last executing test programs: 3m17.219910963s ago: executing program 3 (id=2849): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x80000000}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffe) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') unshare(0x2c020600) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r5, &(0x7f0000000780)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0xefffffff}]}}, 0x0, 0x26}, 0x28) r6 = socket(0xb, 0x803, 0x80000001) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x69, 0x0, 0x2, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}}}}}}, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0xeeee0000, 0x8000, 0x8}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x3, {0x0, 0x0, 0x0, r10, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r7}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000040)=0x0) sched_setscheduler(r11, 0x5, &(0x7f00000001c0)=0xc) 3m16.643211338s ago: executing program 3 (id=2852): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@bridge_setlink={0x9c, 0x13, 0x400, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x0, 0x4000}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7ff}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6476}, @IFLA_AF_SPEC={0x58, 0x1a, 0x0, 0x1, [@AF_INET6={0x28, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x64}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x13, 0x0, 0x0, 0xb992}, {0x8, 0x14, 0x0, 0x0, 0x4}]}}]}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB='&'], 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket(0x40000000015, 0x5, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000340), &(0x7f0000000440)=r0}, 0x20) 3m15.543632622s ago: executing program 3 (id=2854): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0xb}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000300)={0x0, 0x2, 0xc22d, 0x400, 0x1, [0x0, 0x0, 0x0, 0x0], [0x8f2e, 0x7, 0x7fffffff, 0x2], [0x1, 0x280000, 0x89ae, 0xe3ba], [0x7, 0x7ff, 0x0, 0x5]}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x2, 0x1, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000280)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000003c0)={0x0, 0x733853a1, 0x86d6, 0x6, 0x0, [r5, r10, r11, r12], [0x2bb, 0xf89, 0x9, 0xe48], [0x7, 0x7, 0x800, 0x8], [0x0, 0xa4da, 0xb45, 0x100000001]}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r13 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) pwritev(r13, &(0x7f00000000c0)=[{&(0x7f0000000080)='$', 0x1}], 0x1, 0x7, 0x3) connect(0xffffffffffffffff, &(0x7f0000000180)=@ll={0x11, 0x11, 0x0, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x80) prlimit64(0x0, 0x9, &(0x7f0000000040), 0x0) io_setup(0x8, &(0x7f00000002c0)) 3m14.147492688s ago: executing program 3 (id=2857): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xb6b}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r2, 0x16a, 0x20, 0x3ff, 0x7fffffffffffffff}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x3abe, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r4, &(0x7f0000000380)='./file0\x00', r4, 0x0, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r6 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x4000) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x1, &(0x7f0000000fc0)="c0", 0x9, 0x52, 0xb57, 0xe, 0x9, 0x0, 0xd, 'syz0\x00'}) 3m13.151378083s ago: executing program 3 (id=2861): mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) shmget(0x3, 0x2000, 0x78000000, &(0x7f000030f000/0x2000)=nil) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='fib_table_lookup\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) mmap$usbfs(&(0x7f00001a7000/0x1000)=nil, 0x1000, 0x5, 0x110, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x626d}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r5, &(0x7f0000ff7000/0x3000)=nil, 0x400c) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000380)=""/239) close_range(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'pimreg0\x00'}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x294b40, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000240)=0x1) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f0000000040)=0x3) 3m12.371653887s ago: executing program 3 (id=2867): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtaction={0x44, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x30, 0x1, [@m_xt={0x2c, 0x8, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x44}, 0x1, 0x2b1e, 0x0, 0x10}, 0x4) 3m11.972165898s ago: executing program 32 (id=2867): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtaction={0x44, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x30, 0x1, [@m_xt={0x2c, 0x8, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x44}, 0x1, 0x2b1e, 0x0, 0x10}, 0x4) 11.219506145s ago: executing program 1 (id=3383): getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) setrlimit(0x4, &(0x7f0000000040)={0x1ff, 0x3}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x4c) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="010009"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.899498695s ago: executing program 4 (id=3386): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000008100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000200)={0x50, 0x0, r7, {0x7, 0x1f, 0xffffffff, 0xa5a020b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f0000006100)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0xa, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.955221889s ago: executing program 5 (id=3389): getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) setrlimit(0x4, &(0x7f0000000040)={0x1ff, 0x3}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x4c) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="010009"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 8.934822123s ago: executing program 4 (id=3390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x1, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.227432775s ago: executing program 1 (id=3392): socket$inet(0x2, 0x4000000000000001, 0x0) mq_open(&(0x7f00000003c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05|?