last executing test programs: 53.20535232s ago: executing program 1 (id=37): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 53.003443259s ago: executing program 1 (id=40): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) listen(r0, 0x8) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSNLIST(r5, 0x8010640b, &(0x7f00001859c0)={0xfdfd, &(0x7f0000185780)=[{0x4000000, 0x0, 0x0, 0x0, 0x3}]}) 51.973442386s ago: executing program 1 (id=41): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800004bf2a0775a488cba407d75e1f7eac600ff7f000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 49.684060885s ago: executing program 1 (id=49): r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r6, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4089, 0xff9}, {&(0x7f00000006c0)=""/57, 0x39}, {0x0}, {&(0x7f0000000500)=""/29, 0x1d}], 0x4}, 0x1}], 0x1, 0x102, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000900, 0x0, &(0x7f0000001280)={0xe, 0x0, 0x80000000, 0x3, 0x0, 0x6, 0x0, 0x7, 0x10}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) r9 = syz_pidfd_open(r0, 0x0) setns(r9, 0x24020000) syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x0, 0x0, 0x2000) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@gettaction={0x20, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 48.736600241s ago: executing program 1 (id=52): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4f72, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000140), 0xff, 0xc0240) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x3c33) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000050008000200", 0x22) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r2) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="05000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25210000000c000600010000000100000024002d80050001000c000000080003000200000005000400010000000800020003000000"], 0x44}}, 0x20000000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000018610f4205ae06d6c0102030109021b0001010000c6739bd431444121f871e97ef9000904690201ff5aa300090582024000000000"], 0x0) openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x587240, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000002480)=0x3) 47.465934405s ago: executing program 1 (id=57): ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800284}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, 0x0, 0x10103, 0xc574450d1af299b9}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) 47.171387858s ago: executing program 32 (id=57): ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800284}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, 0x0, 0x10103, 0xc574450d1af299b9}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) 14.791928077s ago: executing program 5 (id=144): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8c0) openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x45, 0x1, 0x2, "6040a7170200ff0120000000fcff00ff1057e31e940000000000000000aeff00", 0x50313134}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r4, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) capget(&(0x7f0000000140)={0x20080522}, &(0x7f00000001c0)={0x7, 0x1, 0x2e7, 0x8, 0x1, 0x86d7}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000300)=""/34, 0x22}], 0x1, 0xffff0000, 0x8) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40}, 0x2}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)}, {&(0x7f0000000480)="3054545ddf12d133bfa2395b5284824a419a176fc29c7fb841dea45f37672b8e3fa84207d03f467d1c1c4fcda1cc2a7d7dfef277ff2ed4e23cb15c0ff68105bd3e2d9a972a7b8046b1eca39a3d0315b86f5d38f82c8fb0c4c39539d6681c573870ae45e6e5c807", 0x67}, {&(0x7f0000000500)="b5dcfae719a7c23bd291cd66c14911756eb418326a5e1999d009a92354ca7b4e0c8142cbf03fe67f02a217fcc11cb66f3c5222100ea299dd0150be1965c7442b316f645a29ecffe461bbb431cf94640102a6bd629d0fcd15924f34e59ad1739f2da23a53fd31693ab32c2478d511fbfadd411d1098f89e18f0a2b82dfe44d5f26b5cbd65566e3c9c8ead41108fb0a13e93c812c47ac0ad49a7690423af2025040ffc30030573b0ae0211875cc2cef7ea44158a2206897af478001ab7968b59fe86722f", 0xc3}, {&(0x7f00000002c0)="724b3e42782a7ce5f690f1670c26b333cd1e0e1a27286854fe41650b3584b973d8261b7c4e597853e5", 0x29}, {&(0x7f0000000400)}, {&(0x7f0000000600)="b4df2827970098f13cf4b673a873c5ecf12d65bdf158e9dceeabfc3031a01e3e51f7dc", 0x23}, {&(0x7f0000000640)="47fe697954f7bb521029eae96a352afda145cf1af55bdcd2caa053879fc9cc3da9cce71f186e3f028425e333fd4d6a76adf1b69fc926e000c6b18fafda635a3b320eb939305653efbb51312a850fc720cf5ec4739381f81ace4ec14b9cac31991716993b", 0x64}], 0x7}, 0x20c0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xe737}}, 0x10) 9.002285646s ago: executing program 5 (id=155): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x100000, 0x2, 0xf, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000005000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 8.856564866s ago: executing program 4 (id=156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000180000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="467493524638ba42699d55ec121d", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000000, 0x9}, 0x50) 7.776476143s ago: executing program 4 (id=161): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x20401, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_open_dev$sndmidi(0x0, 0x5, 0x141101) r3 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0xa1, 0x1, 0xfffffff7, 0x0, 0xfe, r3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) setsockopt$ax25_int(r5, 0x101, 0x3, &(0x7f0000000240)=0x1ff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) close(r4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="280000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="1adb16176c69f9ec"], 0x28}], 0x1}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) read$snapshot(0xffffffffffffffff, &(0x7f00000008c0)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) 7.236038188s ago: executing program 3 (id=164): keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='mctp_key_release\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x7a6f938d2aadffed, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x5, 0x80007, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x70bd2a, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0d4}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x20}, 0x1, 0x0, 0x3000000, 0x4000d}, 0x20000000) 6.13243211s ago: executing program 3 (id=166): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x10, 0x91, 0x10}]}]}, {0x0, [0x4fc9d486965aadfa]}}, 0x0, 0x33, 0x0, 0x1, 0x88}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b1, &(0x7f0000000000)={'vlan1\x00', @local}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000580)={0x0, @aes128, 0x0, @desc3}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x4d8, 0xffffffff, 0x278, 0x160, 0x278, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@loopback, @loopback, [0xff, 0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], 'vlan1\x00', 'ip6erspan0\x00', {}, {}, 0x2c, 0xa, 0x2, 0x46}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"f1e4", 0x1}}, @common=@inet=@iprange={{0x68}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@multicast1, @ipv6=@local, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@local, @mcast1, [0xffffffff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff000000, 0xff000000, 0xff000000], 'ip6tnl0\x00', 'team0\x00', {}, {0xbe68ab49ed2da858}, 0x20, 0x1c, 0x0, 0x20}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0xff, 0x3, 0x0, [0x0, 0x9, 0x9, 0x0, 0x7f, 0x7f, 0x4d, 0x8, 0x0, 0x4, 0x2, 0x80, 0x5, 0xa76a, 0x7, 0x5], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0xe, 0x4, 0x81, 0x0, @private0, @remote, @private1, [0xff000000, 0x0, 0xffffffff, 0xff000000], [0xff000000, 0xffffff00, 0xffffffff], [0xff000000, 0xff, 0xffffff00, 0xffffff00], 0x20, 0x806}}, @common=@srh={{0x30}, {0x73, 0x81, 0xc, 0x1, 0x9, 0x400, 0x342}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) 5.568510468s ago: executing program 0 (id=167): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002e000100fdff0000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5.425483302s ago: executing program 3 (id=168): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) set_mempolicy(0x1, 0x0, 0x2) r0 = socket$netlink(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 5.196568853s ago: executing program 0 (id=169): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4ea3, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000040)=""/142, 0x8e}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003d37d840890457e0000000000001090224"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) getpid() syz_emit_ethernet(0x60, &(0x7f00000001c0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@x25={0x805, {0x2, 0x0, 0x17, "c70924bac4bd8ba8dddac02176b14a8ecdc0ac93de3891e96fbbbf8a9ac544ee2e2ffff40e15461e37d5369e79d2b1788b06962be1c2e2c91727b1fc716a89d47cee2996e63590e1f8924ff9084d1a"}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) 5.149170651s ago: executing program 3 (id=170): syz_io_uring_setup(0xec5, &(0x7f00000008c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='net_prio.prioidx\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x40000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@remote}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) inotify_init() epoll_create1(0x0) epoll_create(0x6511) 5.056545135s ago: executing program 5 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) 4.752580546s ago: executing program 3 (id=172): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x13, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) unshare(0x2c000480) getsockopt$inet6_opts(r2, 0x3a, 0x37, 0x0, 0x0) 3.784600721s ago: executing program 5 (id=174): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r2, 0xcb}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r2, 0x1, 0x30}, &(0x7f00000000c0)=0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f3962d98b2bd98d5c3e50169a4c0c99f29c7a336489c26259957c4bdeae1c8cdf60d817db09336f680bbe954dc05669c9d48cb0a0488ed2385d935a7166b3187189e08d421903d546126289651db812f9c8754c0dc6f24a22ca988a2ac131cc52d724bb086a53a94e515e09fef354e9ca0daacaa347e96b3efd7c5c4063f6eb0cf55f08ff942780e6846d78410057ca2b845e69eeda4066de60a033e2f3c7e47b2f0c0c4c7da98b1d658c620f70dbe6eb8b5dd90216caa82c91db4c0f7ea02df5d5f8d6815d2d7868e6a6053f31a4fbe8732a1310ca7a79814177a981e5ab68dfeba4fe46ed4c51819be1308f73455e311f511ce4360cc7c24836c9b895ee5ce93cc42dd88f02d91b479c1748339024343700cce897087bbaae4fbd8e2ad5da016265ef097043acaf87504dde24216c805b40cf4d6edf2ae6564182acdf06580dde3fb66ab01625ffadc22f1ac7b97b9dec871edd96e86af127be1ef27548917a49476ce87f1719173369caf69d35d25637f0514e3e06069877968eb874a1c1adc92e760670e42b6cccd2fe0a5f9c543a44b382befc422d4486416b6fabe2f11944a3f08cded6fad9e3304a202d1c58841a6ab78b28a4162db2671d9ea74ee6f3b33a282f42abc911e3245531a34f5567cfcaa1cf762677c9f61d3aa2c4d76210edf440bf53e816d008ab2ea29cf42de9b88442d6b2eec4fbf23f7d23eaab316335dfc2dc10f9148df0b83d92c3a94fb0b49365af5ba599a1ea8e6fc7aea8df9208795cbbdf0af04f5f08fc828cb347a6e9daddbe514675b31e5134c7dfbb060dfc632ad82141ddea4e77e6c63c1843ca6fc820558b7355bae86e106c2be9c9b500c5134ab62444a8423d596bfe0e3b2df47dabf5abe271ae947f4878132915332e4fcc5b81ad6f12570de44f0fdd6a96397acebf95421c88ff274365be770edd1bd1f69bc2d2883fa70fa68828bddcb98f90b0b77e28f9c4726e5b0c52fa6f30a8d57321dfd2f2678bbc6511f39019f49d7dde6f19adeac78e4064b8288f5b4ac7d8ca35f7f70dfb376f5f3af98f02e76e57e21a00bac677703c8e2169816f5cf6c4d1bf803e0b2987544eeeffd197bcc10fe1d9a7b826a6693dc8bb32f19f25a88a15c3dcd30e7f48f0cda06ca99152bd1c892735598c32c6098ae12ef493334be720cb0ba3c710954fe0a80c3dec255f194761e5e904262118307bb49901808f9ca1af58648e9d57ffb744fd4f1d01b5ccaeaa5231def3f800cb8341d9109d93e3871c395892f8ffe25d6d9a7faa7073fd9c3b3aac94c554dab9c35667eb49d5f0e47fd6bb41ca4b2f420b1e3915fa653aaf8d842cc4b0fec5011bd0ba372601fb7930ce98402d2e3d64f8422550a621fa23b128e66b6afe1a74dab2b53de22214844e53441ab7998d4ac3557cca9ffe4997c778243c943ca2de0b1deba8468a5fe3c0f1fa93a9a7bb5dbc3ec2058ac7ad4ffa64966bbd90a5f3f53de5c44af6e93f248471ca09cabe6e6c0a87586ff04a5a8cea539d049d82929277cfba7e46fddcdc0f4c2995def4ac27d65bde4bb88dbed3b9cf9eb9501273ca533da1220422f6585bfa77f5df5faaf3250349b514f44bfd55f106792bc7c766eddde2267a12888db542803efcf48357368880fa7771a2d962ae0bb14934a93d28a18da7d39ed6be7d1897e33d3ba0f6db99325a12f64670f22c762a395c9c6ef4e8ef15c0798465b1c9d406ed5731002a0ce72ca4adf125124046d5ac76b6782257587ff6ed55a55f98f8c377e36983b81c4b775cf0d41a9070cd1adeddf2083b635ae671f4e559990164e3a3e32a07c9faa438d73b1662e9eabf061703c7afb7adf2ae5f3acf2fcd57fef779f6b6e68656da61c8d45858d26f3858492e7797fb65d21f47ba805283f74fd473fcbd8b217ab628d62917dd96d5c49ad16d1616a946b8d4108a4d3f11c4f9260d9e01729beaf96231e6fb9d1181a1e032a71adde4c529f14029b728d163714e69f968340f7e2f9f420339bee64275474787d6b14cc9bbcbe1973cad7c29bfa1002adcb67b15c6edc01b00bca7823eb8fb6db7548fdd1ac1f7b3a69ed481c9cd2af0a09abd12e9a4e26e23d69790bdcd07b8da72da3ba97b0f2bc92a7da43845b70ae351f7ccc7cc7d92288f51f45e4d9d31a6bfeaa36621674170aad5d23a194921e81142505ec02020816a855eb162a9a5fefbc10121a534516be5fa2a17ed437cfb09d5085413a883ebf81538c2fd11edd0689bc339fc754d22ac9dec26d1e594f2cd14c605d069df81f876bf8c8b775108db76cac14088b9ea08d72a7f6c552e2954d8afd07f826085b2d67c828acb01943e576035f04c710a7f0edc8b6b9fa11325643d35193c9bb5a17c6e670ed0fc8be003c9fd769c1fe0480b10d7533cf3aeac0d2a157459a06af57d1ae20fb373f430f41c37cb0fb6745bb61f771e18a661dd58d9932eb543b0fb90dafbf495f1568e77a03864b66bfcd91918ceb9c28a1011fa5a3521ecb2042bd98955827a61480cf285739a6b5451a5a7e8d79b883e2782591dfe7817adb263d64bfc7375e68fdcf931661e39a48632335a659eb9daa52907a92dc55225767e2541ffc463faf51d612d874a01fe284b900dfc3ae07a718985e73a96ed4a67b31c6b0605afd89c2d306fac76c44f381bf9dba32f6ea259d1d51b02987b9e1bd3f39730976f1ddee002cb5d30ba518f5209d473fc8182e71a9531c1fec4a5caddef4734d49a16380f8a375c7cd4bced3999cb43da0b8d87ad5ab9f2d39fb4fc761ecfaaa9c0520a57f3c5fe25fea7df7bba7640f0aeb5e5901bee7f69b10a5485dc57ffa9c5328346a282cad3576d6b815e012865edfd25660ca63f7b67f029e31b8e601640983b5cdbb62616b9285f8054982a56ac5618c321b87234b66b10f827e6a1d3094093b75f73dff52cbe4b86e49f19266416804defe3d5488d5d7a1ec2f0276c57944c8064b1243df01c50f3225e87b7cf474becea28f905dd298e793fee5b996b86395c2cec08a1d85df43d855784502797e9de7d8f2fcd9745b9bd7aab3d4cd46d9e1ad3f6c137e9e78316fe0b8474146b27b3e857de06b3a64aa48bcbd185ea51eb83dece2e374be75167c915191a688ce34dd59008c65b56b463f82556bb2c1468fe771bfa7a8c8abcd4a09e3b00d7eaa7e207c34480858359b5f83d010cf143f43df050decbdabc8a636167c39e4ad957e883d79c066f0d0fe7f0c610f96178de2930091ddb9b483835f3f2e29c09ef454987f02a80b7241edd9b37a8dec9a1860ce0598481ea2ac6c7189f04b9796a1dec90f3a29438ddb9dc61e093ae18bba4f7ed28478cb48936943690aae9f668a647db99d210eff547297d78e0011817533d715ec365592ecf3662178ae4d8930992792b64204f8ac0cb8981caf936b674e210e4ad69711d78ed18df4af7267a96a6c300bb145c5f65a857fdd0e86e098888e170a2df05dbf1dab28706b1ff5bda716a18641b81b39b6ed3d01bc8f205b914bc8207cc159472ae3e9c55c55d86e53e1a7ab47519a85eb06bd135ab1eb6cbaaad64f3fed214d5628a6c39828ed95e896fb24fa3", 