last executing test programs: 13.564689038s ago: executing program 4 (id=621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000420000009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000008000000", @ANYRES32=r0], 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000500)=ANY=[], 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) setuid(0xee01) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x100, 0x200, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x1012c00, &(0x7f00000003c0)={[{@nfs_export_off}, {@default_permissions}], [{@dont_hash}, {@fowner_gt={'fowner>', r2}}, {@fsname={'fsname', 0x3d, ':@#'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@flag='async'}, {@audit}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, '-'}}, {@fowner_eq={'fowner', 0x3d, r3}}]}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0xca4, &(0x7f00000001c0)={0x0, 0x8de0, 0x10310, 0xfffffffe, 0x252}, &(0x7f0000000180), &(0x7f00000000c0)) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 11.797724033s ago: executing program 4 (id=628): io_setup(0x9, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2}], 0x1, 0x40800) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r9 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000001380)=@udp=r9}, 0x20) recvmsg(r9, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) socket(0x3, 0x5, 0x0) 10.406188031s ago: executing program 1 (id=634): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7}, {0x3, 0x8}, {0xd, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd69, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x4}]}}]}, 0x38}}, 0x42000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 10.259031323s ago: executing program 1 (id=636): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x2180, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/214, 0xd6}], 0x1, 0x2000400, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b000100000001090400"], 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x80) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10.021613918s ago: executing program 4 (id=637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x12, 0x0, &(0x7f00000001c0)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d105012000020000de010902120001000000000904"], 0x0) 8.471882903s ago: executing program 2 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x76, &(0x7f0000000880)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x33, 0xff, @dev={0xfe, 0x80, '\x00', 0x31}, @local, [@routing={0x2f}], "13d87159da0a7f6b"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4710c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x4, 0x9, 0x10001}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x6c, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xd}, @device_b, @device_a, @initial, {0x0, 0x4c}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x18, @val={0x8c, 0x18, {0x1fe, "3bf9d27a3fa9", @long="f877cc31de9038e5b85b2ccfde685c3b"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x0, 0x4e3, 0x4, 0x2, 0x2, 0x40ed, 0xb5]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200040d0}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000940)={0x20, 0x78, 0x3c00, 0x960, 0x1, 0x7, 0x20, 0x2, {0x0, 0x7}, {0x70c0, 0x2, 0x1}, {0x4, 0x4}, {0x200, 0x5, 0x1}, 0x2, 0x10, 0x81, 0x9, 0x0, 0xffffff00, 0x9, 0x5, 0x8, 0x3, 0x5, 0x2, 0x20, 0x100, 0x1, 0x7}) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0) r7 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440)=r6, 0x1) r8 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) sendmmsg$unix(r6, &(0x7f0000000440)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)="5a8f6944924e224b64242bc5cfa515760b17342487544b", 0x17}, {&(0x7f0000000140)="27234d8dc7c030d0f2460e453309276ea8edc4cc889180d474c189096e52293640eddee3c4642aee654d9dffd0c1d4f2c3671bb101f6f777cdaff71b778385499caf27b2d1707154747e9ee4e64f6d822f2e", 0x52}], 0x2, &(0x7f0000000200)=[@rights={{0x28, 0x1, 0x1, [r0, r8, r0, r0, r0, r0]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="bdd6a919a491d88039213139fbc8998e4c4a847ecc2c50e4efc910eb2e2b54272a49d5e3ea4c00f4ec9c2cd23a3a8a3eb71d8cee156a", 0x36}, {&(0x7f0000000300)="1901f911e2e4bb807301ed1d052ccb26538decfcaadd056de082cbb5322ce36907413eba0b94d90703", 0x29}, {&(0x7f0000000340)="3e77c4c02e8687688a0b58f032d08f89513da2851eb72d60ae6ee4b6876e383accad288ce8dc499c7e62cd5da1eb542305331ff3603a4abf631ff5f5fd06e73134b5d0f4c6f19c8e4bd243721f9f948bf14969a503df32302d3a483f1fb71d97102bf7453b9556b6824ab08b88e7dc3fdfb69437df76e3b9ff0527c2ff3eeaa8a2c2c31b6904b253eacd2efa309f0e43bf138451b585dbcd153febf825fe7834", 0xa0}], 0x3}}], 0x2, 0x20000000) 8.234192056s ago: executing program 2 (id=643): r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2138) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r1 = syz_open_procfs(0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000200)={0xa000000a}) finit_module(r5, 0x0, 0x0) close_range(r3, r2, 0x2) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002a2090000000600"], 0x84}}, 0x0) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) remap_file_pages(&(0x7f0000c4f000/0x2000)=nil, 0x2000, 0x1, 0x4, 0x100) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) 7.112727178s ago: executing program 1 (id=644): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {0x1, 0x3, 0x5845, 0x101}, 0x21, [0x3a, 0x3, 0x4, 0x9, 0x4, 0x84, 0x13, 0x8, 0x0, 0x8, 0x2, 0x3, 0x1, 0xa, 0x7fffffff, 0x2, 0x6, 0x6, 0x0, 0x0, 0x5, 0x0, 0x2, 0x10000, 0x8, 0x4, 0x7, 0x7, 0xae, 0x1, 0x3, 0x0, 0x7, 0x3, 0xfffffff9, 0xffff, 0xa, 0x6, 0x4, 0x10001, 0x10, 0x0, 0x4, 0x10001, 0xa3, 0x1, 0x0, 0x6, 0x80000001, 0xffffe03e, 0x8, 0x7fff, 0xfffffff9, 0xbb89, 0x1dfb652e, 0x5, 0x7, 0x0, 0x6, 0x5, 0x1, 0x1ff, 0xce6d, 0x8001], [0xf34, 0x80000000, 0xd1, 0xa, 0x1b, 0x5, 0x6, 0x2, 0x10, 0x8, 0x9, 0x7, 0x401, 0x8, 0x2, 0x10001, 0x817807a4, 0x6, 0xffff9304, 0x1, 0x9, 0x3, 0x80, 0x40, 0x3, 0x2, 0x8, 0x6, 0x7fff, 0x3, 0xc, 0x0, 0x4, 0x275, 0x90, 0x2c, 0x3, 0x0, 0x6, 0x4, 0x3ff, 0x0, 0xee, 0x8000, 0x9, 0x3, 0x3, 0x5, 0xe4e, 0x8c, 0xe4, 0x2, 0x2, 0x9b40, 0x1000, 0x1000, 0x7, 0x2, 0x9, 0x5, 0x2700, 0xfffffffe, 0xe367, 0xbf], [0xffffffff, 0xffffffff, 0x0, 0x2, 0xa, 0x9, 0x3ff, 0x6, 0x4, 0xab87, 0xb810, 0x7, 0xc, 0x71d, 0x7, 0x8, 0x10001, 0x3, 0xfffffffd, 0x0, 0x1, 0xd25, 0xe61, 0x90000, 0x4, 0x7, 0x4, 0x8b, 0x8, 0x0, 0x2, 0x5, 0x0, 0xe, 0x0, 0x40, 0x4, 0xfff, 0x5, 0x3, 0x0, 0x9, 0x3, 0x2, 0x2, 0x5, 0xbae, 0x5, 0x9, 0x7, 0x6, 0x5, 0xffff00b9, 0xe, 0x9, 0x7, 0xed9, 0x3, 0x1000, 0x1ff, 0x7, 0x13, 0x6, 0x7ff], [0x77, 0x99, 0x80, 0x5, 0x5, 0x7, 0x9, 0x9c, 0x5, 0x9, 0x3, 0x5, 0x3, 0x100, 0xa, 0x7e0, 0x1, 0x81, 0xa49, 0x2, 0x7, 0x6, 0x2, 0x1000, 0x6, 0x400, 0x0, 0x2, 0x2, 0x401, 0x6, 0xc8, 0x10f78000, 0x5, 0x8, 0x0, 0xfffffffe, 0x8, 0x7, 0xa, 0x2, 0xffffffff, 0x1, 0x5b, 0x7, 0x7, 0x10001, 0x6, 0x10001, 0x80000001, 0x2, 0x1, 0x5, 0x4, 0x8, 0x3, 0x2, 0x8, 0x1, 0x4, 0x80, 0x101, 0xdced, 0x400]}, 0x45c) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)=[{&(0x7f00000007c0)="08006d2a81496b273dbc", 0xa}], 0x1}, 0x800) recvmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}, 0x6b}], 0x1, 0x40000000, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x2000002389a) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x25, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x9, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = syz_open_procfs(0x0, 0x0) read$FUSE(r7, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) flock(0xffffffffffffffff, 0x2) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r9 = fsopen(&(0x7f0000000000)='ubifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r2, 0x0, 0x89) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r10, 0x3, 0x0, @val=@iter={0x0}}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x398, @empty}, 0x1c) 6.999712398s ago: executing program 4 (id=646): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.189897682s ago: executing program 1 (id=647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) vmsplice(r2, &(0x7f0000000580)=[{&(0x7f0000000080)="d9", 0x1}], 0x1, 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) listen(r0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000680)='5~v', 0xc3ff}], 0x1, &(0x7f0000000b40)=ANY=[], 0x108}}], 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000987000/0x5000)=nil, 0x5000, 0xb635773f06ebbee7, 0x13, 0xffffffffffffffff, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r10, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @empty}}}], 0x20}}], 0x1, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 6.176949404s ago: executing program 2 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000100), 0x4000000000000b1, 0x10) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000ffff00000000240100000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="24a6eb"], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 5.229107055s ago: executing program 2 (id=649): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget(0x2, 0x600) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0x0) 4.565581152s ago: executing program 3 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.491329025s ago: executing program 3 (id=653): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r2, r0}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x250, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x220, 0x250, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x300, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0xff00, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x81, 0x7, 0x2}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x400) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.278414967s ago: executing program 2 (id=654): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) (async) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000100)={0x0, 0x2, @start={0x9, 0x1}}) unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) (async, rerun: 32) mkdir(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) (async, rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x20000000004, 0x3) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) (async) unshare(0x2c040000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0xb44}, 0x38) (async) setsockopt(r4, 0x81, 0x81, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) (async, rerun: 32) close_range(0xffffffffffffffff, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) (async, rerun: 32) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) (rerun: 32) 3.600222427s ago: executing program 0 (id=655): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xd37697ff280d3c8e}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000240)={0xc408, 0x1, [{}]}) 3.518076147s ago: executing program 2 (id=656): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x19) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xf5, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[], 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x4000) 3.517399819s ago: executing program 3 (id=657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0xa, 0x38, 0xd6, 0x0, r3}}, 0x18}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000004c0)={'wpan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mlock2(&(0x7f0000076000/0x2000)=nil, 0x2000, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000030095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r11, 0x4008550c, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf251b00000008000300", @ANYRES32=r8, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 3.515870953s ago: executing program 0 (id=658): r0 = socket(0x10, 0x3, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), r2, 0x0, 0x0, 0x1}}, 0x20) syz_init_net_socket$ax25(0x3, 0x3, 0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000a40)={0x1, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000540)={0x1, 0x6, 0x2, 0x5, 'syz0\x00', 0x7}) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x1000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0xb], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 3.477087212s ago: executing program 0 (id=659): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ptrace(0x10, 0x0) setpriority(0x0, 0x0, 0xacf0165) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xa0202) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000900)={0x0, @in={{0x2, 0x7, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x2, 0xdbb, 0x400, 0x40, 0x4}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x8, 0x800e, 0x6, 0xc5, r3}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf0161", 0xac}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940", 0x2c}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97a", 0xb2}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27", 0x49}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c5", 0xc0}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000", 0x12}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.37593078s ago: executing program 0 (id=660): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sync_file_range(0xffffffffffffffff, 0x9, 0x8000000000000000, 0x2) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r4}, 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=@can={{0x4, 0x1, 0x0, 0x1}, 0xfd, 0x2, 0x0, 0x0, "4031776a4f80b895"}, 0x10}, 0x2, 0x0, 0x0, 0x24008810}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000440)={0x34, r5, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x92}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x34}}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x1) dup(r7) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) 2.347591215s ago: executing program 4 (id=661): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x810000cb) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000005c0), 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x9, 0x10012, r3, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x1, @multicast, 'ipvlan1\x00'}}, 0x1e) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x1}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2.160304569s ago: executing program 3 (id=662): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)={0x20, 0x140f, 0x1, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0xf00, 0x0, 0x10}, 0x8040) 1.99586183s ago: executing program 0 (id=663): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.995576225s ago: executing program 3 (id=664): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget(0x2, 0x600) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0x0) 1.729960214s ago: executing program 0 (id=665): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$usbmon(&(0x7f0000000340), 0xb8, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x300000c, 0x4f832, 0xffffffffffffffff, 0x1000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) chdir(&(0x7f0000000440)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) epoll_create1(0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03000000000000000000020000000900020073797a31000000000900010073797a300000000014000380080002400000000008000140"], 0x68}}, 0x0) syz_io_uring_setup(0xc6d, &(0x7f00000003c0)={0x0, 0x105cc9, 0x0, 0x0, 0x207, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='memory.swap.