\x82\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7jo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xf0-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2\x1e\xd8\xdfJ\xcc\xd7\x9b\xfa\xf0\x0f\x05\xf1\xc4 \xde@\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xec\x87\x1b\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x99$\xfb(\x9b5\xcbF4?O\x1d\xd7\x01*\xc9\xd6L\x86 \x1b\xab9\x1b\x12k\xf9\xec\xd8\x16E\x11-\xfd\x10\x89\x8d\xccbP\x14\x89w\xef\x90\x1d\xc9\x02\xeb\x01\x8a\xc1.m\xd0\xa2\xa4\xc9\a;(\n\xc0\"\x1f\xe4\x1d\x85\xb3\x95\xec\xbb\x9b\x01\x85\xffx\xf2\a\f=\xd1\xcf\xec\xb8!\v\x958\xbf\x15b-\x92\xd6\xb5\xbf\xe2\x92\xc2\xa3}\xd0;\xd1\x96\x86\x8a\x1b\xe1w\xf9\xb0\xd2\xab\xc9\x8a\x19\n\xc5o\x1e\x13/\xe4\x91\x7f\xa5\xf1\xddW\xdb\x98\xcd\x94\xfc\x90\xa0\x05*\xfe\x8c\xdf\x83d\x01\xec\xc5\xd3\x9aE\xab\x9eH\xd4\xda\xf3X\x19\xbbG\xf5|\x89\xd5\xc2K\xfcXBK#\xdb\xc0\'\xf2\xd8\xfe`u\x89\xe7\f\x84\xa5\x1b\xfb\x03?\\\xf8(\xb41\xe1\x84\xf1\xa5\x1a\xa7i\x9f\xbda\x9c\x1b\x94\x16td-*', 0x40, 0x1dd, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x10e6, &(0x7f00000000c0)={0x0, 0x450c, 0x100, 0x3, 0x165}, 0x0, 0x0) syz_io_uring_setup(0x4a55, &(0x7f0000000340)={0x0, 0x7a9e, 0x0, 0x2, 0x11, 0x0, r1}, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) io_setup(0x3f, &(0x7f0000000140)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000080)=[{0x4, 0x1, 0x8, 0x81}, {0x5, 0xc, 0xe1, 0x3}, {0x5, 0x40, 0x81, 0x4}, {0xd, 0x3, 0x0, 0x5}]}, 0x10) r3 = timerfd_create(0x0, 0x0) io_submit(r2, 0x3, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000380)="682962ab7bb63432", 0x8, 0x0, 0x0, 0x2}, 0x0]) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000000)=0x3) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) unshare(0x28040680) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000005c0)={0xaa, 0x120}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x60}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x15}, 0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x63e9, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x0, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1e) 7.891828686s ago: executing program 4 (id=3394): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ipvlan1\x00', {0x3}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xb486b5b2533a373f, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0xfffffffffffffffe}}}, @common=@inet=@hashlimit3={{0x158}, {'batadv_slave_0\x00', {0x3, 0x0, 0x41, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) r1 = socket(0x26, 0x3, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x34, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "3ae5151e455954a182a67500a510b48e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x8000}}, './file0\x00'}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, &(0x7f0000000100)={0x14, &(0x7f0000000680)={0x0, 0x5, 0xee, {0xee, 0x21, "832c41a3c828b258e124b63c8129b2b1d4ec304eda2d94637c62837834340988f571953895f5c7929f457110673b5dbd7729726fb0d9cb768c8f90e9cd907c3023a62aa6ecb8fe499eb40771f38122c8cef1c353300d979d442b5888473a38f0fabcc544e2b062039873bfcf2a1181f25d595c9c10eb6da57de82be8a5ef489cfa2802af19509031efca6b2c105a10f39cb16f110613914bcc5a7e515dc88c2521b6bce82a3408fbda6490d0dff157780ff75b0c1a085f30946acccd44022dd62c9fa9e245f8be4b5e56f813646e0f75bff20e9aa4fa7c3aab7d1d1c83b3d29e84707ec94e9aba74cdafba54"}}, 0x0}, &(0x7f0000000a00)={0x44, &(0x7f0000000780)={0x20, 0x30, 0xa8, "d7c3c4c4bdfae05f4a61d7c9488fced09ab6332772b89e062097ff876c785f11da99fffdd212b46d6b53d4cb0e824137e7dc0c0a91edec10425dc34ecdba04cb98c38ff24ec40b816ff473816c032b090d677a77dc7d130fc44e6ea3bf7ab6d532f7e0720b9901ca99ee850c00665c2ff22f54ee042fe8109137ed3283adf0f98fb0dfe2b2b78016e6f1fb172c8998699c84020333d84ebb030c3e76366a9765b579aa184b004ded"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000008c0)={0x20, 0x81, 0x2, "cdb1"}, &(0x7f0000000900)={0x20, 0x82, 0x2, "c42f"}, &(0x7f0000000940)={0x20, 0x83, 0x3, "b36285"}, &(0x7f0000000980)={0x20, 0x84, 0x1, 'F'}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "57cbe9"}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xf, 0x9, &(0x7f0000000b00)=ANY=[@ANYRESDEC=r7, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.050945651s ago: executing program 5 (id=3396): pipe(&(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000177316fdbfb37737000000000000e50000"], 0x50) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r4}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, r6}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x7, 0x0, r4, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='pids.events\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) creat(&(0x7f0000000580)='./bus\x00', 0x0) fanotify_init(0xf00, 0x2) 6.99851592s ago: executing program 1 (id=3397): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x41, 0xb7, 0xaf, 0x20, 0x525, 0xa4a0, 0x6630, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x17, 0x2, 0x2, 0x69, 0x6b, 0x71, 0x40, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000080)=r5) syz_usb_control_io(r0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) 5.937708895s ago: executing program 0 (id=3398): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x255f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x36, 0x1, 0x1, "c8010000000a0001000012e25c2299230500", 0x4745504d}) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r2 = dup(0xffffffffffffffff) write$P9_RLERRORu(r2, 0x0, 0x53) r3 = syz_open_dev$sndpcmp(&(0x7f0000001c40), 0x1ff, 0x0) r4 = socket$isdn(0x22, 0x2, 0x10) r5 = socket$isdn(0x22, 0x2, 0x2) r6 = dup3(r5, r4, 0x0) getsockname$llc(r6, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) 5.763454621s ago: executing program 5 (id=3399): syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9064}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000040) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r4, &(0x7f0000000080)='3', 0x1, 0x0) 5.247803971s ago: executing program 2 (id=3402): r0 = socket(0x1a, 0x1, 0x5) sendmmsg$sock(r0, &(0x7f0000001280), 0x0, 0x20000001) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x3ff}, 