0xae0}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000"], 0x0) read(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000300)=0xb) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x707eae34d690d64b, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x3800, 0x3, 0x1, {0x22, 0xd32}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0xfc, 0x7f}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x0, 0xa, 0x5, 0x10, 0xfe}, 0xfc, &(0x7f00000005c0)={0x5, 0xf, 0xfc, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x0, 0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x2, 0xf, 0x13a, [0xff30, 0xffff60, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "ad86c87e4009fbd7ccc95d6885f283e3"}, @generic={0xc4, 0x10, 0x4, "ab84687ec8d59014f25fb94f09ae54e8f5c58fefd4c466a24206b0143dc5f507e6534701bcd238fa144af643efec116551841721b24feebdf178d5ae6f7cc82b80dcb9e067f4f4da351edfd5db07ff9afcf671c9b2c80670ad077e0da05f72f8f5dfcea2c4e0ffd974ab0304ea4043830dfa4ea78c927274d78705113a674786c288cfd541bed4e0c03d26e62c2c02a5cfc6f0080b67cf35b8b5f88ac7fb22258b08823808f803d143208c2ee2e539a259e32eea56c76925753c24197bc60594c5"}]}, 0x2, [{0x7c, &(0x7f0000000700)=@string={0x7c, 0x3, "38d6a19e4a6c38b07163044fd155846688f52d0e8eb9a1cc776b5e154c2c889758ed0638f7d7c84c659053968d2a9681cd359a7c8f12d8b0ae1365c9e37b2c28a0d1a370c19652e950bf06bec8bb526f675d074b7f7ad6a23f7c1726539c3fd242b381d07bbcf40ad5f20473eefb4012c2cf2ab7c7a26384284f"}}, {0x0, 0x0}]}) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 3.35621882s ago: executing program 4 (id=175): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc0000001900010080ff00000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), 0x0}, 0x20) 3.112604912s ago: executing program 2 (id=176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 2.718854777s ago: executing program 2 (id=177): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x10e, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004040}, 0x4040) r1 = socket(0x3, 0x80000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x21}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'macvlan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x12}, 0x4) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x8}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x575}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4b}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x3d}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x4008000) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='nfsd\x00', 0x2000081, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000500)="4d07deed35f91b58c5a6620d87266dc1", 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000580)={@multicast1, @private, 0x0}, &(0x7f00000005c0)=0xc) sendmsg$nl_route(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@RTM_GETMDB={0x18, 0x56, 0x10, 0x70bd2d, 0x25dfdbfb, {0x7, r6}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4004014) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r3) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000a40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000740)={0x2b8, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff6d6f}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80000000, @remote, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffa}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xd, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x79, @private1={0xfc, 0x1, '\x00', 0x1}}}}}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4eb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x263}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb1d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x20, 0x3, "5f69be6cde4aad64ede9d852173672a3f014385252a6d0fc9d4ad431"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a3fa87e00101d23797f15bd36e4d759f30812f8d0d5171a2cee861cc9d2ee678863ee2cf"}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbc49ab7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r8 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r8, &(0x7f0000000ac0)='0\x00', 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000011) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r3) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r9, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4851) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000c40)=0x9, 0x4) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x64, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4972, 0x62}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x2c, 0xac, "900f9b4897370f4f6c4958cf78594f8461d15e623b8db939ebac5e726a4f8ddb9960fdba0cc77bd0"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008080) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r3) sendmsg$NL80211_CMD_SET_MCAST_RATE(r10, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x68, r11, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x5c}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000f40)=0x6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000f80)={0x0, 0x94}, &(0x7f0000000fc0)=0x8) pselect6(0x40, &(0x7f0000001000)={0x9, 0x4, 0xe282, 0xffff, 0x10001, 0xabd, 0x8001, 0xd}, &(0x7f0000001040)={0x3, 0x8, 0x3, 0x7fffffffffffffff, 0xfffffffffffffff8, 0x9, 0x0, 0x9}, &(0x7f0000001080)={0x9, 0x1, 0x6, 0x3, 0x5, 0xffffffffffffffff, 0x35, 0xe044}, &(0x7f00000010c0)={0x77359400}, &(0x7f0000001140)={&(0x7f0000001100)={[0x3ff]}, 0x8}) connect$qrtr(r3, &(0x7f0000001180)={0x2a, 0x1, 0x3fff}, 0xc) 2.604991464s ago: executing program 2 (id=178): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) shmget$private(0x0, 0x1000, 0x100, &(0x7f00007bd000/0x1000)=nil) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) lgetxattr(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=""/168, 0xa8) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x22800, 0x0) read$FUSE(r2, 0x0, 0x0) 2.105731994s ago: executing program 4 (id=179): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3f}, 0x48) 2.020655765s ago: executing program 3 (id=180): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r6, 0x81, 0x1, &(0x7f0000000040)='P') 2.020177125s ago: executing program 0 (id=181): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c) r1 = syz_io_uring_setup(0x6427, &(0x7f0000001340)={0x0, 0x614a, 0x40, 0x3, 0x394, 0x0, r0}, 0x0, 0x0) r2 = syz_io_uring_setup(0x2d5c, &(0x7f0000000000)={0x0, 0xa05e, 0x8, 0x3, 0x107, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) syz_clone3(&(0x7f0000001240)={0x200200000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 1.478172884s ago: executing program 0 (id=182): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x1f000000}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) 1.382982277s ago: executing program 0 (id=183): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) listen(0xffffffffffffffff, 0x8) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSNLIST(r4, 0x8010640b, &(0x7f00001859c0)={0xfdfd, &(0x7f0000185780)=[{0x4000000, 0x0, 0x0, 0x0, 0x3}]}) 1.232586319s ago: executing program 5 (id=184): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$sndctrl(0x0, 0x3000000000000, 0xc0440) lseek(r2, 0x0, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r3, 0xda90) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0x4}, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019780)=""/102400, 0x19000) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x20003f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) 556.098408ms ago: executing program 2 (id=185): r0 = socket$kcm(0xa, 0x2, 0x73) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x90, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x400d0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) (async) timer_create(0x0, 0x0, &(0x7f0000000000)) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"05d39a13eb3bd809b57dfe61282594364d39f7e84ceee07d8d2ed06ba1b3838f", r8, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x1, r11}) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffff9}, 0x80, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x28}, 0x20008000) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="400050313006398fdc94b864723f000010001fff000000000000000000010000dc2c10c6719428e14cff83878a3b670a42b5985983b315351b2d26d6fa29113d34c338456fdf8300da5b", @ANYRES32=0x0, @ANYBLOB="1013040000940400200012800b00010065727370616e000010000280060003000100000004001200"], 0x40}}, 0x0) 501.984942ms ago: executing program 4 (id=186): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x20}], 0x600, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@RTM_NEWNSID={0x24, 0x58, 0x89a3c92494f150d0, 0x70bd26, 0x25dfdbfe, {}, [@NETNSA_PID={0x8}, @NETNSA_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x8011) 208.503133ms ago: executing program 2 (id=187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 159.745967ms ago: executing program 4 (id=188): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') lseek(r2, 0xae7d, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x4, 0x25, 0x0, 0x0, 0x800, 0xa, 0x0, 0x0, 0xb5, 0x0}) syz_genetlink_get_family_id$tipc2(0x0, r2) sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x4010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140), 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x4, &(0x7f0000000040)=[{0x0, 0x0, 0xcc, 0x5}, {0x6, 0x9, 0x2, 0x7}, {0xd, 0x7, 0x3c, 0x40}, {0x6, 0xa, 0x10}]}, 0x10) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8006, 0x11f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0xc2, 0x22, &(0x7f0000000540)="f107f4f79202202ca28c9fe08862f8794e1b46e5f08cf7c6c568321b2b7b1b332555b951534815c7217a63042f38d6f2ea52997c2f62dbe82573fd6711092c097fb8ebdcf2279733759ded45fb5d8d4c00ca11cc80caf5abda01775b15dac058d7070d1eb26860380207879af486b51923f23d1946859818032aa57b5f34f38568470bc5914131c22fc232bc4201ba1cf269432f92d3fc8b7742233991bf3549553c3ca995ed2915e5aec6e250b27115a859f21a83293973d9fffe5895f36399e88c", &(0x7f0000000640)=""/34, 0xb4b, 0x0, 0x0, 0x3c, 0x0, &(0x7f00000006c0)="ea99394a5f49cab8cef339b7f0def184c373ac8c50a2f4c7f39c9f9db92be8e16dde31179a29927a4c4c7e892c5eda9eec7dfb4bb198d6e470fa3d38", 0x4}, 0x50) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r6, 0x6e2, 0x600, 0x1, 0x0, 0x0) 51.783768ms ago: executing program 5 (id=189): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7, 0x0, 0x0, 0xff, "d4e9002b2c000000ff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x6) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r2, 0x540b, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 38.417699ms ago: executing program 2 (id=190): ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r1, 0x2007ffb) syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x1b, @local, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x10001, 0x4) r3 = semget(0x1, 0x2, 0xc) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000000)=[{0x1, 0x1, 0x800}, {0x1, 0x100}, {0x3, 0x3ff, 0x1800}, {0x3, 0x4, 0x1800}, {0x1, 0x8, 0x1800}, {0x1, 0x2}, {0x1, 0x9, 0x1000}, {0x4, 0x0, 0x800}], 0x8, &(0x7f0000000140)={r4, r5+60000000}) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="7314e876dc0e", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1de54508f6d3bc95}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x3, 0x3, 0x28, 0x65, 0x0, 0xf4, 0x21, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@generic={0x1, 