last executing test programs: 18m19.218245005s ago: executing program 0 (id=2099): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x9, "4da2d29760c3acf5fa5c957efaf0ef2d490ab74a9551a8745ac5247677baec15", 0x1}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x6, 'batadv_slave_1\x00', {0x7}, 0x3}) r1 = syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_bridge\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000100)={0x4, 0x5, 0x1, 0x3, 'syz1\x00', 0x1}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000180)={0x3, 0x5}, 0x0) recvmmsg(r1, &(0x7f0000003300)=[{{&(0x7f00000001c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1, &(0x7f0000000340)=""/152, 0x98}, 0x5}, {{&(0x7f0000000400)=@sco={0x1f, @none}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/194, 0xc2}], 0x2, &(0x7f00000015c0)=""/200, 0xc8}, 0x746}, {{&(0x7f00000016c0)=@phonet, 0x80, &(0x7f0000002740)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1, &(0x7f0000002780)=""/128, 0x80}, 0xfffffdfa}, {{&(0x7f0000002800)=@qipcrtr, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/212, 0xd4}], 0x1, &(0x7f00000029c0)=""/133, 0x85}, 0xf0}, {{&(0x7f0000002a80)=@x25, 0x80, &(0x7f0000003180)=[{&(0x7f0000002b00)=""/188, 0xbc}, {&(0x7f0000002bc0)=""/251, 0xfb}, {&(0x7f0000002cc0)=""/184, 0xb8}, {&(0x7f0000002d80)=""/247, 0xf7}, {&(0x7f0000002e80)=""/113, 0x71}, {&(0x7f0000002f00)=""/98, 0x62}, {&(0x7f0000002f80)=""/231, 0xe7}, {&(0x7f0000003080)=""/248, 0xf8}], 0x8, &(0x7f0000003200)=""/235, 0xeb}, 0x800}], 0x5, 0x10000, &(0x7f0000003440)={0x0, 0x3938700}) r3 = dup(r2) r4 = creat(&(0x7f0000003480)='./file0\x00', 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000034c0)=0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000003500)={'\x00', 0x68a2, 0x2, 0x0, 0x6, 0x2, r5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000003580)={'vxcan0\x00'}) r6 = accept4$tipc(r2, &(0x7f00000035c0), &(0x7f0000003600)=0x10, 0x400) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000003640)={0x3, 0x1}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000036c0), 0x8a401, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000003700)=0x52f5c634) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003740), 0x2, 0x0) close(r8) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r9, &(0x7f0000003780)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000037c0)={0x3ff, 0x0, 0x8, 0x2d, 0x0}, &(0x7f0000003800)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000003840)={r10, 0x20, "d52e7c60fdc7f6bf2c16a46f90bfa3aa6bcff152b34f229417d4302a612092f1"}, &(0x7f0000003880)=0x28) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003900), r4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x34, r11, 0x300, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000003bc0)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x8000003}, 0xc, &(0x7f0000003b80)={&(0x7f0000003a40)={0x134, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x91}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x93b8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff7}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7d4f}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000010}, 0x5) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000003c00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) 18m19.025211037s ago: executing program 0 (id=2101): ioprio_set$pid(0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x1000000, 0xd) r1 = socket(0x29, 0x5, 0xffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/2274], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) 18m18.921331999s ago: executing program 0 (id=2102): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x130, 0x26010000, 0x170, 0x130, 0x260, 0x220, 0x220, 0x260, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x170, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00], 0x4e24, 0x4e22, 0x4e22, 0x4e22, 0xbe, 0x1, 0x2, 0x4, 0x6}}}, {{@ipv6={@mcast2, @mcast1, [0x7000000], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, 0x0, 0x0) r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) pwritev(r7, &(0x7f00000000c0), 0x0, 0x72, 0x0) sendmmsg$sock(r0, &(0x7f0000000940)=[{{&(0x7f0000000540)=@llc={0x1a, 0x102, 0x9, 0xff, 0x7, 0x2, @local}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000004c0)="001550d6623b93a43cd79e1c67d35edb54c3d76bf4a3391314", 0x19}, {&(0x7f00000005c0)="ab3e5dc25bc020999c7b1e9e0e531828ca8e91127bd87ee795252f2249fdc47d961d52588f0488eb055d7d8774ab7a3a1c75395f23794ae17877620e13e7e93d026304e13cbfa2a3649e75105d048fa9488356ac7ef24ed969ddbfcc069cd73bd9d0d6d0a4578e2fd5843fef3dd5bb2620171073cff0529fd4743a91ba0d5adf1e86db5fc2ea59bf75bc098a28d386ea11", 0x91}, {&(0x7f0000000680)="fddf94f60c4d42145fe6461eaa5d2f85448ff8acadd6873ba0dc2e99a198d889", 0x20}], 0x3}}, {{&(0x7f0000000700)=@pppoe={0x18, 0x0, {0x4, @local, 'pim6reg1\x00'}}, 0x80, &(0x7f0000000900)}}], 0x2, 0x20000000) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x0) io_setup(0x8, &(0x7f0000000080)) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 18m18.310858068s ago: executing program 0 (id=2104): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c8301020301090229000100000000090400000002020100052406"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x0, 0x1, 0x1}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_012={0x1, 0x1, 0x3, 'G'}]}}, 0x0}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f00000034c0)={{0x1, 0xffffffff, 0x1, 0x7fffffff, 0x6b9a2628, 0x2}, 0x24, [0x7fffffff, 0x9, 0x1768, 0x624e, 0xd6, 0x2, 0x10000, 0x40, 0x5, 0x2, 0x7, 0x6, 0x10000, 0xff7, 0x6, 0x0, 0x5, 0x2, 0x6, 0xfffffff8, 0x0, 0x1, 0x7, 0x0, 0x8dd8, 0x7fff, 0x4, 0x6, 0x71, 0x4, 0x6, 0x3ff, 0xffffffe5, 0x9, 0x6, 0x5, 0x3, 0x6, 0x8, 0x49c, 0x6083149, 0x9, 0x8, 0x6, 0x1, 0x4, 0x5, 0x5, 0xbc, 0x80000000, 0x7f, 0x6, 0x3, 0x1, 0x7, 0x4, 0x4, 0x3, 0x2, 0x4, 0x7, 0x9, 0x9, 0x400, 0x40, 0x93, 0xffff, 0xfffffffd, 0x0, 0x6, 0x0, 0x4, 0x9, 0xd, 0x7, 0x8, 0x2, 0x6, 0x2, 0x6, 0xffffffff, 0x3013, 0x3, 0xff, 0xfffffff8, 0x7, 0x6, 0x7, 0x100, 0x6, 0x9, 0x3, 0x0, 0x6, 0x40, 0x0, 0x3ff, 0x10000, 0x10, 0x3, 0xe588, 0x200, 0x83, 0x4, 0x1, 0x5, 0x5, 0x1, 0xfffffffd, 0x0, 0x2, 0x0, 0x4811, 0x5, 0x8, 0xf, 0x6, 0x8, 0x7, 0x80000000, 0x0, 0x4, 0x4, 0xb, 0xd6f6, 0x9, 0xa240, 0x7b3, 0x10001, 0xc3d, 0x1, 0x8, 0xe376, 0x170, 0x9, 0x4, 0xf, 0xd03, 0x88, 0x4, 0x5, 0x10, 0xeb, 0x2, 0xb, 0xa, 0xaa8a, 0xba95, 0x6, 0x5, 0x3, 0x8, 0xf8b6, 0x7f57, 0x8, 0x9, 0x401, 0xfffffff8, 0x800, 0x4, 0xa1fb, 0xf, 0x2, 0x0, 0x10001, 0x1, 0x3000000, 0x10001, 0x4, 0xb, 0x1, 0x1c000, 0x6, 0x8, 0x7fffffff, 0x76b, 0x11f, 0x8, 0x2, 0x4, 0xa6f, 0x8, 0xde, 0x54, 0xf8, 0x719f, 0x9, 0x2, 0x8, 0x8, 0xc0f, 0x3, 0x8, 0x5, 0x3, 0x0, 0x10002000, 0x9, 0x6, 0x92, 0xfffffffa, 0x7, 0xffffffff, 0xc7ef, 0x7, 0x7201, 0x6, 0xb6, 0x4, 0x3, 0x9, 0x7f, 0x1, 0x80, 0x2, 0xa, 0x2, 0x2a, 0x9, 0x4d417526, 0x81, 0x3ff, 0x8, 0xbc, 0x1400, 0x1, 0xfffffffe, 0x0, 0x1, 0x6, 0x3, 0x4, 0x6, 0x1, 0x9, 0x4, 0x6, 0x6, 0x2, 0x3, 0xfffffe01, 0x6b, 0x7ff, 0x0, 0x0, 0x4be5, 0x200000, 0x9, 0x0, 0xc, 0x9, 0x9, 0x2, 0x9, 0x7, 0x7, 0x401, 0x6, 0x3, 0x1b2, 0x800, 0xb5, 0x100, 0x8, 0x6, 0x10001, 0x4, 0x400, 0x3, 0x7, 0x9, 0x5, 0x8, 0x6c7, 0x9, 0x1, 0x5, 0x0, 0x7, 0x9759, 0x80, 0x4, 0x0, 0xe, 0x9, 0x7, 0x1, 0x0, 0x10, 0x4, 0x0, 0x5, 0xc, 0x1, 0x0, 0x2c, 0xfffff890, 0x80, 0xe1a, 0x80000001, 0x4, 0x0, 0x3ff, 0x5, 0x8, 0xf, 0x2, 0x81, 0x13, 0x9, 0x5, 0x5, 0x3, 0x3ff, 0x3, 0x8, 0x5, 0x7, 0x80000000, 0xd0a190, 0x9c5, 0x8, 0x1, 0x1ff, 0x1, 0x2, 0x2, 0x4, 0x2, 0x2, 0x3, 0x10, 0x4, 0x891, 0x2, 0x6, 0x4, 0x8001, 0x0, 0x0, 0xa27, 0xb36, 0x9, 0x3, 0x9, 0x9, 0x1, 0x0, 0x5, 0xe, 0x80000001, 0x10, 0x97, 0xffff3bcb, 0x8, 0x8, 0x10, 0x2, 0x80000001, 0x6, 0xe4b, 0x3, 0x8, 0x2, 0x8e, 0x9, 0x6, 0xfffffffe, 0xfffffffd, 0xbf, 0x2, 0x9, 0x1, 0x2, 0x100, 0x6, 0x9, 0x8, 0x6, 0x101, 0x4, 0x0, 0x500000, 0x100, 0x0, 0xfffffff8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4, 0xb39, 0x7, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0xbc4, 0x9, 0x5, 0xe6, 0x1, 0x6, 0x2, 0x4, 0x8, 0x8, 0x3, 0x60, 0xffffffff, 0x3, 0x56b, 0x7fff, 0x2, 0xde26, 0x1ff, 0x8, 0x7, 0x7, 0x9, 0x7fffffff, 0x2, 0x4460, 0x7, 0x0, 0xc1d, 0x5, 0xfffffff9, 0x200, 0x10001, 0x8, 0x5, 0x5, 0xb36, 0x0, 0x3e, 0x2, 0x7, 0xd, 0x706e, 0x9, 0x9, 0x7f, 0x2, 0x3, 0x2, 0x3, 0x8, 0x3ff, 0x3, 0xd, 0x3, 0x5, 0x7, 0x9, 0x1, 0x7, 0x11bd8ba0, 0x0, 0x80000000, 0x4, 0x3, 0x953, 0xfff, 0x5, 0x81, 0x8000, 0x10000, 0x10001, 0x9, 0x7, 0xc, 0x5, 0xfffffffe, 0xc, 0x8, 0x3, 0x10000, 0xdd, 0x0, 0x68, 0x76, 0x6, 0xf, 0xfffffffe, 0x2, 0x7, 0xa0, 0x7, 0x5, 0x347020af, 0x4, 0x80000001, 0xfffffff9, 0x7fff, 0x3, 0x43, 0x80, 0x1, 0x0, 0x3, 0x2d95, 0x4, 0xfffffffe, 0x3, 0xe097, 0x2, 0x3, 0x2, 0x7, 0xffffffff, 0xec7, 0x6, 0x1, 0x100, 0x9, 0xb, 0x9b81, 0xffffff29, 0x6, 0x4854, 0x4, 0x4, 0x8, 0x0, 0x7fffffff, 0x1, 0x4, 0x2, 0x7, 0x80000000, 0xa, 0x3, 0x2, 0x2, 0x9, 0x101, 0x9, 0x5, 0x2, 0x7, 0x7, 0x7, 0x9a1f, 0x9c9e, 0x5, 0x5, 0x9000000, 0x10000, 0x200, 0x9, 0xc7f1, 0x2, 0x8, 0x8, 0x298, 0x28, 0x72d, 0x9cd5, 0x2, 0x7, 0x9, 0xcf5a, 0x1, 0x0, 0x8000, 0x2, 0xb8, 0x2, 0xf, 0x500, 0xcdc4, 0x7, 0x6, 0x80, 0x81, 0x2, 0x0, 0x2, 0x1, 0x0, 0x7, 0x3, 0x0, 0x80000001, 0x9, 0x80, 0xba, 0x3, 0x9, 0x800, 0x1, 0x950b, 0x8, 0x3, 0x2, 0x1ff, 0xfffffffb, 0x0, 0xfff, 0x4, 0x6, 0x6, 0x6, 0x4, 0x5aac, 0x7, 0xa, 0x7fffffff, 0x649b, 0x1, 0xfaf4c82c, 0x3, 0x80, 0x8, 0x9, 0x8, 0x1, 0xfffffffc, 0x0, 0x970f, 0x4, 0x7, 0x6, 0xffff508f, 0xdee, 0x0, 0x9, 0x7626440e, 0x8d, 0x8, 0x5, 0x0, 0x3, 0x638d, 0x98618eb, 0x12eb, 0x1, 0x2, 0x30cc, 0x8, 0x1, 0x9, 0x5, 0x329, 0x1, 0x3, 0x4, 0xa, 0x4, 0x2, 0x1, 0x1, 0x401, 0x114f, 0x8, 0x6, 0x2, 0x3, 0xffffff80, 0x2b7, 0x208c5d32, 0xbc11, 0x5, 0x401, 0x8, 0x0, 0x2, 0x20, 0x7fff, 0x1, 0x9, 0x2, 0x2, 0xb, 0xf, 0x4, 0xd55, 0x6, 0x7, 0x1, 0x4, 0x0, 0x6, 0x4, 0x151, 0xfffffff8, 0x0, 0x80000001, 0x7f, 0xff, 0x8, 0xe0, 0x24b, 0x3, 0xdce, 0xa, 0xfff, 0x81, 0x3, 0xfffffff9, 0xffffffff, 0xe, 0x4895329a, 0x80, 0x8, 0x7, 0x4, 0x2, 0x2, 0x7fffffff, 0x3, 0x800, 0x2, 0x6, 0x6, 0x4d3, 0xc30, 0x7fffffff, 0x5, 0x1, 0x2, 0x5, 0x5, 0x5, 0x0, 0x3, 0x0, 0xc0, 0x8, 0x2, 0x7, 0x6, 0xb, 0x7b, 0x47, 0x81, 0xc3c60, 0xff, 0x4, 0x2, 0x8, 0x7, 0x1, 0x8, 0x2, 0x6, 0xfffffffc, 0xff, 0x0, 0x6, 0x7, 0x48, 0x0, 0x5, 0xa9, 0x9, 0x7, 0x8, 0x0, 0x7, 0xffffffff, 0x6, 0x1fc, 0xd, 0x9, 0x6, 0x800, 0x4, 0x3, 0x2, 0x7f, 0x0, 0x1, 0x1, 0x2, 0xfffffff7, 0x8f55, 0xffff0000, 0x3, 0x7fffffff, 0x3800, 0x6, 0xf8, 0x4, 0x3, 0x6, 0x10001, 0x9, 0x3, 0x4, 0x9, 0x401, 0x0, 0x4, 0x3, 0x4, 0x9, 0x7, 0x1eb, 0x4, 0x10, 0xe0, 0x1ff, 0x3, 0x34a, 0x0, 0x53, 0x4, 0x50000000, 0x6, 0x88, 0x3, 0xc989, 0x9, 0xe, 0x5, 0x5, 0x9, 0x4, 0xffffffff, 0x4, 0x10, 0x9, 0x0, 0x8001, 0xa, 0x6, 0x5, 0x1, 0x3, 0xfffffffe, 0x40, 0x2, 0x1, 0x0, 0x6, 0x6, 0x3, 0x4, 0x7, 0xfffffffc, 0x7, 0x6, 0x3, 0x7, 0xfffffff8, 0x7, 0x4, 0x3ff, 0x70f98423, 0x1, 0x0, 0x4, 0x3, 0xb, 0x7, 0xbb6, 0x7fffffff, 0xcdbc, 0x1, 0x401, 0x6, 0x24, 0x6, 0xf, 0x3, 0x7, 0x6, 0x0, 0x5, 0xa, 0xffffffff, 0x1, 0x5, 0x3, 0x8ad6, 0x8000, 0x7, 0x11432fc, 0x1, 0x1, 0x7, 0xbf, 0x3ff, 0x7, 0x6, 0x0, 0xd8, 0x14, 0x4, 0x3, 0x460, 0x9, 0x8, 0x9, 0x4, 0x635, 0x4, 0xfff, 0x4, 0x2e9, 0x5, 0x1, 0x81, 0x8, 0xa, 0x8, 0x3, 0x100000, 0x0, 0x40, 0x6, 0x9, 0x67, 0x4e55, 0x80000000, 0x10001, 0x1, 0x9, 0x3, 0x3, 0x9, 0x2400000, 0x7, 0xfd7, 0x4c6, 0x3, 0x7fff, 0x7, 0xe, 0x1e9, 0x5, 0x4078, 0xf1, 0x2, 0x3, 0x8, 0x2, 0x5, 0x7, 0x5, 0xea5, 0xfffffff1, 0x8, 0x3ff, 0x0, 0x8, 0x2, 0x4, 0x2, 0x6efe, 0x3, 0x3ff, 0x0, 0x2, 0x1000, 0xffffffc5, 0x1000, 0x9, 0x8, 0x8000, 0xff, 0x9, 0xc, 0x9, 0x5d, 0x5, 0x400, 0x2, 0xd854, 0xac, 0x200, 0x3, 0x3, 0x0, 0x4, 0x9, 0x5, 0x7, 0x5, 0x80000000, 0x5fe8, 0x289, 0x7, 0x0, 0x1, 0x6, 0x200, 0x8, 0x10, 0x9, 0x0, 0x628, 0x10001, 0x4, 0x9f, 0x7fff, 0x4, 0xfff, 0x9, 0x8, 0x800, 0x3, 0x644d90d3, 0x9, 0x0, 0xffffffff, 0x1, 0xfffffffa, 0x3, 0x4, 0x40, 0x7, 0x7, 0xffffd221, 0xffff, 0xb, 0x4]}) fchown(r2, r4, r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffd, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}}}}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, &(0x7f0000000180)={[{@size={'size', 0x3d, [0x34]}}]}) 18m15.759207575s ago: executing program 0 (id=2117): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@local}, @mark={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001100010403000000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c00028008"], 0xfffffffffffffe82}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500007001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 18m15.45460491s ago: executing program 0 (id=2119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xf4, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050002000000000000f5ffffff0a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) 18m15.074125288s ago: executing program 32 (id=2119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xf4, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050002000000000000f5ffffff0a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) 17m15.522935365s ago: executing program 5 (id=2353): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000001c0)={0x40, 0x8, 0x4, "90b7a71b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x15, 0x0, 0x2}, {0x81, 0xfc, 0x7f}, {0x2}, {0x6, 0x0, 0x0, 0xf00}]}) 17m11.335256694s ago: executing program 5 (id=2366): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=ANY=[], 0x150}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000004000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x20000000) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r4, r4, 0x0, 0x40008) 17m10.272881206s ago: executing program 5 (id=2370): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[], 0x20) ppoll(&(0x7f0000000540), 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 17m9.181374883s ago: executing program 5 (id=2376): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_clone(0x1000, &(0x7f00000002c0)="3838ccf72928969e5a84bd404f31bc5d321a8d1ef68fe04dd63a3a2aa3ae895f61c9814c1e69bfcb34a2e51cba5ee6b22961fdb2e64103c85ebb24812c798333601ec294b72e7e23ac5fdba83c241224878aad611f68f42bbb0c36478848b0e3b7d37a0375bb6e10f11ea689947fdfa62ad845a8fbd02165b8a7029f233c7780f519ae9671cc6b0a7055cefe6250ef0dae02f653a9ee7ba9fbc3138d1630e8ac9af3591577d7416d322a15d0fad86c382038fef874364acc18bc426e6b838723b1b4656e9041f84a7f24fcb4fb9dca03e95fc736799601", 0xd7, &(0x7f00000000c0), &(0x7f00000003c0), &(0x7f0000000480)="5e852eb071bc94e10b591c1528dbec2d81596b92ddaf9f8d510100155c694fe41a0af03b3271b4a06685659b018564fd8cf64b74445a74f849cf6c682f4cd1dd8199ce2a1457b4214a101712226a94cb55e97954bda64789dc7584a5db0ac97843df1146e3f20e960b25ab40e6573ae99c5cc3cb9f9c26b4") sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x10) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x10) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x40, 0xa, 0xc, {0xc, 0x6, "0a5d9e6d6c149bbe536b"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x40, 0xa, 0xc, {0xc, 0x6, "0a5d9e6d6c149bbe536b"}}, 0x0, 0x0, 0x0}, 0x0) 17m6.775084458s ago: executing program 5 (id=2385): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}, 0xff03}], 0x2, 0x8000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'syz_tun\x00'}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b270c000000000001090224000100006006090400100503010000092100a0b901220500090581030000"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000004c0)='./file0\x00', 0x1) pwritev2(r9, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0x1}], 0x1, 0x8, 0x7, 0x4) 17m4.538582767s ago: executing program 5 (id=2393): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, 0xfffffffffffffffe) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8", @typed={0x8, 0xec, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x24008094) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "fe9e2572"}]}}, 0x0}, 0x0) r3 = syz_usb_connect$cdc_ecm(0x6, 0x93, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x1, 0x1, 0x5, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0xff39}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x950d, 0x2, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x25c}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x5, 0xe5, 0x5, 0x1, 0xd}, @mdlm={0x15}, @obex={0x5}, @acm={0x4, 0x24, 0x2, 0xd}, @mbim={0xc, 0x24, 0x1b, 0x6a3f, 0x3, 0xc, 0x6, 0x2, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x420, 0xd7, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x7a, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x1, 0x3, 0x8, 0x40, 0x4}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x14, 0x3, 0x8}]}, 0x9, [{0x35, &(0x7f0000000180)=@string={0x35, 0x3, "6047a86d0cc57c5e7153f12a8a850a0dbc1a882ba88781a1331be3cc0d4f409e9291171a13ba35ce823753cc7b180773dc80b8"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40b}}, {0xcb, &(0x7f0000000300)=@string={0xcb, 0x3, "fb4d39147bd460700812e12f00bb8dbd2195ab450e5decf23b7ee857082ed34c013774c6837b1c92f14522b0e1b2d9b57c5fcc6f1a000c7fa36cb3bf1bb7de41e3ea112f4fd4da150eefb86a92e9300ca280583d15428f2208435425102650f99b927bcd0cb44f17e140a1c7d0711788acc2db2abd1fbe7d42c7bf3ba867710bde3a98adb81c033db945764aa5f2917f2a382aae2789f469c3df78e6e5e6f6e3184c3634c92df20926acb14ceaf3e5f85e8f3dd95d680d69567c6e5ca256d5499e3b6a3af4edd1901b"}}, {0x4d, &(0x7f0000000400)=@string={0x4d, 0x3, "9de4743550e17879434d8a7d90cdaabe901d9d967a88d0e51795eb211d138186975cdf822015672ff2e60425d3e4271371093c29b5282d6781b6f5db4c43be47b6bbd2ea292a60fd69a6fb"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40a}}, {0xa3, &(0x7f0000000500)=@string={0xa3, 0x3, "48a26fcc39f82f69cb9effa1cf5dbe43093c69ee968dd2eb779a4f1385fa27e9f266aa6222bc18113c57dd5ba8213734e62fb485f5ea4c601874a9bf028a696e4408f3acea202da45634794d82dd823a308d828481da3e38a0893440272f888567348ad53f87473c0f1363ada8f07cae02d04dbd613256fa561b59214110856483aa766ec24f3e98f781d01012a14b293bf09800f7ab67b9637f10fd98e8d80cc4"}}, {0x7d, &(0x7f00000005c0)=@string={0x7d, 0x3, "795fe8b23da343028d6e736f602d868b9b52903da234e72b740a2685c8475d3840e9c932da2b3ee5cce4292c0dd7c88cd6583e82ad1ab4fa8ef4c5aa9280d02c4cce2f8fdb712750c818aadefb3ab7916bff7516037a5836efdc5bdaf9edc6cb72239a1c7589b9d5e984278e64853bda8838cefc5cb619b58a938c"}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000980)={0x14, &(0x7f0000000700)={0x0, 0x2, 0x5a, {0x5a, 0x0, "bd4d01fbccb3f7d08f37a5177024f698a5ee4295b4f6a5d91e3a0a540511e755617f86db04f24f00f0576cee1306599ecc22d3a535628d17ee1ce901af423095050ba03e955b3f267ef3fd75ddf7c457c310bf0627f41b86"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x1c, &(0x7f00000009c0)={0x20, 0xd, 0xb1, "758e9293134cdd1e569b401d303ac8c71c7e410f41eb285507968a0776741ed1e0d0f491783cf0baaa71b028a5a3d0318ee30f67db5e9552fdfe8f49a7c0431e26e0ac4b266172aef9d63252b9881476c93d37e03d588d58f6022e010fef2ccfa3a3782d16db6144b5e93af96f1bd96e08e3e94b535cd1af3329e6588aba718a024138b2ef118aba001a13af8199bd602095ad7f7ccb81e47d7991eb14745d7d209e82f1ad7b95b98d6017999a45ba1469"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io(r1, &(0x7f0000000c00)={0x2c, &(0x7f00000007c0)={0x40, 0x30, 0x50, {0x50, 0xc, "d72b23fbb06dc3faad6c7b7e5c4fa596152caa867796b5f0745434fbb0b99d3cc8c6981c7939d8ebc176cbc30ce096295f588628c3a1b2150600bd07764f681bb0db6fca15dcb6fc650ef0e4573f"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}, &(0x7f0000000a80)={0x0, 0xf, 0x118, {0x5, 0xf, 0x118, 0x6, [@generic={0xec, 0x10, 