0xfffffffffffffda7) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x1}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000854) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESHEX=r2, @ANYRES16, @ANYRES64=0x0, @ANYRES8=r0], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x52b242d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r5}, 0x38) 5.027196102s ago: executing program 2 (id=3403): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x79}}], 0x30, 0x8000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 4.781591562s ago: executing program 2 (id=3404): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0xfdf9, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) 4.675593933s ago: executing program 2 (id=3405): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x1, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.942061873s ago: executing program 2 (id=3406): getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) setrlimit(0x4, &(0x7f0000000040)={0x1ff, 0x3}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x4c) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="010009"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.699767783s ago: executing program 0 (id=3407): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$I2C(&(0x7f0000001480), 0x0, 0x0) ioctl$I2C_SLAVE_FORCE(r3, 0x706, 0x6d) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x10, 0x800, 0xbbbe, 0x0, 0x18, 0x0, {0x0, 0x0, 0x1}, {0x7, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x8c400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff00) r8 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [0x80, 0x101, 0x8, 0x6, 0x1, 0x800], 0x1, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000000901010000000000010000000000002000020006050040000300000c000280050001003a000000060003400000040008000540000000010800064000000001"], 0x44}, 0x1, 0x0, 0x0, 0x480c1}, 0x200000c8) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) 2.996002134s ago: executing program 1 (id=3408): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@bridge_setlink={0x9c, 0x13, 0x400, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x0, 0x4000}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7ff}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6476}, @IFLA_AF_SPEC={0x58, 0x1a, 0x0, 0x1, [@AF_INET6={0x28, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x64}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x13, 0x0, 0x0, 0xb992}, {0x8, 0x14, 0x0, 0x0, 0x4}]}}]}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB='&'], 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket(0x40000000015, 0x5, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200"], 0x58}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000340), &(0x7f0000000440)=r0}, 0x20) 2.699582148s ago: executing program 0 (id=3409): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000007c0), 0x0, 0x1200000000000000}, 0x20) 2.182131889s ago: executing program 5 (id=3410): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000680), 0x8, 0x8000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6fc6ad42f4b1b0e9692ea54c7b6ef915d564c90c200", 0x18) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r6, 0x101, 0x7, &(0x7f0000000000), &(0x7f0000000680)=0x4) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000001400)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000804}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040004}], 0x2, 0x2004c050) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000f6d35231d8fcfeddde2826004204dd4a70f3f88f04d60ee3eb87d31a244275cdf12388a42208f97660b8fc8b484b1b3b5e88cf01d362756fe73acfa616706adbaf4d4fb173baa5e213e10399", @ANYRES16=r9, @ANYBLOB="08000110000000000000000000000000f9ff", @ANYRES8=r5], 0xfd45}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00", @ANYRES16=r14, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r15], 0x1c}}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x44, r9, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0xc000) 2.084830828s ago: executing program 4 (id=3411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r4 = fsopen(&(0x7f0000000000)='openpromfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='\':%\x00', 0x0, r3) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000000010000000000", 0x58}], 0x1) socket$vsock_stream(0x28, 0x1, 0x0) 1.947207309s ago: executing program 0 (id=3412): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r1 = socket(0x2, 0x80805, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89ff, &(0x7f0000000000)={'bond0\x00', @local}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000580)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @local, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x31, 0x0, 0x1, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r8, 0x4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)={0x2df, 0x7d, 0x0, {{0x500, 0x19e, 0x2, 0x0, {}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0xc3, '\xcf\tm\xd7\xc5\x00\xf0L\xd8_\x0e\x00\x00\x00\x00\x00\x00\x00\xb7\xd2\xb8\xd3\x9e\xc8\x8aY\xbd\x1d\xe0\xbd?9\xff]\xb4Z\x1f3C}N\x00whh\x88UV\xa4\f \x90\x155S\xde=\x8bO\xd5F|1\x02mNt\xa7\x1d\x93]@\r\x11\a\x93\x01!\xd7\x8d{\x88\x14d\xb02\x0f \xcf\xa7\xba\xde\xe0:\xe6\xce\x01e\x99\xddo\xf8\xb1\xce\xbf?\x0f\x8b\xfa\x1e\x82\xbd\n\xa4\x02\xb9\xa0\x11C\b6\xfa\xdb\x88\v\xb8-\x1d\x94D9\xf2\xb5U\x12d\x97?