0x2}]}}, {{0x4e20, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x0, "554a1b", 0x8, "f134da"}}}}}}, 0x0) sendfile(r6, r1, 0x0, 0x7ffff000) open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) statx(0xffffffffffffff9c, 0x0, 0x4800, 0x100, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) 0s ago: executing program 0 (id=191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x1003, 0x8bb7c4d0598b5e3b, 0x3, 0x7, 0x2eb4, 0x3, 0x0, 0x0, 0x10, 0x6}}, 0xffffffffffffff69) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140006006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. [ 59.191969][ T30] audit: type=1400 audit(1756761836.076:62): avc: denied { mounton } for pid=5835 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.195834][ T5835] cgroup: Unknown subsys name 'net' [ 59.214709][ T30] audit: type=1400 audit(1756761836.076:63): avc: denied { mount } for pid=5835 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.244407][ T30] audit: type=1400 audit(1756761836.126:64): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.402354][ T5835] cgroup: Unknown subsys name 'cpuset' [ 59.410599][ T5835] cgroup: Unknown subsys name 'rlimit' [ 59.534392][ T30] audit: type=1400 audit(1756761836.416:65): avc: denied { setattr } for pid=5835 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.566997][ T30] audit: type=1400 audit(1756761836.416:66): avc: denied { create } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.602340][ T30] audit: type=1400 audit(1756761836.416:67): avc: denied { write } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.616878][ T5837] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 59.623880][ T30] audit: type=1400 audit(1756761836.416:68): avc: denied { read } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.651830][ T30] audit: type=1400 audit(1756761836.416:69): avc: denied { mounton } for pid=5835 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.676791][ T30] audit: type=1400 audit(1756761836.416:70): avc: denied { mount } for pid=5835 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.700459][ T30] audit: type=1400 audit(1756761836.476:71): avc: denied { read } for pid=5516 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 60.563354][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.314760][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 64.314774][ T30] audit: type=1400 audit(1756761841.196:78): avc: denied { create } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.373716][ T30] audit: type=1400 audit(1756761841.196:79): avc: denied { read write } for pid=5847 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.399405][ T30] audit: type=1400 audit(1756761841.196:80): avc: denied { open } for pid=5847 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.423352][ T30] audit: type=1400 audit(1756761841.236:81): avc: denied { ioctl } for pid=5845 comm="syz-executor" path="socket:[5126]" dev="sockfs" ino=5126 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.477596][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.480153][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.492596][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.492598][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.500650][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.507650][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.518609][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.521089][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.527578][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.535479][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.541848][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.548887][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.556565][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.562817][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.569817][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.577732][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.590837][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.598393][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.601597][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.605786][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.613117][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.619695][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.626809][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.641203][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.654983][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.682296][ T30] audit: type=1400 audit(1756761841.476:82): avc: denied { read } for pid=5847 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.717680][ T30] audit: type=1400 audit(1756761841.476:83): avc: denied { open } for pid=5847 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.742725][ T30] audit: type=1400 audit(1756761841.476:84): avc: denied { mounton } for pid=5847 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 65.048407][ T30] audit: type=1400 audit(1756761841.926:85): avc: denied { module_request } for pid=5853 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.135832][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 65.178326][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 65.214130][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 65.267199][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 65.285554][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 65.391931][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.399179][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.406725][ T5853] bridge_slave_0: entered allmulticast mode [ 65.413674][ T5853] bridge_slave_0: entered promiscuous mode [ 65.421607][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.428668][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.435905][ T5853] bridge_slave_1: entered allmulticast mode [ 65.442759][ T5853] bridge_slave_1: entered promiscuous mode [ 65.489198][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.496280][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.503668][ T5856] bridge_slave_0: entered allmulticast mode [ 65.510698][ T5856] bridge_slave_0: entered promiscuous mode [ 65.527307][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.534401][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.541823][ T5847] bridge_slave_0: entered allmulticast mode [ 65.548505][ T5847] bridge_slave_0: entered promiscuous mode [ 65.570795][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.577892][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.585273][ T5856] bridge_slave_1: entered allmulticast mode [ 65.592735][ T5856] bridge_slave_1: entered promiscuous mode [ 65.607237][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.614301][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.621501][ T5847] bridge_slave_1: entered allmulticast mode [ 65.628078][ T5847] bridge_slave_1: entered promiscuous mode [ 65.644951][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.676904][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.684025][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.691440][ T5845] bridge_slave_0: entered allmulticast mode [ 65.697986][ T5845] bridge_slave_0: entered promiscuous mode [ 65.704961][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.712340][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.719418][ T5845] bridge_slave_1: entered allmulticast mode [ 65.726296][ T5845] bridge_slave_1: entered promiscuous mode [ 65.734130][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.759854][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.767084][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.774229][ T5846] bridge_slave_0: entered allmulticast mode [ 65.780914][ T5846] bridge_slave_0: entered promiscuous mode [ 65.812111][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.821534][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.828691][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.835853][ T5846] bridge_slave_1: entered allmulticast mode [ 65.843892][ T5846] bridge_slave_1: entered promiscuous mode [ 65.859091][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.877351][ T5853] team0: Port device team_slave_0 added [ 65.884832][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.903090][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.923504][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.933979][ T5853] team0: Port device team_slave_1 added [ 65.941136][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.960965][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.001242][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.020206][ T5847] team0: Port device team_slave_0 added [ 66.042729][ T5845] team0: Port device team_slave_0 added [ 66.049564][ T5856] team0: Port device team_slave_0 added [ 66.065023][ T5847] team0: Port device team_slave_1 added [ 66.071571][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.078486][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.105212][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.117591][ T5845] team0: Port device team_slave_1 added [ 66.131705][ T5856] team0: Port device team_slave_1 added [ 66.146914][ T5846] team0: Port device team_slave_0 added [ 66.166496][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.173843][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.200557][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.226249][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.233568][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.259855][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.272184][ T5846] team0: Port device team_slave_1 added [ 66.291963][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.298892][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.325655][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.338176][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.345295][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.371188][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.382760][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.389688][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.416101][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.445998][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.454242][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.480427][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.491744][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.498671][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.525152][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.536442][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.543647][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.570111][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.594942][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.601938][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.627946][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.638890][ T5860] Bluetooth: hci0: command tx timeout [ 66.700464][ T5853] hsr_slave_0: entered promiscuous mode [ 66.706470][ T5853] hsr_slave_1: entered promiscuous mode [ 66.710493][ T5860] Bluetooth: hci4: command tx timeout [ 66.714230][ T5861] Bluetooth: hci1: command tx timeout [ 66.717540][ T5864] Bluetooth: hci2: command tx timeout [ 66.728836][ T5852] Bluetooth: hci3: command tx timeout [ 66.739411][ T5846] hsr_slave_0: entered promiscuous mode [ 66.745553][ T5846] hsr_slave_1: entered promiscuous mode [ 66.751579][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 66.757319][ T5846] Cannot create hsr debugfs directory [ 66.773418][ T5847] hsr_slave_0: entered promiscuous mode [ 66.779381][ T5847] hsr_slave_1: entered promiscuous mode [ 66.785522][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 66.791386][ T5847] Cannot create hsr debugfs directory [ 66.825950][ T5845] hsr_slave_0: entered promiscuous mode [ 66.831928][ T5845] hsr_slave_1: entered promiscuous mode [ 66.837711][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 66.843765][ T5845] Cannot create hsr debugfs directory [ 66.866810][ T5856] hsr_slave_0: entered promiscuous mode [ 66.872888][ T5856] hsr_slave_1: entered promiscuous mode [ 66.878695][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 66.884416][ T5856] Cannot create hsr debugfs directory [ 