0x3, "1d6f1bb781a905b8690f82b61d617c5b3803bed735c6cb53b0347b2f2cbd47ded5406565bbb1e3e438688bb756e11c701969cfb724496780fab62bff45861e337ed0dbd5b8f22db5c3fb5b53351b63f1d4dd6fe42c28ea770e6f159fa242c833775a75aa280b12bb41c12bacaf7af418fe43ad636b5b51502cb0b98980b61cd297bf54c968968108fba0d1dd737563663c56dbb2f9947d0c26480c0258765509afc6df5e0fa46b6b7b19c84e16fe05a5837aa5f9e971fdac3a76f27dfcb32373bfca8daed299c80c4bac954e726e0505beae231e2718a3553dcb3ac266232ffaf39d83fe24a8fc68d7"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0xd, 0xf000}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "de9a1be874c32f3d0d98d04c3c841048"}, @ptm_cap={0x3}]}}, &(0x7f0000000880)={0x20, 0x29, 0xf, {0xf, 0x29, 0xac, 0x7, 0x7, 0xff, "ace75958", "41684def"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x65, 0x4, 0x7, 0x5, 0x4, 0xfaed, 0xaaf}}}, &(0x7f0000001080)={0x84, &(0x7f0000000c40)={0x20, 0x17, 0x3f, "25dc90d07a43f8979e65cb6c2a9bb89d73cc0a79a347f27eafc1213c7a86a31215266474f1f756f6c5a91517c98768a1b0d7f3218a944359effab8dfc8f93a"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000d80)={0x20, 0x0, 0x8, {0x4, 0x2, [0xf00]}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000e00)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000e40)={0x40, 0xb, 0x2, "1f7e"}, &(0x7f0000000e80)={0x40, 0xf, 0x2, 0xf4}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, &(0x7f0000000f40)={0x40, 0x19, 0x2, ';['}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x3}}) 17m3.629746352s ago: executing program 33 (id=2393): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, 0xfffffffffffffffe) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8", @typed={0x8, 0xec, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x24008094) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "fe9e2572"}]}}, 0x0}, 0x0) r3 = syz_usb_connect$cdc_ecm(0x6, 0x93, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x1, 0x1, 0x5, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0xff39}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x950d, 0x2, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x25c}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x5, 0xe5, 0x5, 0x1, 0xd}, @mdlm={0x15}, @obex={0x5}, @acm={0x4, 0x24, 0x2, 0xd}, @mbim={0xc, 0x24, 0x1b, 0x6a3f, 0x3, 0xc, 0x6, 0x2, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x420, 0xd7, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x7a, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x1, 0x3, 0x8, 0x40, 0x4}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x14, 0x3, 0x8}]}, 0x9, [{0x35, &(0x7f0000000180)=@string={0x35, 0x3, "6047a86d0cc57c5e7153f12a8a850a0dbc1a882ba88781a1331be3cc0d4f409e9291171a13ba35ce823753cc7b180773dc80b8"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40b}}, {0xcb, &(0x7f0000000300)=@string={0xcb, 0x3, "fb4d39147bd460700812e12f00bb8dbd2195ab450e5decf23b7ee857082ed34c013774c6837b1c92f14522b0e1b2d9b57c5fcc6f1a000c7fa36cb3bf1bb7de41e3ea112f4fd4da150eefb86a92e9300ca280583d15428f2208435425102650f99b927bcd0cb44f17e140a1c7d0711788acc2db2abd1fbe7d42c7bf3ba867710bde3a98adb81c033db945764aa5f2917f2a382aae2789f469c3df78e6e5e6f6e3184c3634c92df20926acb14ceaf3e5f85e8f3dd95d680d69567c6e5ca256d5499e3b6a3af4edd1901b"}}, {0x4d, &(0x7f0000000400)=@string={0x4d, 0x3, "9de4743550e17879434d8a7d90cdaabe901d9d967a88d0e51795eb211d138186975cdf822015672ff2e60425d3e4271371093c29b5282d6781b6f5db4c43be47b6bbd2ea292a60fd69a6fb"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40a}}, {0xa3, &(0x7f0000000500)=@string={0xa3, 0x3, "48a26fcc39f82f69cb9effa1cf5dbe43093c69ee968dd2eb779a4f1385fa27e9f266aa6222bc18113c57dd5ba8213734e62fb485f5ea4c601874a9bf028a696e4408f3acea202da45634794d82dd823a308d828481da3e38a0893440272f888567348ad53f87473c0f1363ada8f07cae02d04dbd613256fa561b59214110856483aa766ec24f3e98f781d01012a14b293bf09800f7ab67b9637f10fd98e8d80cc4"}}, {0x7d, &(0x7f00000005c0)=@string={0x7d, 0x3, "795fe8b23da343028d6e736f602d868b9b52903da234e72b740a2685c8475d3840e9c932da2b3ee5cce4292c0dd7c88cd6583e82ad1ab4fa8ef4c5aa9280d02c4cce2f8fdb712750c818aadefb3ab7916bff7516037a5836efdc5bdaf9edc6cb72239a1c7589b9d5e984278e64853bda8838cefc5cb619b58a938c"}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000980)={0x14, &(0x7f0000000700)={0x0, 0x2, 0x5a, {0x5a, 0x0, "bd4d01fbccb3f7d08f37a5177024f698a5ee4295b4f6a5d91e3a0a540511e755617f86db04f24f00f0576cee1306599ecc22d3a535628d17ee1ce901af423095050ba03e955b3f267ef3fd75ddf7c457c310bf0627f41b86"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x1c, &(0x7f00000009c0)={0x20, 0xd, 0xb1, "758e9293134cdd1e569b401d303ac8c71c7e410f41eb285507968a0776741ed1e0d0f491783cf0baaa71b028a5a3d0318ee30f67db5e9552fdfe8f49a7c0431e26e0ac4b266172aef9d63252b9881476c93d37e03d588d58f6022e010fef2ccfa3a3782d16db6144b5e93af96f1bd96e08e3e94b535cd1af3329e6588aba718a024138b2ef118aba001a13af8199bd602095ad7f7ccb81e47d7991eb14745d7d209e82f1ad7b95b98d6017999a45ba1469"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io(r1, &(0x7f0000000c00)={0x2c, &(0x7f00000007c0)={0x40, 0x30, 0x50, {0x50, 0xc, "d72b23fbb06dc3faad6c7b7e5c4fa596152caa867796b5f0745434fbb0b99d3cc8c6981c7939d8ebc176cbc30ce096295f588628c3a1b2150600bd07764f681bb0db6fca15dcb6fc650ef0e4573f"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}, &(0x7f0000000a80)={0x0, 0xf, 0x118, {0x5, 0xf, 0x118, 0x6, [@generic={0xec, 0x10, 0x3, "1d6f1bb781a905b8690f82b61d617c5b3803bed735c6cb53b0347b2f2cbd47ded5406565bbb1e3e438688bb756e11c701969cfb724496780fab62bff45861e337ed0dbd5b8f22db5c3fb5b53351b63f1d4dd6fe42c28ea770e6f159fa242c833775a75aa280b12bb41c12bacaf7af418fe43ad636b5b51502cb0b98980b61cd297bf54c968968108fba0d1dd737563663c56dbb2f9947d0c26480c0258765509afc6df5e0fa46b6b7b19c84e16fe05a5837aa5f9e971fdac3a76f27dfcb32373bfca8daed299c80c4bac954e726e0505beae231e2718a3553dcb3ac266232ffaf39d83fe24a8fc68d7"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0xd, 0xf000}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "de9a1be874c32f3d0d98d04c3c841048"}, @ptm_cap={0x3}]}}, &(0x7f0000000880)={0x20, 0x29, 0xf, {0xf, 0x29, 0xac, 0x7, 0x7, 0xff, "ace75958", "41684def"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x65, 0x4, 0x7, 0x5, 0x4, 0xfaed, 0xaaf}}}, &(0x7f0000001080)={0x84, &(0x7f0000000c40)={0x20, 0x17, 0x3f, "25dc90d07a43f8979e65cb6c2a9bb89d73cc0a79a347f27eafc1213c7a86a31215266474f1f756f6c5a91517c98768a1b0d7f3218a944359effab8dfc8f93a"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000d80)={0x20, 0x0, 0x8, {0x4, 0x2, [0xf00]}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000e00)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000e40)={0x40, 0xb, 0x2, "1f7e"}, &(0x7f0000000e80)={0x40, 0xf, 0x2, 0xf4}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, &(0x7f0000000f40)={0x40, 0x19, 0x2, ';['}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x3}}) 29.666594513s ago: executing program 4 (id=6183): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000b00)=@abs={0x1, 0x0, 0x4}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r6, &(0x7f0000000d00)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0', [], 0xa, "3d8dea517179fff229782bca16ddb90491d125c89b433239ca24928f12d127fa75ef431535ba433407862cd7a9e2e33201bb0ad12cc4821bde02512717580baa8bd43746c1c3ed170fa0fabc4e0720a7ba1565"}, 0x1055) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) unshare(0x2040600) r7 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$nbd(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="01"], 0x40) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r9, &(0x7f0000000300)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000240)=""/91, 0x5b}, {&(0x7f0000000780)=""/237, 0xed}, {&(0x7f0000000880)=""/193, 0xc1}, {&(0x7f0000000980)=""/155, 0x9b}, {&(0x7f0000000a40)=""/152, 0x98}, {&(0x7f0000000c00)=""/241, 0xf1}], 0x8) 21.325221376s ago: executing program 1 (id=6205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r3, &(0x7f00000000c0)=""/177, 0xb1) read(r3, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='personality\x00') readv(r6, &(0x7f0000000140)=[{&(0x7f0000000380)=""/57, 0x39}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r8, &(0x7f0000001100)={0xa, 0x0, 0xa, @dev={0xfe, 0x80, '\x00', 0x41}, 0x7, 0x1}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x6c, r12, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x4c, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_a, @initial, {0x4, 0x9}, @value=@ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x2d, 0x1a, {0x800, 0x1, 0x4, 0x0, {0x7ff, 0x7f, 0x0, 0x4, 0x0, 0x1, 0x1, 0x2}, 0x300, 0x9, 0xd1}}, @val={0x72, 0x6}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x24008080) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000080)=0x2000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="a2fdffff", @ANYRES16=r1, @ANYBLOB="2000050700000000000000839dccda80000300", @ANYRES32=r7, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) 20.243691755s ago: executing program 1 (id=6214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x2000000000000320, &(0x7f0000001000)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getpgid(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$netrom(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000), 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x600800, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$KDSIGACCEPT(r3, 0x5607, 0x1) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) semget(0x3, 0x2, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'pim6reg1\x00'}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000001f01410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 17.091015639s ago: executing program 1 (id=6224): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[], 0x20) ppoll(&(0x7f0000000540), 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 14.618191001s ago: executing program 1 (id=6233): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek(r0, 0x289e0cb5, 0x0) 11.04211461s ago: executing program 3 (id=6248): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102376, 0x18fe8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400f5000000000000020000002800048024000180080001006c6f6700180002800900024073797a320000000008000340000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x7c}}, 0x0) close(r4) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x48, 0x9, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xbffff038}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0x9ffc) accept4(r0, &(0x7f0000000180)=@nl=@proc, 0x0, 0x80000) sendmmsg$inet(r5, &(0x7f0000001300), 0x0, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socket(0x10, 0xa1c440212d0ed55f, 0x0) 11.016359382s ago: executing program 1 (id=6249): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="20120100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000003580)) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="40183e1b75ed385c88fbef75ff7db12b85a4bd97531ff4c2915f72c4b951e04d08000000000000006e9afd3e25af65924f0ae7db954dc915d1022d3ea4447cd84a1bb837d290f63c094e4c9dc67a881bf45b417baf04edec0d855cee64708724"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="40000300000039ed9ece971e31c46891286e05df8dafae0edad2696c523463f0630d5cba501c1f6ea80a416bf3d2d8cc15e74c0c03c7ceb5a7d85dafbec9e4486c7da2cfe0691c8f9c5ba427a56cd5c9827cd1cfa9fc1d84ecd13e4308d6d267a505a61af6c06abe63b52785a6bfe70562b86e21608c5cbd6c123a0b14a663a45e0afdbdea547911d608de1e756f0aa12d919b222107042fe144"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000000c0)=ANY=[@ANYBLOB="78200150895921e45d5e1c0000"], 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x2a, &(0x7f00000001c0), 0xc7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="4018a8"], 0x0, 0x0, 0x0, 0x0, 0x0}) 10.55895655s ago: executing program 3 (id=6252): write(0xffffffffffffffff, &(0x7f00000000c0)='$', 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)}, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000b2000040"]) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg(r6, &(0x7f0000001700)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0xbfff}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000240)="c289daf379c0a7cdabf70ab9dbf7dae9f43b6937159804ecf264a0b2587a641742b7dc33b10f3b2ca55ad2bf978670eb5309bc5f3b574a785d31648c95c229a7c860bbd93814453c29e571", 0x4b}, {&(0x7f00000002c0)="c8883ef5e26bf4f6db949b7e5ff526887134198c9af949671304e5e6d5054d7c0f04e4dce7f996305ce8416e8f1075a5e4225676177f6d395aa9e49ef42bc1f4936bc27223a936409968fbea36b76be768d3e117867be38df6e2fe7db6d2cabb7d9539b5a54dfe6c787c55a4be842195efb38ec5c86e1a3fc689c89ea0595fbdf774542cb4d14369a1f070b0d245505f0d346e6333298150370207deae71d78a9d45c067706c847c67d6fcd275de5474fad392d42c6dd1531fb0d5a49d6ada5c0170f1f9597a59e97b4594d4b563881f77e17762bff873a5001a626eb78a556edf1bdfc066deb850228c7c19cfb3de5f1c", 0xf1}, {&(0x7f0000000440)="66e6c954fcfa0431e57f64bf66483e2dd0f02ee7aa0074f3f3b05d3f21ba69aab47437a42b9152ade2e8bee91d62c148d28245ad5aaa200921d7bf385e11efedbf590c8bc394f2613657c0090023e31d900ccc03fe2a9d29d4", 0x59}, {&(0x7f0000000500)="2976fb92901d8e44b0b35c662918375e7248b320ffec52b6ca0fd198db88daac9c42178bfa466af18cf7f268130b2d244a89b8d6f20673650d6305bb3d46eebd9897c084a7e9e1070b092c9594b1baa80a3c5d64694989f98b271c9bf97fbe56c3c5cc3c6cae686e73d614846c9fbf649b6dbf0184ece5b2c815a86ade022cbac51524509a6c574e7c84c5fafc8636165310579f8cfb76eb9b2288f5e35ad082730b7daca2e9e7c33815dd2cc8c8b0567d4a11e2b99ff2f7f76bfbbb654d465b0b29", 0xc2}, {&(0x7f0000000100)="4ab1d6b455f87eaccfa7382915f5d2e1ca0c3c901ef5f3603b63230060199d7c", 0x20}, {&(0x7f0000000600)="da0004f3c8b95d2f23b21bab4cfbb1570420c557eecb19e9b1c8849ef7c920113f28100eabcd998a4b676cddfe851369d84c32bc5b4fa0a9928cd44d1a495466bab0f5a69d2904e9b1811eff859177c7dace65827988b01146a000d0555f3fcd0ef101fae6ff3b82295b0ae32ddd297a7006f4624dff99227beb53e3e04cd77f", 0x80}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f00000003c0)="679e46ca2352e06ba46371cbaf9dd8f15e53bb", 0x13}], 0x8}, 0x40084) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 10.123466668s ago: executing program 3 (id=6253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$selinux_relabel(0xffffff9c, &(0x7f0000000b40), 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000501, 0x0, &(0x7f00000002c0)) mkdir(&(0x7f00000000c0)='./file1\x00', 0x30) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80064d12, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) init_module(&(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4607ff04fcffffffffffffffff0300060008000000900100000000000040000000000000001b01000000000000100000000a0038000100e90008000c000000006001800000ffffffffffffffff0000000000000000070000000000000008000000000000000100000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"/632], 0x278, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="00003800010326bd7002fadbdf25020000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 9.149787988s ago: executing program 3 (id=6258): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek(r0, 0x289e0cb5, 0x0) 6.96716331s ago: executing program 1 (id=6266): r0 = fanotify_init(0x200, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x4, 0x0, r1, 0x0) fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000100), 0xfffffd79) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) openat$mice(0xffffff9c, &(0x7f0000000080), 0x8000) socket$key(0xf, 0x3, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000040)="6479fab2ec", 0x5}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x40801) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f"], 0x0) 6.208721264s ago: executing program 2 (id=6268): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x4b, r1, 0x4, 0x70bd2b, 0x35dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000c804}, 0x45) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd28, 0xfffc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040114}, 0x40000000) 6.103910377s ago: executing program 2 (id=6269): r0 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00') connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000040)={'nicvf0\x00', 0xa36d}) pread64(r3, &(0x7f00000001c0)=""/85, 0x55, 0x10000000000ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001500010300000000fcdbdf2505"], 0x14}}, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000300)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000054) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc0000000000000014000000000000000000000034"], 0x68}, 0x4000000) 5.008029245s ago: executing program 6 (id=6272): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[], 0x20) ppoll(&(0x7f0000000540), 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f) 4.998828781s ago: executing program 2 (id=6273): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0xfffffffc, @private2={0xfc, 0x2, '\x00', 0x41}, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000000400)=[{0x50, 0xe2f5, 0x0, 0x0}, {0x2, 0x4001, 0x0, 0x0}], 0x2}) 4.671298761s ago: executing program 4 (id=6186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, r2, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x1000}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x3e, 0x0, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31f5ffffff0900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) recvmmsg(r11, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 4.589851761s ago: executing program 3 (id=6274): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0xe763}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000002c0), 0xfffffffa, 0x88a03) fcntl$getown(r1, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x8) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003}, 0x18) r7 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c20}, 0x1, 0x0, 0x0, 0x4800}, 0x80) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) 3.625938099s ago: executing program 6 (id=6275): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000300)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3, 0x0, 0x8000000000000}, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 3.545243021s ago: executing program 4 (id=6276): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 3.086500967s ago: executing program 4 (id=6278): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x80) mkdirat(0xffffffffffffff9c, 0x0, 0x0) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r6, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000280)=0xffffffffffff8001, 0xbce3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) socket$kcm(0x10, 0x2, 0x0) 3.014315551s ago: executing program 6 (id=6279): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10004e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000140), &(0x7f0000000500)=ANY=[@ANYBLOB="00fb350104e64cae089fc35a2c4f010000009b42dbc9bce139bd8365b70f4db04a04382e5fc93051aea3cdba22b63f7c77a85565eb1c550374e21fd8543e6facf4cbaba89bb066dd4e8384c41c0da06e7e8df702adca522d73f4d40a163bfb86c8ecf6ec9ff0fb1689eb4422acb20baa700b778232b3d1ab62ecef616e12b69ada32e307adf66d89587fbaeee297d86bc66c73538d02060dbb3c54b8906761434e565bc62d3abe5dafa86f7944f6f1011d0314fbfa3ec1bc1302f736f7ca2ad67d822088ffba6891a04148520446679df621269120b223b5199884470b389ba90a4dfa2adae895c5ec480661ef97865a223332192c5155baf7c8c23d61cd10614f10e3bc81a071e69b7d905214c5d32b5cac1425e1009ccb84878f7bc55848ad0a8e62c7c445c84ad87a42ab2b945785f1edee1495134d6fe06ab9f10530c586e2b5e14ee3f5f333fb"], 0x35, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000014) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x340, 0x1a0, 0x340, 0x340, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [0xff000000], 'tunl0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x340}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {0x7f}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @empty, [0x0, 0x0, 0xffffffff, 0xff], [0xffffff00, 0xff, 0xff000000, 0xffffff00], 'nicvf0\x00', 'vlan0\x00', {0xff}, {}, 0x11, 0x1, 0x5, 0x42}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2f}, @ipv6=@local, 0x1b, 0x28, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="11032bbd7000fbdbdf2500000000140002007767320000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, &(0x7f0000000080)) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r8, 0xc01064c4, &(0x7f0000000100)={0x0}) 2.963038106s ago: executing program 2 (id=6280): r0 = fsmount(0xffffffffffffffff, 0x1, 0x2) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'a', ' *:* ', 'rw\x00'}, 0x9) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x2, 0x7, 0x0, 0x7, 0xb, "29551f7548bcee7266a71d057ce60745e38309", 0x8, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x34, 0x9, 0x0, 0x0, {0x3}, [@typed={0x5, 0x8, 0x0, 0x0, @binary="e5"}]}, 0x1c}}, 0x4000010) 2.674697852s ago: executing program 2 (id=6281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4040) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x1, 0x40000002, 0x0) 1.214420073s ago: executing program 6 (id=6282): mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x1082421, &(0x7f00000000c0)='\'.