\xe40\"\xfc\xf1\x82\"\xaf-\x84:\x14\xb3;L\xc8?N\x1b\x96\xd2]\xc7L5\x96\xf8\x94&\x9cd\xba\xa3\xd5\x19\x82\xe2u\r\xeaA\xe0\xd34\x1d\nqIf\x15|]\xdd\xcet\x06\v', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x2df) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb443f6a123093e145ad000000000000008000"/29], 0x0, 0x1d, 0x0, 0x1}, 0x28) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r9, 0x439d, 0x1, [0x1ff]}, 0xa) 1.94668632s ago: executing program 1 (id=3413): r0 = socket(0x1a, 0x1, 0x5) sendmmsg$sock(r0, &(0x7f0000001280), 0x0, 0x20000001) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x3ff}, 0xfffffffffffffda7) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x1}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000854) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESHEX=r2, @ANYRES16, @ANYRES64=0x0, @ANYRES8=r0], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x52b242d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r5}, 0x38) 1.695475159s ago: executing program 5 (id=3414): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x79}}], 0x30, 0x8000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 970.672446ms ago: executing program 4 (id=3415): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x7fffffffffffffff) preadv(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x2, 0x3, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006"], 0x60}}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) 923.554579ms ago: executing program 2 (id=3416): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x7fffffffffffffff) preadv(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x2, 0x3, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006001000000010"], 0x68}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r3 = getpid() setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_free_percpu\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x900) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000280)=0x5, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r9, &(0x7f0000000480), 0x400034f, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006"], 0x60}}, 0x0) r10 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r10, 0x5411, &(0x7f0000000340)) 678.943056ms ago: executing program 0 (id=3417): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYRES32=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1005df6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0xec, 0x2, 0x0, 0x0}) socket$inet6_icmp(0xa, 0x2, 0x3a) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f00000001c0), 0x3, 0x2500) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2e, &(0x7f0000000040)=0xffffffdd, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00', 0x1000}) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) 678.098719ms ago: executing program 5 (id=3418): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x8000) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) (async) io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) bind$bt_l2cap(r3, &(0x7f0000000740)={0x1f, 0x62c2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8000, 0x2}, 0xe) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)={0x5, 0x0, [{0x26b, 0x0, 0x3}, {0xbf2, 0x0, 0x8000000000000000}, {0x310, 0x0, 0xf}, {0xb78, 0x0, 0x6}, {0x3b1, 0x0, 0x2}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (async) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x3}]}, @ptr, @enum]}}, 0x0, 0x4a, 0x0, 0x1}, 0x28) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r3, 0xc8000) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x8, r5, 0x80000}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x8, r5, 0x80000}) renameat(r6, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') (async) renameat(r6, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x85, 0x3, "de925c"}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x208, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x208, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000200)={0x0, 0x4, 0xe, {0xe, 0x3e, "0d1f46dd4cecb373b5c34c38"}}, &(0x7f0000000240)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "c96767e32ba669d64794f3951e7942e15cad9be68c8a3f4a6967a2569c0ccd0a1fe007b8b0d596fb15"}}}, &(0x7f0000000700)={0x34, &(0x7f0000000440)={0x20, 0xe, 0xd, "80104e52d0058b9708c925f2a1"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000500)={0x20, 0x0, 0xb2, {0xb0, "9ef780fed4bdcc2ff7650f9045d098499a196c283febf2ceff73d7be9be6d85a9ce38acb6cc46974bf0d7c6e3e775eb013153ba8141e7089578f9eb9bde49033253f5498b98b8c2302c3fb21e350a65b5d6eb97660e8f6598a8117f77ea21414762a33082ab8b3990b2084bf1dcd549dd047acb795d9c11faa3f4e5a61b1496b720c295411459fac6ea26186a8f204efdd89c0c25ed6ff899e8352b06786896aa77476bd800dcb046f29e4015fbffb58"}}, &(0x7f0000000680)={0x20, 0x1, 0x1, 0x6}, &(0x7f00000006c0)={0x20, 0x0, 0x1, 0xf}}) 198.936275ms ago: executing program 1 (id=3419): getresuid(0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x3e, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x136}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x15, 0x6, 0x0, 0x0, @str='\x82\n\xc7$S\x9b#U*P\xd7l\x94\x19\x80\x8a\x99'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x488c0}, 0xc001) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0104000000000000000001000000080002"], 0x50}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000102000009000000000002000009", @ANYRESHEX=r6, @ANYBLOB="000000000a0001", @ANYRES64=0x0, @ANYRES64=r0], 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0xfa8b519ae1105ff3}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r11, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r13, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 184.640563ms ago: executing program 0 (id=3420): r0 = socket$inet(0x2, 0x3, 0x6) get_mempolicy(&(0x7f0000000500), &(0x7f0000000540), 0xc3, &(0x7f0000ffd000/0x2000)=nil, 0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580), 0x0, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0xffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001140)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x90, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x0, 0x3, 0x7, 0x4, 0x7, 0x81, 0x7, 0xec8, [{0x213, 0x1000, 0x2, 0xfff}, {0x5, 0x7ff, 0x6, 0xdc1}, {0x7, 0x8000, 0x3, 0x5948}, {0x2, 0x5, 0xbc7, 0x5}, {0xb5b6, 0xe4, 0x5, 0x4}, {0x4, 0xfffffff8, 0x8, 0x2a51b18c}, {0x8, 0x20d, 0xc, 0x10000}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x3}}]}}]}, 0xbc}}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = gettid() r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x30, 0x0, 0xb00, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x2, 0x7e, 0x2, 0x9}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4840}, 0x40) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000ffdbdf251900000008000300", @ANYRES32=r10, @ANYBLOB="05001c1549000100"], 