67.236616][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.247144][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.256690][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.271756][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.319031][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.329153][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.345056][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.356815][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.409765][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.427616][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.436968][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.452770][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.551518][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.577976][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.587662][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.597776][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.607561][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.629326][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.654217][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.661388][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.689055][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.696141][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.725651][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.735822][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.756205][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.768329][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.779168][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.812440][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.822283][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.844038][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.851133][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.894646][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.901777][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.934716][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.941783][ T30] audit: type=1400 audit(1756761844.826:86): avc: denied { sys_module } for pid=5853 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.994658][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.015843][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.022929][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.046432][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.084082][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.091202][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.154238][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.218570][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.225685][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.239004][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.267829][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.277023][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.284173][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.338639][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.384237][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.413305][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.420429][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.431904][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.438996][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.603234][ T5846] veth0_vlan: entered promiscuous mode [ 68.633276][ T5846] veth1_vlan: entered promiscuous mode [ 68.711839][ T5852] Bluetooth: hci0: command tx timeout [ 68.758316][ T5846] veth0_macvtap: entered promiscuous mode [ 68.778593][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.792606][ T5852] Bluetooth: hci4: command tx timeout [ 68.798000][ T5852] Bluetooth: hci3: command tx timeout [ 68.799361][ T5846] veth1_macvtap: entered promiscuous mode [ 68.803440][ T5864] Bluetooth: hci2: command tx timeout [ 68.814564][ T5852] Bluetooth: hci1: command tx timeout [ 68.828353][ T5853] veth0_vlan: entered promiscuous mode [ 68.847207][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.894576][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.906191][ T5853] veth1_vlan: entered promiscuous mode [ 68.924368][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.945726][ T1163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.955249][ T1163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.973337][ T1163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.982059][ T1163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.014965][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.027558][ T5845] veth0_vlan: entered promiscuous mode [ 69.069145][ T5853] veth0_macvtap: entered promiscuous mode [ 69.090858][ T5845] veth1_vlan: entered promiscuous mode [ 69.098968][ T5853] veth1_macvtap: entered promiscuous mode [ 69.117487][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.125832][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.184211][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.197974][ T5847] veth0_vlan: entered promiscuous mode [ 69.210423][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.213797][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.220019][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.227817][ T5856] veth0_vlan: entered promiscuous mode [ 69.259573][ T5845] veth0_macvtap: entered promiscuous mode [ 69.266403][ T30] audit: type=1400 audit(1756761846.146:87): avc: denied { mounton } for pid=5846 comm="syz-executor" path="/root/syzkaller.pek8kk/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.269443][ T5847] veth1_vlan: entered promiscuous mode [ 69.307077][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.322541][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 69.322552][ T30] audit: type=1400 audit(1756761846.206:94): avc: denied { mounton } for pid=5846 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.331872][ T5845] veth1_macvtap: entered promiscuous mode [ 69.367258][ T30] audit: type=1400 audit(1756761846.206:95): avc: denied { mount } for pid=5846 comm="syz-executor" name="/" dev="gadgetfs" ino=8255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.368148][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.394968][ T30] audit: type=1400 audit(1756761846.206:96): avc: denied { mount } for pid=5846 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.434140][ T5856] veth1_vlan: entered promiscuous mode [ 69.440515][ T30] audit: type=1400 audit(1756761846.206:97): avc: denied { mounton } for pid=5846 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 69.451353][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.464452][ T30] audit: type=1400 audit(1756761846.206:98): avc: denied { mount } for pid=5846 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 69.477896][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.521962][ T30] audit: type=1400 audit(1756761846.396:99): avc: denied { read write } for pid=5846 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.554638][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.570381][ T30] audit: type=1400 audit(1756761846.396:100): avc: denied { open } for pid=5846 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.595909][ T30] audit: type=1400 audit(1756761846.396:101): avc: denied { ioctl } for pid=5846 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.622328][ T30] audit: type=1400 audit(1756761846.406:102): avc: denied { prog_load } for pid=5967 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 69.641244][ T30] audit: type=1400 audit(1756761846.406:103): avc: denied { bpf } for pid=5967 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.668776][ T5856] veth0_macvtap: entered promiscuous mode [ 69.692249][ T5847] veth0_macvtap: entered promiscuous mode [ 69.707350][ T5969] netlink: 'syz.0.1': attribute type 6 has an invalid length. [ 69.711969][ T5856] veth1_macvtap: entered promiscuous mode [ 69.721978][ T5969] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1'. [ 69.733550][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.761936][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.792383][ T5847] veth1_macvtap: entered promiscuous mode [ 69.820880][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.838737][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.916841][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.940313][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.954627][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.964659][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.977956][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.989892][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.006683][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.053248][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.071848][ T3580] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.102454][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.112354][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.123565][ T3580] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.132477][ T3580] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.161365][ T3580] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.196183][ T3580] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.207703][ T3580] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.247686][ T3580] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.258884][ T3580] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.341787][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.367374][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.497229][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.505725][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.576034][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.598131][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.729706][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.745870][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.748503][ T5977] vivid-004: kernel_thread() failed [ 70.791436][ T5864] Bluetooth: hci0: command tx timeout [ 70.800410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.870515][ T5852] Bluetooth: hci1: command tx timeout [ 70.875378][ T5861] Bluetooth: hci3: command tx timeout [ 70.878207][ T5852] Bluetooth: hci4: command tx timeout [ 70.882608][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.886966][ T5864] Bluetooth: hci2: command tx timeout [ 70.895729][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.140990][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.180389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.190803][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.250584][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.300161][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.565764][ T5994] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4'. [ 71.577476][ T5994] batadv_slave_1: entered promiscuous mode [ 71.810273][ T5965] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.883294][ T6004] netlink: 1 bytes leftover after parsing attributes in process `syz.2.14'. [ 71.931276][ T6004] netlink: 1 bytes leftover after parsing attributes in process `syz.2.14'. [ 71.954903][ T6004] Zero length message leads to an empty skb [ 71.970129][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.003429][ T5965] usb 2-1: Using ep0 maxpacket: 32 [ 72.025561][ T5965] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 72.037423][ T5965] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 72.055646][ T5965] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.087332][ T5965] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 72.117534][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 72.293046][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 72.305521][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.313544][ T5965] usb 2-1: Product: syz [ 72.313572][ T5965] usb 2-1: Manufacturer: syz [ 72.313586][ T5965] usb 2-1: SerialNumber: syz [ 72.335590][ T24] usb 4-1: Product: syz [ 72.339749][ T24] usb 4-1: Manufacturer: syz [ 72.344843][ T5965] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input5 [ 72.360101][ T24] usb 4-1: SerialNumber: syz [ 72.384367][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 72.411905][ T5912] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 72.582642][ T5996] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 72.659809][ T24] usb 2-1: USB disconnect, device number 2 [ 72.659873][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 72.829405][ T24] appletouch 2-1:1.0: input: appletouch disconnected [ 72.880668][ T5864] Bluetooth: hci0: command tx timeout [ 72.887289][ T5996] xt_socket: unknown flags 0xe4 [ 72.950065][ T5864] Bluetooth: hci3: command tx timeout [ 72.955622][ T5864] Bluetooth: hci1: command tx timeout [ 72.961184][ T5852] Bluetooth: hci2: command tx timeout [ 72.961213][ T5852] Bluetooth: hci4: command tx timeout [ 73.183914][ T5864] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 73.270032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 73.991605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.094362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.094541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.117033][ T5912] usb 4-1: Service connection timeout for: 256 [ 74.140083][ T5912] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 74.196472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.412756][ T5912] ath9k_htc: Failed to initialize the device [ 74.423954][ T5912] usb 4-1: ath9k_htc: USB layer deinitialized [ 74.520478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.552060][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 74.552075][ T30] audit: type=1400 audit(1756761851.436:158): avc: denied { read write } for pid=6031 comm="syz.4.20" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 