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30000040}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x3f, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1.241165501s ago: executing program 1 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000420000009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000008000000", @ANYRES32=r0], 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000500)=ANY=[], 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) setuid(0xee01) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x100, 0x200, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x1012c00, &(0x7f00000003c0)={[{@nfs_export_off}, {@default_permissions}], [{@dont_hash}, {@fowner_gt={'fowner>', r2}}, {@fsname={'fsname', 0x3d, ':@#'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@flag='async'}, {@audit}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, '-'}}, {@fowner_eq={'fowner', 0x3d, r3}}]}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0xca4, &(0x7f00000001c0)={0x0, 0x8de0, 0x10310, 0xfffffffe, 0x252}, &(0x7f0000000180), &(0x7f00000000c0)) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.172785273s ago: executing program 4 (id=667): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x14, r1, 0x1, 0x0, 0x25dfdbfd, {0x23}}, 0x14}}, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x2}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff3, 0xe1a8672ab1447dc6}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2, 0x7, 0xc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x4400c030) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) 1.040715112s ago: executing program 3 (id=668): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004882, 0x0) io_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 0s ago: executing program 1 (id=669): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0] em28xx 5-1:0.0: Binding DVB extension [ 155.141706][ T950] usb 5-1: USB disconnect, device number 10 [ 155.151636][ T950] em28xx 5-1:0.0: Disconnecting em28xx [ 155.641366][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 155.736088][ T10] em28xx 5-1:0.0: Registering input extension [ 155.744845][ T950] em28xx 5-1:0.0: Closing input extension [ 155.790459][ T950] em28xx 5-1:0.0: Freeing device [ 155.882743][ T6858] (syz.3.257,6858,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 155.932766][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.987525][ T6858] o2cb: This node has not been configured. [ 156.323240][ T6858] o2cb: Cluster check failed. Fix errors before retrying. [ 156.330426][ T6858] (syz.3.257,6858,0):user_dlm_register:674 ERROR: status = -22 [ 156.348757][ T6858] (syz.3.257,6858,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 156.534711][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 156.563972][ T24] usb 2-1: config 0 has an invalid descriptor of length 74, skipping remainder of the config [ 156.582011][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 156.600938][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 156.615388][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.645816][ T24] usb 2-1: config 0 descriptor?? [ 156.928150][ T6872] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 157.266119][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 157.297259][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 157.582579][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 157.622229][ T24] usb 2-1: string descriptor 0 read error: -71 [ 157.638547][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 157.649538][ T24] usb 2-1: USB disconnect, device number 8 [ 157.864046][ T10] usb 4-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 159.012943][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.023272][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 159.042464][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 159.051379][ T10] usb 4-1: SerialNumber: syz [ 161.162546][ T5810] Bluetooth: hci4: command 0x0405 tx timeout [ 163.329648][ T10] usb 4-1: 0:2 : does not exist [ 163.374191][ T10] usb 4-1: unit 5 not found! [ 163.548064][ T10] usb 4-1: USB disconnect, device number 13 [ 163.652968][ T950] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.653981][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.715860][ T6906] overlayfs: missing 'lowerdir' [ 163.720774][ T30] audit: type=1400 audit(1746927674.102:316): avc: denied { ioctl } for pid=6898 comm="syz.3.267" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.553480][ T950] usb 2-1: Using ep0 maxpacket: 16 [ 164.560078][ T950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 164.590480][ T950] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 164.620184][ T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.644314][ T950] usb 2-1: Product: syz [ 164.648540][ T950] usb 2-1: Manufacturer: syz [ 164.670974][ T950] usb 2-1: SerialNumber: syz [ 164.700134][ T950] usb 2-1: config 0 descriptor?? [ 164.739633][ T950] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 164.825228][ T950] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 165.877407][ T950] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 165.956667][ T950] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 165.976021][ T950] em28xx 2-1:0.0: board has no eeprom [ 166.062775][ T950] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 166.101574][ T950] em28xx 2-1:0.0: dvb set to bulk mode. [ 166.167666][ T9] em28xx 2-1:0.0: Binding DVB extension [ 166.281065][ T950] usb 2-1: USB disconnect, device number 9 [ 166.311799][ T6917] warning: `syz.3.272' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 167.138210][ T950] em28xx 2-1:0.0: Disconnecting em28xx [ 167.156457][ T9] em28xx 2-1:0.0: Registering input extension [ 167.609131][ T950] em28xx 2-1:0.0: Closing input extension [ 168.784485][ T950] em28xx 2-1:0.0: Freeing device [ 169.668006][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 169.699130][ T6958] 9pnet_fd: Insufficient options for proto=fd [ 169.804308][ T30] audit: type=1326 audit(1746927680.192:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d58e969 code=0x7ffc0000 [ 169.863342][ T30] audit: type=1326 audit(1746927680.192:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d58e969 code=0x7ffc0000 [ 169.898821][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 169.935793][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 169.960739][ T30] audit: type=1326 audit(1746927680.192:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f887d52ab39 code=0x7ffc0000 [ 170.016419][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 170.034908][ T6965] capability: warning: `syz.1.286' uses 32-bit capabilities (legacy support in use) [ 170.042531][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.070538][ T9] usb 5-1: Product: syz [ 170.080830][ T9] usb 5-1: Manufacturer: syz [ 170.085423][ T30] audit: type=1326 audit(1746927680.192:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f887d52ab39 code=0x7ffc0000 [ 170.085463][ T30] audit: type=1326 audit(1746927680.192:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d58e969 code=0x7ffc0000 [ 170.085495][ T30] audit: type=1326 audit(1746927680.192:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f887d52ab39 code=0x7ffc0000 [ 170.085528][ T30] audit: type=1326 audit(1746927680.192:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f887d52ab39 code=0x7ffc0000 [ 170.142462][ T9] usb 5-1: SerialNumber: syz [ 170.204318][ T9] usb 5-1: config 0 descriptor?? [ 170.210285][ T30] audit: type=1326 audit(1746927680.192:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f887d58e969 code=0x7ffc0000 [ 170.242840][ T30] audit: type=1326 audit(1746927680.192:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f887d52ab39 code=0x7ffc0000 [ 170.266828][ T30] audit: type=1326 audit(1746927680.192:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d58e969 code=0x7ffc0000 [ 170.304489][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 170.383261][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 170.646969][ T6974] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 170.932572][ T5913] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 171.154248][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 171.185348][ T6960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.227578][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 171.262447][ T9] em28xx 5-1:0.0: board has no eeprom [ 171.263583][ T5913] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 171.301832][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.322506][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 171.326450][ T5913] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 171.343658][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 171.349251][ T10] em28xx 5-1:0.0: Binding DVB extension [ 171.360351][ T6960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.382708][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 171.397352][ T5913] usb 2-1: SerialNumber: syz [ 171.403746][ T9] usb 5-1: USB disconnect, device number 11 [ 171.444421][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 171.477506][ T10] em28xx 5-1:0.0: Registering input extension [ 171.487859][ T9] em28xx 5-1:0.0: Closing input extension [ 171.510801][ T9] em28xx 5-1:0.0: Freeing device [ 171.602497][ T950] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 171.752629][ T950] usb 3-1: Using ep0 maxpacket: 16 [ 171.765431][ T950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 171.781472][ T950] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 171.795356][ T950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.804559][ T950] usb 3-1: Product: syz [ 171.808794][ T950] usb 3-1: Manufacturer: syz [ 171.818644][ T950] usb 3-1: SerialNumber: syz [ 171.832450][ T950] usb 3-1: config 0 descriptor?? [ 171.841672][ T6985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.292'. [ 171.863075][ T950] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 171.875871][ T950] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 171.883799][ T6985] Bluetooth: MGMT ver 1.23 [ 172.282902][ T6993] overlayfs: failed to resolve './file1': -2 [ 172.403276][ T950] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 172.491333][ T950] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 172.500544][ T950] em28xx 3-1:0.0: board has no eeprom [ 172.582561][ T950] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 172.601941][ T950] em28xx 3-1:0.0: dvb set to bulk mode. [ 172.613934][ T9] em28xx 3-1:0.0: Binding DVB extension [ 172.625987][ T950] usb 3-1: USB disconnect, device number 8 [ 172.680733][ T950] em28xx 3-1:0.0: Disconnecting em28xx [ 172.915549][ T9] em28xx 3-1:0.0: Registering input extension [ 172.924284][ T950] em28xx 3-1:0.0: Closing input extension [ 172.953696][ T950] em28xx 3-1:0.0: Freeing device [ 173.432373][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 173.606874][ T5913] usb 2-1: 0:2 : does not exist [ 173.746703][ T5913] usb 2-1: unit 5: unexpected type 0x0c [ 174.021123][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.063152][ T24] usb 1-1: config 0 has no interface number 0 [ 174.103941][ T5913] usb 2-1: USB disconnect, device number 10 [ 174.341081][ T24] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 174.350936][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.366030][ T24] usb 1-1: Product: syz [ 174.391279][ T24] usb 1-1: Manufacturer: syz [ 174.445543][ T24] usb 1-1: SerialNumber: syz [ 174.472817][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.605803][ T24] usb 1-1: config 0 descriptor?? [ 175.003684][ T24] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 175.028501][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.040173][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 175.048231][ T24] usb 1-1: media controller created [ 175.061882][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.108108][ T30] kauditd_printk_skb: 467 callbacks suppressed [ 175.108118][ T30] audit: type=1400 audit(1746927685.502:794): avc: denied { watch watch_reads } for pid=7024 comm="syz.3.302" path="/syzcgroup/net/syz3/syz1" dev="cgroup" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 175.419554][ T950] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 175.641357][ T950] usb 4-1: Using ep0 maxpacket: 8 [ 175.650995][ T950] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 175.950768][ T30] audit: type=1400 audit(1746927686.152:795): avc: denied { read append } for pid=7009 comm="syz.2.298" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 175.950773][ T950] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 175.950801][ T950] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 176.097478][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'. [ 176.108161][ T7042] netlink: 'syz.1.306': attribute type 5 has an invalid length. [ 176.116504][ T950] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 176.122578][ T30] audit: type=1400 audit(1746927686.152:796): avc: denied { open } for pid=7009 comm="syz.2.298" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 176.151313][ T7042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.306'. [ 176.226125][ T30] audit: type=1400 audit(1746927686.622:797): avc: denied { bind } for pid=7036 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 176.242456][ T950] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.249780][ T7042] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 176.312541][ T950] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 176.331992][ T950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.360453][ T7042] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 176.391280][ T7042] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 176.406480][ T7042] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 176.416462][ T7042] geneve2: entered promiscuous mode [ 176.421915][ T7042] geneve2: entered allmulticast mode [ 176.747173][ T950] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 177.432483][ T5913] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 177.509275][ T9] usb 1-1: USB disconnect, device number 9 [ 177.669463][ T5913] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.678498][ T5913] usb 5-1: config 0 has no interface number 0 [ 177.752679][ T7027] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 177.769169][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 177.805059][ T5913] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 177.815440][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.824234][ T5913] usb 5-1: Product: syz [ 177.828817][ T5913] usb 5-1: Manufacturer: syz [ 177.833794][ T5913] usb 5-1: SerialNumber: syz [ 177.841231][ T5913] usb 5-1: config 0 descriptor?? [ 177.932478][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 178.954689][ T5913] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 179.043926][ T5886] usb 4-1: USB disconnect, device number 14 [ 179.093919][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.132509][ T9] usb 1-1: config 0 has no interfaces? [ 179.165594][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 179.189421][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.220667][ T7066] (syz.1.312,7066,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 179.231007][ T9] usb 1-1: config 0 descriptor?? [ 179.252581][ T7066] o2cb: This node has not been configured. [ 179.266594][ T5886] usb 5-1: USB disconnect, device number 12 [ 179.267084][ T7066] o2cb: Cluster check failed. Fix errors before retrying. [ 179.286625][ T7066] (syz.1.312,7066,0):user_dlm_register:674 ERROR: status = -22 [ 179.296117][ T7066] (syz.1.312,7066,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 180.439082][ T5913] usb 1-1: USB disconnect, device number 10 [ 180.475410][ T30] audit: type=1400 audit(1746927690.862:798): avc: denied { read } for pid=7077 comm="syz.4.316" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 180.504690][ T7078] binder: BINDER_SET_CONTEXT_MGR already set [ 180.512070][ T7078] binder: 7077:7078 ioctl 4018620d 200000000040 returned -16 [ 180.534614][ T30] audit: type=1400 audit(1746927690.862:799): avc: denied { open } for pid=7077 comm="syz.4.316" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 180.642608][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 180.670776][ T30] audit: type=1400 audit(1746927690.902:800): avc: denied { ioctl } for pid=7077 comm="syz.4.316" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 180.686758][ T7086] QAT: failed to copy from user cfg_data. [ 181.302361][ T30] audit: type=1400 audit(1746927690.902:801): avc: denied { set_context_mgr } for pid=7077 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 181.350786][ T30] audit: type=1400 audit(1746927690.902:802): avc: denied { write } for pid=7077 comm="syz.4.316" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 181.442537][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 181.467004][ T9] usb 4-1: config 8 has an invalid interface number: 72 but max is 0 [ 181.528250][ T30] audit: type=1400 audit(1746927690.902:803): avc: denied { map } for pid=7077 comm="syz.4.316" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 181.667650][ T9] usb 4-1: config 8 has no interface number 0 [ 181.674247][ T9] usb 4-1: config 8 interface 72 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 181.870291][ T30] audit: type=1400 audit(1746927691.742:804): avc: denied { bind } for pid=7079 comm="syz.4.