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004080) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) 0s ago: executing program 4 (id=3421): unshare(0x2a020480) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='securityfs\x00', 0x0) r2 = eventfd2(0x5, 0x80801) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) read$FUSE(r2, &(0x7f00000042c0)={0x2020}, 0x2020) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000180)={0x10000, 0x1, 0xfffffffc, 0x1000, &(0x7f0000000200)=[{}]}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0) r5 = fsmount(r0, 0x0, 0x4) r6 = openat$cgroup_pressure(r5, &(0x7f0000000540)='cpu.pressure\x00', 0x2, 0x0) read(r6, &(0x7f0000000040)=""/252, 0xfc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='nmi_noise\x00', r5, 0x0, 0x80}, 0x18) kernel console output (not intermixed with test programs): 2] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 785.440516][ T30] audit: type=1400 audit(1751114206.990:264063): avc: denied { create } for pid=16140 comm="syz.5.3081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 785.468444][ T30] audit: type=1400 audit(1751114207.020:264064): avc: denied { ioctl } for pid=16140 comm="syz.5.3081" path="socket:[51419]" dev="sockfs" ino=51419 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 785.488927][T16142] overlayfs: conflicting lowerdir path [ 785.494267][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.530841][ T5932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 785.543538][ T30] audit: type=1400 audit(1751114207.020:264065): avc: denied { unlink } for pid=16138 comm="syz.1.3080" name="#1a" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 785.567577][ T5932] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 785.610414][ T5932] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input29 [ 785.699282][ T5932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 785.720179][T16147] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3082'. [ 785.732482][ T30] audit: type=1400 audit(1751114207.280:264066): avc: denied { ioctl } for pid=16146 comm="syz.0.3082" path="socket:[52243]" dev="sockfs" ino=52243 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 785.756120][ T5932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 785.802595][ T30] audit: type=1400 audit(1751114207.340:264067): avc: denied { read write } for pid=16146 comm="syz.0.3082" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 785.857259][ T30] audit: type=1400 audit(1751114207.340:264068): avc: denied { open } for pid=16146 comm="syz.0.3082" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 785.881648][ T5932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 785.915375][ T5932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 785.942015][ T3474] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.942204][ T30] audit: type=1400 audit(1751114207.350:264069): avc: denied { connect } for pid=16146 comm="syz.0.3082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 785.985751][ T5932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 786.001270][ T30] audit: type=1400 audit(1751114207.400:264070): avc: denied { write } for pid=16146 comm="syz.0.3082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 786.023920][ T5932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 786.065632][ T5932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 786.126501][ T5932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 786.155362][ T5932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 786.491428][ T5932] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 786.515548][T13532] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 786.559219][ T5932] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 786.585585][ T5932] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 786.631698][ T5932] usb 5-1: USB disconnect, device number 45 [ 786.685716][T13532] usb 2-1: Using ep0 maxpacket: 32 [ 786.716487][T13532] usb 2-1: config 1 interface 0 has no altsetting 0 [ 786.727428][T13532] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.40 [ 786.774575][T13532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.828482][T13532] usb 2-1: Product: syz [ 786.846514][T14455] Bluetooth: hci1: command tx timeout [ 786.857539][T13532] usb 2-1: Manufacturer: syz [ 786.868686][T13532] usb 2-1: SerialNumber: syz [ 787.126746][T16098] chnl_net:caif_netlink_parms(): no params data found [ 787.179907][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3086'. [ 788.077067][ T3474] bridge_slave_1: left allmulticast mode [ 788.082941][ T3474] bridge_slave_1: left promiscuous mode [ 788.102511][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.186318][ T3474] bridge_slave_0: left allmulticast mode [ 788.192145][ T3474] bridge_slave_0: left promiscuous mode [ 788.206603][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.948194][T14455] Bluetooth: hci1: command tx timeout [ 789.307254][T13532] usbhid 2-1:1.0: can't add hid device: -71 [ 789.313252][T13532] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 789.341044][T13532] usb 2-1: USB disconnect, device number 49 [ 790.146992][ T3474] dvmrp1 (unregistering): left allmulticast mode [ 791.005512][T14455] Bluetooth: hci1: command tx timeout [ 791.256257][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.356618][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.417160][ T3474] bond0 (unregistering): Released all slaves [ 791.572472][T16098] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.579794][T16098] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.587874][T16098] bridge_slave_0: entered allmulticast mode [ 791.601006][T16098] bridge_slave_0: entered promiscuous mode [ 792.007126][ T3474] : left promiscuous mode [ 792.119205][ T30] audit: type=1400 audit(1751114213.670:264071): avc: denied { read } for pid=16221 comm="syz.1.3094" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 792.147654][T16098] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.156887][T16225] xt_hashlimit: Unknown mode mask 533A373F, kernel