74.610808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.630019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 74.630425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.799373][ T30] audit: type=1400 audit(1756761851.466:159): avc: denied { open } for pid=6031 comm="syz.4.20" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 75.021623][ T5905] usb 4-1: USB disconnect, device number 2 [ 75.078564][ T30] audit: type=1400 audit(1756761851.956:160): avc: denied { create } for pid=6037 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.143955][ T30] audit: type=1400 audit(1756761852.006:161): avc: denied { getopt } for pid=6037 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.158294][ T6042] tipc: Failed to obtain node identity [ 75.193730][ T30] audit: type=1400 audit(1756761852.006:162): avc: denied { read } for pid=6037 comm="syz.1.22" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.200628][ T6042] tipc: Enabling of bearer rejected, failed to enable media [ 75.259237][ T30] audit: type=1400 audit(1756761852.006:163): avc: denied { open } for pid=6037 comm="syz.1.22" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.337252][ T30] audit: type=1400 audit(1756761852.016:164): avc: denied { ioctl } for pid=6037 comm="syz.1.22" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 76.678114][ T9] cfg80211: failed to load regulatory.db [ 77.332229][ T30] audit: type=1400 audit(1756761853.686:165): avc: denied { ioctl } for pid=6051 comm="syz.1.27" path="socket:[9130]" dev="sockfs" ino=9130 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.356553][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.488871][ T30] audit: type=1400 audit(1756761853.746:166): avc: denied { read write } for pid=6051 comm="syz.1.27" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.682437][ T30] audit: type=1400 audit(1756761853.746:167): avc: denied { open } for pid=6051 comm="syz.1.27" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.705204][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.725856][ T6064] netlink: 36 bytes leftover after parsing attributes in process `syz.3.30'. [ 77.848903][ T6060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.958358][ T6070] hfsplus: unable to find HFS+ superblock [ 77.987577][ T6070] kvm: kvm [6065]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xffffdfffffffffff [ 78.870948][ T6075] FAULT_INJECTION: forcing a failure. [ 78.870948][ T6075] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.885589][ T6075] CPU: 0 UID: 0 PID: 6075 Comm: syz.3.32 Not tainted syzkaller #0 PREEMPT(full) [ 78.885604][ T6075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.885610][ T6075] Call Trace: [ 78.885614][ T6075] [ 78.885618][ T6075] dump_stack_lvl+0x16c/0x1f0 [ 78.885634][ T6075] should_fail_ex+0x512/0x640 [ 78.885649][ T6075] _copy_to_user+0x32/0xd0 [ 78.885664][ T6075] simple_read_from_buffer+0xcb/0x170 [ 78.885677][ T6075] proc_fail_nth_read+0x197/0x240 [ 78.885690][ T6075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.885703][ T6075] ? rw_verify_area+0xcf/0x6c0 [ 78.885719][ T6075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.885731][ T6075] vfs_read+0x1e1/0xcf0 [ 78.885743][ T6075] ? __pfx___mutex_lock+0x10/0x10 [ 78.885756][ T6075] ? __pfx_vfs_read+0x10/0x10 [ 78.885769][ T6075] ? __fget_files+0x20e/0x3c0 [ 78.885785][ T6075] ksys_read+0x12a/0x250 [ 78.885795][ T6075] ? __pfx_ksys_read+0x10/0x10 [ 78.885809][ T6075] do_syscall_64+0xcd/0x4c0 [ 78.885823][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.885833][ T6075] RIP: 0033:0x7f31fa78d5fc [ 78.885842][ T6075] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 78.885852][ T6075] RSP: 002b:00007f31fb525030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.885863][ T6075] RAX: ffffffffffffffda RBX: 00007f31fa9c6180 RCX: 00007f31fa78d5fc [ 78.885869][ T6075] RDX: 000000000000000f RSI: 00007f31fb5250a0 RDI: 0000000000000005 [ 78.885875][ T6075] RBP: 00007f31fb525090 R08: 0000000000000000 R09: 0000000000000000 [ 78.885881][ T6075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.885887][ T6075] R13: 00007f31fa9c6218 R14: 00007f31fa9c6180 R15: 00007fff44a4e0e8 [ 78.885900][ T6075] [ 79.840102][ T9] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 79.945001][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 79.945030][ T30] audit: type=1400 audit(1756761856.796:185): avc: denied { bind } for pid=6085 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.290215][ T30] audit: type=1400 audit(1756761856.796:186): avc: denied { name_bind } for pid=6085 comm="syz.1.35" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 80.312973][ T30] audit: type=1400 audit(1756761856.796:187): avc: denied { node_bind } for pid=6085 comm="syz.1.35" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 80.334602][ T30] audit: type=1400 audit(1756761856.796:188): avc: denied { connect } for pid=6085 comm="syz.1.35" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.357147][ T30] audit: type=1400 audit(1756761856.796:189): avc: denied { name_connect } for pid=6085 comm="syz.1.35" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 80.399673][ T30] audit: type=1400 audit(1756761856.826:190): avc: denied { shutdown } for pid=6085 comm="syz.1.35" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.450380][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 80.533170][ T30] audit: type=1400 audit(1756761857.406:191): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.590277][ T9] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 80.621083][ T30] audit: type=1400 audit(1756761857.476:192): avc: denied { read } for pid=6094 comm="syz.1.37" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.697308][ T30] audit: type=1400 audit(1756761857.476:193): avc: denied { open } for pid=6094 comm="syz.1.37" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.856158][ T30] audit: type=1400 audit(1756761857.496:194): avc: denied { ioctl } for pid=6094 comm="syz.1.37" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.412377][ T9] usb 3-1: Invalid ep0 maxpacket: 16 [ 81.681414][ T9] usb usb3-port1: attempt power cycle [ 82.047672][ T6060] syz.0.26 (6060): drop_caches: 2 [ 82.240328][ T9] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 82.693773][ T9] usb 3-1: device descriptor read/8, error -71 [ 83.401205][ T6131] overlayfs: missing 'lowerdir' [ 85.021503][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 85.021519][ T30] audit: type=1400 audit(1756761861.906:221): avc: denied { mounton } for pid=6147 comm="syz.0.51" path="/8/file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.128306][ T30] audit: type=1400 audit(1756761861.956:222): avc: denied { write } for pid=5912 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7972 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.416353][ T30] audit: type=1400 audit(1756761862.296:223): avc: denied { mount } for pid=6150 comm="syz.4.53" name="/" dev="hugetlbfs" ino=7987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 86.119886][ T30] audit: type=1400 audit(1756761862.756:224): avc: denied { ioctl } for pid=6140 comm="syz.2.50" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 86.148726][ T30] audit: type=1400 audit(1756761862.906:225): avc: denied { name_connect } for pid=6140 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 86.227938][ T30] audit: type=1400 audit(1756761863.086:226): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 86.360793][ T6164] warning: `syz.0.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.615777][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.878504][ T6173] wlan0 speed is unknown, defaulting to 1000 [ 86.885145][ T6173] wlan0 speed is unknown, defaulting to 1000 [ 86.902967][ T6173] wlan0 speed is unknown, defaulting to 1000 [ 86.948911][ T6173] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.058186][ T6173] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 87.189786][ T30] audit: type=1400 audit(1756761863.736:227): avc: denied { create } for pid=6169 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.191767][ T6173] wlan0 speed is unknown, defaulting to 1000 [ 87.218187][ T6173] wlan0 speed is unknown, defaulting to 1000 [ 87.226344][ T6173] wlan0 speed is unknown, defaulting to 1000 [ 87.232700][ T30] audit: type=1400 audit(1756761863.756:228): avc: denied { write } for pid=6169 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.233457][ T6173] wlan0 speed is unknown, defaulting to 1000 [ 87.261270][ T6173] wlan0 speed is unknown, defaulting to 1000 [ 87.311437][ T6176] netlink: 256 bytes leftover after parsing attributes in process `syz.3.61'. [ 87.331502][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.419829][ T30] audit: type=1400 audit(1756761864.296:229): avc: denied { search } for pid=5516 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.488135][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.496348][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.504411][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.513599][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.521304][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.569148][ T30] audit: type=1400 audit(1756761864.296:230): avc: denied { search } for pid=5516 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.621976][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.753744][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.795499][ T6179] wlan0 speed is unknown, defaulting to 1000 [ 88.010338][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.362896][ T6195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.383779][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 88.401941][ T24] usb 4-1: config 2 has an invalid interface number: 185 but max is 0 [ 88.410850][ T24] usb 4-1: config 2 has no interface number 0 [ 88.417429][ T24] usb 4-1: too many endpoints for config 2 interface 185 altsetting 0: 250, using maximum allowed: 30 [ 88.489312][ T24] usb 4-1: config 2 interface 185 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 250 [ 88.582801][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=60.45 [ 88.645520][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.675431][ T24] usb 4-1: Product: syz [ 88.684963][ T24] usb 4-1: Manufacturer: syz [ 88.689569][ T24] usb 4-1: SerialNumber: syz [ 88.782820][ T6179] chnl_net:caif_netlink_parms(): no params data found [ 88.925563][ T49] bridge_slave_1: left allmulticast mode [ 88.944804][ T49] bridge_slave_1: left promiscuous mode [ 88.950529][ T5588] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.974440][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.004443][ T49] bridge_slave_0: left allmulticast mode [ 89.020224][ T49] bridge_slave_0: left promiscuous mode [ 89.031178][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.113347][ T5588] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 89.130762][ T5588] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 89.176454][ T5588] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 89.210358][ T5588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.244668][ T6203] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 89.276318][ T5588] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 89.592466][ T5861] Bluetooth: hci1: command tx timeout [ 89.598394][ T5588] usb 1-1: USB disconnect, device number 2 [ 89.790675][ T6218] block nbd4: Attempted send on invalid socket [ 89.797068][ T6218] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 90.516928][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 90.516944][ T30] audit: type=1400 audit(1756761867.396:245): avc: denied { create } for pid=6220 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 90.583234][ T30] audit: type=1400 audit(1756761867.396:246): avc: denied { ioctl } for pid=6220 comm="syz.2.67" path="socket:[8113]" dev="sockfs" ino=8113 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 90.607467][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.618684][ T30] audit: type=1400 audit(1756761867.396:247): avc: denied { read append } for pid=6220 comm="syz.2.67" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.653062][ T30] audit: type=1400 audit(1756761867.396:248): avc: denied { open } for pid=6220 comm="syz.2.67" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.230272][ T30] audit: type=1400 audit(1756761868.106:249): avc: denied { add_name } for pid=6205 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.252601][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.305927][ T30] audit: type=1400 audit(1756761868.106:250): avc: denied { create } for pid=6205 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.368733][ T30] audit: type=1400 audit(1756761868.106:251): avc: denied { write } for pid=6205 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2221 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.398045][ T30] audit: type=1400 audit(1756761868.106:252): avc: denied { append } for pid=6205 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2221 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.465382][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.487039][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.497429][ T49] bond0 (unregistering): Released all slaves [ 91.527181][ T6184] netlink: 'syz.3.64': attribute type 3 has an invalid length. [ 91.581655][ T5970] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.634278][ T30] audit: type=1400 audit(1756761868.516:253): avc: denied { remove_name } for pid=6235 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2221 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.670126][ T5861] Bluetooth: hci1: command tx timeout [ 91.708982][ T6242] siw: device registration error -23 [ 92.290088][ T30] audit: type=1400 audit(1756761868.606:254): avc: denied { unlink } for pid=6235 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2221 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.394590][ T24] usb-storage 4-1:2.185: USB Mass Storage device detected [ 92.414424][ T5970] usb 5-1: Using ep0 maxpacket: 32 [ 92.431395][ T5970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.449044][ T24] usb-storage 4-1:2.185: Quirks match for vid 05ac pid 120a: 10 [ 92.466490][ T5970] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 92.488211][ T5970] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 92.506838][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.562955][ T24] apple-mfi-fastcharge 4-1: USB disconnect, device number 3 [ 92.571438][ T5970] usb 5-1: config 0 descriptor?? [ 92.797036][ T6227] netlink: 'syz.4.69': attribute type 4 has an invalid length. [ 92.830349][ T6227] netlink: 'syz.4.69': attribute type 5 has an invalid length. [ 92.881187][ T6227] netlink: 152 bytes leftover after parsing attributes in process `syz.4.69'. [ 93.065346][ T5861] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 93.553211][ T5588] usb 5-1: USB disconnect, device number 2 [ 93.577593][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.643066][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.765866][ T6179] bridge_slave_0: entered allmulticast mode [ 93.773879][ T5861] Bluetooth: hci1: command tx timeout [ 93.950562][ T6179] bridge_slave_0: entered promiscuous mode [ 93.990303][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.997403][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.019625][ T6179] bridge_slave_1: entered allmulticast mode [ 94.028467][ T6179] bridge_slave_1: entered promiscuous mode [ 94.141970][ T6179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.172265][ T6179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.322922][ T49] hsr_slave_0: left promiscuous mode [ 94.358639][ T49] hsr_slave_1: left promiscuous mode [ 94.367413][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.376246][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.387073][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.800144][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.820638][ T49] veth1_macvtap: left promiscuous mode [ 94.826232][ T49] veth0_macvtap: left promiscuous mode [ 94.832061][ T49] veth1_vlan: left promiscuous mode [ 94.837306][ T49] veth0_vlan: left promiscuous mode [ 95.850045][ T5861] Bluetooth: hci1: command tx timeout [ 96.238627][ T6287] netlink: 60 bytes leftover after parsing attributes in process `syz.0.80'. [ 96.407466][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 96.407494][ T30] audit: type=1400 audit(1756761873.136:257): avc: denied { name_connect } for pid=6284 comm="syz.0.80" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 96.889412][ T6292] siw: device registration error -23 [ 97.654802][ T49] team0 (unregistering): Port device team_slave_1 removed [ 97.687764][ T49] team0 (unregistering): Port device team_slave_0 removed [ 98.573216][ T30] audit: type=1400 audit(1756761875.456:258): avc: denied { create } for pid=6301 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.882752][ T6179] team0: Port device team_slave_0 added [ 98.912857][ T6179] team0: Port device team_slave_1 added [ 100.087097][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.265938][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.303538][ T6179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.102430][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.165033][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.199804][ T6179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.836167][ T6179] hsr_slave_0: entered promiscuous mode [ 101.865161][ T6179] hsr_slave_1: entered promiscuous mode [ 101.873238][ T6179] debugfs: 'hsr0' already exists in 'hsr' [ 101.879025][ T6179] Cannot create hsr debugfs directory [ 102.100605][ T6330] ======================================================= [ 102.100605][ T6330] WARNING: The mand mount option has been deprecated and [ 102.100605][ T6330] and is ignored by this kernel. Remove the mand [ 102.100605][ T6330] option from the mount to silence this warning. [ 102.100605][ T6330] ======================================================= [ 102.150034][ T30] audit: type=1400 audit(1756761878.974:259): avc: denied { mount } for pid=6321 comm="syz.0.90" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 102.198105][ T6330] overlayfs: failed to resolve './file0': -2 [ 102.334488][ T30] audit: type=1400 audit(1756761879.204:260): avc: denied { setopt } for pid=6328 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.549376][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 102.695116][ T30] audit: type=1400 audit(1756761879.534:261): avc: denied { mount } for pid=6337 comm="syz.2.92" name="/" dev="ramfs" ino=10336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 103.110184][ T30] audit: type=1400 audit(1756761879.994:262): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 103.239668][ T30] audit: type=1400 audit(1756761880.104:263): avc: denied { create } for pid=6354 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 103.451845][ T30] audit: type=1400 audit(1756761880.334:264): avc: denied { execute } for pid=6354 comm="syz.2.94" name="file2" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.478466][ T6363] process 'syz.2.94' launched './file2' with NULL argv: empty string added [ 103.637960][ T30] audit: type=1400 audit(1756761880.374:265): avc: denied { execute_no_trans } for pid=6354 comm="syz.2.94" path="/16/file2" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.646202][ T6179] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.680092][ T30] audit: type=1400 audit(1756761880.504:266): avc: denied { read write } for pid=6356 comm="syz.3.95" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.722698][ T6179] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.745351][ T30] audit: type=1400 audit(1756761880.504:267): avc: denied { open } for pid=6356 comm="syz.3.95" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.774812][ T30] audit: type=1400 audit(1756761880.504:268): avc: denied { ioctl } for pid=6356 comm="syz.3.95" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.786561][ T6179] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.824608][ T6179] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.861805][ T5588] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.880973][ T5970] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.027271][ T5588] usb 4-1: Using ep0 maxpacket: 32 [ 104.035333][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.053051][ T5970] usb 1-1: config 0 has no interfaces? [ 104.074565][ T5588] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.083484][ T5970] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 104.084946][ T5588] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 104.109325][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.114771][ T6179] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.124035][ T5588] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 104.126297][ T5970] usb 1-1: Product: syz [ 104.135242][ T5588] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 104.142962][ T5970] usb 1-1: Manufacturer: syz [ 104.156171][ T5970] usb 1-1: SerialNumber: syz [ 104.159110][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.167865][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.178602][ T5588] usb 4-1: config 128 has no interface number 0 [ 104.189070][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.195873][ T5588] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 28, changing to 8 [ 104.196176][ T6350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.208115][ T5588] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 33417, setting to 1024 [ 104.347962][ T5588] usb 4-1: config 128 interface 127 has no altsetting 0 [ 104.386007][ T5970] usb 1-1: config 0 descriptor?? [ 104.544591][ T5588] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 104.584390][ T5588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.606546][ T5588] usb 4-1: Product: syz [ 104.616906][ T6179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.660050][ T5588] usb 4-1: Manufacturer: syz [ 104.664651][ T5588] usb 4-1: SerialNumber: syz [ 105.496740][ T5588] usb 4-1: USB disconnect, device number 4 [ 105.513533][ T6179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.684683][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.197814][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 106.270075][ T5970] usb 1-1: USB disconnect, device number 3 [ 106.580152][ T5970] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.750660][ T5970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.829915][ T6179] veth0_vlan: entered promiscuous mode [ 106.844930][ T5970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.957930][ T5970] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.281809][ T5970] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.329480][ T6179] veth1_vlan: entered promiscuous mode [ 107.340506][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.375805][ T5970] usb 1-1: config 0 descriptor?? [ 107.440145][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.451341][ T6179] veth0_macvtap: entered promiscuous mode [ 107.552848][ T6179] veth1_macvtap: entered promiscuous mode [ 107.612863][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.106'. [ 107.625154][ T10] usb 4-1: config index 0 descriptor too short (expected 14385, got 27) [ 107.639664][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.646876][ T10] usb 4-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 107.646899][ T10] usb 4-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 107.646918][ T10] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 107.646951][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 107.646972][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.709511][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.729166][ T6350] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.765640][ T6350] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.811483][ T6350] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.833768][ T5970] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 107.856558][ T6350] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.200585][ T10] usb 4-1: string descriptor 0 read error: -71 [ 108.249349][ T10] usb 4-1: USB disconnect, device number 5 [ 108.283900][ T6472] sock: sock_timestamping_bind_phc: sock not bind to device [ 108.321565][ T5970] usb 1-1: USB disconnect, device number 4 [ 108.368061][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.372331][ T6475] fido_id[6475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 108.376143][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.504794][ T6440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.518520][ T6440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.662038][ T6472] IPVS: Error joining to the multicast group [ 108.703662][ T6352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.723496][ T6352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.747387][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.790393][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.823885][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.852289][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.877244][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 108.877259][ T30] audit: type=1400 audit(1756761885.754:276): avc: denied { load_policy } for pid=6481 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 108.955265][ T6482] SELinux: failed to load policy [ 109.047782][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.070821][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.484422][ T30] audit: type=1400 audit(1756761886.364:277): avc: denied { mounton } for pid=6179 comm="syz-executor" path="/root/syzkaller.9cddO5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 109.572711][ T30] audit: type=1400 audit(1756761886.404:278): avc: denied { mount } for pid=6179 comm="syz-executor" name="/" dev="gadgetfs" ino=8255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 109.654117][ T913] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.707538][ T30] audit: type=1326 audit(1756761886.584:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9718ebe9 code=0x7ffc0000 [ 109.708960][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 109.800130][ T913] usb 4-1: device descriptor read/64, error -71 [ 