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.898367][ T7100] syz.2.321: attempt to access beyond end of device [ 181.898367][ T7100] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 181.912058][ T9] usb 4-1: config 8 interface 72 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 181.945023][ T9] usb 4-1: config 8 interface 72 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 181.982712][ T9] usb 4-1: config 8 interface 72 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 182.080547][ T9] usb 4-1: config 8 interface 72 has no altsetting 0 [ 182.100623][ T30] audit: type=1400 audit(1746927691.742:805): avc: denied { write } for pid=7079 comm="syz.4.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.119962][ T5913] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 182.152694][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=b7.98 [ 182.163729][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.171738][ T9] usb 4-1: Product: syz [ 182.192798][ T9] usb 4-1: Manufacturer: syz [ 182.209478][ T9] usb 4-1: SerialNumber: syz [ 182.232489][ T30] audit: type=1326 audit(1746927692.492:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.2.321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe88678e969 code=0x0 [ 182.332653][ T950] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 182.350435][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 182.416586][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.431298][ T5913] usb 1-1: config 0 has no interfaces? [ 182.537454][ T5913] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 182.636003][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.661465][ T950] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.670941][ T950] usb 2-1: config 0 has no interface number 0 [ 182.677325][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 182.694174][ T5913] usb 1-1: config 0 descriptor?? [ 182.705524][ T950] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 182.714649][ T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.732486][ T950] usb 2-1: Product: syz [ 182.740759][ T950] usb 2-1: Manufacturer: syz [ 182.787372][ T950] usb 2-1: SerialNumber: syz [ 182.803358][ T950] usb 2-1: config 0 descriptor?? [ 182.838315][ T9] usb 4-1: can't set config #8, error -71 [ 182.857517][ T9] usb 4-1: USB disconnect, device number 15 [ 182.865244][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.876613][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.036532][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 183.092700][ T5854] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 183.100480][ T950] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 183.124030][ T950] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.570673][ T10] usb 5-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 183.579199][ T950] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 183.587673][ T10] usb 5-1: Manufacturer: syz [ 183.617278][ T30] audit: type=1400 audit(1746927694.012:807): avc: denied { append } for pid=7112 comm="syz.3.325" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.657427][ T950] usb 2-1: media controller created [ 183.663457][ T10] usb 5-1: config 0 descriptor?? [ 183.687538][ T10] hub 5-1:0.0: USB hub found [ 183.698300][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 183.703065][ T950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.742571][ T5854] usb 3-1: Using ep0 maxpacket: 8 [ 183.752190][ T5854] usb 3-1: too many configurations: 200, using maximum allowed: 8 [ 183.761419][ T5854] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 183.769076][ T5854] usb 3-1: can't read configurations, error -61 [ 183.880976][ T10] hub 5-1:0.0: 1 port detected [ 183.913798][ T5854] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 184.062633][ T5854] usb 3-1: Using ep0 maxpacket: 8 [ 184.068574][ T5854] usb 3-1: too many configurations: 200, using maximum allowed: 8 [ 184.166739][ T5854] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 184.175457][ T5854] usb 3-1: can't read configurations, error -61 [ 184.186802][ T5854] usb usb3-port1: attempt power cycle [ 184.562642][ T5854] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 184.574427][ T10] hub 5-1:0.0: activate --> -90 [ 184.596044][ T5854] usb 3-1: Using ep0 maxpacket: 8 [ 184.601649][ T5854] usb 3-1: too many configurations: 200, using maximum allowed: 8 [ 184.611081][ T5854] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 184.618876][ T5854] usb 3-1: can't read configurations, error -61 [ 184.762644][ T5854] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 184.793310][ T5854] usb 3-1: Using ep0 maxpacket: 8 [ 184.799118][ T5854] usb 3-1: too many configurations: 200, using maximum allowed: 8 [ 184.809596][ T5854] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 184.817630][ T5854] usb 3-1: can't read configurations, error -61 [ 184.824669][ T5854] usb usb3-port1: unable to enumerate USB device [ 184.903537][ T5854] usb 1-1: USB disconnect, device number 11 [ 185.061129][ T7128] FAULT_INJECTION: forcing a failure. [ 185.061129][ T7128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.074471][ T7128] CPU: 0 UID: 0 PID: 7128 Comm: syz.0.326 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 185.074494][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.074504][ T7128] Call Trace: [ 185.074510][ T7128] [ 185.074517][ T7128] dump_stack_lvl+0x16c/0x1f0 [ 185.074545][ T7128] should_fail_ex+0x512/0x640 [ 185.074571][ T7128] _copy_from_user+0x2e/0xd0 [ 185.074595][ T7128] copy_msghdr_from_user+0x98/0x160 [ 185.074614][ T7128] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 185.074643][ T7128] ___sys_sendmsg+0xfe/0x1d0 [ 185.074662][ T7128] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.074707][ T7128] __sys_sendmsg+0x16d/0x220 [ 185.074726][ T7128] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.074750][ T7128] ? rcu_is_watching+0x12/0xc0 [ 185.074778][ T7128] do_syscall_64+0xcd/0x260 [ 185.074802][ T7128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.074819][ T7128] RIP: 0033:0x7f887d58e969 [ 185.074833][ T7128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.074848][ T7128] RSP: 002b:00007f887b3b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.074865][ T7128] RAX: ffffffffffffffda RBX: 00007f887d7b6160 RCX: 00007f887d58e969 [ 185.074875][ T7128] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 185.074885][ T7128] RBP: 00007f887b3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 185.074894][ T7128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.074903][ T7128] R13: 0000000000000000 R14: 00007f887d7b6160 R15: 00007ffda52da618 [ 185.074925][ T7128] [ 185.355348][ T5854] usb 5-1: USB disconnect, device number 13 [ 185.427931][ T5913] usb 2-1: USB disconnect, device number 11 [ 185.715411][ T5813] Bluetooth: hci1: command 0x0406 tx timeout [ 185.715433][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 185.715466][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 185.722085][ T5813] Bluetooth: hci3: command 0x0406 tx timeout [ 185.855076][ T7136] ALSA: mixer_oss: invalid OSS volume '' [ 187.882301][ T30] audit: type=1400 audit(1746927698.272:808): avc: denied { execute } for pid=7143 comm="syz.4.330" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 189.080338][ T7162] input: syz1 as /devices/virtual/input/input13 [ 189.252358][ T30] audit: type=1400 audit(1746927699.532:809): avc: denied { ioctl } for pid=7143 comm="syz.4.330" path="socket:[13988]" dev="sockfs" ino=13988 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.321459][ T7167] netlink: 32 bytes leftover after parsing attributes in process `syz.1.336'. [ 189.722472][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 189.825845][ T30] audit: type=1400 audit(1746927700.222:810): avc: denied { create } for pid=7185 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 190.022582][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 190.035343][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 190.056771][ T7191] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 190.065758][ T7191] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.409404][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 190.423765][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.443389][ T10] usb 2-1: Product: syz [ 190.447643][ T10] usb 2-1: Manufacturer: syz [ 190.452741][ T10] usb 2-1: SerialNumber: syz [ 190.466589][ T10] usb 2-1: config 0 descriptor?? [ 190.481778][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 190.552812][ T10] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 190.736206][ T7195] netlink: 'syz.3.344': attribute type 16 has an invalid length. [ 190.744664][ T7195] netlink: 'syz.3.344': attribute type 17 has an invalid length. [ 190.761300][ T7195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.786073][ T7195] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 190.795507][ T5913] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 190.831751][ T30] audit: type=1400 audit(1746927701.212:811): avc: denied { allowed } for pid=7194 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 190.960051][ T5913] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.974818][ T5913] usb 1-1: config 0 has no interface number 0 [ 190.983968][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 191.006584][ T5913] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 191.017157][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.032635][ T5913] usb 1-1: Product: syz [ 191.040899][ T5913] usb 1-1: Manufacturer: syz [ 191.052475][ T5913] usb 1-1: SerialNumber: syz [ 191.069253][ T10] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 191.069769][ T5913] usb 1-1: config 0 descriptor?? [ 191.091167][ T10] em28xx 2-1:0.0: board has no eeprom [ 191.122533][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 191.192447][ T10] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 191.318935][ T5913] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 191.378544][ T10] em28xx 2-1:0.0: dvb set to bulk mode. [ 191.924862][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 192.274351][ T24] usb 4-1: config 4 has an invalid interface number: 8 but max is 0 [ 192.282540][ T24] usb 4-1: config 4 has no interface number 0 [ 192.289466][ T5913] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 192.301759][ T5814] Bluetooth: hci5: command 0xfc11 tx timeout [ 192.308487][ T5810] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 192.326738][ T24] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 192.352004][ T5913] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 192.360212][ T24] usb 4-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 192.370427][ T5913] usb 1-1: media controller created [ 192.374019][ T5854] em28xx 2-1:0.0: Binding DVB extension [ 192.377962][ T24] usb 4-1: config 4 interface 8 has no altsetting 0 [ 192.395255][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.407020][ T24] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 192.416774][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.419678][ T10] usb 2-1: USB disconnect, device number 12 [ 192.425842][ T24] usb 4-1: Product: syz [ 192.495752][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 192.497246][ T24] usb 4-1: Manufacturer: syz [ 192.529592][ T24] usb 4-1: SerialNumber: syz [ 192.585767][ T30] audit: type=1400 audit(1746927702.982:812): avc: denied { name_bind } for pid=7202 comm="syz.1.347" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 192.704303][ T5854] em28xx 2-1:0.0: Registering input extension [ 192.749684][ T10] em28xx 2-1:0.0: Closing input extension [ 192.801753][ T10] em28xx 2-1:0.0: Freeing device [ 193.000093][ T24] opticon 4-1:4.8: opticon converter detected [ 193.038300][ T24] usb 4-1: opticon converter now attached to ttyUSB0 [ 193.060782][ T24] usb 4-1: USB disconnect, device number 16 [ 193.072238][ T24] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 193.081342][ T24] opticon 4-1:4.8: device disconnected [ 193.091566][ T5854] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 193.204930][ T5862] usb 1-1: USB disconnect, device number 12 [ 193.251677][ T30] audit: type=1400 audit(1746927703.642:813): avc: denied { setopt } for pid=7221 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.300384][ T30] audit: type=1400 audit(1746927703.682:814): avc: denied { append } for pid=7223 comm="syz.1.352" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 193.342729][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 193.373138][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 193.404134][ T5854] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 193.435720][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.454504][ T5854] usb 3-1: Product: syz [ 193.462804][ T5854] usb 3-1: Manufacturer: syz [ 193.473582][ T5854] usb 3-1: SerialNumber: syz [ 193.522618][ T5913] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 193.620364][ T30] audit: type=1400 audit(1746927703.982:815): avc: denied { read } for pid=7232 comm="syz.0.356" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 193.655698][ T7230] netlink: 'syz.1.354': attribute type 2 has an invalid length. [ 193.686863][ T7230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.354'. [ 193.711141][ T30] audit: type=1400 audit(1746927703.992:816): avc: denied { open } for pid=7232 comm="syz.0.356" path="/66/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 193.784588][ T5913] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 193.809749][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.865854][ T5913] usb 5-1: Product: syz [ 193.875153][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.881606][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.887918][ T5913] usb 5-1: Manufacturer: syz [ 193.909586][ T5913] usb 5-1: SerialNumber: syz [ 194.438934][ T5854] usb 3-1: config 0 descriptor?? [ 194.446672][ T5854] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 194.456444][ T5854] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 194.484530][ T5913] usb 5-1: config 0 descriptor?? [ 194.492444][ T7236] block device autoloading is deprecated and will be removed. [ 194.513755][ T5913] ch341 5-1:0.0: ch341-uart converter detected [ 194.951829][ T7253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.314801][ T7253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.394418][ T5854] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 195.502261][ T5854] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 195.510381][ T5854] em28xx 3-1:0.0: board has no eeprom [ 195.582849][ T5854] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 195.629376][ T5854] em28xx 3-1:0.0: dvb set to bulk mode. [ 195.639782][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.360'. [ 195.664320][ T5862] em28xx 3-1:0.0: Binding DVB extension [ 195.683087][ T5854] usb 3-1: USB disconnect, device number 13 [ 195.706778][ T7258] FAULT_INJECTION: forcing a failure. [ 195.706778][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 195.720642][ T7258] CPU: 0 UID: 0 PID: 7258 Comm: syz.0.360 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 195.720665][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.720675][ T7258] Call Trace: [ 195.720680][ T7258] [ 195.720686][ T7258] dump_stack_lvl+0x16c/0x1f0 [ 195.720711][ T7258] should_fail_ex+0x512/0x640 [ 195.720729][ T7258] ? fs_reclaim_acquire+0xae/0x150 [ 195.720751][ T7258] ? tomoyo_encode2+0x100/0x3e0 [ 195.720774][ T7258] should_failslab+0xc2/0x120 [ 195.720791][ T7258] __kmalloc_noprof+0xd2/0x510 [ 195.720813][ T7258] ? d_absolute_path+0x136/0x1a0 [ 195.720836][ T7258] tomoyo_encode2+0x100/0x3e0 [ 195.720858][ T7258] tomoyo_encode+0x29/0x50 [ 195.720878][ T7258] tomoyo_realpath_from_path+0x18f/0x6e0 [ 195.720906][ T7258] tomoyo_path_number_perm+0x245/0x580 [ 195.720923][ T7258] ? tomoyo_path_number_perm+0x237/0x580 [ 195.720942][ T7258] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 195.720961][ T7258] ? find_held_lock+0x2b/0x80 [ 195.720998][ T7258] ? find_held_lock+0x2b/0x80 [ 195.721016][ T7258] ? hook_file_ioctl_common+0x145/0x410 [ 195.721035][ T7258] ? __fget_files+0x20e/0x3c0 [ 195.721063][ T7258] security_file_ioctl+0x9b/0x240 [ 195.721086][ T7258] __x64_sys_ioctl+0xb7/0x200 [ 195.721107][ T7258] do_syscall_64+0xcd/0x260 [ 195.721130][ T7258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.721146][ T7258] RIP: 0033:0x7f887d58e969 [ 195.721160][ T7258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.721176][ T7258] RSP: 002b:00007f887b3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.721192][ T7258] RAX: ffffffffffffffda RBX: 00007f887d7b6080 RCX: 00007f887d58e969 [ 195.721202][ T7258] RDX: 000000000000000b RSI: 00000000400455c8 RDI: 0000000000000007 [ 195.721212][ T7258] RBP: 00007f887b3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 195.721221][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.721229][ T7258] R13: 0000000000000000 R14: 00007f887d7b6080 R15: 00007ffda52da618 [ 195.721249][ T7258] [ 195.721775][ T7258] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.175140][ T5854] em28xx 3-1:0.0: Disconnecting em28xx [ 196.214441][ T5913] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 196.256992][ T5862] em28xx 3-1:0.0: Registering input extension [ 196.287818][ T5854] em28xx 3-1:0.0: Closing input extension [ 196.325353][ T30] audit: type=1400 audit(1746927706.722:817): avc: denied { read } for pid=7265 comm="syz.2.362" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 196.332381][ T7267] FAULT_INJECTION: forcing a failure. [ 196.332381][ T7267] name failslab, interval 1, probability 0, space 0, times 0 [ 196.369367][ T30] audit: type=1400 audit(1746927706.722:818): avc: denied { mount } for pid=7265 comm="syz.2.362" name="/" dev="autofs" ino=14224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 196.392963][ T7267] CPU: 1 UID: 0 PID: 7267 Comm: syz.2.362 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 196.392987][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.392998][ T7267] Call Trace: [ 196.393003][ T7267] [ 196.393010][ T7267] dump_stack_lvl+0x16c/0x1f0 [ 196.393036][ T7267] should_fail_ex+0x512/0x640 [ 196.393057][ T7267] ? fs_reclaim_acquire+0xae/0x150 [ 196.393081][ T7267] ? tomoyo_encode2+0x100/0x3e0 [ 196.393102][ T7267] should_failslab+0xc2/0x120 [ 196.393120][ T7267] __kmalloc_noprof+0xd2/0x510 [ 196.393151][ T7267] tomoyo_encode2+0x100/0x3e0 [ 196.393177][ T7267] tomoyo_encode+0x29/0x50 [ 196.393198][ T7267] tomoyo_realpath_from_path+0x18f/0x6e0 [ 196.393235][ T7267] ? tomoyo_profile+0x47/0x60 [ 196.393251][ T7267] tomoyo_path_number_perm+0x245/0x580 [ 196.393268][ T7267] ? tomoyo_path_number_perm+0x237/0x580 [ 196.393289][ T7267] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 196.393313][ T7267] ? find_held_lock+0x2b/0x80 [ 196.393360][ T7267] ? find_held_lock+0x2b/0x80 [ 196.393378][ T7267] ? hook_file_ioctl_common+0x145/0x410 [ 196.393400][ T7267] ? __fget_files+0x20e/0x3c0 [ 196.393429][ T7267] security_file_ioctl+0x9b/0x240 [ 196.393454][ T7267] __x64_sys_ioctl+0xb7/0x200 [ 196.393478][ T7267] do_syscall_64+0xcd/0x260 [ 196.393502][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.393519][ T7267] RIP: 0033:0x7fe88678e969 [ 196.393532][ T7267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.393549][ T7267] RSP: 002b:00007fe887523038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.393566][ T7267] RAX: ffffffffffffffda RBX: 00007fe8869b5fa0 RCX: 00007fe88678e969 [ 196.393576][ T7267] RDX: 0000200000000180 RSI: 0000000040049366 RDI: 000000000000000a [ 196.393586][ T7267] RBP: 00007fe887523090 R08: 0000000000000000 R09: 0000000000000000 [ 196.393596][ T7267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.393605][ T7267] R13: 0000000000000000 R14: 00007fe8869b5fa0 R15: 00007fff8488faf8 [ 196.393627][ T7267] [ 196.393643][ T7267] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.456858][ T7270] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.477610][ T30] audit: type=1400 audit(1746927706.842:819): avc: denied { write } for pid=7269 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 196.606103][ T950] usb 5-1: USB disconnect, device number 14 [ 196.615135][ T30] audit: type=1400 audit(1746927706.922:820): avc: denied { map } for pid=7221 comm="syz.4.351" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 196.620002][ T5854] em28xx 3-1:0.0: Freeing device [ 196.704796][ T30] audit: type=1400 audit(1746927707.092:821): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 196.729599][ T950] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 196.755984][ T950] ch341 5-1:0.0: device disconnected [ 196.833281][ T5862] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 197.053904][ T5862] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.072885][ T5862] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 197.087033][ T5862] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.113732][ T5862] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 197.507194][ T5862] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 197.520275][ T5862] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 197.544372][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 197.556791][ T5862] usb 1-1: Product: syz [ 197.560993][ T5862] usb 1-1: Manufacturer: syz [ 197.566030][ T5854] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 197.616971][ T5862] cdc_wdm 1-1:1.0: skipping garbage [ 197.622570][ T5862] cdc_wdm 1-1:1.0: skipping garbage [ 197.630633][ T5862] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 197.638350][ T5862] cdc_wdm 1-1:1.0: Unknown control protocol [ 197.690617][ T30] audit: type=1400 audit(1746927708.082:822): avc: denied { map } for pid=7282 comm="syz.4.368" path="socket:[14502]" dev="sockfs" ino=14502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.735476][ T5854] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.752545][ T5854] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 197.763011][ T5854] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 197.837620][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.860904][ T5854] usb 3-1: config 0 descriptor?? [ 197.869850][ T5854] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 197.890155][ T5854] dvb-usb: bulk message failed: -22 (3/0) [ 197.899344][ T5854] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 197.916577][ T5854] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 197.924237][ T5854] usb 3-1: media controller created [ 197.969729][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.122567][ T5854] dvb-usb: bulk message failed: -22 (6/0) [ 198.182438][ T5854] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 198.319572][ T5854] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 198.421723][ T5854] dvb-usb: schedule remote query interval to 150 msecs. [ 198.485152][ T5854] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 198.680822][ T950] dvb-usb: bulk message failed: -22 (1/0) [ 198.754456][ T950] dvb-usb: error while querying for an remote control event. [ 199.022494][ T5854] dvb-usb: bulk message failed: -22 (1/0) [ 199.028271][ T5854] dvb-usb: error while querying for an remote control event. [ 199.192026][ T5913] usb 1-1: USB disconnect, device number 13 [ 199.235383][ T5886] usb 3-1: USB disconnect, device number 14 [ 199.298217][ T5886] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 199.740524][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 199.740544][ T30] audit: type=1400 audit(1746927710.072:831): avc: denied { ioctl } for pid=7306 comm="syz.4.376" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 199.798140][ T5913] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 200.018284][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 200.106865][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 200.287471][ T5913] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 200.352592][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.433009][ T5913] usb 4-1: Product: syz [ 200.445541][ T5913] usb 4-1: Manufacturer: syz [ 200.472209][ T5913] usb 4-1: SerialNumber: syz [ 200.513584][ T5913] usb 4-1: config 0 descriptor?? [ 200.522314][ T5913] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 200.576070][ T5913] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 201.243846][ T5814] Bluetooth: hci4: command 0x0405 tx timeout [ 201.609810][ T5886] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 201.804667][ T30] audit: type=1400 audit(1746927712.172:832): avc: denied { create } for pid=7328 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 201.875476][ T30] audit: type=1400 audit(1746927712.172:833): avc: denied { connect } for pid=7328 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 201.922499][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 201.941415][ T5886] usb 1-1: config 0 has no interfaces? [ 201.954750][ T30] audit: type=1400 audit(1746927712.202:834): avc: denied { read } for pid=7330 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.979458][ T5886] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 201.990541][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.998606][ T5886] usb 1-1: Product: syz [ 202.012677][ T30] audit: type=1400 audit(1746927712.202:835): avc: denied { open } for pid=7330 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.037633][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.068753][ T5886] usb 1-1: Manufacturer: syz [ 202.083686][ T5886] usb 1-1: SerialNumber: syz [ 202.258629][ T5886] usb 1-1: config 0 descriptor?? [ 202.326154][ T30] audit: type=1400 audit(1746927712.202:836): avc: denied { getattr } for pid=7330 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.351409][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.386818][ T5856] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 203.079446][ T30] audit: type=1400 audit(1746927712.232:837): avc: denied { bind } for pid=7328 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 203.099094][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.726750][ T5856] usb 2-1: device descriptor read/64, error -71 [ 203.778826][ T5913] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 203.992840][ T30] audit: type=1400 audit(1746927712.232:838): avc: denied { listen } for pid=7328 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 204.013026][ T30] audit: type=1400 audit(1746927712.262:839): avc: denied { write } for pid=7328 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 204.252452][ T5856] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 205.319500][ T5913] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 206.588617][ T5913] em28xx 4-1:0.0: board has no eeprom [ 207.519981][ T5913] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 207.588687][ T5913] em28xx 4-1:0.0: dvb set to bulk mode. [ 207.915393][ T5886] em28xx 4-1:0.0: Binding DVB extension [ 207.947946][ T5913] usb 4-1: USB disconnect, device number 17 [ 207.982038][ T5913] em28xx 4-1:0.0: Disconnecting em28xx [ 208.102195][ T5886] em28xx 4-1:0.0: Registering input extension [ 208.131998][ T5913] em28xx 4-1:0.0: Closing input extension [ 208.192516][ T30] audit: type=1400 audit(1746927718.572:840): avc: denied { bind } for pid=7361 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.234842][ T30] audit: type=1400 audit(1746927718.572:841): avc: denied { listen } for pid=7361 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.281411][ T7362] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 208.297003][ T7362] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 208.311607][ T5913] em28xx 4-1:0.0: Freeing device [ 208.314144][ T30] audit: type=1400 audit(1746927718.572:842): avc: denied { write } for pid=7320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.426416][ T30] audit: type=1400 audit(1746927718.572:843): avc: denied { add_name } for pid=7320 comm="dhcpcd-run-hook" name="resolv.conf.cfptm1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.690503][ T30] audit: type=1400 audit(1746927718.572:844): avc: denied { create } for pid=7320 comm="dhcpcd-run-hook" name="resolv.conf.cfptm1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.073452][ T30] audit: type=1400 audit(1746927718.572:845): avc: denied { write } for pid=7320 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfptm1.link" dev="tmpfs" ino=3707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.161855][ T30] audit: type=1400 audit(1746927718.572:846): avc: denied { append } for pid=7320 comm="dhcpcd-run-hook" name="resolv.conf.cfptm1.link" dev="tmpfs" ino=3707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.186287][ T30] audit: type=1400 audit(1746927718.662:847): avc: denied { accept } for pid=7361 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.205928][ T30] audit: type=1400 audit(1746927718.672:848): avc: denied { mount } for pid=7361 comm="syz.2.383" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 209.235886][ T30] audit: type=1400 audit(1746927718.762:849): avc: denied { write } for pid=7361 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.351977][ T7375] (syz.1.390,7375,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 209.410047][ T7375] o2cb: This node has not been configured. [ 209.424331][ T5810] Bluetooth: hci4: unexpected event for opcode 0x2027 [ 209.425652][ T7375] o2cb: Cluster check failed. Fix errors before retrying. [ 209.454830][ T7375] (syz.1.390,7375,1):user_dlm_register:674 ERROR: status = -22 [ 209.463777][ T7375] (syz.1.390,7375,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 209.650675][ T5862] usb 1-1: USB disconnect, device number 14 [ 209.822689][ T5886] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 209.900602][ T7396] FAULT_INJECTION: forcing a failure. [ 209.900602][ T7396] name failslab, interval 1, probability 0, space 0, times 0 [ 209.913569][ T7396] CPU: 1 UID: 0 PID: 7396 Comm: syz.4.393 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 209.913592][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.913602][ T7396] Call Trace: [ 209.913608][ T7396] [ 209.913615][ T7396] dump_stack_lvl+0x16c/0x1f0 [ 209.913642][ T7396] should_fail_ex+0x512/0x640 [ 209.913662][ T7396] ? fs_reclaim_acquire+0xae/0x150 [ 209.913685][ T7396] ? tomoyo_encode2+0x100/0x3e0 [ 209.913706][ T7396] should_failslab+0xc2/0x120 [ 209.913725][ T7396] __kmalloc_noprof+0xd2/0x510 [ 209.913750][ T7396] ? tomoyo_encode2+0x92/0x3e0 [ 209.913775][ T7396] tomoyo_encode2+0x100/0x3e0 [ 209.913800][ T7396] tomoyo_encode+0x29/0x50 [ 209.913822][ T7396] tomoyo_mount_acl+0x144/0x850 [ 209.913843][ T7396] ? rcu_is_watching+0x12/0xc0 [ 209.913863][ T7396] ? lockdep_hardirqs_on+0x7c/0x110 [ 209.913885][ T7396] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 209.913905][ T7396] ? preempt_schedule_notrace+0x62/0xe0 [ 209.913952][ T7396] ? tomoyo_domain+0xbb/0x150 [ 209.913966][ T7396] ? tomoyo_profile+0x47/0x60 [ 209.913984][ T7396] tomoyo_mount_permission+0x16d/0x420 [ 209.914003][ T7396] ? tomoyo_mount_permission+0x14f/0x420 [ 209.914025][ T7396] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 209.914060][ T7396] security_sb_mount+0x9b/0x260 [ 209.914082][ T7396] path_mount+0x128/0x1f20 [ 209.914101][ T7396] ? kmem_cache_free+0x2d4/0x4d0 [ 209.914123][ T7396] ? __pfx_path_mount+0x10/0x10 [ 209.914143][ T7396] ? putname+0x154/0x1a0 [ 209.914164][ T7396] __x64_sys_mount+0x28d/0x310 [ 209.914182][ T7396] ? __pfx___x64_sys_mount+0x10/0x10 [ 209.914207][ T7396] do_syscall_64+0xcd/0x260 [ 209.914230][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.914246][ T7396] RIP: 0033:0x7fe455f8e969 [ 209.914258][ T7396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.914278][ T7396] RSP: 002b:00007fe456e4e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 209.914294][ T7396] RAX: ffffffffffffffda RBX: 00007fe4561b6160 RCX: 00007fe455f8e969 [ 209.914305][ T7396] RDX: 00002000000000c0 RSI: 0000200000002380 RDI: 0000000000000000 [ 209.914319][ T7396] RBP: 00007fe456e4e090 R08: 00002000000023c0 R09: 0000000000000000 [ 209.914329][ T7396] R10: 0000000000800400 R11: 0000000000000246 R12: 0000000000000001 [ 209.914338][ T7396] R13: 0000000000000000 R14: 00007fe4561b6160 R15: 00007ffe7d6789a8 [ 209.914361][ T7396] [ 210.618857][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.668050][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.788934][ T5886] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 210.804608][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.889169][ T7414] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 211.303016][ T5856] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 211.332987][ T5886] usb 4-1: config 0 descriptor?? [ 211.472701][ T5913] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 211.522519][ T5856] usb 3-1: Using ep0 maxpacket: 32 [ 211.532506][ T950] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 211.562506][ T5856] usb 3-1: config 64 has an invalid interface number: 4 but max is 0 [ 211.584793][ T5856] usb 3-1: config 64 has no interface number 0 [ 211.612493][ T5913] usb 5-1: device descriptor read/64, error -71 [ 211.660942][ T5856] usb 3-1: config 64 interface 4 has no altsetting 0 [ 211.694957][ T950] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.713609][ T950] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.743210][ T950] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.756714][ T5856] usb 3-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=28.46 [ 211.766209][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.774686][ T5856] usb 3-1: Product: syz [ 211.778965][ T5856] usb 3-1: Manufacturer: syz [ 211.786360][ T950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.799120][ T5856] usb 3-1: SerialNumber: syz [ 211.872590][ T5913] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 212.015945][ T950] usb 2-1: usb_control_msg returned -32 [ 212.022557][ T950] usbtmc 2-1:16.0: can't read capabilities [ 212.041414][ T5913] usb 5-1: device descriptor read/64, error -71 [ 212.082602][ T5887] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 212.173562][ T5913] usb usb5-port1: attempt power cycle [ 212.232482][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 212.246326][ T5887] usb 1-1: config 0 has no interfaces? [ 212.282119][ T5887] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 212.358946][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.455219][ T5887] usb 1-1: Product: syz [ 212.482753][ T5887] usb 1-1: Manufacturer: syz [ 212.508937][ T5887] usb 1-1: SerialNumber: syz [ 212.532532][ T5913] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 212.543125][ T5887] usb 1-1: config 0 descriptor?? [ 212.563157][ T5913] usb 5-1: device descriptor read/8, error -71 [ 212.630385][ T5887] usb 2-1: USB disconnect, device number 15 [ 212.803329][ T5913] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 212.833181][ T5913] usb 5-1: device descriptor read/8, error -71 [ 212.953018][ T5913] usb usb5-port1: unable to enumerate USB device [ 212.986859][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.398'. [ 212.995956][ T7429] netlink: 'syz.0.398': attribute type 1 has an invalid length. [ 213.004118][ T7429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.398'. [ 213.340204][ T5886] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 213.350938][ T5886] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 213.359722][ T5886] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 213.372845][ T5886] usb 4-1: USB disconnect, device number 18 [ 213.520088][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 213.520118][ T30] audit: type=1400 audit(1746927723.892:860): avc: denied { mount } for pid=7431 comm="syz.1.399" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 213.834251][ T5856] qmi_wwan 3-1:64.4: probe with driver qmi_wwan failed with error -22 [ 213.906494][ T5856] usb 3-1: USB disconnect, device number 15 [ 213.936095][ T7437] batman_adv: batadv0: Adding interface: vxlan0 [ 213.942546][ T7437] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.980373][ T7437] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 214.960283][ T5810] Bluetooth: hci4: unexpected event for opcode 0x2027 [ 214.975688][ T950] usb 1-1: USB disconnect, device number 15 [ 215.075015][ T30] audit: type=1400 audit(1746927725.452:861): avc: denied { bind } for pid=7452 comm="syz.4.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 215.310679][ T7461] (syz.0.405,7461,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 215.379187][ T7461] o2cb: This node has not been configured. [ 215.385735][ T7461] o2cb: Cluster check failed. Fix errors before retrying. [ 215.393393][ T7461] (syz.0.405,7461,0):user_dlm_register:674 ERROR: status = -22 [ 215.402967][ T7461] (syz.0.405,7461,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 215.411024][ T5886] libceph: connect (1)[c::]:6789 error -101 [ 215.425810][ T5886] libceph: mon0 (1)[c::]:6789 connect error [ 215.652857][ T30] audit: type=1326 audit(1746927726.042:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355958e969 code=0x7ffc0000 [ 215.668740][ T7467] ceph: No mds server is up or the cluster is laggy [ 215.676100][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.876151][ T5886] libceph: connect (1)[c::]:6789 error -101 [ 215.933764][ T5886] libceph: mon0 (1)[c::]:6789 connect error [ 216.023849][ T30] audit: type=1326 audit(1746927726.042:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f355958e969 code=0x7ffc0000 [ 216.047375][ T30] audit: type=1326 audit(1746927726.042:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355958e969 code=0x7ffc0000 [ 216.075103][ T30] audit: type=1326 audit(1746927726.042:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f355958e969 code=0x7ffc0000 [ 216.099706][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.111960][ T30] audit: type=1326 audit(1746927726.042:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355958e969 code=0x7ffc0000 [ 216.143058][ T30] audit: type=1326 audit(1746927726.042:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f355958e969 code=0x7ffc0000 [ 216.168606][ T30] audit: type=1326 audit(1746927726.042:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355958e969 code=0x7ffc0000 [ 216.198743][ T30] audit: type=1326 audit(1746927726.042:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f355958e969 code=0x7ffc0000 [ 216.614976][ T7498] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 216.882518][ T5913] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 217.103038][ T5854] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 217.138889][ T5810] Bluetooth: hci4: unexpected event for opcode 0x2027 [ 217.294122][ T5913] usb 4-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 217.314137][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.314835][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 217.333589][ T5913] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 217.344397][ T5854] usb 2-1: config 64 has an invalid interface number: 4 but max is 0 [ 217.355374][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 217.543103][ T5854] usb 2-1: config 64 has no interface number 0 [ 218.370689][ T5854] usb 2-1: config 64 interface 4 has no altsetting 0 [ 218.370706][ T5913] usb 4-1: SerialNumber: syz [ 218.465053][ T7512] FAULT_INJECTION: forcing a failure. [ 218.465053][ T7512] name failslab, interval 1, probability 0, space 0, times 0 [ 218.478381][ T7512] CPU: 1 UID: 0 PID: 7512 Comm: syz.2.420 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 218.478405][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.478416][ T7512] Call Trace: [ 218.478422][ T7512] [ 218.478428][ T7512] dump_stack_lvl+0x16c/0x1f0 [ 218.478456][ T7512] should_fail_ex+0x512/0x640 [ 218.478477][ T7512] ? fs_reclaim_acquire+0xae/0x150 [ 218.478500][ T7512] ? tomoyo_encode2+0x100/0x3e0 [ 218.478520][ T7512] should_failslab+0xc2/0x120 [ 218.478538][ T7512] __kmalloc_noprof+0xd2/0x510 [ 218.478563][ T7512] ? d_absolute_path+0x136/0x1a0 [ 218.478586][ T7512] tomoyo_encode2+0x100/0x3e0 [ 218.478612][ T7512] tomoyo_encode+0x29/0x50 [ 218.478633][ T7512] tomoyo_realpath_from_path+0x18f/0x6e0 [ 218.478661][ T7512] tomoyo_path_number_perm+0x245/0x580 [ 218.478680][ T7512] ? tomoyo_path_number_perm+0x237/0x580 [ 218.478701][ T7512] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 218.478723][ T7512] ? find_held_lock+0x2b/0x80 [ 218.478764][ T7512] ? find_held_lock+0x2b/0x80 [ 218.478781][ T7512] ? hook_file_ioctl_common+0x145/0x410 [ 218.478801][ T7512] ? __fget_files+0x20e/0x3c0 [ 218.478830][ T7512] security_file_ioctl+0x9b/0x240 [ 218.478854][ T7512] __x64_sys_ioctl+0xb7/0x200 [ 218.478876][ T7512] do_syscall_64+0xcd/0x260 [ 218.478899][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.478915][ T7512] RIP: 0033:0x7fe88678e969 [ 218.478927][ T7512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.478944][ T7512] RSP: 002b:00007fe887523038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.478960][ T7512] RAX: ffffffffffffffda RBX: 00007fe8869b5fa0 RCX: 00007fe88678e969 [ 218.478970][ T7512] RDX: 0000000000000000 RSI: 0000000080089418 RDI: 0000000000000003 [ 218.478978][ T7512] RBP: 00007fe887523090 R08: 0000000000000000 R09: 0000000000000000 [ 218.478987][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.478996][ T7512] R13: 0000000000000000 R14: 00007fe8869b5fa0 R15: 00007fff8488faf8 [ 218.479018][ T7512] [ 218.479033][ T7512] ERROR: Out of memory at tomoyo_realpath_from_path. [ 218.511831][ T5854] usb 2-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=28.46 [ 218.562246][ T7516] (syz.2.422,7516,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 218.594083][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.601548][ T7516] o2cb: This node has not been configured. [ 218.609029][ T5854] usb 2-1: Product: syz [ 218.617879][ T7516] o2cb: Cluster check failed. Fix errors before retrying. [ 218.619565][ T5854] usb 2-1: Manufacturer: syz [ 218.639576][ T7516] (syz.2.422,7516,1):user_dlm_register:674 ERROR: status = -22 [ 218.650683][ T5854] usb 2-1: SerialNumber: syz [ 218.657317][ T7516] (syz.2.422,7516,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 218.717763][ T7517] overlayfs: failed to resolve './file1': -2 [ 219.648160][ T5854] usb 2-1: USB disconnect, device number 16 [ 219.673817][ T7521] FAULT_INJECTION: forcing a failure. [ 219.673817][ T7521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.687014][ T7521] CPU: 0 UID: 0 PID: 7521 Comm: syz.0.424 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 219.687038][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.687047][ T7521] Call Trace: [ 219.687053][ T7521] [ 219.687059][ T7521] dump_stack_lvl+0x16c/0x1f0 [ 219.687087][ T7521] should_fail_ex+0x512/0x640 [ 219.687111][ T7521] _copy_from_user+0x2e/0xd0 [ 219.687134][ T7521] __sys_bpf+0x21d/0x4d80 [ 219.687158][ T7521] ? __pfx___sys_bpf+0x10/0x10 [ 219.687179][ T7521] ? ksys_write+0x190/0x240 [ 219.687208][ T7521] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 219.687243][ T7521] ? fput+0x70/0xf0 [ 219.687260][ T7521] ? ksys_write+0x1b9/0x240 [ 219.687288][ T7521] ? __pfx_ksys_write+0x10/0x10 [ 219.687310][ T7521] ? rcu_is_watching+0x12/0xc0 [ 219.687334][ T7521] __x64_sys_bpf+0x78/0xc0 [ 219.687353][ T7521] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.687372][ T7521] do_syscall_64+0xcd/0x260 [ 219.687395][ T7521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.687412][ T7521] RIP: 0033:0x7f887d58e969 [ 219.687425][ T7521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.687442][ T7521] RSP: 002b:00007f887b3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.687458][ T7521] RAX: ffffffffffffffda RBX: 00007f887d7b6080 RCX: 00007f887d58e969 [ 219.687469][ T7521] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 219.687478][ T7521] RBP: 00007f887b3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 219.687487][ T7521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.687497][ T7521] R13: 0000000000000000 R14: 00007f887d7b6080 R15: 00007ffda52da618 [ 219.687517][ T7521] [ 220.192477][ T5862] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 220.779667][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 220.779698][ T30] audit: type=1400 audit(1746927731.172:877): avc: denied { ioctl } for pid=7524 comm="syz.4.425" path="socket:[14949]" dev="sockfs" ino=14949 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.075426][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 221.094222][ T7537] netlink: 'syz.3.427': attribute type 16 has an invalid length. [ 221.165182][ T5862] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.242253][ T5913] usb 4-1: 0:2 : does not exist [ 221.242837][ T5862] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.261017][ T7537] netlink: 'syz.3.427': attribute type 17 has an invalid length. [ 221.261786][ T5862] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.278616][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.308174][ T5913] usb 4-1: unit 5: unexpected type 0x0a [ 221.409821][ T5810] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 221.431805][ T7537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.474419][ T5913] usb 4-1: USB disconnect, device number 19 [ 221.500262][ T5862] usb 3-1: usb_control_msg returned -32 [ 221.517607][ T5862] usbtmc 3-1:16.0: can't read capabilities [ 221.520921][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.557163][ T7554] exFAT-fs (nullb0): invalid boot record signature [ 222.564792][ T7554] exFAT-fs (nullb0): failed to read boot sector [ 222.571651][ T7554] exFAT-fs (nullb0): failed to recognize exfat type [ 222.657700][ T30] audit: type=1400 audit(1746927733.052:878): avc: denied { kexec_image_load } for pid=7553 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 222.838545][ T5854] usb 3-1: USB disconnect, device number 16 [ 224.148531][ T7581] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 224.601044][ T5810] Bluetooth: hci4: unexpected event for opcode 0x2027 [ 224.608074][ T5810] Bluetooth: hci4: link tx timeout [ 224.647268][ T7589] netlink: 'syz.2.441': attribute type 16 has an invalid length. [ 224.728910][ T7589] netlink: 'syz.2.441': attribute type 17 has an invalid length. [ 224.762879][ T5862] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 224.773277][ T7589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.007026][ T5862] usb 5-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 225.507814][ T5862] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.760224][ T5862] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 225.770819][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 225.779477][ T7602] tmpfs: Bad value for 'mpol' [ 225.784470][ T5862] usb 5-1: SerialNumber: syz [ 226.092478][ T5913] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 227.758181][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 227.995266][ T7602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.059239][ T7602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.145081][ T5862] usb 5-1: 0:2 : does not exist [ 229.150071][ T5862] usb 5-1: unit 5: unexpected type 0x0a [ 229.331310][ T5862] usb 5-1: USB disconnect, device number 19 [ 230.099878][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.122523][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 230.465295][ T5913] usb 1-1: no configurations [ 230.470303][ T5913] usb 1-1: can't read configurations, error -22 [ 231.580695][ T5810] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 231.765423][ T7646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.452'. [ 231.774419][ T7646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.452'. [ 231.784563][ T7646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.452'. [ 