too old? [ 792.171706][T16098] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.181675][ T30] audit: type=1400 audit(1751114213.670:264072): avc: denied { open } for pid=16221 comm="syz.1.3094" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 792.201463][T16098] bridge_slave_1: entered allmulticast mode [ 792.219400][T16098] bridge_slave_1: entered promiscuous mode [ 792.306268][T13356] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 792.695266][T13356] usb 5-1: device descriptor read/64, error -71 [ 792.765464][ T880] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 792.780563][T16098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.837381][T16098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.935421][T13356] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 792.951296][ T880] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 792.967084][ T880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.075023][ T880] usb 1-1: config 0 descriptor?? [ 793.138355][T13356] usb 5-1: device descriptor read/64, error -71 [ 793.265589][T13356] usb usb5-port1: attempt power cycle [ 793.323324][ T880] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 793.543149][ T880] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 793.554155][ T880] [drm] Initialized udl on minor 2 [ 793.591335][T16098] team0: Port device team_slave_0 added [ 793.608697][T16098] team0: Port device team_slave_1 added [ 793.615488][T13356] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 793.635919][T13356] usb 5-1: device descriptor read/8, error -71 [ 793.747660][ T880] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 793.764681][ T880] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 793.885431][T13356] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 793.905774][T13356] usb 5-1: device descriptor read/8, error -71 [ 794.016079][T13356] usb usb5-port1: unable to enumerate USB device [ 794.056102][T16098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.063355][T16098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.090667][T16098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.109445][T16098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.116946][T16098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.153118][T16098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.259548][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 794.271044][ T48] usb 1-1: USB disconnect, device number 56 [ 794.277029][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 794.795106][ T3474] hsr_slave_0: left promiscuous mode [ 795.280180][ T3474] hsr_slave_1: left promiscuous mode [ 795.475804][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.483235][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.578992][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.590268][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.962875][ T3474] veth1_macvtap: left promiscuous mode [ 795.969881][ T3474] veth0_macvtap: left promiscuous mode [ 795.977221][ T3474] veth1_vlan: left promiscuous mode [ 796.225599][ T48] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 796.387074][ T48] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 796.395450][ T48] usb 5-1: config 0 has no interface number 0 [ 796.401542][ T48] usb 5-1: config 0 interface 23 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 796.412804][ T48] usb 5-1: config 0 interface 23 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 796.424053][ T48] usb 5-1: config 0 interface 23 has no altsetting 0 [ 796.433497][ T48] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=66.30 [ 796.442835][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.451247][ T48] usb 5-1: Product: syz [ 796.455741][ T48] usb 5-1: Manufacturer: syz [ 796.460358][ T48] usb 5-1: SerialNumber: syz [ 796.476479][ T48] usb 5-1: config 0 descriptor?? [ 796.482100][T16285] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 796.489541][T16285] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 796.742718][ T48] usbtest 5-1:0.23: couldn't get endpoints, -71 [ 796.749702][ T48] usbtest 5-1:0.23: probe with driver usbtest failed with error -71 [ 796.762110][ T48] usb 5-1: USB disconnect, device number 50 [ 798.137456][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 798.365708][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 800.749925][T16291] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 800.991862][T16304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 800.999745][T16304] IPv6: NLM_F_CREATE should be set when creating new route [ 801.178737][T16098] hsr_slave_0: entered promiscuous mode [ 801.184982][T16098] hsr_slave_1: entered promiscuous mode [ 801.191191][T16098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 801.199634][ T5927] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 801.210833][T16098] Cannot create hsr debugfs directory [ 801.343374][ T30] audit: type=1400 audit(1751114222.890:264073): avc: denied { map } for pid=16317 comm="syz.5.3115" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 801.373204][ T30] audit: type=1400 audit(1751114222.890:264074): avc: denied { execute } for pid=16317 comm="syz.5.3115" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 801.414471][ T5927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.527801][ T5927] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.541334][ T5927] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 801.551202][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.560135][ T5927] usb 2-1: Product: syz [ 801.564304][ T5927] usb 2-1: Manufacturer: syz [ 801.569294][ T5927] usb 2-1: SerialNumber: syz [ 802.091119][ T5927] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 802.114683][ T5927] cdc_ncm 2-1:1.0: bind() failure [ 802.143517][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3116'. [ 802.152569][ T30] audit: type=1400 audit(1751114223.690:264075): avc: denied { read } for pid=16324 comm="syz.0.3116" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 802.184910][ T5927] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 