%-.\'\x00') rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0xfb, 0x1015, 0x4, 0x0, "4c3a719473f2332f71ba91b2d6f2a15b", "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"}, 0x1015, 0x3) mount(&(0x7f0000001240)=@rnullb, &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='nfsd\x00', 0x804, &(0x7f0000001300)='\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x6, &(0x7f0000001380)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @generic={0x0, 0x6, 0x0, 0x5, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}], &(0x7f00000013c0)='syzkaller\x00', 0x7fffffff, 0xc, &(0x7f0000001400)=""/12, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x4, 0x3, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001340)='ext4_update_sb\x00', r0, 0x0, 0x1000}, 0x18) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000001580)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x100, @empty, 0x1}}, 0x24) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000015c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x80, @null, @bpq0, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000001640)=0x5, 0x6, 0x6) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000001680)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000016c0)=0x28) r2 = io_uring_setup(0x4b3b, &(0x7f0000001700)={0x0, 0xa0, 0x2000, 0x3, 0x3ba}) io_uring_setup(0x7168, &(0x7f0000001780)={0x0, 0xde2e, 0x40, 0x0, 0x1cb, 0x0, r2}) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001b80)={&(0x7f0000001800)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001840)=""/206, 0xce}, {&(0x7f0000001940)=""/44, 0x2c}], 0x2, &(0x7f0000001ac0)=[@cswp={0x58, 0x114, 0x7, {{0x13, 0xbe}, &(0x7f00000019c0)=0x9, &(0x7f0000001a00), 0x81, 0x8, 0xfff, 0xc2, 0x10, 0x19bc}}, @fadd={0x58, 0x114, 0x6, {{0x86, 0x8f}, &(0x7f0000001a40)=0x8, &(0x7f0000001a80)=0x8, 0x9, 0x7, 0x82ce, 0x7e3, 0x20, 0x8000000000000000}}], 0xb0, 0x20}, 0x40) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001bc0), 0x88900, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001c40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0xa4, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x9a}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000001dc0)=0x6, 0x4) accept$ax25(r4, &(0x7f0000001e00)={{}, [@rose, @default, @netrom, @rose, @bcast, @null, @default, @bcast]}, &(0x7f0000001e80)=0x48) prctl$PR_SET_SECUREBITS(0x1c, 0x24) read$FUSE(r4, &(0x7f0000001ec0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SET_PTRACER(0x59616d61, r6) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000003f00)=0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000004000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f80)=@ipmr_newroute={0x24, 0x18, 0x4, 0x70bd2c, 0x25dfdbfc, {0x80, 0x20, 0xf0, 0x55, 0xfd, 0x4, 0xff, 0x1, 0x400}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1a}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20001) recvmsg$qrtr(r4, &(0x7f00000054c0)={&(0x7f0000004040), 0xc, &(0x7f0000005300)=[{&(0x7f0000004080)=""/218, 0xda}, {&(0x7f0000004180)=""/46, 0x2e}, {&(0x7f00000041c0)=""/115, 0x73}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/190, 0xbe}], 0x5, &(0x7f0000005380)=[{0x108, 0x0, 0x0, ""/242}, {0x18, 0x0, 0x0, ""/4}], 0x120, 0x3}, 0x38, 0x22) mknodat$null(r4, &(0x7f0000005500)='./file0\x00', 0x8000, 0x103) prctl$PR_SET_SECUREBITS(0x1c, 0x12) mount(&(0x7f0000005540)=@loop={'/dev/loop', 0x0}, &(0x7f0000005580)='./file0\x00', &(0x7f00000055c0)='cifs\x00', 0x2000000, &(0x7f0000005600)='\x00') 1.208354435s ago: executing program 4 (id=6283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(0x0, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000cac000/0x1000)=nil) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b32, 0x0) brk(0x55d55ede6004) tkill(0x0, 0xb) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x30, 0x1}, 0x7f, 0x1, 0xc0e, 0xfffffffffffffffc, r0, r0, 0xf2fe}) 1.108227617s ago: executing program 2 (id=6284): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek(r0, 0x289e0cb5, 0x0) 725.887295ms ago: executing program 6 (id=6285): pipe(&(0x7f0000000100)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) prlimit64(r0, 0x4, &(0x7f0000000000)={0x6f, 0x2}, &(0x7f00000000c0)) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000002600010a00000000000000000a0000001400dd80100067800c003f001000006eece99600"], 0x28}}, 0x0) 175.903738ms ago: executing program 4 (id=6286): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000300)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3, 0x0, 0x8000000000000}, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 77.211157ms ago: executing program 6 (id=6287): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000300)=@l={0x92, 0x8, 0xd0, 0x6, 0x1, 0x5, 0x3ff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20000004) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, 0x0) 0s ago: executing program 3 (id=6288): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000300040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) kernel console output (not intermixed with test programs): [ 1655.949239][ T5916] usb 4-1: MIDIStreaming interface descriptor not found [ 1655.962069][ T5915] usb 3-1: config index 0 descriptor too short (expected 63524, got 36) [ 1655.980617][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 48, changing to 4 [ 1656.013064][ T5916] usb 4-1: USB disconnect, device number 12 [ 1656.033890][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 30768, setting to 1023 [ 1656.060762][ T5915] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1656.067029][T25267] udevd[25267]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1656.073382][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.155224][ T5915] usb 3-1: Product: syz [ 1656.159471][ T5915] usb 3-1: Manufacturer: syz [ 1656.164294][ T5915] usb 3-1: SerialNumber: syz [ 1656.183459][ T5915] usb 3-1: config 0 descriptor?? [ 1656.224618][ T5915] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 30 [ 1656.339894][T25970] Invalid logical block size (253) [ 1656.842452][T25975] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5862'. [ 1657.250419][T25977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1657.526540][T25978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5863'. [ 1659.058496][ T30] kauditd_printk_skb: 203 callbacks suppressed [ 1659.058511][ T30] audit: type=1400 audit(2000000120.420:41811): avc: denied { recv } for pid=96 comm="kworker/1:1H" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1659.320698][ T30] audit: type=1400 audit(2000000120.510:41812): avc: denied { recv } for pid=25976 comm="syz.4.5863" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1659.538862][ T30] audit: type=1400 audit(2000000120.730:41813): avc: denied { read write } for pid=16044 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1659.651798][ T30] audit: type=1400 audit(2000000120.730:41814): avc: denied { read write open } for pid=16044 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1659.683786][ T5915] usb 3-1: USB disconnect, device number 12 [ 1659.758000][ T30] audit: type=1400 audit(2000000120.730:41815): avc: denied { ioctl } for pid=16044 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1659.898501][T25983] 9pnet_fd: Insufficient options for proto=fd [ 1659.904675][ T30] audit: type=1400 audit(2000000120.920:41816): avc: denied { recv } for pid=96 comm="kworker/1:1H" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1659.905597][T25998] IPv6: addrconf: prefix option has invalid lifetime [ 1659.980559][T25968] udevd[25968]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1660.045768][ T30] audit: type=1400 audit(2000000120.970:41817): avc: denied { allowed } for pid=25979 comm="syz.3.5864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1660.156782][ T30] audit: type=1400 audit(2000000120.980:41818): avc: denied { create } for pid=25979 comm="syz.3.5864" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1660.274921][ T30] audit: type=1400 audit(2000000120.990:41819): avc: denied { recv } for pid=5915 comm="kworker/1:7" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1660.432278][T26005] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1660.567999][T26007] tipc: Failed to obtain node identity [ 1660.573599][T26007] tipc: Enabling of bearer rejected, failed to enable media [ 1661.178098][T26010] ip6gre1: entered allmulticast mode [ 1662.969222][T26031] 9pnet_virtio: no channels available for device syz [ 1662.989767][T17946] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1663.192211][T17946] usb 5-1: not running at top speed; connect to a high speed hub [ 1663.362631][T17946] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 1663.376398][T13294] usb 2-1: Direct firmware load for ti_3410.fw failed with error -2 [ 1663.503579][T13294] usb 2-1: Falling back to sysfs fallback for: ti_3410.fw [ 1663.513463][T17946] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1663.538173][T17946] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 75, changing to 4 [ 1663.664838][T17946] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1456, setting to 1023 [ 1663.690516][T17946] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1663.702160][T17946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.712724][T17946] usb 5-1: Product: ã° [ 1663.718792][T17946] usb 5-1: Manufacturer: ﺎᦵê˜á¾žîŸ¨ë ©ç¸—q꣉⸅ä¿ä¡µî¤µè“»î¤©è·‘î¥³æ´•ê·«áŽ‡á¯˜æŽæ¯ î‰­ä¼’è® [ 1663.731567][T17946] usb 5-1: SerialNumber: syz [ 1663.741750][T26036] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5880'. [ 1663.802005][T26036] dummy0: entered promiscuous mode [ 1663.840425][T26036] dummy0: left promiscuous mode [ 1664.134281][ T30] kauditd_printk_skb: 226 callbacks suppressed [ 1664.134297][ T30] audit: type=1400 audit(2000000125.490:42035): avc: denied { map_create } for pid=26047 comm="syz.2.5884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1664.167728][ T30] audit: type=1400 audit(2000000125.490:42036): avc: denied { bpf } for pid=26047 comm="syz.2.5884" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1664.258915][ T30] audit: type=1400 audit(2000000125.500:42037): avc: denied { map_read map_write } for pid=26047 comm="syz.2.5884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1664.259088][ T30] audit: type=1400 audit(2000000125.520:42038): avc: denied { prog_load } for pid=26047 comm="syz.2.5884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1664.259223][ T30] audit: type=1400 audit(2000000125.520:42039): avc: denied { bpf } for pid=26047 comm="syz.2.5884" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1664.259373][ T30] audit: type=1400 audit(2000000125.520:42040): avc: denied { perfmon } for pid=26047 comm="syz.2.5884" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1664.259535][ T30] audit: type=1400 audit(2000000125.530:42041): avc: denied { create } for pid=26021 comm="syz.4.5877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1664.259763][ T30] audit: type=1400 audit(2000000125.550:42042): avc: denied { create } for pid=26045 comm="syz.1.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1664.259931][ T30] audit: type=1400 audit(2000000125.560:42043): avc: denied { create } for pid=26045 comm="syz.1.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1664.260082][ T30] audit: type=1400 audit(2000000125.560:42044): avc: denied { write } for pid=26045 comm="syz.1.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1664.349961][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.475031][T17946] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1664.734884][T26054] tipc: Enabling of bearer rejected, already enabled [ 1665.098369][T17946] usb 5-1: USB disconnect, device number 26 [ 1665.479617][T25969] udevd[25969]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1665.506178][T26056] tipc: Enabled bearer , priority 0 [ 1665.550775][T26055] tipc: Disabling bearer [ 1665.587855][T19850] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 1665.617942][T19850] hid-generic 0000:0000:0000.0057: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1665.687354][T26068] netlink: 'syz.4.5889': attribute type 10 has an invalid length. [ 1665.767143][ T5915] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1665.835597][ T24] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1665.891278][T26072] Invalid logical block size (253) [ 1665.976651][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 1666.028720][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.040373][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1666.188223][T26075] lo speed is unknown, defaulting to 1000 [ 1666.197255][T26075] lo speed is unknown, defaulting to 1000 [ 1666.451505][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.483025][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.505278][ T24] usb 7-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1666.514817][ T5915] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1666.529764][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.560389][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.581500][ T24] usb 7-1: config 0 descriptor?? [ 1666.592114][ T5915] usb 4-1: config 0 descriptor?? [ 1666.893146][ T24] aureal 0003:0755:2626.0058: unknown main item tag 0x0 [ 1666.903598][ T24] aureal 0003:0755:2626.0058: unknown main item tag 0x0 [ 1666.911027][ T24] aureal 0003:0755:2626.0058: unknown main item tag 0x0 [ 1666.918023][ T24] aureal 0003:0755:2626.0058: unknown main item tag 0x0 [ 1666.925012][ T24] aureal 0003:0755:2626.0058: unknown main item tag 0x0 [ 1667.949691][ T24] aureal 0003:0755:2626.0058: hidraw1: USB HID v0.05 Device [HID 0755:2626] on usb-dummy_hcd.6-1/input0 [ 1667.965052][ T9875] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1667.969041][ T24] usb 7-1: USB disconnect, device number 45 [ 1668.021535][T26096] netlink: 'syz.6.5896': attribute type 1 has an invalid length. [ 1668.158989][ T9875] usb 5-1: Using ep0 maxpacket: 8 [ 1668.177457][ T9875] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1668.193336][ T9875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.201890][ T9875] usb 5-1: Product: syz [ 1668.207991][ T9875] usb 5-1: Manufacturer: syz [ 1668.212739][ T9875] usb 5-1: SerialNumber: syz [ 1668.223383][ T9875] usb 5-1: config 0 descriptor?? [ 1668.398428][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.578677][T26105] ubi: mtd0 is already attached to ubi31 [ 1668.962971][ T9875] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1668.964417][ T5915] usbhid 4-1:0.0: can't add hid device: -71 [ 1669.049082][ T5915] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1669.085107][ T5915] usb 4-1: USB disconnect, device number 13 [ 1669.160748][ T30] kauditd_printk_skb: 254 callbacks suppressed [ 1669.160762][ T30] audit: type=1400 audit(2000000130.520:42299): avc: denied { read write } for pid=23671 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1669.294758][ T30] audit: type=1400 audit(2000000130.520:42300): avc: denied { ioctl } for pid=26092 comm="syz.4.5895" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1669.375125][ T30] audit: type=1400 audit(2000000130.520:42301): avc: denied { ioctl } for pid=26092 comm="syz.4.5895" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1669.474747][ T30] audit: type=1400 audit(2000000130.560:42302): avc: denied { read write } for pid=16044 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1669.625694][ T30] audit: type=1400 audit(2000000130.560:42303): avc: denied { open } for pid=16044 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1669.681390][ T30] audit: type=1400 audit(2000000130.560:42305): avc: denied { read } for pid=26107 comm="syz.3.5900" dev="nsfs" ino=4026532833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1669.765398][ T30] audit: type=1400 audit(2000000130.560:42306): avc: denied { open } for pid=26107 comm="syz.3.5900" path="net:[4026532833]" dev="nsfs" ino=4026532833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1669.800198][ T30] audit: type=1400 audit(2000000130.560:42307): avc: denied { create } for pid=26107 comm="syz.3.5900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1669.825765][ T30] audit: type=1400 audit(2000000130.560:42308): avc: denied { read write open } for pid=23671 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1669.896768][ T30] audit: type=1400 audit(2000000130.560:42309): avc: denied { ioctl } for pid=23671 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1671.195666][ T9875] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1671.233962][ T9875] usb 5-1: USB disconnect, device number 27 [ 1672.619716][T26150] tipc: Failed to obtain node identity [ 1672.626008][T26150] tipc: Enabling of bearer rejected, failed to enable media [ 1673.546582][T26157] trusted_key: encrypted_key: master key parameter 'defiult' is invalid [ 1674.340227][ T30] kauditd_printk_skb: 230 callbacks suppressed [ 1674.340245][ T30] audit: type=1400 audit(2000000135.440:42539): avc: denied { recv } for pid=26158 comm="syz.3.5916" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1674.372041][ C1] vkms_vblank_simulate: vblank timer overrun [ 1674.430486][ T30] audit: type=1400 audit(2000000135.790:42540): avc: denied { recv } for pid=5799 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1674.566920][ T30] audit: type=1400 audit(2000000135.790:42541): avc: denied { read write } for pid=16581 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1674.603605][ T30] audit: type=1400 audit(2000000135.790:42542): avc: denied { read write open } for pid=16581 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1675.289602][ T30] audit: type=1400 audit(2000000135.790:42543): avc: denied { ioctl } for pid=16581 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1675.366833][T26174] netlink: 'syz.6.5919': attribute type 10 has an invalid length. [ 1675.394800][ T30] audit: type=1400 audit(2000000135.800:42544): avc: denied { create } for pid=26165 comm="syz.4.5918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1675.443245][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1675.444251][T23671] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1675.449802][ C1] audit: audit_lost=314 audit_rate_limit=0 audit_backlog_limit=64 [ 1675.449823][ C1] audit: backlog limit exceeded [ 1675.853515][T26194] sp0: Synchronizing with TNC [ 1675.871678][T26194] netlink: 'syz.2.5924': attribute type 1 has an invalid length. [ 1675.879516][T26194] netlink: 'syz.2.5924': attribute type 2 has an invalid length. [ 1676.656621][T26198] netlink: 'syz.1.5927': attribute type 1 has an invalid length. [ 1676.662691][T22844] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1676.815066][T22844] usb 4-1: device descriptor read/64, error -71 [ 1677.066262][T26204] tipc: Enabling of bearer rejected, already enabled [ 1677.375366][T22844] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1677.885066][T26216] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5933'. [ 1677.918518][T26216] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5933'. [ 1677.995230][T22844] usb 4-1: device descriptor read/64, error -71 [ 1678.115888][T22844] usb usb4-port1: attempt power cycle [ 1678.535033][T22844] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1678.580719][T22844] usb 4-1: device descriptor read/8, error -71 [ 1678.611023][T26228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1679.162705][ T9875] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1679.373995][ T30] kauditd_printk_skb: 355 callbacks suppressed [ 1679.387241][ T30] audit: type=1400 audit(2000000140.730:42883): avc: denied { create } for pid=26248 comm="syz.3.5945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1679.432904][ T30] audit: type=1400 audit(2000000140.740:42884): avc: denied { read write } for pid=16315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1679.494766][ T30] audit: type=1400 audit(2000000140.740:42885): avc: denied { open } for pid=16315 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1679.607525][ T9875] usb 3-1: Using ep0 maxpacket: 16 [ 1679.608109][ T30] audit: type=1400 audit(2000000140.740:42886): avc: denied { ioctl } for pid=16315 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1679.614397][ T9875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.702861][ T30] audit: type=1400 audit(2000000140.740:42887): avc: denied { recv } for pid=26248 comm="syz.3.5945" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1679.705296][ T9875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1679.819133][ T9875] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1679.837582][ T9875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.880363][ T30] audit: type=1400 audit(2000000140.780:42888): avc: denied { ioctl } for pid=26248 comm="syz.3.5945" path="socket:[102443]" dev="sockfs" ino=102443 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1679.906030][ T9875] usb 3-1: config 0 descriptor?? [ 1679.961108][ T30] audit: type=1400 audit(2000000140.780:42889): avc: denied { ioctl } for pid=26240 comm="syz.2.5942" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1680.115191][ T30] audit: type=1400 audit(2000000140.790:42890): avc: denied { ioctl } for pid=26240 comm="syz.2.5942" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1680.222371][ T30] audit: type=1400 audit(2000000140.790:42891): avc: denied { ioctl } for pid=26240 comm="syz.2.5942" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1680.440342][ T30] audit: type=1400 audit(2000000140.790:42892): avc: denied { setopt } for pid=26248 comm="syz.3.5945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1680.470592][ T9875] hid-multitouch 0003:1FD2:6007.0059: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 1680.691098][ T9875] usb 3-1: USB disconnect, device number 13 [ 1680.980641][T26278] fido_id[26278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1681.512549][ T9875] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1681.674757][ T9875] usb 4-1: Using ep0 maxpacket: 8 [ 1681.771285][ T9875] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1681.798457][ T9875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.815222][ T9875] usb 4-1: Product: syz [ 1681.832501][ T9875] usb 4-1: Manufacturer: syz [ 1681.845568][T26289] overlayfs: missing 'workdir' [ 1681.850501][ T9875] usb 4-1: SerialNumber: syz [ 1681.893030][ T9875] usb 4-1: config 0 descriptor?? [ 1682.226392][ T9875] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1683.585202][ T9875] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1684.265349][ T9875] usb 4-1: USB disconnect, device number 18 [ 1684.414036][ T30] kauditd_printk_skb: 219 callbacks suppressed [ 1684.414079][ T30] audit: type=1400 audit(2000000145.770:43091): avc: denied { read write } for pid=23671 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1684.529773][ T30] audit: type=1400 audit(2000000145.830:43092): avc: denied { open } for pid=23671 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1684.556925][ T30] audit: type=1400 audit(2000000145.830:43093): avc: denied { ioctl } for pid=23671 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1684.582627][ C1] vkms_vblank_simulate: vblank timer overrun [ 1684.598744][ T30] audit: type=1400 audit(2000000145.840:43094): avc: denied { recv } for pid=5799 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1684.624420][ C1] vkms_vblank_simulate: vblank timer overrun [ 1684.631854][ T30] audit: type=1400 audit(2000000145.880:43095): avc: denied { recv } for pid=5799 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1684.655206][T26315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5964'. [ 1684.680917][T26315] dummy0: entered promiscuous mode [ 1684.700828][T26315] dummy0: left promiscuous mode [ 1684.819040][ T30] audit: type=1400 audit(2000000145.880:43096): avc: denied { recv } for pid=5799 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1684.844719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1684.852930][ T30] audit: type=1400 audit(2000000145.880:43097): avc: denied { read write } for pid=16315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1684.877290][ C1] vkms_vblank_simulate: vblank timer overrun [ 1684.926231][ T30] audit: type=1400 audit(2000000145.880:43098): avc: denied { open } for pid=16315 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1684.963150][ T30] audit: type=1400 audit(2000000145.880:43099): avc: denied { ioctl } for pid=16315 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1684.999462][ T30] audit: type=1400 audit(2000000145.880:43100): avc: denied { read write } for pid=16581 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1685.126030][T26326] syz.3.5967: attempt to access beyond end of device [ 1685.126030][T26326] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1685.139983][T26326] FAT-fs (loop7): unable to read boot sector [ 1686.384765][ T9875] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1686.480510][T26343] IPv6: addrconf: prefix option has invalid lifetime [ 1686.545311][ T9875] usb 4-1: Using ep0 maxpacket: 32 [ 1686.561492][ T9875] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1686.580694][ T9875] usb 4-1: config 0 has no interface number 0 [ 1686.611398][ T9875] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1686.779264][ T9875] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 33573, setting to 1024 [ 1686.793467][T26348] overlayfs: missing 'workdir' [ 1686.894330][T26350] tipc: Enabling of bearer rejected, already enabled [ 1687.381176][ T9875] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1687.457664][ T9875] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1687.482963][ T9875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.545183][ T9875] usb 4-1: Product: syz [ 1687.549404][ T9875] usb 4-1: Manufacturer: syz [ 1687.559501][ T9875] usb 4-1: SerialNumber: syz [ 1687.567048][ T9875] usb 4-1: config 0 descriptor?? [ 1687.871027][ T9875] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1687.910130][ T9875] usb 4-1: USB disconnect, device number 19 [ 1688.112172][T25314] udevd[25314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1688.223249][T26363] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1688.232535][T26363] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1689.516085][ T30] kauditd_printk_skb: 275 callbacks suppressed [ 1689.516101][ T30] audit: type=1400 audit(2000000150.450:43376): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1689.561026][ T30] audit: type=1400 audit(2000000150.500:43377): avc: denied { allowed } for pid=26370 comm="syz.2.5981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1689.581097][ T30] audit: type=1400 audit(2000000150.500:43378): avc: denied { sqpoll } for pid=26370 comm="syz.2.5981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1689.603449][ T30] audit: type=1400 audit(2000000150.510:43379): avc: denied { create } for pid=26370 comm="syz.2.5981" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1689.625963][ T30] audit: type=1400 audit(2000000150.510:43380): avc: denied { map } for pid=26370 comm="syz.2.5981" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1689.650850][ T30] audit: type=1400 audit(2000000150.510:43381): avc: denied { read write } for pid=26370 comm="syz.2.5981" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1689.651653][T26377] 9pnet_fd: Insufficient options for proto=fd [ 1689.678229][ T30] audit: type=1400 audit(2000000150.510:43382): avc: denied { bind } for pid=26370 comm="syz.2.5981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1689.703838][ T30] audit: type=1400 audit(2000000150.880:43383): avc: denied { read write } for pid=17047 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1689.728577][ T30] audit: type=1400 audit(2000000150.880:43384): avc: denied { read write open } for pid=17047 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1689.761463][ T30] audit: type=1400 audit(2000000150.880:43385): avc: denied { ioctl } for pid=17047 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1690.187392][T26384] ip6gre3: entered allmulticast mode [ 1690.850313][T26390] tipc: Enabling of bearer rejected, already enabled [ 1692.611076][T26412] overlayfs: missing 'workdir' [ 1693.413276][T26425] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1693.427363][T26425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1693.455055][ T24] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1694.011247][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.046016][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1694.057512][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1694.067119][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.390886][ T24] usb 4-1: config 0 descriptor?? [ 1694.448758][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1694.485894][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1694.522261][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1694.531107][ T30] kauditd_printk_skb: 194 callbacks suppressed [ 1694.531121][ T30] audit: type=1400 audit(2000000155.880:43580): avc: denied { write } for pid=26433 comm="syz.2.5997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1694.696443][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1694.703536][ T24] usb 4-1: media controller created [ 1694.810959][T26439] tipc: Failed to obtain node identity [ 1694.816923][T26439] tipc: Enabling of bearer rejected, failed to enable media [ 1695.517058][T26445] dvb-usb: bulk message failed: -22 (2/0) [ 1695.891387][ T30] audit: type=1400 audit(2000000155.920:43581): avc: denied { read write } for pid=16581 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1695.917484][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1696.012060][T26446] Invalid logical block size (253) [ 1696.284185][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1696.362421][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1696.414033][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input80 [ 1696.427267][ T30] audit: type=1400 audit(2000000155.920:43582): avc: denied { open } for pid=16581 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1696.464375][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1696.464380][T16044] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1696.464396][T16044] audit: audit_lost=328 audit_rate_limit=0 audit_backlog_limit=64 [ 1696.470901][ C1] audit: audit_lost=329 audit_rate_limit=0 audit_backlog_limit=64 [ 1696.470918][ C1] audit: backlog limit exceeded [ 1696.550202][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 1696.557213][T23671] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1696.557228][T23671] audit: audit_lost=330 audit_rate_limit=0 audit_backlog_limit=64 [ 1696.744040][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1697.260452][ T5915] dvb-usb: bulk message failed: -22 (1/0) [ 1697.321589][ T5915] dvb-usb: error while querying for an remote control event. [ 1697.326303][T26458] netlink: 'syz.4.6005': attribute type 1 has an invalid length. [ 1697.389092][ T24] usb 4-1: USB disconnect, device number 20 [ 1697.646824][T26465] netlink: 'syz.1.6003': attribute type 4 has an invalid length. [ 1698.439980][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1698.565753][T26472] netlink: 'syz.4.6008': attribute type 7 has an invalid length. [ 1698.573636][T26472] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6008'. [ 1698.704983][ T5915] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 1699.004769][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1699.036297][ T5915] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.046585][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1699.068252][ T5915] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1699.104410][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.126820][ T5915] usb 7-1: config 0 descriptor?? [ 1699.142281][ T5915] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1699.151352][ T5915] dvb-usb: bulk message failed: -22 (3/0) [ 1699.163592][ T5915] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1699.174970][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1699.184273][ T5915] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1699.194522][ T5915] usb 7-1: media controller created [ 1699.203301][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 1699.216904][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1699.227551][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.243833][ T24] usb 4-1: Product: syz [ 1699.252799][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 1699.261650][ T24] usb 4-1: Manufacturer: syz [ 1699.266919][ T5915] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1699.274191][ T24] usb 4-1: SerialNumber: syz [ 1699.374307][ T24] usb 4-1: config 0 descriptor?? [ 1699.379540][ T5915] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input81 [ 1699.398801][ T5915] dvb-usb: schedule remote query interval to 150 msecs. [ 1699.406332][ T5915] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1699.419032][ T24] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 1699.587309][ T30] kauditd_printk_skb: 240 callbacks suppressed [ 1699.606690][ T30] audit: type=1400 audit(2000000160.940:43776): avc: denied { prog_load } for pid=26481 comm="syz.2.6013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1699.607978][T19850] dvb-usb: bulk message failed: -22 (1/0) [ 1700.428370][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1700.434585][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1700.720625][T26487] dvb-usb: bulk message failed: -22 (2/0) [ 1700.720943][ T24] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 1700.765620][T19850] dvb-usb: error while querying for an remote control event. [ 1700.773144][ T24] usb 4-1: media controller created [ 1700.794058][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1700.810016][ T30] audit: type=1400 audit(2000000160.940:43777): avc: denied { bpf } for pid=26481 comm="syz.2.6013" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1700.849281][ T30] audit: type=1400 audit(2000000160.940:43778): avc: denied { perfmon } for pid=26481 comm="syz.2.6013" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1700.870333][ C0] vkms_vblank_simulate: vblank timer overrun [ 1700.880581][T26463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1700.926848][T19850] dvb-usb: bulk message failed: -22 (1/0) [ 1700.932442][ T30] audit: type=1400 audit(2000000160.940:43779): avc: denied { prog_run } for pid=26481 comm="syz.2.6013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1700.942940][T19850] dvb-usb: error while querying for an remote control event. [ 1700.951642][ C0] vkms_vblank_simulate: vblank timer overrun [ 1700.975918][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1700.997273][ T24] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 1700.999452][ T30] audit: type=1400 audit(2000000160.950:43780): avc: denied { create } for pid=26481 comm="syz.2.6013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1701.010740][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input82 [ 1701.049520][ T24] dvb-usb: schedule remote query interval to 50 msecs. [ 1701.057020][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1701.059961][ T30] audit: type=1400 audit(2000000160.950:43781): avc: denied { write } for pid=26481 comm="syz.2.6013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1701.089655][ T24] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 1701.090212][ T30] audit: type=1400 audit(2000000160.960:43782): avc: denied { recv } for pid=26468 comm="syz.6.6010" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1701.114828][T19850] dvb-usb: bulk message failed: -22 (1/0) [ 1701.130503][ T30] audit: type=1400 audit(2000000161.070:43783): avc: denied { name_bind } for pid=26468 comm="syz.6.6010" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1701.143839][T19850] dvb-usb: error while querying for an remote control event. [ 1701.153985][ C0] vkms_vblank_simulate: vblank timer overrun [ 1701.168337][ T5915] dvb-usb: bulk message failed: -22 (1/0) [ 1701.174071][ T5915] dvb-usb: error while querying for an remote control event. [ 1701.181868][ T24] usb 4-1: USB disconnect, device number 21 [ 1701.210903][ T30] audit: type=1400 audit(2000000161.070:43784): avc: denied { node_bind } for pid=26468 comm="syz.6.6010" saddr=fc02::41 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1701.233092][ C0] vkms_vblank_simulate: vblank timer overrun [ 1701.240796][ T30] audit: type=1400 audit(2000000161.470:43785): avc: denied { recv } for pid=26468 comm="syz.6.6010" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1701.266342][ C0] vkms_vblank_simulate: vblank timer overrun [ 1701.308893][ T24] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 1701.368097][T19850] dvb-usb: bulk message failed: -22 (1/0) [ 1701.373873][T19850] dvb-usb: error while querying for an remote control event. [ 1701.550970][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1701.556847][ T24] dvb-usb: error while querying for an remote control event. [ 1701.832762][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1701.848766][ T24] dvb-usb: error while querying for an remote control event. [ 1701.856761][T19850] usb 7-1: USB disconnect, device number 46 [ 1701.923623][T26510] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6021'. [ 1701.934598][T26510] 1·: renamed from c0· (while UP) [ 1702.139334][T19850] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1702.340621][T26510] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 1702.431213][T26509] binder_alloc: binder_alloc_mmap_handler: 26508 200000ffd000-200001000000 already mapped failed -16 [ 1702.576633][T26520] binder_alloc: 26508: binder_alloc_buf, no vma [ 1702.589755][T26509] binder_alloc: 26508: binder_alloc_buf, no vma [ 1704.596021][ T30] kauditd_printk_skb: 217 callbacks suppressed [ 1704.596035][ T30] audit: type=1400 audit(2000000165.960:44003): avc: denied { ioctl } for pid=26541 comm="syz.2.6030" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1704.635017][ T30] audit: type=1400 audit(2000000165.960:44004): avc: denied { prog_load } for pid=26546 comm="syz.3.6026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1704.667737][ T30] audit: type=1400 audit(2000000165.960:44005): avc: denied { bpf } for pid=26546 comm="syz.3.6026" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1704.703241][ T30] audit: type=1400 audit(2000000165.960:44006): avc: denied { perfmon } for pid=26546 comm="syz.3.6026" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1704.729234][ T30] audit: type=1400 audit(2000000165.960:44007): avc: denied { recv } for pid=26546 comm="syz.3.6026" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1704.764518][ T30] audit: type=1400 audit(2000000165.960:44008): avc: denied { bpf } for pid=26546 comm="syz.3.6026" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1704.792602][ T30] audit: type=1400 audit(2000000165.960:44009): avc: denied { prog_run } for pid=26546 comm="syz.3.6026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1704.837905][ T30] audit: type=1400 audit(2000000165.990:44010): avc: denied { recv } for pid=16044 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1704.865663][ T30] audit: type=1400 audit(2000000166.020:44011): avc: denied { read write } for pid=16581 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1705.022679][ T30] audit: type=1400 audit(2000000166.020:44012): avc: denied { open } for pid=16581 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1705.308730][T26562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=26562 comm=syz.2.6034 [ 1706.904376][T26590] lo speed is unknown, defaulting to 1000 [ 1706.910424][T26590] lo speed is unknown, defaulting to 1000 [ 1706.919981][T26590] lo speed is unknown, defaulting to 1000 [ 1706.980472][T26590] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1707.122498][T26591] syz.3.6040: attempt to access beyond end of device [ 1707.122498][T26591] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1707.136304][T26591] SQUASHFS error: Failed to read block 0x0: -5 [ 1707.142620][T26591] unable to read squashfs_super_block [ 1707.174145][T26590] lo speed is unknown, defaulting to 1000 [ 1707.189192][T26590] lo speed is unknown, defaulting to 1000 [ 1707.203761][T26590] lo speed is unknown, defaulting to 1000 [ 1707.218183][T26590] lo speed is unknown, defaulting to 1000 [ 1707.232527][T26590] lo speed is unknown, defaulting to 1000 [ 1707.277502][T26585] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6040'. [ 1707.745442][T26586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1708.542896][T26613] netlink: 'syz.3.6050': attribute type 10 has an invalid length. [ 1709.525234][T22844] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1709.544313][T26633] program syz.1.6051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1709.605554][ T30] kauditd_printk_skb: 321 callbacks suppressed [ 1709.605566][ T30] audit: type=1400 audit(2000000170.970:44334): avc: denied { ioctl } for pid=26624 comm="syz.6.6055" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1709.648116][ T30] audit: type=1400 audit(2000000170.980:44335): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1709.680051][ T30] audit: type=1400 audit(2000000171.010:44336): avc: denied { create } for pid=26629 comm="syz.3.6056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1709.704544][ T30] audit: type=1400 audit(2000000171.010:44337): avc: denied { read } for pid=26629 comm="syz.3.6056" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1709.728806][T22844] usb 7-1: config 0 has an invalid interface number: 188 but max is 1 [ 1709.739597][T22844] usb 7-1: config 0 has an invalid interface number: 214 but max is 1 [ 1709.747946][T22844] usb 7-1: config 0 has no interface number 0 [ 1709.754462][T22844] usb 7-1: config 0 has no interface number 1 [ 1709.761615][T22844] usb 7-1: New USB device found, idVendor=12d1, idProduct=0115, bcdDevice=d9.8d [ 1709.772585][T26636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6057'. [ 1709.781713][T22844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.790550][T26636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.798263][ T30] audit: type=1400 audit(2000000171.010:44338): avc: denied { open } for pid=26629 comm="syz.3.6056" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1709.825363][T26636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.832595][T26636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1709.873778][T22844] usb 7-1: config 0 descriptor?? [ 1709.879281][T26638] SELinux: truncated policydb string identifier [ 1709.885879][T26638] SELinux: failed to load policy [ 1709.921040][T22844] option 7-1:0.188: GSM modem (1-port) converter detected [ 1709.981248][ T30] audit: type=1400 audit(2000000171.010:44339): avc: denied { ioctl } for pid=26629 comm="syz.3.6056" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1710.146633][T22844] usb 7-1: USB disconnect, device number 47 [ 1710.149725][ T30] audit: type=1400 audit(2000000171.060:44340): avc: denied { ioctl } for pid=26624 comm="syz.6.6055" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1710.153626][T22844] option 7-1:0.188: device disconnected [ 1710.216036][ T30] audit: type=1400 audit(2000000171.160:44341): avc: denied { read } for pid=26629 comm="syz.3.6056" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1710.249995][ T30] audit: type=1400 audit(2000000171.160:44342): avc: denied { read open } for pid=26629 comm="syz.3.6056" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1710.278228][ T30] audit: type=1400 audit(2000000171.240:44343): avc: denied { load_policy } for pid=26629 comm="syz.3.6056" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1710.769355][T26653] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6063'. [ 1710.779241][T26653] 0·: renamed from hsr_slave_1 (while UP) [ 1710.786831][T26653] 0·: entered allmulticast mode [ 1710.792344][T26653] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1710.864763][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1710.971410][T26658] IPv6: addrconf: prefix option has invalid lifetime [ 1711.024795][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1711.033536][ T24] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 1711.082506][ T24] usb 5-1: config 0 has no interface number 0 [ 1711.092556][ T24] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1711.106792][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.123217][ T24] usb 5-1: Product: syz [ 1711.131327][ T24] usb 5-1: Manufacturer: syz [ 1711.138505][ T24] usb 5-1: SerialNumber: syz [ 1711.161963][ T24] usb 5-1: config 0 descriptor?? [ 1711.431683][ T24] ums-jumpshot 5-1:0.16: USB Mass Storage device detected [ 1711.491580][ T24] ums-jumpshot 5-1:0.16: Quirks match for vid 05dc pid 0001: 2 [ 1711.507395][ T24] scsi host1: usb-storage 5-1:0.16 [ 1711.535380][T22844] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1711.678181][T26647] netem: incorrect gi model size [ 1711.696389][T26647] netem: change failed [ 1711.866446][T22844] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1711.876381][T22844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.896278][ T24] usb 5-1: USB disconnect, device number 28 [ 1711.897520][T22844] usb 7-1: config 0 descriptor?? [ 1712.030075][ T9875] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1712.261416][ T9875] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.310125][ T9875] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1712.370248][ T9875] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1712.387486][T22844] kaweth 7-1:0.0: Firmware present in device. [ 1712.393798][ T9875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1712.404247][ T9875] usb 3-1: SerialNumber: syz [ 1712.560549][T22844] kaweth 7-1:0.0: Error reading configuration (-32), no net device created [ 1712.599517][T22844] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 1712.961006][T26687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6073'. [ 1713.740310][T26689] overlayfs: missing 'lowerdir' [ 1713.898845][T26692] /dev/sg0: Can't lookup blockdev [ 1714.223432][T22844] usb 7-1: USB disconnect, device number 48 [ 1714.293900][ T9875] usb 3-1: 0:2 : does not exist [ 1714.294980][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1714.309318][ T9875] usb 3-1: unit 5: unexpected type 0x09 [ 1714.485056][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1714.509005][ T9875] usb 3-1: USB disconnect, device number 14 [ 1714.514806][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1714.558246][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1714.598326][T25969] udevd[25969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1714.624819][ T30] kauditd_printk_skb: 289 callbacks suppressed [ 1714.624834][ T30] audit: type=1400 audit(2000000175.980:44633): avc: denied { recv } for pid=26674 comm="syz.2.6070" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1714.660485][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1714.712222][ T24] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1714.738687][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.787454][ T24] usb 5-1: Product: syz [ 1714.791882][ T30] audit: type=1400 audit(2000000176.070:44634): avc: denied { ioctl } for pid=26693 comm="syz.4.6076" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1714.816891][ C1] vkms_vblank_simulate: vblank timer overrun [ 1714.825965][ T24] usb 5-1: Manufacturer: syz [ 1714.830958][ T24] usb 5-1: SerialNumber: syz [ 1714.841602][ T24] usb 5-1: config 0 descriptor?? [ 1714.858826][ T24] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 1714.870953][ T30] audit: type=1400 audit(2000000176.220:44635): avc: denied { ioctl } for pid=26693 comm="syz.4.6076" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1714.896004][ C1] vkms_vblank_simulate: vblank timer overrun [ 1714.943659][ T30] audit: type=1400 audit(2000000176.220:44636): avc: denied { ioctl } for pid=26693 comm="syz.4.6076" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1715.050165][ T30] audit: type=1400 audit(2000000176.270:44637): avc: denied { read write } for pid=26700 comm="syz.6.6079" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1715.170146][ T24] ums-isd200 5-1:0.0: probe with driver ums-isd200 failed with error -22 [ 1715.189157][ T30] audit: type=1400 audit(2000000176.270:44638): avc: denied { open } for pid=26700 comm="syz.6.6079" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1715.259051][ T30] audit: type=1400 audit(2000000176.270:44639): avc: denied { map } for pid=26700 comm="syz.6.6079" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1715.294752][ T9875] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 1715.323249][ T30] audit: type=1400 audit(2000000176.270:44640): avc: denied { recv } for pid=5186 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1715.348373][ C1] vkms_vblank_simulate: vblank timer overrun [ 1715.366189][ T30] audit: type=1400 audit(2000000176.280:44641): avc: denied { read write } for pid=16581 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1715.398170][ T30] audit: type=1400 audit(2000000176.280:44642): avc: denied { open } for pid=16581 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1715.407236][T26694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6076'. [ 1715.489623][ T24] usb 5-1: USB disconnect, device number 29 [ 1715.541983][ T9875] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1715.556525][ T9875] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 8 [ 1715.604259][ T9875] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1715.618145][ T9875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.633540][T26699] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1715.738746][T26721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6082'. [ 1716.230154][ T9875] usb 4-1: string descriptor 0 read error: -71 [ 1716.376628][ T9875] usb 4-1: USB disconnect, device number 22 [ 1717.973387][T26740] netlink: 'syz.2.6087': attribute type 1 has an invalid length. [ 1717.981821][T26742] 9pnet_fd: Insufficient options for proto=fd [ 1718.007208][T26742] macvtap0: entered allmulticast mode [ 1718.030819][T26742] veth0_macvtap: entered allmulticast mode [ 1718.977874][T26752] netlink: 'syz.6.6092': attribute type 4 has an invalid length. [ 1719.088471][T26754] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6089'. [ 1719.701083][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 1719.701099][ T30] audit: type=1400 audit(2000000181.060:44816): avc: denied { read write } for pid=16044 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1719.731796][ C1] vkms_vblank_simulate: vblank timer overrun [ 1719.793374][ T5186] udevd[5186]: worker [25266] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 1719.930353][ T30] audit: type=1400 audit(2000000181.060:44817): avc: denied { open } for pid=16044 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1719.954923][ T30] audit: type=1400 audit(2000000181.060:44818): avc: denied { ioctl } for pid=16044 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1719.980627][ C1] vkms_vblank_simulate: vblank timer overrun [ 1720.080824][T26766] tipc: Enabling of bearer rejected, already enabled [ 1720.802973][ T30] audit: type=1400 audit(2000000181.110:44819): avc: denied { prog_load } for pid=26757 comm="syz.6.6093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1720.830935][ T30] audit: type=1400 audit(2000000181.110:44820): avc: denied { bpf } for pid=26757 comm="syz.6.6093" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1720.874163][ T30] audit: type=1400 audit(2000000181.110:44821): avc: denied { perfmon } for pid=26757 comm="syz.6.6093" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1720.998845][T26777] netlink: 1384 bytes leftover after parsing attributes in process `syz.1.6095'. [ 1721.086234][ T30] audit: type=1400 audit(2000000181.170:44822): avc: denied { read write } for pid=16315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1721.227143][T26770] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6096'. [ 1721.241550][T26770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.259271][T26770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.266477][T26770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1721.362663][ T30] audit: type=1400 audit(2000000181.170:44823): avc: denied { open } for pid=16315 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1721.387767][ T30] audit: type=1400 audit(2000000181.170:44824): avc: denied { ioctl } for pid=16315 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1721.435305][ T30] audit: type=1400 audit(2000000181.170:44825): avc: denied { map_create } for pid=26758 comm="syz.2.6094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1721.826851][T26790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6103'. [ 1721.976540][T26791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6104'. [ 1723.185368][T26808] lo speed is unknown, defaulting to 1000 [ 1723.192388][T26808] lo speed is unknown, defaulting to 1000 [ 1723.665628][T26810] xt_l2tp: wrong L2TP version: 0 [ 1724.879174][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 1724.879190][ T30] audit: type=1400 audit(2000000185.520:44999): avc: denied { bind } for pid=26806 comm="syz.1.6108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1724.929110][T26808] lo speed is unknown, defaulting to 1000 [ 1725.031190][T13294] usb 2-1: ti_download_firmware - firmware not found [ 1725.174919][T13294] ti_usb_3410_5052 2-1:0.0: probe with driver ti_usb_3410_5052 failed with error -2 [ 1725.194924][T13294] usb 2-1: USB disconnect, device number 9 [ 1725.388225][ T30] audit: type=1400 audit(2000000185.520:45000): avc: denied { create } for pid=26799 comm="syz.2.6106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1725.569380][ T30] audit: type=1400 audit(2000000185.730:45001): avc: denied { write } for pid=26806 comm="syz.1.6108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1725.604744][ T30] audit: type=1400 audit(2000000186.240:45002): avc: denied { name_bind } for pid=26806 comm="syz.1.6108" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1725.626555][ C0] vkms_vblank_simulate: vblank timer overrun [ 1726.016463][ T30] audit: type=1400 audit(2000000186.240:45003): avc: denied { node_bind } for pid=26806 comm="syz.1.6108" saddr=fc00::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1726.040635][ T30] audit: type=1400 audit(2000000186.250:45004): avc: denied { execmem } for pid=26813 comm="syz.4.6110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1726.059999][ C0] vkms_vblank_simulate: vblank timer overrun [ 1726.104118][ T30] audit: type=1400 audit(2000000186.490:45005): avc: denied { recv } for pid=23671 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1726.129874][ C0] vkms_vblank_simulate: vblank timer overrun [ 1726.235404][ T30] audit: type=1400 audit(2000000186.500:45006): avc: denied { create } for pid=26813 comm="syz.4.6110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1726.395012][ T30] audit: type=1400 audit(2000000186.500:45007): avc: denied { bind } for pid=26813 comm="syz.4.6110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1726.427464][ T30] audit: type=1400 audit(2000000186.500:45008): avc: denied { write } for pid=26813 comm="syz.4.6110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1727.730535][T25292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1727.740347][T25292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1727.757304][T25292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1727.768328][T25292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1727.778169][T25292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1728.021420][T26843] lo speed is unknown, defaulting to 1000 [ 1728.049500][T26843] lo speed is unknown, defaulting to 1000 [ 1728.867041][ T78] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.991777][ T78] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.203647][T26862] fuse: Bad value for 'user_id' [ 