231.860392][ T7646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.452'. [ 232.154399][ T30] audit: type=1400 audit(1746927742.162:879): avc: denied { read } for pid=7636 comm="syz.2.452" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 232.710995][ T30] audit: type=1400 audit(1746927742.162:880): avc: denied { open } for pid=7636 comm="syz.2.452" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 232.735022][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.850744][ T30] audit: type=1400 audit(1746927743.232:881): avc: denied { nlmsg_write } for pid=7653 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.284292][ T7663] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 233.752467][ T5862] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 233.933840][ T5862] usb 4-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 233.944196][ T5862] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.954264][ T5862] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.963576][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 233.971421][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.980471][ T5862] usb 4-1: SerialNumber: syz [ 234.052893][ T5856] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 234.122531][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 234.135459][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 234.145038][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.158549][ T9] usb 1-1: config 0 descriptor?? [ 234.246122][ T5856] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.249867][ T7681] overlayfs: overlapping lowerdir path [ 234.290032][ T5856] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.456211][ T5856] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.488001][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.488337][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 234.668471][ T7669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.462'. [ 234.685533][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 234.695760][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 234.712022][ T9] asix 1-1:0.0: probe with driver asix failed with error -32 [ 234.729757][ T9] usb 1-1: USB disconnect, device number 18 [ 234.768986][ T5856] usb 3-1: usb_control_msg returned -32 [ 234.781137][ T5856] usbtmc 3-1:16.0: can't read capabilities [ 234.914832][ T30] audit: type=1400 audit(1746927745.312:882): avc: denied { getopt } for pid=7685 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.091791][ T7688] netlink: 160 bytes leftover after parsing attributes in process `syz.1.468'. [ 235.612162][ T9] usb 3-1: USB disconnect, device number 17 [ 235.632700][ T7697] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 235.639488][ T7697] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.665230][ T30] audit: type=1400 audit(1746927746.062:883): avc: denied { accept } for pid=7690 comm="syz.4.469" lport=53220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 235.665291][ T7697] vhci_hcd vhci_hcd.0: Device attached [ 235.695129][ T30] audit: type=1400 audit(1746927746.092:884): avc: denied { create } for pid=7690 comm="syz.4.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 235.824723][ T30] audit: type=1400 audit(1746927746.222:885): avc: denied { mount } for pid=7703 comm="syz.1.472" name="/" dev="configfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 235.858501][ T30] audit: type=1400 audit(1746927746.252:886): avc: denied { mounton } for pid=7703 comm="syz.1.472" path="/97/file0" dev="configfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 235.881105][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.896743][ T30] audit: type=1400 audit(1746927746.282:887): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 235.942515][ T5854] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 236.044555][ T5856] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 236.091540][ T5862] usb 4-1: 0:2 : does not exist [ 236.626938][ T5862] usb 4-1: unit 5 not found! [ 236.673022][ T5854] usb 1-1: config 0 has no interfaces? [ 236.712575][ T5854] usb 1-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 236.719159][ T7711] netlink: 'syz.3.474': attribute type 16 has an invalid length. [ 236.731756][ T7711] netlink: 'syz.3.474': attribute type 17 has an invalid length. [ 236.782594][ T5862] usb 4-1: USB disconnect, device number 20 [ 236.788619][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.810388][ T7711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.841842][ T5854] usb 1-1: config 0 descriptor?? [ 236.885867][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.072586][ T5913] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 237.073256][ T5854] usb 1-1: string descriptor 0 read error: -71 [ 237.096414][ T7698] vhci_hcd: connection closed [ 237.099000][ T6738] vhci_hcd: stop threads [ 237.111017][ T5854] usb 1-1: USB disconnect, device number 19 [ 237.128683][ T6738] vhci_hcd: release socket [ 237.140693][ T6738] vhci_hcd: disconnect device [ 237.152590][ T5856] vhci_hcd: vhci_device speed not set [ 237.202545][ T950] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 237.262526][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 237.268839][ T5913] usb 3-1: config 155 has too many interfaces: 124, using maximum allowed: 32 [ 237.278716][ T5913] usb 3-1: config 155 has 1 interface, different from the descriptor's value: 124 [ 237.290273][ T5913] usb 3-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.309497][ T5913] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 237.348507][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.357512][ T5913] usb 3-1: Product: syz [ 237.362693][ T5913] usb 3-1: Manufacturer: syz [ 237.367742][ T5913] usb 3-1: SerialNumber: syz [ 237.385673][ T950] usb 2-1: config index 0 descriptor too short (expected 63524, got 36) [ 237.401654][ T950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 237.533891][ T950] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 237.543296][ T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.551540][ T950] usb 2-1: Product: syz [ 237.556657][ T950] usb 2-1: Manufacturer: syz [ 237.561373][ T950] usb 2-1: SerialNumber: syz [ 237.569361][ T950] usb 2-1: config 0 descriptor?? [ 237.608035][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 237.620385][ T30] audit: type=1400 audit(1746927748.012:888): avc: denied { bind } for pid=7717 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 238.614944][ T30] audit: type=1400 audit(1746927748.982:889): avc: denied { shutdown } for pid=7736 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 238.649210][ T7743] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.12) [ 238.715577][ T30] audit: type=1400 audit(1746927749.102:890): avc: denied { getopt } for pid=7742 comm="syz.4.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 239.083377][ T7750] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 239.462607][ T30] audit: type=1400 audit(1746927749.412:891): avc: denied { compute_member } for pid=7717 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 239.500119][ T7748] syzkaller1: entered promiscuous mode [ 239.505764][ T7748] syzkaller1: entered allmulticast mode [ 239.523675][ T5854] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 239.585177][ T30] audit: type=1400 audit(1746927749.982:892): avc: denied { ioctl } for pid=7749 comm="syz.0.485" path="socket:[15995]" dev="sockfs" ino=15995 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 239.998027][ T5854] usb 4-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 240.092009][ T5854] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.122259][ T5854] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 240.135669][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.152603][ T5854] usb 4-1: SerialNumber: syz [ 240.419680][ T5886] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 240.543459][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 240.560969][ T7764] netlink: 'syz.4.489': attribute type 4 has an invalid length. [ 240.674334][ T5886] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.906023][ T950] usb 2-1: USB disconnect, device number 17 [ 240.944430][ T5886] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.990207][ T5886] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 241.020769][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.667616][ T5886] usb 1-1: usb_control_msg returned -32 [ 241.999499][ T5886] usbtmc 1-1:16.0: can't read capabilities [ 242.003365][ T5854] usb 4-1: 0:2 : does not exist [ 242.082651][ T5854] usb 4-1: unit 5 not found! [ 242.097480][ T5854] usb 4-1: USB disconnect, device number 21 [ 242.228472][ T30] audit: type=1400 audit(1746927752.582:893): avc: denied { shutdown } for pid=7769 comm="syz.4.492" laddr=fe80::b lport=50356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.274877][ T7771] overlayfs: missing 'lowerdir' [ 243.154545][ T950] usb 1-1: USB disconnect, device number 20 [ 243.177988][ T7776] netlink: 'syz.1.493': attribute type 1 has an invalid length. [ 243.245474][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.286004][ T5886] IPVS: starting estimator thread 0... [ 243.296817][ T5862] usb 3-1: USB disconnect, device number 18 [ 243.406899][ T7781] IPVS: using max 78 ests per chain, 187200 per kthread [ 243.455506][ T30] audit: type=1400 audit(1746927753.852:894): avc: denied { setopt } for pid=7787 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.491472][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.675474][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 243.708936][ T7786] netlink: 80 bytes leftover after parsing attributes in process `syz.0.495'. [ 244.325940][ T5886] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 244.664317][ T5886] usb 2-1: device descriptor read/64, error -71 [ 245.244540][ T5886] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 245.368472][ T7823] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 245.411522][ T5886] usb 2-1: device descriptor read/64, error -71 [ 245.545088][ T5886] usb usb2-port1: attempt power cycle [ 245.792515][ T5913] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 245.801040][ T7829] ======================================================= [ 245.801040][ T7829] WARNING: The mand mount option has been deprecated and [ 245.801040][ T7829] and is ignored by this kernel. Remove the mand [ 245.801040][ T7829] option from the mount to silence this warning. [ 245.801040][ T7829] ======================================================= [ 245.801059][ T30] audit: type=1400 audit(1746927756.192:895): avc: denied { remount } for pid=7828 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 245.835915][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.862236][ T30] audit: type=1400 audit(1746927756.232:896): avc: denied { write } for pid=7826 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 245.885677][ T30] audit: type=1400 audit(1746927756.232:897): avc: denied { ioctl } for pid=7826 comm="syz.3.508" path="socket:[16533]" dev="sockfs" ino=16533 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 245.917341][ T30] audit: type=1400 audit(1746927756.232:898): avc: denied { accept } for pid=7826 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 245.942340][ T30] audit: type=1400 audit(1746927756.282:899): avc: denied { append } for pid=7826 comm="syz.3.508" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 245.984106][ T5913] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 246.002903][ T5913] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.021758][ T5913] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 246.033011][ T5886] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 246.044330][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 246.052344][ T5913] usb 3-1: SerialNumber: syz [ 246.064265][ T5886] usb 2-1: device descriptor read/8, error -71 [ 246.272494][ T950] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 246.302556][ T5886] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 246.323131][ T5886] usb 2-1: device descriptor read/8, error -71 [ 246.424186][ T950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.433652][ T5886] usb usb2-port1: unable to enumerate USB device [ 246.435365][ T950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.451687][ T950] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 246.461592][ T950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.491473][ T950] usb 1-1: config 0 descriptor?? [ 246.666631][ T30] audit: type=1400 audit(1746927757.062:900): avc: denied { audit_write } for pid=7846 comm="syz.4.512" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 246.696750][ T7847] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7847 comm=syz.4.512 [ 246.972527][ T950] usbhid 1-1:0.0: can't add hid device: -71 [ 246.987899][ T950] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 247.016631][ T950] usb 1-1: USB disconnect, device number 21 [ 247.100711][ T7856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.260857][ T7864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.302145][ T7864] input: syz1 as /devices/virtual/input/input18 [ 247.654525][ T30] audit: type=1400 audit(1746927757.932:901): avc: denied { read } for pid=7866 comm="syz.3.520" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 247.929168][ T30] audit: type=1400 audit(1746927757.952:902): avc: denied { open } for pid=7866 comm="syz.3.520" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 248.220035][ T5913] usb 3-1: 0:2 : does not exist [ 248.284155][ T5913] usb 3-1: unit 5 not found! [ 248.343509][ T5913] usb 3-1: USB disconnect, device number 19 [ 248.415844][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.436205][ T7879] 9pnet_fd: Insufficient options for proto=fd [ 248.559661][ T30] audit: type=1400 audit(1746927758.958:903): avc: denied { shutdown } for pid=7880 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.582460][ T5862] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 248.626922][ T30] audit: type=1400 audit(1746927758.978:904): avc: denied { getopt } for pid=7880 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.772910][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 248.789966][ T5862] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 248.808388][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.362322][ T5862] usb 1-1: config 0 descriptor?? [ 249.587507][ T5862] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 249.624811][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 249.653843][ T5862] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 249.661140][ T5862] usb 1-1: media controller created [ 249.682520][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.714895][ T30] audit: type=1400 audit(1746927760.108:905): avc: denied { create } for pid=7896 comm="syz.2.