802.203908][ T5927] cdc_ncm 2-1:1.1: bind() failure [ 802.213814][ T5927] usb 2-1: USB disconnect, device number 50 [ 802.225275][ T30] audit: type=1400 audit(1751114223.690:264076): avc: denied { open } for pid=16324 comm="syz.0.3116" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 802.457581][T16331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 802.485154][ T30] audit: type=1400 audit(1751114224.000:264077): avc: denied { mounton } for pid=16324 comm="syz.0.3116" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 803.150592][T16348] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 803.158284][T16347] IPVS: stopping backup sync thread 16348 ... [ 803.168563][ T5927] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 803.183837][ T3474] IPVS: stop unused estimator thread 0... [ 803.355583][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 803.742536][ T5927] usb 2-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 803.762394][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.791734][ T5927] usb 2-1: Product: syz [ 803.810344][ T5927] usb 2-1: Manufacturer: syz [ 803.814998][ T5927] usb 2-1: SerialNumber: syz [ 803.869552][ T5927] usb 2-1: config 0 descriptor?? [ 803.891667][ T5927] hub 2-1:0.0: bad descriptor, ignoring hub [ 803.905396][ T30] audit: type=1400 audit(1751114225.450:264078): avc: denied { append } for pid=16359 comm="syz.0.3122" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 803.908197][ T5927] hub 2-1:0.0: probe with driver hub failed with error -5 [ 804.025741][ T5927] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 804.048627][T14455] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 804.207751][T16330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.401332][T16330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.790056][ T30] audit: type=1400 audit(1751114226.340:264079): avc: denied { read write } for pid=16374 comm="syz.5.3126" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 804.830181][ T30] audit: type=1400 audit(1751114226.340:264080): avc: denied { open } for pid=16374 comm="syz.5.3126" path="/55/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 805.075376][ T30] audit: type=1400 audit(1751114226.620:264081): avc: denied { getopt } for pid=16385 comm="syz.0.3128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 805.143255][ T30] audit: type=1400 audit(1751114226.650:264082): avc: denied { accept } for pid=16385 comm="syz.0.3128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 805.172595][T16391] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 806.762467][T16406] SELinux: Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped). [ 806.774793][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 806.774814][ T30] audit: type=1400 audit(1751114228.320:264084): avc: denied { relabelto } for pid=16405 comm="syz.0.3134" name="file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 806.836843][ T974] usb 2-1: USB disconnect, device number 51 [ 806.852082][ T30] audit: type=1400 audit(1751114228.320:264085): avc: denied { associate } for pid=16405 comm="syz.0.3134" name="file0" dev="tmpfs" ino=191 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:udev_helper_exec_t:s0" [ 806.920272][ T30] audit: type=1400 audit(1751114228.470:264086): avc: denied { read write } for pid=16409 comm="syz.1.3136" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 806.946845][ T30] audit: type=1400 audit(1751114228.470:264087): avc: denied { open } for pid=16409 comm="syz.1.3136" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 806.975360][T13532] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 807.105351][ T10] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 807.146445][T13532] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 807.154864][T13532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.167062][T13532] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 807.177454][T13532] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 807.187450][T13532] usb 5-1: Manufacturer: syz [ 807.193587][T13532] usb 5-1: config 0 descriptor?? [ 807.256341][ T48] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 807.266470][T13532] rc_core: IR keymap rc-hauppauge not found [ 807.272414][T13532] Registered IR keymap rc-empty [ 807.283380][ T10] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 807.305994][T13532] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 807.318833][ T10] usb 1-1: config 0 has no interface number 0 [ 807.324973][ T10] usb 1-1: config 0 interface 23 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 807.338134][T13532] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input30 [ 807.428923][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 807.484075][ T10] usb 1-1: config 0 interface 23 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 807.496951][ T10] usb 1-1: config 0 interface 23 has no altsetting 0 [ 807.503651][ T48] usb 2-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 807.503696][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.506212][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=66.30 [ 807.530460][ T48] usb 2-1: Product: syz [ 807.543046][ T48] usb 2-1: Manufacturer: syz [ 807.543512][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.556266][ T10] usb 1-1: Product: syz [ 807.560482][ T10] usb 1-1: Manufacturer: syz [ 807.572513][ T48] usb 2-1: SerialNumber: syz [ 807.758954][ T48] usb 2-1: config 0 descriptor?? [ 807.978183][ T48] hub 2-1:0.0: bad descriptor, ignoring hub [ 808.027023][ T10] usb 1-1: SerialNumber: syz [ 808.055164][ T10] usb 1-1: config 0 descriptor?? [ 808.060983][T16408] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 808.061993][ T48] hub 2-1:0.0: probe with driver hub failed with error -5 [ 808.068490][T16408] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 808.085419][ T5932] usb 5-1: USB disconnect, device number 51 [ 808.145107][T16412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.176874][ T48] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 