1729.213828][T26862] fuse: Bad value for 'user_id' [ 1729.224549][ T78] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.665086][ T9875] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1729.841375][T25292] Bluetooth: hci4: command tx timeout [ 1729.851274][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.857090][ T9875] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 1729.889313][ T9875] usb 5-1: config 0 has no interface number 0 [ 1729.898620][ T30] kauditd_printk_skb: 182 callbacks suppressed [ 1729.898634][ T30] audit: type=1400 audit(2000000191.260:45191): avc: denied { ioctl } for pid=26858 comm="syz.4.6124" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1729.935087][ T78] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.946830][ T9875] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=cd.e9 [ 1729.959306][ T9875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.974726][ T9875] usb 5-1: Product: syz [ 1729.979043][ T30] audit: type=1400 audit(2000000191.290:45192): avc: denied { ioctl } for pid=26858 comm="syz.4.6124" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1729.979182][T26843] lo speed is unknown, defaulting to 1000 [ 1730.012508][ T9875] usb 5-1: Manufacturer: syz [ 1730.017501][ T9875] usb 5-1: SerialNumber: syz [ 1730.037102][ T9875] usb 5-1: config 0 descriptor?? [ 1730.098418][ T9875] usb_ehset_test 5-1:0.205: probe with driver usb_ehset_test failed with error -32 [ 1730.117981][ T30] audit: type=1400 audit(2000000191.290:45193): avc: denied { ioctl } for pid=26858 comm="syz.4.6124" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1730.191548][ T30] audit: type=1400 audit(2000000191.320:45194): avc: denied { map_create } for pid=26869 comm="syz.2.6127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1730.218648][ T30] audit: type=1400 audit(2000000191.320:45195): avc: denied { perfmon } for pid=26869 comm="syz.2.6127" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1730.241467][ T30] audit: type=1400 audit(2000000191.320:45196): avc: denied { map_read map_write } for pid=26869 comm="syz.2.6127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1730.263476][ T30] audit: type=1400 audit(2000000191.330:45197): avc: denied { prog_load } for pid=26869 comm="syz.2.6127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1730.340741][ T30] audit: type=1400 audit(2000000191.330:45198): avc: denied { bpf } for pid=26869 comm="syz.2.6127" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1730.363373][ T30] audit: type=1400 audit(2000000191.380:45199): avc: denied { read write } for pid=16581 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1730.425465][ T30] audit: type=1400 audit(2000000191.380:45200): avc: denied { open } for pid=16581 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1730.628318][T26879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=26879 comm=syz.2.6128 [ 1730.992169][ T78] bridge_slave_1: left allmulticast mode [ 1731.036716][ T78] bridge_slave_1: left promiscuous mode [ 1731.043673][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.076495][ T78] bridge_slave_0: left allmulticast mode [ 1731.082280][ T78] bridge_slave_0: left promiscuous mode [ 1731.097613][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.156290][ T78] tipc: Resetting bearer [ 1731.215918][T26891] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6130'. [ 1731.385371][ T78] tipc: Disabling bearer [ 1731.431091][T26896] ubi: mtd0 is already attached to ubi31 [ 1731.623157][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1731.646940][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1731.667666][ T78] bond0 (unregistering): (slave team0): Releasing backup interface [ 1731.682860][ T78] bond0 (unregistering): Released all slaves [ 1731.723019][T26891] netlink: 'syz.6.6130': attribute type 1 has an invalid length. [ 1731.734194][T26891] netlink: 'syz.6.6130': attribute type 2 has an invalid length. [ 1731.743266][T26891] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6130'. [ 1731.915200][T25292] Bluetooth: hci4: command tx timeout [ 1732.103595][T22844] usb 5-1: USB disconnect, device number 30 [ 1732.178732][ T78] tipc: Left network mode [ 1732.755895][T26905] can0: slcan on ttyS3. [ 1732.945795][T26898] can0 (unregistered): slcan off ttyS3. [ 1733.323782][T26916] Bluetooth: MGMT ver 1.23 [ 1733.742687][T26843] chnl_net:caif_netlink_parms(): no params data found [ 1733.869190][T26924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6140'. [ 1734.004803][T25292] Bluetooth: hci4: command tx timeout [ 1735.031805][ T30] kauditd_printk_skb: 219 callbacks suppressed [ 1735.031822][ T30] audit: type=1400 audit(2000000196.370:45420): avc: denied { create } for pid=26934 comm="syz.6.6143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1735.188027][ T30] audit: type=1400 audit(2000000196.490:45421): avc: denied { read write } for pid=26930 comm="syz.4.6142" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1735.215928][ T30] audit: type=1400 audit(2000000196.500:45422): avc: denied { open } for pid=26930 comm="syz.4.6142" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1735.246194][ T30] audit: type=1400 audit(2000000196.500:45423): avc: denied { ioctl } for pid=26930 comm="syz.4.6142" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1735.246224][ T78] hsr_slave_0: left promiscuous mode [ 1735.277117][ T30] audit: type=1400 audit(2000000196.500:45424): avc: denied { map_create } for pid=26930 comm="syz.4.6142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1735.306607][ T30] audit: type=1400 audit(2000000196.500:45426): avc: denied { map_read map_write } for pid=26930 comm="syz.4.6142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1735.327696][ T30] audit: type=1400 audit(2000000196.500:45427): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1735.363662][ T30] audit: type=1400 audit(2000000196.510:45428): avc: denied { prog_load } for pid=26930 comm="syz.4.6142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1735.393945][ T30] audit: type=1400 audit(2000000196.510:45429): avc: denied { bpf } for pid=26930 comm="syz.4.6142" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1735.415419][ T78] 1·: left promiscuous mode [ 1735.424814][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1735.432206][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1735.449330][T13294] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1735.449541][ T30] audit: type=1400 audit(2000000196.510:45430): avc: denied { perfmon } for pid=26930 comm="syz.4.6142" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1735.485676][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1735.504170][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1735.514952][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1735.556594][ T78] veth1_macvtap: left promiscuous mode [ 1735.574115][ T78] veth0_macvtap: left allmulticast mode [ 1735.592459][ T78] veth0_macvtap: left promiscuous mode [ 1735.624158][T26950] xt_hashlimit: Unknown mode mask 533A373F, kernel too old? [ 1735.647165][T13294] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.677671][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1735.695451][T13294] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1735.709050][T13294] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1735.718999][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1735.734761][T13294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.746061][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1735.758318][T13294] usb 3-1: config 0 descriptor?? [ 1735.778446][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1735.810469][T13294] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1735.824198][ T24] usb 5-1: Product: syz [ 1735.841213][ T24] usb 5-1: Manufacturer: syz [ 1735.854774][T13294] dvb-usb: bulk message failed: -22 (3/0) [ 1735.867516][ T24] usb 5-1: SerialNumber: syz [ 1735.874419][T13294] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1735.905684][ T24] usb 5-1: config 0 descriptor?? [ 1736.008189][ T24] usb 5-1: selecting invalid altsetting 0 [ 1736.019551][T13294] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1736.044576][T26956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6149'. [ 1736.671744][T26959] dvb-usb: bulk message failed: -22 (2/0) [ 1736.710726][T25292] Bluetooth: hci4: command tx timeout [ 1736.780929][T13294] usb 3-1: media controller created [ 1736.789136][T13294] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1736.828097][T13294] dvb-usb: bulk message failed: -22 (6/0) [ 1736.836933][T13294] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1736.841707][T26956] netlink: 'syz.1.6149': attribute type 21 has an invalid length. [ 1736.850577][ T24] usb 5-1: USB disconnect, device number 31 [ 1736.869274][T13294] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input85 [ 1736.913075][T13294] dvb-usb: schedule remote query interval to 150 msecs. [ 1736.936396][T13294] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1736.965716][T25314] udevd[25314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1737.095126][T13294] dvb-usb: bulk message failed: -22 (1/0) [ 1737.102528][T13294] dvb-usb: error while querying for an remote control event. [ 1737.200511][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1737.242495][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1737.264853][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1737.273151][ T24] dvb-usb: error while querying for an remote control event. [ 1737.440699][T13294] dvb-usb: bulk message failed: -22 (1/0) [ 1737.447464][T13294] dvb-usb: error while querying for an remote control event. [ 1737.615444][T13294] dvb-usb: bulk message failed: -22 (1/0) [ 1737.621204][T13294] dvb-usb: error while querying for an remote control event. [ 1737.636088][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1737.722906][T26843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.739620][T26843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.761289][T26843] bridge_slave_0: entered allmulticast mode [ 1737.769590][T26843] bridge_slave_0: entered promiscuous mode [ 1737.785121][T13294] dvb-usb: bulk message failed: -22 (1/0) [ 1737.791457][T13294] dvb-usb: error while querying for an remote control event. [ 1737.800615][T26843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.808356][T26843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.818479][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1737.834502][T26843] bridge_slave_1: entered allmulticast mode [ 1737.842587][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.857883][T26843] bridge_slave_1: entered promiscuous mode [ 1737.869462][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1737.888844][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1737.904843][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1737.926672][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1737.945788][ T24] usb 5-1: Product: syz [ 1737.956846][ T24] usb 5-1: Manufacturer: syz [ 1737.964931][T19850] dvb-usb: bulk message failed: -22 (1/0) [ 1737.971081][T19850] dvb-usb: error while querying for an remote control event. [ 1737.977029][T26843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1738.001097][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 1738.013208][T26843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1738.013833][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 1738.028141][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 1738.034460][ T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1738.116796][T19850] usb 3-1: USB disconnect, device number 15 [ 1738.911065][T26968] netlink: 'syz.1.6153': attribute type 10 has an invalid length. [ 1739.025621][T19850] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1739.119037][T26843] team0: Port device team_slave_0 added [ 1739.367820][T26843] team0: Port device team_slave_1 added [ 1739.672180][T26982] netlink: 'syz.4.6150': attribute type 13 has an invalid length. [ 1739.740514][ T78] IPVS: stop unused estimator thread 0... [ 1739.758941][T26982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1739.834236][T26843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1739.850629][T26843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1739.892026][T26843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.927518][T26843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1739.944890][T26843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1739.988260][T26843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1740.081697][T26986] xt_connbytes: Forcing CT accounting to be enabled [ 1740.092962][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 1740.092972][ T30] audit: type=1400 audit(2000000201.450:45603): avc: denied { read write } for pid=16581 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1740.126675][ T30] audit: type=1400 audit(2000000201.460:45604): avc: denied { read write open } for pid=16581 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1740.157744][T26843] hsr_slave_0: entered promiscuous mode [ 1740.177902][T26843] hsr_slave_1: entered promiscuous mode [ 1740.184373][T26843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1740.192981][ T30] audit: type=1400 audit(2000000201.460:45605): avc: denied { ioctl } for pid=16581 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1740.218893][T26843] Cannot create hsr debugfs directory [ 1740.236947][ T30] audit: type=1400 audit(2000000201.490:45606): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1740.263391][ T30] audit: type=1400 audit(2000000201.510:45607): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1740.270554][T26986] xt_bpf: check failed: parse error [ 1740.313226][ T30] audit: type=1400 audit(2000000201.670:45608): avc: denied { read write } for pid=26990 comm="syz.2.6158" name="v4l-subdev0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1740.396697][ T30] audit: type=1400 audit(2000000201.670:45609): avc: denied { ioctl open } for pid=26990 comm="syz.2.6158" path="/dev/v4l-subdev0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1740.757160][T26997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6159'. [ 1740.885179][ T30] audit: type=1400 audit(2000000201.700:45610): avc: denied { read } for pid=26990 comm="syz.2.6158" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1740.968015][ T30] audit: type=1400 audit(2000000201.700:45611): avc: denied { open } for pid=26990 comm="syz.2.6158" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1741.006910][ T30] audit: type=1400 audit(2000000201.800:45612): avc: denied { read write } for pid=16044 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1741.415293][T26843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1741.471792][T26843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1741.528230][T26843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1741.558194][T26843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1741.649788][T22844] usb 5-1: USB disconnect, device number 32 [ 1742.357181][T26843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1742.429318][T26843] 8021q: adding VLAN 0 to HW filter on device team0 [ 1742.518281][T21737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.525413][T21737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1742.600468][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.607607][ T4420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1742.778413][T27039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6176'. [ 1742.913693][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1742.938897][T27050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6177'. [ 1743.098845][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1743.126298][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.170773][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1743.251447][T27064] FAULT_INJECTION: forcing a failure. [ 1743.251447][T27064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1743.264812][T27064] CPU: 1 UID: 0 PID: 27064 Comm: syz.4.6180 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 1743.264836][T27064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1743.264846][T27064] Call Trace: [ 1743.264853][T27064] [ 1743.264860][T27064] dump_stack_lvl+0x16c/0x1f0 [ 1743.264887][T27064] should_fail_ex+0x512/0x640 [ 1743.264917][T27064] _copy_from_user+0x2e/0xd0 [ 1743.264944][T27064] copy_msghdr_from_user+0x98/0x160 [ 1743.264968][T27064] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1743.265001][T27064] ___sys_sendmsg+0xfe/0x1d0 [ 1743.265021][T27064] ? irqentry_exit+0x3b/0x90 [ 1743.265043][T27064] ? __pfx____sys_sendmsg+0x10/0x10 [ 1743.265067][T27064] ? __lock_acquire+0x622/0x1c90 [ 1743.265125][T27064] __sys_sendmsg+0x16d/0x220 [ 1743.265148][T27064] ? __pfx___sys_sendmsg+0x10/0x10 [ 1743.265188][T27064] do_syscall_64+0xcd/0x4c0 [ 1743.265213][T27064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.265230][T27064] RIP: 0033:0x7ff3d718e969 [ 1743.265244][T27064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1743.265261][T27064] RSP: 002b:00007ff3d7f8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1743.265278][T27064] RAX: ffffffffffffffda RBX: 00007ff3d73b6160 RCX: 00007ff3d718e969 [ 1743.265290][T27064] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1743.265301][T27064] RBP: 00007ff3d7f8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1743.265311][T27064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.265322][T27064] R13: 0000000000000000 R14: 00007ff3d73b6160 R15: 00007ffc5c4cab48 [ 1743.265345][T27064] [ 1743.470375][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1743.480190][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.493042][ T24] usb 3-1: Product: syz [ 1743.498607][ T24] usb 3-1: Manufacturer: syz [ 1743.503347][ T24] usb 3-1: SerialNumber: syz [ 1743.603039][T26843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1743.674347][T26843] veth0_vlan: entered promiscuous mode [ 1743.699544][T26843] veth1_vlan: entered promiscuous mode [ 1743.752813][T26843] veth0_macvtap: entered promiscuous mode [ 1743.784442][T26843] veth1_macvtap: entered promiscuous mode [ 1743.841215][T26843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1743.851711][T26843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1743.861680][T26843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.871333][T26843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.880359][T26843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.883273][T13294] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1744.279246][T26843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.324264][T13294] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 1744.339957][T13294] usb 7-1: config 0 has no interface number 0 [ 1744.346613][T13294] usb 7-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=cf.a5 [ 1744.432812][T13294] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.450853][T15768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1744.477809][T15768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.504286][T13294] usb 7-1: config 0 descriptor?? [ 1744.773274][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1744.792867][T13294] asix 