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 249.787684][ T7876] netlink: 'syz.0.522': attribute type 1 has an invalid length. [ 249.802744][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 249.951832][ T30] audit: type=1400 audit(1746927760.328:906): avc: denied { read } for pid=7875 comm="syz.0.522" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 249.974696][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.044381][ T5855] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 250.177709][ T5862] az6027: usb out operation failed. (-71) [ 250.188888][ T30] audit: type=1400 audit(1746927760.338:907): avc: denied { open } for pid=7875 comm="syz.0.522" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 250.209400][ T5862] az6027: usb out operation failed. (-71) [ 250.245751][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 250.257401][ T5862] stb0899_attach: Driver disabled by Kconfig [ 250.266161][ T5862] az6027: no front-end attached [ 250.266161][ T5862] [ 250.305365][ T5862] az6027: usb out operation failed. (-71) [ 250.376692][ T5862] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 250.593284][ T5862] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 250.789829][ T5862] dvb-usb: schedule remote query interval to 400 msecs. [ 250.850977][ T5862] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 251.107314][ T5862] usb 1-1: USB disconnect, device number 22 [ 251.226884][ T7903] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.282592][ T7903] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 251.518931][ T7903] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.572934][ T7903] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 251.705883][ T7903] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.810431][ T7903] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 252.207339][ T7903] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 252.218018][ T5862] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 252.233184][ T7903] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 252.274052][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 252.280910][ T7903] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 252.317354][ T7903] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 252.583179][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 252.842495][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 252.876154][ T24] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 252.902444][ T5855] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 253.112045][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 253.157534][ T24] usb 5-1: Product: syz [ 253.195506][ T24] usb 5-1: Manufacturer: syz [ 253.239188][ T24] usb 5-1: SerialNumber: syz [ 253.526414][ T24] usb 5-1: config 0 descriptor?? [ 253.611842][ T24] usb 5-1: can't set config #0, error -71 [ 253.907630][ T24] usb 5-1: USB disconnect, device number 20 [ 253.917732][ T7922] serio: Serial port ttyS3 [ 254.010686][ T5855] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 254.030148][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 254.041986][ T5810] Bluetooth: hci1: command 0x0406 tx timeout [ 254.289413][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 254.454951][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 254.461420][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 254.594623][ T5855] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.608202][ T5855] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.618039][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.315039][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.641815][ T5855] usb 3-1: usb_control_msg returned -32 [ 255.778945][ T5855] usbtmc 3-1:16.0: can't read capabilities [ 256.250202][ T5810] Bluetooth: hci1: command 0x0406 tx timeout [ 256.256284][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 256.706689][ T5810] Bluetooth: hci4: command 0x0405 tx timeout [ 256.712827][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 256.777008][ T30] audit: type=1326 audit(1746927767.178:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe455f8e969 code=0x7ffc0000 [ 256.947830][ T30] audit: type=1326 audit(1746927767.178:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe455f8e969 code=0x7ffc0000 [ 256.960252][ T5855] usb 3-1: USB disconnect, device number 21 [ 256.977810][ T30] audit: type=1326 audit(1746927767.178:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe455f8e969 code=0x7ffc0000 [ 257.167740][ T7956] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 257.174289][ T7956] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 257.182124][ T7956] vhci_hcd vhci_hcd.0: Device attached [ 257.393129][ T950] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 257.407221][ T30] audit: type=1326 audit(1746927767.178:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe455f8e969 code=0x7ffc0000 [ 257.430984][ T30] audit: type=1326 audit(1746927767.178:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe455f8e969 code=0x7ffc0000 [ 257.455415][ T30] audit: type=1326 audit(1746927767.198:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe455f8e969 code=0x7ffc0000 [ 257.479190][ T30] audit: type=1326 audit(1746927767.198:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe455f8e969 code=0x7ffc0000 [ 257.488913][ T5862] usb 42-1: SetAddress Request (2) to port 0 [ 257.609166][ T5862] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 257.619590][ T7967] trusted_key: encrypted_key: insufficient parameters specified [ 257.633184][ T30] audit: type=1326 audit(1746927767.198:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe455f8e969 code=0x7ffc0000 [ 257.704140][ T950] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.761392][ T950] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.802450][ T5913] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 257.932552][ T950] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.936145][ T30] audit: type=1326 audit(1746927767.198:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe455f8e969 code=0x7ffc0000 [ 257.965862][ T950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.965900][ T950] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 257.965921][ T950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.991077][ T950] usb 5-1: config 0 descriptor?? [ 258.803829][ T30] audit: type=1326 audit(1746927767.198:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe455f8e969 code=0x7ffc0000 [ 259.001138][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.143090][ T7958] vhci_hcd: connection reset by peer [ 260.174251][ T950] usbhid 5-1:0.0: can't add hid device: -71 [ 260.188632][ T950] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 260.228489][ T950] usb 5-1: USB disconnect, device number 21 [ 260.246552][ T1063] vhci_hcd: stop threads [ 260.372879][ T1063] vhci_hcd: release socket [ 260.403237][ T1063] vhci_hcd: disconnect device [ 261.346806][ T7998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.558'. [ 261.567419][ T7995] syzkaller0: entered promiscuous mode [ 261.594232][ T7995] syzkaller0: entered allmulticast mode [ 261.803967][ T8008] ALSA: mixer_oss: invalid OSS volume '' [ 262.015707][ T5913] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 262.024862][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.094241][ T5913] usb 2-1: config 0 descriptor?? [ 262.152664][ T5913] usb 2-1: can't set config #0, error -71 [ 262.254249][ T5913] usb 2-1: USB disconnect, device number 22 [ 262.701634][ T5862] usb 42-1: device descriptor read/8, error -110 [ 263.281270][ T5862] usb usb42-port1: attempt power cycle [ 263.865767][ T5862] usb usb42-port1: unable to enumerate USB device [ 266.035015][ T5855] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 266.450079][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 266.450135][ T30] audit: type=1400 audit(1746927776.848:937): avc: denied { ioctl } for pid=8060 comm="syz.3.578" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 266.502452][ T5855] usb 5-1: Using ep0 maxpacket: 8 [ 266.509237][ T5855] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.520595][ T5855] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 266.530680][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.549095][ T5855] usb 5-1: config 0 descriptor?? [ 266.578456][ T5855] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 267.802950][ T30] audit: type=1400 audit(1746927778.208:938): avc: denied { connect } for pid=8052 comm="syz.4.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 268.842535][ T5855] gspca_vc032x: reg_w err -110 [ 268.847438][ T5855] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 269.172657][ T5856] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 269.936838][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.031740][ T5856] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 270.172962][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 270.251220][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 270.564633][ T5856] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 270.722027][ T8099] (syz.2.587,8099,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 270.817694][ T5856] usb 2-1: string descriptor 0 read error: -71 [ 270.824574][ T5856] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 270.834709][ T8098] o2cb: This node has not been configured. [ 270.840812][ T8098] o2cb: Cluster check failed. Fix errors before retrying. [ 270.850480][ T8098] (syz.2.587,8098,0):user_dlm_register:674 ERROR: status = -22 [ 270.875398][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 270.876187][ T8098] (syz.2.587,8098,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 270.898174][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 270.939340][ T5856] usb 2-1: config 0 descriptor?? [ 271.032745][ T5856] usb 2-1: can't set config #0, error -71 [ 271.042014][ T5856] usb 2-1: USB disconnect, device number 23 [ 271.121167][ T5855] usb 5-1: USB disconnect, device number 22 [ 271.978499][ T8119] overlayfs: missing 'lowerdir' [ 272.573556][ T8122] netlink: 'syz.4.593': attribute type 16 has an invalid length. [ 272.581427][ T8122] netlink: 'syz.4.593': attribute type 17 has an invalid length. [ 272.629506][ T8122] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.636729][ T8122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.644229][ T8122] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.651362][ T8122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.673123][ T8122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.681306][ T8126] use of bytesused == 0 is deprecated and will be removed in the future, [ 272.746065][ T8124] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 272.758648][ T8126] use the actual size instead. [ 272.862477][ T5856] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 273.455943][ T5856] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.477542][ T5856] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 273.495532][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.504051][ T5856] usb 4-1: Product: syz [ 273.510668][ T8153] SELinux: syz.2.601 (8153) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 273.527670][ T5856] usb 4-1: Manufacturer: syz [ 273.539268][ T5856] usb 4-1: SerialNumber: syz [ 273.825541][ T5856] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 274.026266][ T5862] usb 4-1: USB disconnect, device number 22 [ 274.035388][ T5862] usblp0: removed [ 274.425633][ T30] audit: type=1400 audit(1746927784.818:939): avc: denied { write } for pid=8159 comm="syz.4.604" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 274.840477][ T8166] SELinux: syz.1.605 (8166) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 275.290348][ T5855] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 275.463946][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.486333][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.502129][ T5855] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 275.537150][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.565005][ T5855] usb 5-1: config 0 descriptor?? [ 276.001089][ T5855] usb 5-1: string descriptor 0 read error: -71 [ 276.009173][ T30] audit: type=1400 audit(1746927786.178:940): avc: denied { read } for pid=8170 comm="syz.4.607" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 276.035987][ T8186] overlay: Unknown parameter 'appraise_type' [ 276.043778][ T5855] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20 [ 276.044495][ T5856] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 276.064246][ T5169] bcm5974 5-1:0.0: could not read from device [ 276.073806][ T8186] overlayfs: missing 'lowerdir' [ 276.080779][ T5169] bcm5974 5-1:0.0: could not read from device [ 276.083836][ T5855] usb 5-1: USB disconnect, device number 23 [ 276.104092][ T5169] bcm5974 5-1:0.0: could not read from device [ 276.115351][ T5169] bcm5974 5-1:0.0: could not read from device [ 276.212241][ T8190] (syz.1.614,8190,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 276.224685][ T8190] o2cb: This node has not been configured. [ 276.230512][ T8190] o2cb: Cluster check failed. Fix errors before retrying. [ 276.234169][ T5856] usb 3-1: config 127 has an invalid interface number: 32 but max is 0 [ 276.239458][ T8190] (syz.1.614,8190,0):user_dlm_register:674 ERROR: status = -22 [ 276.257973][ T8190] (syz.1.614,8190,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 276.287704][ T5856] usb 3-1: config 127 has no interface number 0 [ 276.295889][ T5856] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 276.314897][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.332342][ T5856] ums-freecom 3-1:127.32: USB Mass Storage device detected [ 277.103061][ T30] audit: type=1400 audit(1746927787.118:941): avc: denied { create } for pid=8193 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 277.133328][ T5856] usb 3-1: USB disconnect, device number 22 [ 277.150715][ T30] audit: type=1400 audit(1746927787.118:942): avc: denied { setopt } for pid=8193 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 277.179975][ T30] audit: type=1400 audit(1746927787.278:943): avc: denied { call } for pid=8199 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 277.481343][ T30] audit: type=1400 audit(1746927787.878:944): avc: denied { create } for pid=8211 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 277.572433][ T30] audit: type=1400 audit(1746927787.908:945): avc: denied { write } for pid=8211 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 277.724231][ T8220] netlink: del zone limit has 4 unknown bytes [ 279.123889][ T8218] trusted_key: encrypted_key: insufficient parameters specified [ 279.197476][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.625'. [ 279.242161][ T30] audit: type=1400 audit(1746927789.638:946): avc: denied { connect } for pid=8229 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 279.305153][ T8231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=8231 comm=syz.3.626 [ 279.401703][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 279.435871][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 279.501332][ T8234] ceph: No mds server is up or the cluster is laggy [ 279.963314][ T8246] veth0_to_team: entered promiscuous mode [ 279.969174][ T8246] veth0_to_team: entered allmulticast mode [ 280.061469][ T8245] netlink: 72 bytes leftover after parsing attributes in process `syz.3.629'. [ 280.109656][ T8245] netlink: 72 bytes leftover after parsing attributes in process `syz.3.629'. [ 280.265869][ T8245] dummy0: entered promiscuous mode [ 280.271397][ T8245] dummy0: entered allmulticast mode [ 280.278694][ T8245] batman_adv: batadv0: Adding interface: dummy0 [ 280.285251][ T8245] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.351879][ T8245] batman_adv: batadv0: Interface activated: dummy0 [ 280.431393][ T8256] batadv0: mtu less than device minimum [ 280.461521][ T8256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.473213][ T8256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.484546][ T8256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.492477][ T5855] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 280.495778][ T8256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.514198][ T8256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.525469][ T8256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.536849][ T8256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.548110][ T8256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.570788][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 280.580705][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 280.682929][ T30] audit: type=1400 audit(1746927791.078:947): avc: denied { watch watch_reads } for pid=8259 comm="syz.3.633" path="/116" dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 280.708744][ T5855] usb 3-1: Using ep0 maxpacket: 8 [ 280.745083][ T5855] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 280.761025][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.788969][ T5855] usb 3-1: config 0 descriptor?? [ 281.050088][ T5855] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 281.437419][ T5913] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 281.504044][ T5855] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 