ 202.596238][ T7631] lo speed is unknown, defaulting to 1000 [ 202.603343][ T7631] lo speed is unknown, defaulting to 1000 [ 202.628921][ T7631] smc: removing ib device sz1 [ 203.063310][ T7631] ------------[ cut here ]------------ [ 203.068782][ T7631] WARNING: CPU: 0 PID: 7631 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 203.079490][ T7631] Modules linked in: [ 203.083536][ T7631] CPU: 0 UID: 0 PID: 7631 Comm: syz.2.468 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 203.095437][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.105482][ T7631] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 203.110949][ T7631] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 e5 a4 18 f9 e8 e0 a4 18 f9 90 <0f> 0b 90 5b e9 d6 a4 18 f9 e8 71 20 7e f9 eb da 66 66 2e 0f 1f 84 [ 203.130725][ T7631] RSP: 0018:ffffc9000c02f1b0 EFLAGS: 00010246 [ 203.136870][ T7631] RAX: 0000000000080000 RBX: ffff88807cbd5320 RCX: ffffc9000ea00000 [ 203.144850][ T7631] RDX: 0000000000080000 RSI: ffffffff88a2ab10 RDI: ffff88807cbd53a0 [ 203.152910][ T7631] RBP: ffffffff88a11140 R08: 0000000000000005 R09: 0000000000000001 [ 203.161331][ T7631] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807cbd4668 [ 203.169283][ T7631] R13: ffff88807cbd3fe0 R14: ffff88807cbd3fe0 R15: ffff88807cbd5080 [ 203.177268][ T7631] FS: 00007f7d707d76c0(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 203.186300][ T7631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.192938][ T7631] CR2: 0000001b2f9e6ff8 CR3: 000000004fb7c000 CR4: 00000000003526f0 [ 203.200900][ T7631] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 203.208847][ T7631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 203.216812][ T7631] Call Trace: [ 203.220085][ T7631] [ 203.222993][ T7631] rxe_dealloc+0x25/0xc0 [ 203.227218][ T7631] ib_dealloc_device+0x46/0x230 [ 203.232210][ T7631] __ib_unregister_device+0x396/0x480 [ 203.237559][ T7631] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 203.243446][ T7631] ib_unregister_device_and_put+0x5a/0x80 [ 203.249139][ T7631] nldev_dellink+0x21f/0x320 [ 203.253737][ T7631] ? __pfx_nldev_dellink+0x10/0x10 [ 203.259253][ T7631] ? __lock_acquire+0x5ca/0x1ba0 [ 203.264229][ T7631] ? cap_capable+0xb3/0x250 [ 203.268711][ T7631] ? bpf_lsm_capable+0x9/0x10 [ 203.273390][ T7631] ? security_capable+0x7e/0x260 [ 203.278305][ T7631] ? ns_capable+0xd7/0x110 [ 203.282725][ T7631] ? __pfx_nldev_dellink+0x10/0x10 [ 203.287819][ T7631] rdma_nl_rcv_msg+0x387/0x6e0 [ 203.292587][ T7631] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 203.297859][ T7631] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 [ 203.304272][ T7631] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 203.311226][ T7631] ? netlink_deliver_tap+0x1ae/0xd30 [ 203.316504][ T7631] netlink_unicast+0x53a/0x7f0 [ 203.321264][ T7631] ? __pfx_netlink_unicast+0x10/0x10 [ 203.326534][ T7631] netlink_sendmsg+0x8d1/0xdd0 [ 203.331297][ T7631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.336579][ T7631] ____sys_sendmsg+0xa95/0xc70 [ 203.341343][ T7631] ? copy_msghdr_from_user+0x10a/0x160 [ 203.346778][ T7631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.352069][ T7631] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 203.357859][ T7631] ___sys_sendmsg+0x134/0x1d0 [ 203.362956][ T7631] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.368152][ T7631] __sys_sendmsg+0x16d/0x220 [ 203.372827][ T7631] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.377946][ T7631] ? __pfx_bpf_trace_run2+0x10/0x10 [ 203.383178][ T7631] ? syscall_trace_enter+0x1cb/0x260 [ 203.388450][ T7631] ? rcu_is_watching+0x12/0xc0 [ 203.393231][ T7631] do_syscall_64+0xcd/0x260 [ 203.397719][ T7631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.403603][ T7631] RIP: 0033:0x7f7d6f98e169 [ 203.408011][ T7631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.427634][ T7631] RSP: 002b:00007f7d707d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.436048][ T7631] RAX: ffffffffffffffda RBX: 00007f7d6fbb6160 RCX: 00007f7d6f98e169 [ 203.444013][ T7631] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 203.451976][ T7631] RBP: 00007f7d6fa10a68 R08: 0000000000000000 R09: 0000000000000000 [ 203.459964][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.468421][ T7631] R13: 0000000000000000 R14: 00007f7d6fbb6160 R15: 00007ffcd9c6bd48 [ 203.477220][ T7631] [ 203.480259][ T7631] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 