7-1:0.146 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1744.802358][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1745.082093][T27069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.094579][T27069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.110071][ T30] kauditd_printk_skb: 373 callbacks suppressed [ 1745.110085][ T30] audit: type=1400 audit(2000000206.470:45986): avc: denied { read write } for pid=27068 comm="syz.6.6181" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1745.111237][T27069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.549111][ T9875] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1745.573157][ T30] audit: type=1400 audit(2000000206.470:45987): avc: denied { open } for pid=27068 comm="syz.6.6181" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1745.581313][T27069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.616393][ T30] audit: type=1400 audit(2000000206.470:45988): avc: denied { ioctl } for pid=27068 comm="syz.6.6181" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1745.646721][ T30] audit: type=1400 audit(2000000206.480:45989): avc: denied { ioctl } for pid=27084 comm="syz.1.6185" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1745.681521][ T30] audit: type=1400 audit(2000000206.520:45990): avc: denied { recv } for pid=27085 comm="syz.3.6113" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1745.710800][ T30] audit: type=1400 audit(2000000206.560:45991): avc: denied { create } for pid=27085 comm="syz.3.6113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1745.717858][T13294] asix 7-1:0.146 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1745.735866][ T30] audit: type=1400 audit(2000000206.570:45992): avc: denied { write } for pid=27085 comm="syz.3.6113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1745.763157][T13294] asix 7-1:0.146 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1745.773956][T13294] asix 7-1:0.146: probe with driver asix failed with error -71 [ 1745.794411][ T30] audit: type=1400 audit(2000000206.580:45993): avc: denied { read } for pid=27085 comm="syz.3.6113" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1745.826205][ T9875] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.921451][ T9875] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1745.933513][T13294] usb 7-1: USB disconnect, device number 49 [ 1745.950512][ T9875] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1745.964723][ T30] audit: type=1400 audit(2000000206.580:45994): avc: denied { open } for pid=27085 comm="syz.3.6113" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1745.988519][ C0] vkms_vblank_simulate: vblank timer overrun [ 1746.018117][ T9875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1746.041679][ T9875] usb 2-1: SerialNumber: syz [ 1746.104803][ T24] cdc_ncm 3-1:1.0: bind() failure [ 1746.144172][ T24] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 1746.156038][ T30] audit: type=1400 audit(2000000206.590:45995): avc: denied { ioctl } for pid=27085 comm="syz.3.6113" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1746.171998][ T24] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 1746.209854][ T24] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1746.263176][ T24] cdc_ncm 3-1:1.1: bind() failure [ 1746.288151][ T24] usbtest 3-1:1.1: couldn't get endpoints, -22 [ 1746.303310][ T24] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 1746.349585][ T24] usb 3-1: USB disconnect, device number 16 [ 1746.562220][ T9875] usb 2-1: 0:2 : does not exist [ 1746.922304][T27104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=27104 comm=syz.3.6190 [ 1747.279830][ T9875] usb 2-1: USB disconnect, device number 10 [ 1747.398045][T25969] udevd[25969]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1747.574604][ T5137] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1747.587112][ T5137] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1747.596693][ T5137] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1747.605908][ T5137] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1747.615624][ T5137] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1747.815852][T27111] lo speed is unknown, defaulting to 1000 [ 1747.877250][T15768] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.917030][T15768] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1748.480382][T27111] lo speed is unknown, defaulting to 1000 [ 1748.500578][ T9875] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1748.588831][T15768] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.624729][T15768] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1748.749118][ T9875] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1748.766959][ T9875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.777235][T15768] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.777621][ T9875] usb 4-1: Product: syz [ 1748.791892][ T9875] usb 4-1: Manufacturer: syz [ 1748.801386][ T9875] usb 4-1: SerialNumber: syz [ 1748.820514][ T9875] usb 4-1: config 0 descriptor?? [ 1749.675444][ T5137] Bluetooth: hci1: command tx timeout [ 1749.697812][T15768] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1749.755980][T27125] binder: 27109:27125 ioctl c0306201 0 returned -14 [ 1750.088454][ T9875] usb 4-1: USB disconnect, device number 23 [ 1750.148724][ T30] kauditd_printk_skb: 160 callbacks suppressed [ 1750.148740][ T30] audit: type=1400 audit(2000000211.510:46156): avc: denied { read open } for pid=27121 comm="syz.1.6196" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1750.150599][T15768] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.191117][T25270] udevd[25270]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1750.208111][ T30] audit: type=1400 audit(2000000211.550:46157): avc: denied { recv } for pid=15768 comm="kworker/u8:31" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1750.243173][T15768] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1750.344448][ T30] audit: type=1400 audit(2000000211.660:46158): avc: denied { write } for pid=27121 comm="syz.1.6196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1750.425340][ T30] audit: type=1400 audit(2000000211.790:46159): avc: denied { ioctl } for pid=27121 comm="syz.1.6196" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1750.467279][T27122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1750.582534][ T30] audit: type=1400 audit(2000000211.840:46160): avc: denied { read } for pid=27121 comm="syz.1.6196" dev="nsfs" ino=4026533218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1750.603822][ C0] vkms_vblank_simulate: vblank timer overrun [ 1750.635103][T27131] binder: 27130:27131 ioctl c0306201 200000000080 returned -14 [ 1750.652828][ T30] audit: type=1400 audit(2000000211.840:46161): avc: denied { open } for pid=27121 comm="syz.1.6196" path="net:[4026533218]" dev="nsfs" ino=4026533218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1750.818155][ T30] audit: type=1400 audit(2000000211.840:46162): avc: denied { create } for pid=27121 comm="syz.1.6196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1750.930427][ T30] audit: type=1400 audit(2000000211.850:46163): avc: denied { connect } for pid=27121 comm="syz.1.6196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1750.981394][T27134] wg2: left promiscuous mode [ 1750.988060][ T30] audit: type=1400 audit(2000000211.860:46164): avc: denied { accept } for pid=27121 comm="syz.1.6196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1751.009196][ T30] audit: type=1400 audit(2000000211.890:46165): avc: denied { read write } for pid=16581 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1751.354795][T27134] wg2: left allmulticast mode [ 1751.620342][T15768] bridge_slave_1: left allmulticast mode [ 1751.628876][T15768] bridge_slave_1: left promiscuous mode [ 1751.636259][T15768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.655135][T15768] bridge_slave_0: left allmulticast mode [ 1751.660948][T15768] bridge_slave_0: left promiscuous mode [ 1751.669648][T15768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.682778][T15768] tipc: Resetting bearer [ 1751.769680][T27152] netlink: 'syz.6.6203': attribute type 10 has an invalid length. [ 1751.818468][ T5137] Bluetooth: hci1: command tx timeout [ 1751.929779][T15768] tipc: Disabling bearer [ 1751.964201][T15768] geneve0 (unregistering): left promiscuous mode [ 1751.979569][T15768] team0: Port device geneve0 removed [ 1752.180336][T15768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1752.190590][T15768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1752.200945][T15768] bond0 (unregistering): Released all slaves [ 1752.301081][T15768] bond1 (unregistering): (slave vlan0): Releasing active interface [ 1752.310379][T15768] bond1 (unregistering): Released all slaves [ 1752.330110][T27142] wg2: entered promiscuous mode [ 1752.336902][T27142] wg2: entered allmulticast mode [ 1752.560263][T27111] chnl_net:caif_netlink_parms(): no params data found [ 1752.639600][T27161] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6207'. [ 1752.754522][T27111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.762183][T27111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.769400][T27111] bridge_slave_0: entered allmulticast mode [ 1752.778225][T27111] bridge_slave_0: entered promiscuous mode [ 1752.786608][T27111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.793750][T27111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.800930][T27111] bridge_slave_1: entered allmulticast mode [ 1752.810026][T27111] bridge_slave_1: entered promiscuous mode [ 1752.827927][T27168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27168 comm=syz.3.6208 [ 1753.027368][T27173] ubi31: detaching mtd0 [ 1753.256299][T27111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1753.266051][T27173] ubi31: mtd0 is detached [ 1753.271437][T27177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=27177 comm=syz.3.6208 [ 1753.302237][T27111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1753.418543][T27168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6208'. [ 1753.836693][ T5137] Bluetooth: hci1: command tx timeout [ 1753.846793][T27111] team0: Port device team_slave_0 added [ 1753.875896][T27111] team0: Port device team_slave_1 added [ 1754.431691][T27111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1754.447050][T27111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1754.584747][T27111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1754.837158][T27111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1754.894985][T27111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1754.964433][T27111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1755.109572][T27193] wg2: entered promiscuous mode [ 1755.115214][T27193] wg2: entered allmulticast mode [ 1755.131063][T15768] tipc: Left network mode [ 1755.218411][T27205] FAULT_INJECTION: forcing a failure. [ 1755.218411][T27205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1755.231551][T27205] CPU: 1 UID: 0 PID: 27205 Comm: syz.2.6218 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 1755.231576][T27205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1755.231586][T27205] Call Trace: [ 1755.231593][T27205] [ 1755.231600][T27205] dump_stack_lvl+0x16c/0x1f0 [ 1755.231627][T27205] should_fail_ex+0x512/0x640 [ 1755.231657][T27205] _copy_from_user+0x2e/0xd0 [ 1755.231685][T27205] move_addr_to_kernel+0x65/0x170 [ 1755.231705][T27205] __copy_msghdr+0x386/0x470 [ 1755.231728][T27205] copy_msghdr_from_user+0xc1/0x160 [ 1755.231750][T27205] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1755.231775][T27205] ? __lock_acquire+0xb8a/0x1c90 [ 1755.231806][T27205] ___sys_sendmsg+0xfe/0x1d0 [ 1755.231829][T27205] ? __pfx____sys_sendmsg+0x10/0x10 [ 1755.231848][T27205] ? __lock_acquire+0x622/0x1c90 [ 1755.231901][T27205] __sys_sendmsg+0x16d/0x220 [ 1755.231936][T27205] ? __pfx___sys_sendmsg+0x10/0x10 [ 1755.231998][T27205] do_syscall_64+0xcd/0x4c0 [ 1755.232023][T27205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.232040][T27205] RIP: 0033:0x7fe5a318e969 [ 1755.232056][T27205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1755.232072][T27205] RSP: 002b:00007fe5a408a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1755.232090][T27205] RAX: ffffffffffffffda RBX: 00007fe5a33b6160 RCX: 00007fe5a318e969 [ 1755.232102][T27205] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1755.232113][T27205] RBP: 00007fe5a408a090 R08: 0000000000000000 R09: 0000000000000000 [ 1755.232123][T27205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1755.232133][T27205] R13: 0000000000000000 R14: 00007fe5a33b6160 R15: 00007ffcdc151ae8 [ 1755.232157][T27205] [ 1755.415982][ T30] kauditd_printk_skb: 270 callbacks suppressed [ 1755.415992][ T30] audit: type=1400 audit(2000000216.530:46424): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1755.509839][T27189] tipc: Enabled bearer , priority 0 [ 1755.563566][T27188] tipc: Disabling bearer [ 1755.589676][ T30] audit: type=1400 audit(2000000216.570:46425): avc: denied { create } for pid=27202 comm="syz.2.6218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1755.620566][ T30] audit: type=1400 audit(2000000216.580:46426): avc: denied { bind } for pid=27202 comm="syz.2.6218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1755.779361][T27111] hsr_slave_0: entered promiscuous mode [ 1755.790540][ T30] audit: type=1400 audit(2000000216.770:46427): avc: denied { name_bind } for pid=27202 comm="syz.2.6218" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1755.818061][T27111] hsr_slave_1: entered promiscuous mode [ 1756.297325][ T5137] Bluetooth: hci1: command tx timeout [ 1756.307427][ T30] audit: type=1400 audit(2000000216.770:46428): avc: denied { node_bind } for pid=27202 comm="syz.2.6218" saddr=fc00::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1756.335214][T27111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1756.350264][T27111] Cannot create hsr debugfs directory [ 1756.367194][ T30] audit: type=1400 audit(2000000216.810:46429): avc: denied { create } for pid=27188 comm="syz.1.6214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1756.431512][ T30] audit: type=1400 audit(2000000216.820:46430): avc: denied { create } for pid=27188 comm="syz.1.6214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1756.453569][ T30] audit: type=1400 audit(2000000216.820:46431): avc: denied { write } for pid=27188 comm="syz.1.6214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1756.586742][ T30] audit: type=1400 audit(2000000216.820:46432): avc: denied { read } for pid=27188 comm="syz.1.6214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1757.063711][ T30] audit: type=1400 audit(2000000216.860:46433): avc: denied { read write } for pid=26843 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1757.784543][T27238] wg2: left promiscuous mode [ 1757.802062][T27238] wg2: left allmulticast mode [ 1758.740214][T27240] wg2: entered promiscuous mode [ 1758.746108][T27240] wg2: entered allmulticast mode [ 1758.754081][T27243] tipc: Failed to obtain node identity [ 1758.759849][T27243] tipc: Enabling of bearer rejected, failed to enable media [ 1758.775891][T27244] sp0: Synchronizing with TNC [ 1759.073428][T15768] hsr_slave_0: left promiscuous mode [ 1759.096626][T15768] 1·: left promiscuous mode [ 1759.110278][T15768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1759.242745][T15768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1759.378762][T15768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1759.394140][T15768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1759.438362][T15768] team0: left promiscuous mode [ 1759.457325][T15768] team_slave_0: left promiscuous mode [ 1759.510463][T15768] team_slave_1: left promiscuous mode [ 1759.520243][T15768] veth1_macvtap: left promiscuous mode [ 1759.537720][T15768] veth0_macvtap: left promiscuous mode [ 1760.572191][ T30] kauditd_printk_skb: 228 callbacks suppressed [ 1760.572427][ T30] audit: type=1400 audit(2000000221.930:46662): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1760.619792][ T30] audit: type=1400 audit(2000000221.930:46663): avc: denied { read write } for pid=16581 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1760.650250][ T30] audit: type=1400 audit(2000000221.930:46664): avc: denied { open } for pid=16581 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1760.677977][ T30] audit: type=1400 audit(2000000221.930:46665): avc: denied { ioctl } for pid=16581 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1760.708652][ T30] audit: type=1400 audit(2000000221.970:46666): avc: denied { recv } for pid=30 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1760.784006][ T30] audit: type=1400 audit(2000000222.140:46667): avc: denied { prog_load } for pid=27273 comm="syz.2.6239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1760.912462][T15768] team0 (unregistering): Port device team_slave_1 removed [ 1760.922698][ T30] audit: type=1400 audit(2000000222.140:46668): avc: denied { bpf } for pid=27273 comm="syz.2.6239" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1760.947701][ T30] audit: type=1400 audit(2000000222.140:46669): avc: denied { perfmon } for pid=27273 comm="syz.2.6239" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1760.975084][ T30] audit: type=1400 audit(2000000222.140:46670): avc: denied { prog_run } for pid=27273 comm="syz.2.6239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1761.056875][ T30] audit: type=1400 audit(2000000222.170:46671): avc: denied { execmem } for pid=27273 comm="syz.2.6239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1761.129495][T15768] team0 (unregistering): Port device team_slave_0 removed [ 1761.489243][T27283] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 1762.157060][T27291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6243'. [ 1762.308467][T27270] veth0_vlan: entered allmulticast mode [ 1762.411716][T27295] netlink: 'syz.3.6244': attribute type 10 has an invalid length. [ 1762.964775][T13294] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1763.200273][T27312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6251'. [ 1763.302497][T13294] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1763.353402][T13294] usb 2-1: config 0 has no interface number 0 [ 1763.368825][T13294] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1763.395547][T13294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.455368][T13294] usb 2-1: Product: syz [ 1763.468528][T13294] usb 2-1: Manufacturer: syz [ 1763.492328][T13294] usb 2-1: SerialNumber: syz [ 1763.516211][T13294] usb 2-1: config 0 descriptor?? [ 1763.631101][T27111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1763.650982][T27111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1763.660633][T27327] IPv6: NLM_F_CREATE should be specified when creating new route [ 1763.671397][T27111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1763.684001][T27111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1763.792088][T27111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1763.822566][T27327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1763.825057][T27111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1763.829830][T27327] IPv6: NLM_F_CREATE should be set when creating new route [ 1763.848494][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.855638][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1763.872566][T21737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.879676][T21737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1764.008417][T27332] Invalid ELF header type: 3 != 1 [ 1764.562264][T27111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1764.573129][T13294] usb 2-1: Firmware: major: 57, minor: 237, hardware type: UNKNOWN (158) [ 1764.796174][T13294] usb 2-1: Firmware: build [ 1765.000399][T27355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6262'. [ 1765.019424][T27355] netlink: 'syz.2.6262': attribute type 21 has an invalid length. [ 1765.526956][T13294] usb 2-1: failed to fetch extended address, random address set [ 1765.556316][T13294] usb 2-1: atusb_probe: initialization failed, error = -524 [ 1765.630858][ T30] kauditd_printk_skb: 275 callbacks suppressed [ 1765.630873][ T30] audit: type=1400 audit(2000000226.990:46947): avc: denied { recv } for pid=5799 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1765.674200][T13294] atusb 2-1:0.128: probe with driver atusb failed with error -524 [ 1765.700695][T13294] usb 2-1: USB disconnect, device number 11 [ 1765.719700][ T30] audit: type=1400 audit(2000000226.990:46948): avc: denied { read write } for pid=23671 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1765.808881][ T30] audit: type=1400 audit(2000000226.990:46949): avc: denied { read write open } for pid=23671 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1765.889132][ T30] audit: type=1400 audit(2000000226.990:46950): avc: denied { ioctl } for pid=23671 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1765.927002][ T30] audit: type=1400 audit(2000000227.030:46951): avc: denied { recv } for pid=5799 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1765.952684][ C1] vkms_vblank_simulate: vblank timer overrun [ 1765.962399][ T30] audit: type=1400 audit(2000000227.030:46952): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1765.987525][ C1] vkms_vblank_simulate: vblank timer overrun [ 1766.018714][ T30] audit: type=1400 audit(2000000227.050:46953): avc: denied { egress } for pid=13511 comm="kworker/u8:20" saddr=fe80::1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1766.047307][ T30] audit: type=1400 audit(2000000227.050:46954): avc: denied { sendto } for pid=13511 comm="kworker/u8:20" saddr=fe80::1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1766.071026][ C1] vkms_vblank_simulate: vblank timer overrun [ 1766.186916][ T30] audit: type=1400 audit(2000000227.110:46955): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1766.214758][ T30] audit: type=1400 audit(2000000227.110:46956): avc: denied { read write } for pid=16581 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1766.239087][ C1] vkms_vblank_simulate: vblank timer overrun [ 1767.401504][T27111] veth0_vlan: entered promiscuous mode [ 1767.426677][T27111] veth1_vlan: entered promiscuous mode [ 1767.429371][T27375] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6267'. [ 1767.495047][T22844] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1767.503092][T27111] veth0_macvtap: entered promiscuous mode [ 1767.527508][T27111] veth1_macvtap: entered promiscuous mode [ 1767.550894][T27111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1767.573016][T27111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1767.592704][T27111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.602500][T27111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.612488][T27111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.623477][T27111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.709773][T22844] usb 2-1: Using ep0 maxpacket: 16 [ 1767.721926][T22844] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1767.748587][T22844] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1767.760683][T22844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.805812][T22844] usb 2-1: config 0 descriptor?? [ 1767.848313][T22844] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input86 [ 1767.877982][T27381] Cannot find del_set index 1 as target [ 1768.020215][T15768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.061159][T21737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.610921][T15768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.627012][T21737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1769.045235][ T24] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1769.153698][ T5171] bcm5974 2-1:0.0: could not read from device [ 1769.154884][T19850] usb 2-1: USB disconnect, device number 12 [ 1769.176097][T27372] bcm5974 2-1:0.0: could not read from device [ 1769.219719][T25321] bcm5974 2-1:0.0: could not read from device [ 1769.286851][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.298173][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1769.308281][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1769.317923][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.396630][ T24] usb 3-1: config 0 descriptor?? [ 1769.455255][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1769.585843][T19850] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1769.619565][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1769.977462][T19850] usb 2-1: Using ep0 maxpacket: 16 [ 1769.986943][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1770.179879][T27388] dvb-usb: bulk message failed: -22 (2/0) [ 1770.200480][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1770.207744][T19850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1770.223814][ T24] usb 3-1: media controller created [ 1770.242908][T19850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1770.263215][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1770.284832][T19850] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1770.338894][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1770.353081][T19850] usb 2-1: string descriptor 0 read error: -71 [ 1770.361658][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1770.371445][T19850] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1770.383018][T19850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.399263][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input87 [ 1770.442673][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 1770.462345][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1770.470478][T27406] wg2: left promiscuous mode [ 1770.470498][T27406] wg2: left allmulticast mode [ 1770.490915][T27409] wg2: entered promiscuous mode [ 1770.497293][T19850] usb 2-1: config 0 descriptor?? [ 1770.506448][T27409] wg2: entered allmulticast mode [ 1770.512919][T19850] usb 2-1: can't set config #0, error -71 [ 1770.534024][T19850] usb 2-1: USB disconnect, device number 13 [ 1770.567073][ T24] usb 3-1: USB disconnect, device number 17 [ 1770.639329][ T30] kauditd_printk_skb: 279 callbacks suppressed [ 1770.639344][ T30] audit: type=1400 audit(2000000232.000:47236): avc: denied { read write } for pid=27111 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1770.790268][ T30] audit: type=1400 audit(2000000232.000:47237): avc: denied { read write open } for pid=27111 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1770.823424][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1770.894560][ T30] audit: type=1400 audit(2000000232.000:47238): avc: denied { ioctl } for pid=27111 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1771.158716][ T30] audit: type=1400 audit(2000000232.050:47239): avc: denied { recv } for pid=5186 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1772.244943][ T30] audit: type=1400 audit(2000000232.060:47240): avc: denied { read write } for pid=23671 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1772.544982][ T30] audit: type=1400 audit(2000000232.060:47241): avc: denied { read write open } for pid=23671 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1772.634231][T25292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1772.660191][T25292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1772.669860][ T30] audit: type=1400 audit(2000000232.060:47242): avc: denied { ioctl } for pid=23671 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1772.696599][T25292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1772.712656][ T30] audit: type=1400 audit(2000000232.070:47243): avc: denied { recv } for pid=27111 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.134 dest=46486 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1772.740111][ T30] audit: type=1400 audit(2000000232.110:47244): avc: denied { read write } for pid=16581 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1772.745133][T25292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1772.765175][ T30] audit: type=1400 audit(2000000232.110:47245): avc: denied { open } for pid=16581 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1772.772923][T25292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1773.549211][T27424] lo speed is unknown, defaulting to 1000 [ 1773.574533][T27424] lo speed is unknown, defaulting to 1000 [ 1773.785778][T27443] ================================================================== [ 1773.793848][T27443] BUG: KASAN: global-out-of-bounds in fib6_clean_node+0x51c/0x5b0 [ 1773.801647][T27443] Read of size 8 at addr ffffffff9b218508 by task syz.4.6286/27443 [ 1773.809537][T27443] [ 1773.811853][T27443] CPU: 0 UID: 0 PID: 27443 Comm: syz.4.6286 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 1773.811875][T27443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1773.811885][T27443] Call Trace: [ 1773.811891][T27443] [ 1773.811897][T27443] dump_stack_lvl+0x116/0x1f0 [ 1773.811921][T27443] print_report+0xcd/0x680 [ 1773.811941][T27443] ? __virt_addr_valid+0x81/0x610 [ 1773.811966][T27443] ? __phys_addr+0xe8/0x180 [ 1773.811996][T27443] ? fib6_clean_node+0x51c/0x5b0 [ 1773.812018][T27443] kasan_report+0xe0/0x110 [ 1773.812035][T27443] ? fib6_clean_node+0x51c/0x5b0 [ 1773.812058][T27443] fib6_clean_node+0x51c/0x5b0 [ 1773.812079][T27443] ? __pfx_fib6_clean_node+0x10/0x10 [ 1773.812100][T27443] ? __lock_acquire+0xb8a/0x1c90 [ 1773.812121][T27443] fib6_walk_continue+0x452/0x8d0 [ 1773.812140][T27443] fib6_walk+0x182/0x370 [ 1773.812158][T27443] ? __pfx_fib6_ifdown+0x10/0x10 [ 1773.812178][T27443] fib6_clean_tree+0xd4/0x110 [ 1773.812195][T27443] ? __pfx_fib6_clean_tree+0x10/0x10 [ 1773.812215][T27443] ? __pfx_fib6_clean_node+0x10/0x10 [ 1773.812236][T27443] ? __pfx_fib6_ifdown+0x10/0x10 [ 1773.812257][T27443] ? __pfx_fib6_ifdown+0x10/0x10 [ 1773.812277][T27443] __fib6_clean_all+0x107/0x2d0 [ 1773.812297][T27443] rt6_disable_ip+0x2ec/0x990 [ 1773.812314][T27443] ? __mutex_trylock_common+0xe9/0x250 [ 1773.812332][T27443] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1773.812351][T27443] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1773.812367][T27443] ? rcu_is_watching+0x12/0xc0 [ 1773.812384][T27443] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 1773.812406][T27443] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1773.812427][T27443] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 1773.812451][T27443] addrconf_notify+0x220/0x19e0 [ 1773.812464][T27443] ? ip6mr_device_event+0x1bc/0x230 [ 1773.812481][T27443] notifier_call_chain+0xbc/0x410 [ 1773.812496][T27443] ? __pfx_addrconf_notify+0x10/0x10 [ 1773.812512][T27443] call_netdevice_notifiers_info+0xbe/0x140 [ 1773.812535][T27443] __dev_notify_flags+0x1f7/0x2e0 [ 1773.812552][T27443] ? __pfx___dev_notify_flags+0x10/0x10 [ 1773.812570][T27443] ? __pfx___dev_change_flags+0x10/0x10 [ 1773.812589][T27443] netif_change_flags+0x108/0x160 [ 1773.812608][T27443] dev_change_flags+0xba/0x250 [ 1773.812629][T27443] dev_ifsioc+0x1498/0x1f70 [ 1773.812646][T27443] ? __pfx_dev_ifsioc+0x10/0x10 [ 1773.812661][T27443] ? __pfx___mutex_lock+0x10/0x10 [ 1773.812681][T27443] ? dev_load+0x8e/0x240 [ 1773.812698][T27443] dev_ioctl+0x223/0x10e0 [ 1773.812713][T27443] sock_do_ioctl+0x19d/0x280 [ 1773.812734][T27443] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1773.812757][T27443] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 1773.812779][T27443] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 1773.812801][T27443] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1773.812824][T27443] sock_ioctl+0x227/0x6b0 [ 1773.812837][T27443] ? __pfx_sock_ioctl+0x10/0x10 [ 1773.812849][T27443] ? hook_file_ioctl_common+0x145/0x410 [ 1773.812868][T27443] ? selinux_file_ioctl+0x180/0x270 [ 1773.812889][T27443] ? selinux_file_ioctl+0xb4/0x270 [ 1773.812910][T27443] ? __pfx_sock_ioctl+0x10/0x10 [ 1773.812923][T27443] __x64_sys_ioctl+0x18b/0x210 [ 1773.812946][T27443] do_syscall_64+0xcd/0x4c0 [ 1773.812965][T27443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.812980][T27443] RIP: 0033:0x7faa1878e969 [ 1773.812997][T27443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1773.813013][T27443] RSP: 002b:00007faa196b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1773.813028][T27443] RAX: ffffffffffffffda RBX: 00007faa189b5fa0 RCX: 00007faa1878e969 [ 1773.813039][T27443] RDX: 0000200000000280 RSI: 0000000000008914 RDI: 0000000000000004 [ 1773.813048][T27443] RBP: 00007faa18810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1773.813058][T27443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1773.813067][T27443] R13: 0000000000000000 R14: 00007faa189b5fa0 R15: 00007fff9e65fd08 [ 1773.813086][T27443] [ 1773.813092][T27443] [ 1774.201039][T27443] The buggy address belongs to the variable: [ 1774.206996][T27443] binder_devices+0x8/0x40 [ 1774.211396][T27443] [ 1774.213698][T27443] The buggy address belongs to the physical page: [ 1774.220083][T27443] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1b218 [ 1774.228820][T27443] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1774.236696][T27443] raw: 00fff00000002000 ffffea00006c8608 ffffea00006c8608 0000000000000000 [ 1774.245258][T27443] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1774.253819][T27443] page dumped because: kasan: bad access detected [ 1774.260209][T27443] page_owner info is not present (never set?) [ 1774.266247][T27443] [ 1774.268551][T27443] Memory state around the buggy address: [ 1774.274159][T27443] ffffffff9b218400: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1774.282199][T27443] ffffffff9b218480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1774.290238][T27443] >ffffffff9b218500: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1774.298277][T27443] ^ [ 1774.302579][T27443] ffffffff9b218580: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 1774.310617][T27443] ffffffff9b218600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 [ 1774.318653][T27443] ================================================================== [ 1774.326815][T27443] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1774.334011][T27443] CPU: 0 UID: 0 PID: 27443 Comm: syz.4.6286 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 1774.345712][T27443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1774.355758][T27443] Call Trace: [ 1774.359024][T27443] [ 1774.361938][T27443] dump_stack_lvl+0x3d/0x1f0 [ 1774.366522][T27443] panic+0x71c/0x800 [ 1774.370405][T27443] ? __pfx_panic+0x10/0x10 [ 1774.374809][T27443] ? mark_held_locks+0x49/0x80 [ 1774.379562][T27443] ? fib6_clean_node+0x51c/0x5b0 [ 1774.384488][T27443] ? fib6_clean_node+0x51c/0x5b0 [ 1774.389412][T27443] check_panic_on_warn+0xab/0xb0 [ 1774.394336][T27443] end_report+0x107/0x170 [ 1774.398652][T27443] kasan_report+0xee/0x110 [ 1774.403051][T27443] ? fib6_clean_node+0x51c/0x5b0 [ 1774.407983][T27443] fib6_clean_node+0x51c/0x5b0 [ 1774.412737][T27443] ? __pfx_fib6_clean_node+0x10/0x10 [ 1774.418011][T27443] ? __lock_acquire+0xb8a/0x1c90 [ 1774.422940][T27443] fib6_walk_continue+0x452/0x8d0 [ 1774.427954][T27443] fib6_walk+0x182/0x370 [ 1774.432188][T27443] ? __pfx_fib6_ifdown+0x10/0x10 [ 1774.437114][T27443] fib6_clean_tree+0xd4/0x110 [ 1774.441778][T27443] ? __pfx_fib6_clean_tree+0x10/0x10 [ 1774.447050][T27443] ? __pfx_fib6_clean_node+0x10/0x10 [ 1774.452327][T27443] ? __pfx_fib6_ifdown+0x10/0x10 [ 1774.457255][T27443] ? __pfx_fib6_ifdown+0x10/0x10 [ 1774.462180][T27443] __fib6_clean_all+0x107/0x2d0 [ 1774.467019][T27443] rt6_disable_ip+0x2ec/0x990 [ 1774.471681][T27443] ? __mutex_trylock_common+0xe9/0x250 [ 1774.477132][T27443] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1774.483010][T27443] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1774.488193][T27443] ? rcu_is_watching+0x12/0xc0 [ 1774.492941][T27443] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 1774.498393][T27443] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1774.504011][T27443] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 1774.509898][T27443] addrconf_notify+0x220/0x19e0 [ 1774.514733][T27443] ? ip6mr_device_event+0x1bc/0x230 [ 1774.519917][T27443] notifier_call_chain+0xbc/0x410 [ 1774.524923][T27443] ? __pfx_addrconf_notify+0x10/0x10 [ 1774.530191][T27443] call_netdevice_notifiers_info+0xbe/0x140 [ 1774.536077][T27443] __dev_notify_flags+0x1f7/0x2e0 [ 1774.541087][T27443] ? __pfx___dev_notify_flags+0x10/0x10 [ 1774.546616][T27443] ? __pfx___dev_change_flags+0x10/0x10 [ 1774.552150][T27443] netif_change_flags+0x108/0x160 [ 1774.557163][T27443] dev_change_flags+0xba/0x250 [ 1774.561918][T27443] dev_ifsioc+0x1498/0x1f70 [ 1774.566406][T27443] ? __pfx_dev_ifsioc+0x10/0x10 [ 1774.571240][T27443] ? __pfx___mutex_lock+0x10/0x10 [ 1774.576256][T27443] ? dev_load+0x8e/0x240 [ 1774.580482][T27443] dev_ioctl+0x223/0x10e0 [ 1774.584796][T27443] sock_do_ioctl+0x19d/0x280 [ 1774.589374][T27443] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1774.594474][T27443] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 1774.600963][T27443] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 1774.607458][T27443] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1774.614294][T27443] sock_ioctl+0x227/0x6b0 [ 1774.618605][T27443] ? __pfx_sock_ioctl+0x10/0x10 [ 1774.623432][T27443] ? hook_file_ioctl_common+0x145/0x410 [ 1774.628965][T27443] ? selinux_file_ioctl+0x180/0x270 [ 1774.634154][T27443] ? selinux_file_ioctl+0xb4/0x270 [ 1774.639254][T27443] ? __pfx_sock_ioctl+0x10/0x10 [ 1774.644084][T27443] __x64_sys_ioctl+0x18b/0x210 [ 1774.648838][T27443] do_syscall_64+0xcd/0x4c0 [ 1774.653326][T27443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.659202][T27443] RIP: 0033:0x7faa1878e969 [ 1774.663600][T27443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1774.683189][T27443] RSP: 002b:00007faa196b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1774.691583][T27443] RAX: ffffffffffffffda RBX: 00007faa189b5fa0 RCX: 00007faa1878e969 [ 1774.699539][T27443] RDX: 0000200000000280 RSI: 0000000000008914 RDI: 0000000000000004 [ 1774.707491][T27443] RBP: 00007faa18810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1774.715443][T27443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1774.723396][T27443] R13: 0000000000000000 R14: 00007faa189b5fa0 R15: 00007fff9e65fd08 [ 1774.731351][T27443] [ 1774.734536][T27443] Kernel Offset: disabled [ 1774.738835][T27443] Rebooting in 86400 seconds..