110.050213][ T913] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 110.100791][ T30] audit: type=1326 audit(1756761886.584:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9718ebe9 code=0x7ffc0000 [ 110.178495][ T6503] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.203350][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.113'. [ 110.216457][ T30] audit: type=1326 audit(1756761886.584:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3f9718ebe9 code=0x7ffc0000 [ 110.242287][ T30] audit: type=1326 audit(1756761886.584:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9718ebe9 code=0x7ffc0000 [ 110.244437][ T913] usb 4-1: device descriptor read/64, error -71 [ 110.273626][ T30] audit: type=1326 audit(1756761886.584:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3f9718ebe9 code=0x7ffc0000 [ 110.298605][ T6503] netlink: 'syz.2.115': attribute type 4 has an invalid length. [ 110.340188][ T30] audit: type=1326 audit(1756761886.584:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f9712adb9 code=0x7ffc0000 [ 110.388459][ T913] usb usb4-port1: attempt power cycle [ 110.400358][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 110.409649][ T30] audit: type=1326 audit(1756761886.584:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9718ebe9 code=0x7ffc0000 [ 110.443961][ T5861] Bluetooth: hci0: Invalid handle: 0xa219 > 0x0eff [ 110.463279][ T6512] netlink: 'syz.2.119': attribute type 10 has an invalid length. [ 110.504088][ T6512] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.519355][ T6515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.118'. [ 110.567298][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.577752][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 110.599125][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.767759][ T913] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.777622][ T24] usb 6-1: config 0 descriptor?? [ 110.786921][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 110.800676][ T913] usb 4-1: device descriptor read/8, error -71 [ 110.989932][ T6521] geneve2: entered promiscuous mode [ 110.996282][ T6521] geneve2: entered allmulticast mode [ 111.100102][ T913] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 111.376664][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 111.400677][ T913] usb 4-1: device descriptor read/8, error -71 [ 111.537022][ T913] usb usb4-port1: unable to enumerate USB device [ 113.130934][ T24] pwc: recv_control_msg error -71 req 02 val 2700 [ 113.148041][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 113.167371][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 113.360079][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 113.371308][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 113.396049][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 114.007508][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 114.027851][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 114.038251][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 114.163702][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 114.269399][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 114.301879][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 114.441356][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 114.490875][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 115.006290][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 115.044950][ T24] pwc: Registered as video103. [ 115.075607][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6 [ 115.184777][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 115.184792][ T30] audit: type=1400 audit(1756761892.064:332): avc: denied { create } for pid=6564 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 115.230708][ T6565] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 115.231160][ T24] usb 6-1: USB disconnect, device number 2 [ 115.239584][ T6565] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 115.313858][ T30] audit: type=1400 audit(1756761892.094:333): avc: denied { setopt } for pid=6564 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 115.930274][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 116.020785][ T6584] fuse: Bad value for 'group_id' [ 116.025734][ T6584] fuse: Bad value for 'group_id' [ 116.291667][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.337833][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.398266][ T24] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 116.424487][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.615457][ T24] usb 6-1: config 0 descriptor?? [ 118.448533][ T24] usb 6-1: string descriptor 0 read error: -71 [ 118.477338][ T24] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 118.537412][ T30] audit: type=1400 audit(1756761895.417:334): avc: denied { watch watch_reads } for pid=6619 comm="syz.0.140" path=2F6D656D66643A2D263A0A2DB25D3B0FB2864E563626B83D945A7DFA577EAE8788EADED93D2D01202864656C6574656429 dev="tmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.623639][ T24] usb 6-1: USB disconnect, device number 3 [ 118.697543][ T30] audit: type=1400 audit(1756761895.457:335): avc: denied { map } for pid=6619 comm="syz.0.140" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.721252][ T30] audit: type=1400 audit(1756761895.457:336): avc: denied { execute } for pid=6619 comm="syz.0.140" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.945205][ T30] audit: type=1400 audit(1756761895.827:337): avc: denied { connect } for pid=6628 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.009061][ T30] audit: type=1400 audit(1756761895.847:338): avc: denied { write } for pid=6628 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.043420][ T5588] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.493575][ T5588] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 119.504544][ T5588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.517933][ T5588] usb 5-1: Product: syz [ 119.530005][ T5588] usb 5-1: Manufacturer: syz [ 119.698812][ T30] audit: type=1400 audit(1756761896.317:339): avc: denied { bind } for pid=6631 comm="syz.5.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.723574][ T5588] usb 5-1: SerialNumber: syz [ 119.734240][ T5588] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 119.756081][ T30] audit: type=1400 audit(1756761896.367:340): avc: denied { read } for pid=6631 comm="syz.5.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.776377][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 120.283340][ T6645] hfsplus: unable to find HFS+ superblock [ 120.686620][ T30] audit: type=1400 audit(1756761897.417:341): avc: denied { read } for pid=6625 comm="syz.4.142" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 120.878071][ T9] usb 5-1: USB disconnect, device number 3 [ 120.893930][ T30] audit: type=1400 audit(1756761897.417:342): avc: denied { open } for pid=6625 comm="syz.4.142" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 120.918577][ T30] audit: type=1400 audit(1756761897.427:343): avc: denied { create } for pid=6625 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.116097][ T10] usb 5-1: Service connection timeout for: 256 [ 121.122400][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 121.140799][ T10] ath9k_htc: Failed to initialize the device [ 121.157841][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 121.572735][ T6659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.359912][ T6666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.731831][ T5864] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 122.741203][ T5864] Bluetooth: hci1: Injecting HCI hardware error event [ 122.748708][ T5864] Bluetooth: hci1: hardware error 0x00 [ 123.544831][ T6666] syz.4.149 (6666): drop_caches: 2 [ 123.584526][ T6679] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 123.598128][ T6679] SELinux: failed to load policy [ 123.650327][ T6659] syz.2.148 (6659): drop_caches: 2 [ 123.992242][ T6684] netlink: 100 bytes leftover after parsing attributes in process `syz.0.153'. [ 124.171346][ T30] audit: type=1400 audit(1756761901.007:344): avc: denied { write } for pid=6683 comm="syz.0.153" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 124.691462][ T30] audit: type=1400 audit(1756761901.017:345): avc: denied { open } for pid=6683 comm="syz.0.153" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 124.719526][ T6693] comedi comedi3: comedi_config --init_data is deprecated [ 124.792875][ T5864] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 124.828497][ T30] audit: type=1400 audit(1756761901.567:346): avc: denied { append } for pid=6691 comm="syz.4.154" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.412524][ T30] audit: type=1400 audit(1756761902.957:347): avc: denied { read } for pid=6706 comm="syz.0.159" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 126.710044][ T30] audit: type=1400 audit(1756761902.957:348): avc: denied { open } for pid=6706 comm="syz.0.159" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 126.891350][ T30] audit: type=1400 audit(1756761903.337:349): avc: denied { append } for pid=6721 comm="syz.4.161" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.363335][ T30] audit: type=1400 audit(1756761903.477:350): avc: denied { setopt } for pid=6721 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 127.382705][ T30] audit: type=1400 audit(1756761903.567:351): avc: denied { create } for pid=6728 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.418591][ T30] audit: type=1400 audit(1756761903.577:352): avc: denied { read write } for pid=6728 comm="syz.2.163" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.620032][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.695722][ T30] audit: type=1400 audit(1756761903.577:353): avc: denied { open } for pid=6728 comm="syz.2.163" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.856509][ T30] audit: type=1400 audit(1756761903.577:354): avc: denied { ioctl } for pid=6728 comm="syz.2.163" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x55c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.881430][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 127.930899][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.161'. [ 128.004488][ T6749] mmap: syz.3.166 (6749) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.287217][ T6757] netlink: 256 bytes leftover after parsing attributes in process `syz.0.167'. [ 128.605779][ T30] audit: type=1400 audit(1756761905.487:355): avc: denied { read } for pid=6765 comm="syz.0.169" path="socket:[12519]" dev="sockfs" ino=12519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.990023][ T913] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.068388][ T30] audit: type=1400 audit(1756761905.577:356): avc: denied { create } for pid=6768 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.282336][ T913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.694345][ T913] usb 1-1: config 0 has no interfaces? [ 129.708406][ T913] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 129.750468][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 129.775220][ T913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.790202][ T913] usb 1-1: config 0 descriptor?? [ 129.992175][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.028843][ T6767] netlink: 'syz.0.169': attribute type 10 has an invalid length. [ 130.035249][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.056364][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 130.083680][ T6767] batman_adv: batadv0: Adding interface: team0 [ 130.098186][ T6767] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.130024][ T6767] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 130.161329][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 130.234040][ T24] usb 4-1: SerialNumber: syz [ 130.256716][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.265896][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 130.285470][ T9] usb 5-1: can't read configurations, error -71 [ 130.391591][ T913] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 130.609749][ T913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.632978][ T6801] netlink: 60 bytes leftover after parsing attributes in process `syz.4.175'. [ 130.800781][ T913] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.880544][ T913] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 130.911160][ T913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.964457][ T913] usb 6-1: config 0 descriptor?? [ 131.602843][ T24] usb 4-1: 0:2 : does not exist [ 131.634748][ T24] usb 4-1: USB disconnect, device number 10 [ 131.664673][ T10] usb 1-1: USB disconnect, device number 5 [ 131.670355][ T43] usb 6-1: USB disconnect, device number 4 [ 131.713919][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 131.713932][ T30] audit: type=1400 audit(1756761908.597:362): avc: denied { create } for pid=6811 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 132.111416][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.315672][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.322026][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.353434][ T30] audit: type=1400 audit(1756761909.217:363): avc: denied { ioctl } for pid=6820 comm="syz.0.182" path="socket:[11587]" dev="sockfs" ino=11587 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.540256][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 132.562515][ T30] audit: type=1400 audit(1756761909.447:364): avc: denied { listen } for pid=6825 comm="syz.5.