203.487515][ T7631] CPU: 0 UID: 0 PID: 7631 Comm: syz.2.468 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 203.499391][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.509421][ T7631] Call Trace: [ 203.512674][ T7631] [ 203.515581][ T7631] dump_stack_lvl+0x3d/0x1f0 [ 203.520155][ T7631] panic+0x71c/0x800 [ 203.524041][ T7631] ? __pfx_panic+0x10/0x10 [ 203.528429][ T7631] ? show_trace_log_lvl+0x29b/0x3e0 [ 203.533609][ T7631] ? rxe_pool_cleanup+0x41/0x60 [ 203.538438][ T7631] check_panic_on_warn+0xab/0xb0 [ 203.543350][ T7631] __warn+0xf6/0x3c0 [ 203.547219][ T7631] ? rxe_pool_cleanup+0x41/0x60 [ 203.552048][ T7631] report_bug+0x3c3/0x580 [ 203.556355][ T7631] ? rxe_pool_cleanup+0x41/0x60 [ 203.561183][ T7631] handle_bug+0x184/0x210 [ 203.565498][ T7631] exc_invalid_op+0x17/0x50 [ 203.569983][ T7631] asm_exc_invalid_op+0x1a/0x20 [ 203.574808][ T7631] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 203.580247][ T7631] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 e5 a4 18 f9 e8 e0 a4 18 f9 90 <0f> 0b 90 5b e9 d6 a4 18 f9 e8 71 20 7e f9 eb da 66 66 2e 0f 1f 84 [ 203.599831][ T7631] RSP: 0018:ffffc9000c02f1b0 EFLAGS: 00010246 [ 203.605870][ T7631] RAX: 0000000000080000 RBX: ffff88807cbd5320 RCX: ffffc9000ea00000 [ 203.613815][ T7631] RDX: 0000000000080000 RSI: ffffffff88a2ab10 RDI: ffff88807cbd53a0 [ 203.621762][ T7631] RBP: ffffffff88a11140 R08: 0000000000000005 R09: 0000000000000001 [ 203.629709][ T7631] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807cbd4668 [ 203.637654][ T7631] R13: ffff88807cbd3fe0 R14: ffff88807cbd3fe0 R15: ffff88807cbd5080 [ 203.645617][ T7631] ? __pfx_rxe_dealloc+0x10/0x10 [ 203.650537][ T7631] ? rxe_pool_cleanup+0x40/0x60 [ 203.655387][ T7631] rxe_dealloc+0x25/0xc0 [ 203.659605][ T7631] ib_dealloc_device+0x46/0x230 [ 203.664431][ T7631] __ib_unregister_device+0x396/0x480 [ 203.669781][ T7631] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 203.675664][ T7631] ib_unregister_device_and_put+0x5a/0x80 [ 203.681359][ T7631] nldev_dellink+0x21f/0x320 [ 203.685927][ T7631] ? __pfx_nldev_dellink+0x10/0x10 [ 203.691020][ T7631] ? __lock_acquire+0x5ca/0x1ba0 [ 203.695986][ T7631] ? cap_capable+0xb3/0x250 [ 203.700482][ T7631] ? bpf_lsm_capable+0x9/0x10 [ 203.705148][ T7631] ? security_capable+0x7e/0x260 [ 203.710074][ T7631] ? ns_capable+0xd7/0x110 [ 203.714481][ T7631] ? __pfx_nldev_dellink+0x10/0x10 [ 203.719570][ T7631] rdma_nl_rcv_msg+0x387/0x6e0 [ 203.724314][ T7631] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 203.729582][ T7631] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 [ 203.735978][ T7631] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 203.742901][ T7631] ? netlink_deliver_tap+0x1ae/0xd30 [ 203.748166][ T7631] netlink_unicast+0x53a/0x7f0 [ 203.752914][ T7631] ? __pfx_netlink_unicast+0x10/0x10 [ 203.758179][ T7631] netlink_sendmsg+0x8d1/0xdd0 [ 203.762926][ T7631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.768214][ T7631] ____sys_sendmsg+0xa95/0xc70 [ 203.772981][ T7631] ? copy_msghdr_from_user+0x10a/0x160 [ 203.778417][ T7631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.783684][ T7631] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 203.789471][ T7631] ___sys_sendmsg+0x134/0x1d0 [ 203.794125][ T7631] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.799313][ T7631] __sys_sendmsg+0x16d/0x220 [ 203.803880][ T7631] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.808967][ T7631] ? __pfx_bpf_trace_run2+0x10/0x10 [ 203.814142][ T7631] ? syscall_trace_enter+0x1cb/0x260 [ 203.819402][ T7631] ? rcu_is_watching+0x12/0xc0 [ 203.824146][ T7631] do_syscall_64+0xcd/0x260 [ 203.828628][ T7631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.834496][ T7631] RIP: 0033:0x7f7d6f98e169 [ 203.838885][ T7631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.858469][ T7631] RSP: 002b:00007f7d707d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.866856][ T7631] RAX: ffffffffffffffda RBX: 00007f7d6fbb6160 RCX: 00007f7d6f98e169 [ 203.874819][ T7631] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 203.882782][ T7631] RBP: 00007f7d6fa10a68 R08: 0000000000000000 R09: 0000000000000000 [ 203.890727][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.898671][ T7631] R13: 0000000000000000 R14: 00007f7d6fbb6160 R15: 00007ffcd9c6bd48 [ 203.906623][ T7631] [ 203.909861][ T7631] Kernel Offset: disabled [ 203.914179][ T7631] Rebooting in 86400 seconds..