281.515289][ T5855] asix 3-1:0.0: probe with driver asix failed with error -61 [ 281.673958][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 281.746329][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.777283][ T30] audit: type=1400 audit(1746927792.178:948): avc: denied { mounton } for pid=8252 comm="syz.2.631" path="/proc/433/cgroup" dev="proc" ino=18445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 281.778114][ T5913] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 281.801812][ T5855] usb 3-1: USB disconnect, device number 23 [ 281.817848][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.957054][ T5913] usb 2-1: config 0 descriptor?? [ 282.117290][ T5913] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 282.162528][ T5862] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 282.324313][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 282.335818][ T8268] netlink: 47 bytes leftover after parsing attributes in process `syz.1.636'. [ 282.352657][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 282.356192][ T5913] usb 2-1: USB disconnect, device number 24 [ 282.389582][ T5862] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 282.398852][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 282.413246][ T5862] usb 5-1: SerialNumber: syz [ 282.419971][ T5862] usb 5-1: config 0 descriptor?? [ 282.431724][ T5862] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 282.441914][ T5862] usb 5-1: Detected FT232A [ 282.448452][ T5862] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 282.599203][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.607374][ T9] usb 4-1: config 0 has no interface number 0 [ 282.689207][ T5856] usb 5-1: USB disconnect, device number 24 [ 282.700539][ T5856] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 282.715671][ T5856] ftdi_sio 5-1:0.0: device disconnected [ 282.727787][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 282.744507][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.771652][ T8287] netlink: 'syz.2.641': attribute type 16 has an invalid length. [ 282.779869][ T8287] netlink: 'syz.2.641': attribute type 17 has an invalid length. [ 282.792029][ T8287] net_ratelimit: 11 callbacks suppressed [ 282.792035][ T8287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.832417][ T9] usb 4-1: Product: syz [ 282.851188][ T9] usb 4-1: Manufacturer: syz [ 282.902913][ T9] usb 4-1: SerialNumber: syz [ 283.901823][ T9] usb 4-1: config 0 descriptor?? [ 284.001166][ T30] audit: type=1400 audit(1746927794.398:949): avc: denied { create } for pid=8294 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 284.231737][ T9] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 284.431861][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 284.448077][ T30] audit: type=1400 audit(1746927794.398:950): avc: denied { write } for pid=8294 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 284.605013][ T8304] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 284.611556][ T8304] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 284.632631][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 284.640852][ T9] usb 4-1: media controller created [ 284.650543][ T30] audit: type=1400 audit(1746927794.398:951): avc: denied { read } for pid=8294 comm="syz.1.644" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 284.683894][ T8304] vhci_hcd vhci_hcd.0: Device attached [ 284.696729][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.711205][ T8305] vhci_hcd: connection closed [ 284.729728][ T1063] vhci_hcd: stop threads [ 284.778093][ T1063] vhci_hcd: release socket [ 284.788586][ T1063] vhci_hcd: disconnect device [ 286.047537][ T5862] usb 4-1: USB disconnect, device number 23 [ 286.112487][ T5855] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 286.640385][ T5855] usb 2-1: Using ep0 maxpacket: 8 [ 286.663691][ T8330] trusted_key: encrypted_key: insufficient parameters specified [ 286.720704][ T5855] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 286.874700][ T5855] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.012751][ T5855] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.138683][ T5855] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.295887][ T5855] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.315672][ T8332] xt_hashlimit: Unknown mode mask FF00, kernel too old? [ 287.462678][ T5855] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 287.511550][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.625626][ T8342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.657'. [ 288.794745][ T8356] openvswitch: netlink: Unknown key attributes 2 [ 288.820508][ T8311] bridge2: entered promiscuous mode [ 288.839622][ T8358] (syz.0.660,8358,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 288.848982][ T8356] nbd4: detected capacity change from 0 to 4328522134 [ 288.867297][ T8358] o2cb: This node has not been configured. [ 288.873338][ T8358] o2cb: Cluster check failed. Fix errors before retrying. [ 288.880602][ T8358] (syz.0.660,8358,0):user_dlm_register:674 ERROR: status = -22 [ 288.910848][ T8358] (syz.0.660,8358,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 288.926550][ T5855] usb 2-1: usb_control_msg returned -71 [ 288.933714][ T8359] block nbd4: shutting down sockets [ 288.940705][ T5855] usbtmc 2-1:16.0: can't read capabilities [ 288.956853][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.958655][ T5855] usb 2-1: USB disconnect, device number 25 [ 288.966187][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 289.046958][ T11] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.057189][ T11] Buffer I/O error on dev nbd4, logical block 0, async page read [ 289.067320][ T5973] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.076766][ T5973] Buffer I/O error on dev nbd4, logical block 0, async page read [ 289.088910][ T5973] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.099232][ T5973] Buffer I/O error on dev nbd4, logical block 0, async page read [ 289.113902][ T5973] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.125306][ T5973] Buffer I/O error on dev nbd4, logical block 0, async page read [ 289.138064][ T5973] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.149680][ T5973] Buffer I/O error on dev nbd4, logical block 0, async page read [ 289.160186][ T5973] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.173645][ T5973] Buffer I/O error on dev nbd4, logical block 0, async page read [ 289.181704][ T5973] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.190811][ T5973] Buffer I/O error on dev nbd4, logical block 0, async page read [ 289.199694][ T5973] ldm_validate_partition_table(): Disk read failed. [ 289.207194][ T5973] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.216879][ T5973] Buffer I/O error on dev nbd4, logical block 0, async page read [ 289.224871][ T5973] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.264664][ T5973] Buffer I/O error on dev nbd4, logical block 0, async page read [ 289.276948][ T5973] Dev nbd4: unable to read RDB block 0 [ 289.283158][ T5973] nbd4: unable to read partition table [ 289.303628][ T5973] ldm_validate_partition_table(): Disk read failed. [ 289.317018][ T5973] Dev nbd4: unable to read RDB block 0 [ 289.323324][ T5973] nbd4: unable to read partition table [ 290.030522][ T8375] trusted_key: encrypted_key: insufficient parameters specified [ 291.145618][ T8371] lo speed is unknown, defaulting to 1000 [ 291.194131][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 291.223355][ T8374] smc: removing ib device syz! [ 291.236816][ T8371] lo speed is unknown, defaulting to 1000 [ 291.638410][ T8374] ------------[ cut here ]------------ [ 291.644268][ T8374] WARNING: CPU: 1 PID: 8374 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 291.655813][ T8374] Modules linked in: [ 291.659846][ T8374] CPU: 1 UID: 0 PID: 8374 Comm: syz.0.665 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 291.671745][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.682129][ T8374] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 291.687594][ T8374] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 f5 f5 19 f9 e8 f0 f5 19 f9 90 <0f> 0b 90 5b e9 e6 f5 19 f9 e8 a1 70 7f f9 eb da 66 66 2e 0f 1f 84 [ 291.707672][ T8374] RSP: 0000:ffffc9001c0df1b0 EFLAGS: 00010246 [ 291.713745][ T8374] RAX: 0000000000080000 RBX: ffff888035bf9320 RCX: ffffc9000ce4a000 [ 291.721709][ T8374] RDX: 0000000000080000 RSI: ffffffff88a12cf0 RDI: ffff888035bf93a0 [ 291.729742][ T8374] RBP: ffffffff889f9320 R08: 0000000000000005 R09: 0000000000000001 [ 291.738052][ T8374] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888035bf8668 [ 291.746634][ T8374] R13: ffff888035bf7fe0 R14: ffff888035bf7fe0 R15: ffff888035bf9080 [ 291.754943][ T8374] FS: 00007f887b3d56c0(0000) GS:ffff888124ae1000(0000) knlGS:0000000000000000 [ 291.764945][ T8374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.771535][ T8374] CR2: 00007f26bfb84520 CR3: 000000005140b000 CR4: 00000000003526f0 [ 291.779518][ T8374] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.787480][ T8374] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 291.795776][ T8374] Call Trace: [ 291.799037][ T8374] [ 291.801955][ T8374] rxe_dealloc+0x25/0xc0 [ 291.806193][ T8374] ib_dealloc_device+0x46/0x230 [ 291.811035][ T8374] __ib_unregister_device+0x396/0x480 [ 291.816407][ T8374] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 291.822305][ T8374] ib_unregister_device_and_put+0x5a/0x80 [ 291.828366][ T8374] nldev_dellink+0x21f/0x320 [ 291.832949][ T8374] ? __pfx_nldev_dellink+0x10/0x10 [ 291.838085][ T8374] ? cap_capable+0xb3/0x250 [ 291.842587][ T8374] ? bpf_lsm_capable+0x9/0x10 [ 291.847240][ T8374] ? security_capable+0x7e/0x260 [ 291.852152][ T8374] ? ns_capable+0xd7/0x110 [ 291.856878][ T8374] ? __pfx_nldev_dellink+0x10/0x10 [ 291.862778][ T8374] rdma_nl_rcv_msg+0x387/0x6e0 [ 291.867534][ T8374] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 291.872917][ T8374] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 [ 291.879310][ T8374] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 291.886588][ T8374] ? netlink_deliver_tap+0x1ae/0xd30 [ 291.891867][ T8374] netlink_unicast+0x53a/0x7f0 [ 291.896633][ T8374] ? __pfx_netlink_unicast+0x10/0x10 [ 291.901899][ T8374] netlink_sendmsg+0x8d1/0xdd0 [ 291.906662][ T8374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.911928][ T8374] ____sys_sendmsg+0xa95/0xc70 [ 291.917005][ T8374] ? copy_msghdr_from_user+0x10a/0x160 [ 291.922452][ T8374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.927730][ T8374] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 291.933576][ T8374] ___sys_sendmsg+0x134/0x1d0 [ 291.938236][ T8374] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.943962][ T8374] __sys_sendmsg+0x16d/0x220 [ 291.948588][ T8374] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.953720][ T8374] ? __x64_sys_futex+0x1e0/0x4c0 [ 291.958765][ T8374] ? rcu_is_watching+0x12/0xc0 [ 291.964183][ T8374] do_syscall_64+0xcd/0x260 [ 291.968678][ T8374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.974921][ T8374] RIP: 0033:0x7f887d58e969 [ 291.979335][ T8374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.998994][ T8374] RSP: 002b:00007f887b3d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.007736][ T8374] RAX: ffffffffffffffda RBX: 00007f887d7b6080 RCX: 00007f887d58e969 [ 292.015720][ T8374] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 292.023683][ T8374] RBP: 00007f887d610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 292.031630][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.039928][ T8374] R13: 0000000000000000 R14: 00007f887d7b6080 R15: 00007ffda52da618 [ 292.047897][ T8374] [ 292.050896][ T8374] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 292.058153][ T8374] CPU: 1 UID: 0 PID: 8374 Comm: syz.0.665 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 292.070014][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.080043][ T8374] Call Trace: [ 292.083303][ T8374] [ 292.086221][ T8374] dump_stack_lvl+0x3d/0x1f0 [ 292.090791][ T8374] panic+0x71c/0x800 [ 292.094667][ T8374] ? __pfx_panic+0x10/0x10 [ 292.099062][ T8374] ? show_trace_log_lvl+0x29b/0x3e0 [ 292.104240][ T8374] ? rxe_pool_cleanup+0x41/0x60 [ 292.109065][ T8374] check_panic_on_warn+0xab/0xb0 [ 292.113987][ T8374] __warn+0xf6/0x3c0 [ 292.117854][ T8374] ? rxe_pool_cleanup+0x41/0x60 [ 292.122679][ T8374] report_bug+0x3c3/0x580 [ 292.126998][ T8374] ? rxe_pool_cleanup+0x41/0x60 [ 292.131833][ T8374] handle_bug+0x184/0x210 [ 292.136142][ T8374] exc_invalid_op+0x17/0x50 [ 292.140622][ T8374] asm_exc_invalid_op+0x1a/0x20 [ 292.145447][ T8374] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 292.150880][ T8374] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 f5 f5 19 f9 e8 f0 f5 19 f9 90 <0f> 0b 90 5b e9 e6 f5 19 f9 e8 a1 70 7f f9 eb da 66 66 2e 0f 1f 84 [ 292.170461][ T8374] RSP: 0000:ffffc9001c0df1b0 EFLAGS: 00010246 [ 292.176512][ T8374] RAX: 0000000000080000 RBX: ffff888035bf9320 RCX: ffffc9000ce4a000 [ 292.184457][ T8374] RDX: 0000000000080000 RSI: ffffffff88a12cf0 RDI: ffff888035bf93a0 [ 292.192410][ T8374] RBP: ffffffff889f9320 R08: 0000000000000005 R09: 0000000000000001 [ 292.200380][ T8374] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888035bf8668 [ 292.208325][ T8374] R13: ffff888035bf7fe0 R14: ffff888035bf7fe0 R15: ffff888035bf9080 [ 292.216275][ T8374] ? __pfx_rxe_dealloc+0x10/0x10 [ 292.221201][ T8374] ? rxe_pool_cleanup+0x40/0x60 [ 292.226029][ T8374] rxe_dealloc+0x25/0xc0 [ 292.230246][ T8374] ib_dealloc_device+0x46/0x230 [ 292.235081][ T8374] __ib_unregister_device+0x396/0x480 [ 292.240447][ T8374] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 292.246321][ T8374] ib_unregister_device_and_put+0x5a/0x80 [ 292.252027][ T8374] nldev_dellink+0x21f/0x320 [ 292.256594][ T8374] ? __pfx_nldev_dellink+0x10/0x10 [ 292.261710][ T8374] ? cap_capable+0xb3/0x250 [ 292.266203][ T8374] ? bpf_lsm_capable+0x9/0x10 [ 292.270855][ T8374] ? security_capable+0x7e/0x260 [ 292.275769][ T8374] ? ns_capable+0xd7/0x110 [ 292.280165][ T8374] ? __pfx_nldev_dellink+0x10/0x10 [ 292.285252][ T8374] rdma_nl_rcv_msg+0x387/0x6e0 [ 292.289997][ T8374] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 292.295265][ T8374] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 [ 292.301665][ T8374] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 292.308669][ T8374] ? netlink_deliver_tap+0x1ae/0xd30 [ 292.313932][ T8374] netlink_unicast+0x53a/0x7f0 [ 292.318671][ T8374] ? __pfx_netlink_unicast+0x10/0x10 [ 292.323943][ T8374] netlink_sendmsg+0x8d1/0xdd0 [ 292.328682][ T8374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.333946][ T8374] ____sys_sendmsg+0xa95/0xc70 [ 292.338688][ T8374] ? copy_msghdr_from_user+0x10a/0x160 [ 292.344123][ T8374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.349391][ T8374] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 292.355178][ T8374] ___sys_sendmsg+0x134/0x1d0 [ 292.359834][ T8374] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.365021][ T8374] __sys_sendmsg+0x16d/0x220 [ 292.369583][ T8374] ? __pfx___sys_sendmsg+0x10/0x10 [ 292.374669][ T8374] ? __x64_sys_futex+0x1e0/0x4c0 [ 292.379589][ T8374] ? rcu_is_watching+0x12/0xc0 [ 292.384346][ T8374] do_syscall_64+0xcd/0x260 [ 292.388840][ T8374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.394706][ T8374] RIP: 0033:0x7f887d58e969 [ 292.399098][ T8374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.418693][ T8374] RSP: 002b:00007f887b3d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.427091][ T8374] RAX: ffffffffffffffda RBX: 00007f887d7b6080 RCX: 00007f887d58e969 [ 292.435036][ T8374] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 292.442981][ T8374] RBP: 00007f887d610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 292.450939][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.458890][ T8374] R13: 0000000000000000 R14: 00007f887d7b6080 R15: 00007ffda52da618 [ 292.466853][ T8374] [ 292.470042][ T8374] Kernel Offset: disabled [ 292.474364][ T8374] Rebooting in 86400 seconds..