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.695445][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 133.124283][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.136081][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 133.146309][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.158333][ T10] usb 4-1: config 0 descriptor?? [ 133.694278][ T10] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 133.749400][ T30] audit: type=1400 audit(1756761910.627:365): avc: denied { write } for pid=6846 comm="syz.5.189" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.878984][ C0] ================================================================== [ 133.887071][ C0] BUG: KASAN: use-after-free in mcp2221_raw_event+0x1070/0x10a0 [ 133.894715][ C0] Read of size 1 at addr ffff888054d23fff by task udevd/5221 [ 133.902082][ C0] [ 133.904404][ C0] CPU: 0 UID: 0 PID: 5221 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 133.904433][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.904446][ C0] Call Trace: [ 133.904452][ C0] [ 133.904460][ C0] dump_stack_lvl+0x116/0x1f0 [ 133.904487][ C0] print_report+0xcd/0x630 [ 133.904511][ C0] ? __virt_addr_valid+0x81/0x610 [ 133.904537][ C0] ? __phys_addr+0xe8/0x180 [ 133.904566][ C0] ? mcp2221_raw_event+0x1070/0x10a0 [ 133.904592][ C0] kasan_report+0xe0/0x110 [ 133.904615][ C0] ? mcp2221_raw_event+0x1070/0x10a0 [ 133.904645][ C0] mcp2221_raw_event+0x1070/0x10a0 [ 133.904676][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 133.904700][ C0] __hid_input_report.constprop.0+0x311/0x450 [ 133.904727][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 133.904755][ C0] hid_irq_in+0x35e/0x870 [ 133.904786][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 133.904819][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 133.904851][ C0] dummy_timer+0x1814/0x3a30 [ 133.904885][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 133.904906][ C0] ? rcu_is_watching+0x12/0xc0 [ 133.904931][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 133.904953][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 133.904972][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 133.905001][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 133.905024][ C0] ? read_tsc+0x9/0x20 [ 133.905055][ C0] hrtimer_run_softirq+0x17d/0x350 [ 133.905080][ C0] handle_softirqs+0x216/0x8e0 [ 133.905108][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 133.905136][ C0] __irq_exit_rcu+0x109/0x170 [ 133.905161][ C0] irq_exit_rcu+0x9/0x30 [ 133.905185][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 133.905208][ C0] [ 133.905215][ C0] [ 133.905222][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 133.905245][ C0] RIP: 0010:lock_release+0x183/0x2f0 [ 133.905277][ C0] Code: 0f c1 05 f8 fd 3e 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 0d bc 3e 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 133.905297][ C0] RSP: 0018:ffffc90003217860 EFLAGS: 00000206 [ 133.905315][ C0] RAX: 128a1889f02ba000 RBX: ffffffff8e5c1260 RCX: ffffc9000321786c [ 133.905329][ C0] RDX: 0000000000000000 RSI: ffffffff8de2b530 RDI: ffffffff8c162a00 [ 133.905343][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 133.905354][ C0] R10: 0000000000000000 R11: 00000000000061ee R12: ffffffff816ae8a4 [ 133.905367][ C0] R13: 0000000000000202 R14: ffff8880794c4880 R15: 0000000000000001 [ 133.905382][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 133.905413][ C0] unwind_next_frame+0x3f9/0x20a0 [ 133.905435][ C0] ? arch_stack_walk+0x73/0x100 [ 133.905461][ C0] __unwind_start+0x45f/0x7f0 [ 133.905484][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 133.905513][ C0] arch_stack_walk+0x73/0x100 [ 133.905539][ C0] ? stack_trace_save+0x8e/0xc0 [ 133.905568][ C0] stack_trace_save+0x8e/0xc0 [ 133.905595][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 133.905623][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 133.905655][ C0] kasan_save_stack+0x33/0x60 [ 133.905694][ C0] kasan_save_track+0x14/0x30 [ 133.905720][ C0] kasan_save_free_info+0x3b/0x60 [ 133.905748][ C0] __kasan_slab_free+0x60/0x70 [ 133.905771][ C0] kmem_cache_free+0x2d1/0x4d0 [ 133.905790][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 133.905815][ C0] ? putname+0x154/0x1a0 [ 133.905843][ C0] putname+0x154/0x1a0 [ 133.905868][ C0] vfs_fstatat+0x85/0xf0 [ 133.905897][ C0] __do_sys_newfstatat+0x97/0x120 [ 133.905925][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 133.905962][ C0] ? xfd_validate_state+0x61/0x180 [ 133.905998][ C0] do_syscall_64+0xcd/0x4c0 [ 133.906022][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.906043][ C0] RIP: 0033:0x7f9bfcb11b0a [ 133.906059][ C0] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 133.906079][ C0] RSP: 002b:00007ffdc6775958 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 133.906099][ C0] RAX: ffffffffffffffda RBX: 0000562c64c4e430 RCX: 00007f9bfcb11b0a [ 133.906114][ C0] RDX: 00007ffdc6775960 RSI: 0000562c64c3cee9 RDI: 00000000ffffff9c [ 133.906128][ C0] RBP: 0000562c873d4668 R08: 00063478c1c69200 R09: 00007f9bfd3d5000 [ 133.906142][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.906155][ C0] R13: 00007ffdc6775960 R14: 0000000000000000 R15: 00063478c1c69200 [ 133.906175][ C0] [ 133.906182][ C0] [ 133.929276][ T30] audit: type=1400 audit(1756761910.757:366): avc: denied { create } for pid=6858 comm="syz.5.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 133.931132][ C0] The buggy address belongs to the physical page: [ 133.931143][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54d23 [ 133.931163][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.931189][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 133.931208][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 133.931218][ C0] page dumped because: kasan: bad access detected [ 133.931227][ C0] page_owner tracks the page as freed [ 133.931233][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5859, tgid 5859 (udevd), ts 71485512442, free_ts 120472959539 [ 133.931268][ C0] post_alloc_hook+0x1c0/0x230 [ 134.444269][ C0] get_page_from_freelist+0x132b/0x38e0 [ 134.449807][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 134.455698][ C0] alloc_pages_mpol+0x1fb/0x550 [ 134.460538][ C0] new_slab+0x247/0x330 [ 134.464687][ C0] ___slab_alloc+0xcf2/0x1740 [ 134.469359][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 134.474717][ C0] kmem_cache_alloc_node_noprof+0xf5/0x3b0 [ 134.480520][ C0] kmalloc_reserve+0x18b/0x2c0 [ 134.485268][ C0] __alloc_skb+0x166/0x380 [ 134.489662][ C0] netlink_alloc_large_skb+0x69/0x130 [ 134.495020][ C0] netlink_sendmsg+0x6a1/0xdd0 [ 134.499763][ C0] ____sys_sendmsg+0xa98/0xc70 [ 134.504508][ C0] ___sys_sendmsg+0x134/0x1d0 [ 134.509161][ C0] __sys_sendmsg+0x16d/0x220 [ 134.513733][ C0] do_syscall_64+0xcd/0x4c0 [ 134.518216][ C0] page last free pid 6627 tgid 6625 stack trace: [ 134.524517][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 134.529705][ C0] qlist_free_all+0x4d/0x120 [ 134.534269][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 134.539705][ C0] __kasan_slab_alloc+0x69/0x90 [ 134.544532][ C0] __kmalloc_cache_node_noprof+0x217/0x420 [ 134.550325][ C0] sched_setaffinity+0x265/0x400 [ 134.555243][ C0] __x64_sys_sched_setaffinity+0x116/0x140 [ 134.561030][ C0] do_syscall_64+0xcd/0x4c0 [ 134.565511][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.571382][ C0] [ 134.573680][ C0] Memory state around the buggy address: [ 134.579283][ C0] ffff888054d23e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 134.587320][ C0] ffff888054d23f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 134.595359][ C0] >ffff888054d23f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 134.603391][ C0] ^ [ 134.611341][ C0] ffff888054d24000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 134.619376][ C0] ffff888054d24080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 134.627412][ C0] ================================================================== [ 134.635446][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 134.642617][ C0] CPU: 0 UID: 0 PID: 5221 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 134.651444][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.661474][ C0] Call Trace: [ 134.664729][ C0] [ 134.667551][ C0] dump_stack_lvl+0x3d/0x1f0 [ 134.672125][ C0] vpanic+0x6e8/0x7a0 [ 134.676095][ C0] ? __pfx_vpanic+0x10/0x10 [ 134.680583][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 134.685593][ C0] ? mcp2221_raw_event+0x1070/0x10a0 [ 134.690862][ C0] panic+0xca/0xd0 [ 134.694570][ C0] ? __pfx_panic+0x10/0x10 [ 134.698972][ C0] ? end_report+0x4c/0x170 [ 134.703368][ C0] ? rcu_is_watching+0x12/0xc0 [ 134.708116][ C0] ? lock_release+0x201/0x2f0 [ 134.712780][ C0] check_panic_on_warn+0xab/0xb0 [ 134.717699][ C0] end_report+0x107/0x170 [ 134.722012][ C0] kasan_report+0xee/0x110 [ 134.726408][ C0] ? mcp2221_raw_event+0x1070/0x10a0 [ 134.731680][ C0] mcp2221_raw_event+0x1070/0x10a0 [ 134.736782][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 134.742567][ C0] __hid_input_report.constprop.0+0x311/0x450 [ 134.748615][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 134.754060][ C0] hid_irq_in+0x35e/0x870 [ 134.758375][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 134.763734][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 134.768919][ C0] dummy_timer+0x1814/0x3a30 [ 134.773504][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 134.778421][ C0] ? rcu_is_watching+0x12/0xc0 [ 134.783170][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 134.788955][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 134.793870][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 134.799052][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 134.804754][ C0] ? read_tsc+0x9/0x20 [ 134.808809][ C0] hrtimer_run_softirq+0x17d/0x350 [ 134.813902][ C0] handle_softirqs+0x216/0x8e0 [ 134.818652][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 134.823925][ C0] __irq_exit_rcu+0x109/0x170 [ 134.828583][ C0] irq_exit_rcu+0x9/0x30 [ 134.832808][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 134.838419][ C0] [ 134.841327][ C0] [ 134.844237][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 134.850195][ C0] RIP: 0010:lock_release+0x183/0x2f0 [ 134.855466][ C0] Code: 0f c1 05 f8 fd 3e 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 0d bc 3e 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 134.875050][ C0] RSP: 0018:ffffc90003217860 EFLAGS: 00000206 [ 134.881098][ C0] RAX: 128a1889f02ba000 RBX: ffffffff8e5c1260 RCX: ffffc9000321786c [ 134.889046][ C0] RDX: 0000000000000000 RSI: ffffffff8de2b530 RDI: ffffffff8c162a00 [ 134.896995][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 134.904943][ C0] R10: 0000000000000000 R11: 00000000000061ee R12: ffffffff816ae8a4 [ 134.912891][ C0] R13: 0000000000000202 R14: ffff8880794c4880 R15: 0000000000000001 [ 134.920841][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 134.926026][ C0] unwind_next_frame+0x3f9/0x20a0 [ 134.931030][ C0] ? arch_stack_walk+0x73/0x100 [ 134.935861][ C0] __unwind_start+0x45f/0x7f0 [ 134.940521][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 134.946658][ C0] arch_stack_walk+0x73/0x100 [ 134.951319][ C0] ? stack_trace_save+0x8e/0xc0 [ 134.956153][ C0] stack_trace_save+0x8e/0xc0 [ 134.960816][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 134.966174][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 134.971098][ C0] kasan_save_stack+0x33/0x60 [ 134.975767][ C0] kasan_save_track+0x14/0x30 [ 134.980426][ C0] kasan_save_free_info+0x3b/0x60 [ 134.985438][ C0] __kasan_slab_free+0x60/0x70 [ 134.990186][ C0] kmem_cache_free+0x2d1/0x4d0 [ 134.994930][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 134.999674][ C0] ? putname+0x154/0x1a0 [ 135.003905][ C0] putname+0x154/0x1a0 [ 135.007958][ C0] vfs_fstatat+0x85/0xf0 [ 135.012184][ C0] __do_sys_newfstatat+0x97/0x120 [ 135.017193][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 135.022814][ C0] ? xfd_validate_state+0x61/0x180 [ 135.027915][ C0] do_syscall_64+0xcd/0x4c0 [ 135.032404][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.038278][ C0] RIP: 0033:0x7f9bfcb11b0a [ 135.042678][ C0] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 135.062269][ C0] RSP: 002b:00007ffdc6775958 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 135.070660][ C0] RAX: ffffffffffffffda RBX: 0000562c64c4e430 RCX: 00007f9bfcb11b0a [ 135.078613][ C0] RDX: 00007ffdc6775960 RSI: 0000562c64c3cee9 RDI: 00000000ffffff9c [ 135.086560][ C0] RBP: 0000562c873d4668 R08: 00063478c1c69200 R09: 00007f9bfd3d5000 [ 135.094511][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.102459][ C0] R13: 00007ffdc6775960 R14: 0000000000000000 R15: 00063478c1c69200 [ 135.110417][ C0] [ 135.113620][ C0] Kernel Offset: disabled [ 135.117919][ C0] Rebooting in 86400 seconds..