808.183647][T16412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.229985][T16098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 808.312997][ T10] usbtest 1-1:0.23: couldn't get endpoints, -71 [ 808.323252][T16098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 808.330501][ T10] usbtest 1-1:0.23: probe with driver usbtest failed with error -71 [ 808.380943][ T10] usb 1-1: USB disconnect, device number 57 [ 808.388102][T16098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 808.458317][T16098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 808.538500][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.546949][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.635001][ T10] usb 2-1: USB disconnect, device number 52 [ 808.698308][ T48] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 808.809787][T16098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.899886][ T48] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 808.993360][ T48] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 809.085016][ T48] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 809.164778][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 809.193232][ T48] usb 6-1: SerialNumber: syz [ 809.221635][ T30] audit: type=1400 audit(1751114230.770:264088): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 809.247047][T16098] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.275816][T13223] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.282970][T13223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.321267][ T6480] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.328495][ T6480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.698545][ T30] audit: type=1400 audit(1751114231.710:264089): avc: denied { ioctl } for pid=16461 comm="syz.4.3142" path="socket:[53422]" dev="sockfs" ino=53422 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 810.875004][ T30] audit: type=1400 audit(1751114231.710:264090): avc: denied { remount } for pid=16461 comm="syz.4.3142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 811.028283][ T30] audit: type=1400 audit(1751114231.720:264091): avc: denied { getopt } for pid=16461 comm="syz.4.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 811.051059][ T30] audit: type=1400 audit(1751114232.320:264092): avc: denied { mount } for pid=16431 comm="syz.5.3139" name="/" dev="hugetlbfs" ino=53429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 811.074292][ C1] vkms_vblank_simulate: vblank timer overrun [ 811.117542][ T5932] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 811.338077][T13532] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 811.347502][ T30] audit: type=1400 audit(1751114232.750:264093): avc: denied { ioctl } for pid=16482 comm="syz.0.3146" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 811.455607][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 811.483785][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.500311][ T5932] usb 2-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 811.510456][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.556081][ T5932] usb 2-1: config 0 descriptor?? [ 811.575830][T13532] usb 5-1: Using ep0 maxpacket: 8 [ 811.602770][T13532] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 811.637126][T16098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.688651][T16098] veth0_vlan: entered promiscuous mode [ 811.707041][T16098] veth1_vlan: entered promiscuous mode [ 811.744123][T16098] veth0_macvtap: entered promiscuous mode [ 811.755099][T16098] veth1_macvtap: entered promiscuous mode [ 811.777173][T13532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.785520][T13532] usb 5-1: Product: syz [ 811.792292][T13532] usb 5-1: Manufacturer: syz [ 811.798078][T13532] usb 5-1: SerialNumber: syz [ 811.809614][T13532] usb 5-1: config 0 descriptor?? [ 811.816193][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3144'. [ 811.816714][T13532] hub 5-1:0.0: bad descriptor, ignoring hub [ 811.863817][ T5932] usbhid 2-1:0.0: can't add hid device: -71 [ 812.007547][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3147'. [ 812.113430][ T5932] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 812.134368][T16478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.209560][T13532] hub 5-1:0.0: probe with driver hub failed with error -5 [ 812.226516][T13532] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 812.249668][T16478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.272472][ T5932] usb 2-1: USB disconnect, device number 53 [ 812.320087][T16098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.374818][ T48] usb 6-1: 0:2 : does not exist [ 812.397911][ T48] usb 6-1: unit 5: unexpected type 0x09 [ 812.489002][ T48] usb 6-1: USB disconnect, device number 12 [ 812.506502][T14455] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 812.601848][T16297] udevd[16297]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 812.727256][T16098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.772320][T16098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.789335][T13532] usb 5-1: USB disconnect, device number 52 [ 812.797639][T16098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.809244][T16098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.833147][T16098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.018242][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 813.056215][ T6480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.068265][ T6480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.137621][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.149905][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.202832][ T10] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 813.215291][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.231816][ T10] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 813.242354][ T10] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 813.255093][ T10] usb 6-1: Manufacturer: syz [ 813.267991][ T10] usb 6-1: config 0 descriptor?? [ 813.365780][ T48] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 813.385471][ T10] rc_core: IR keymap rc-hauppauge not found [ 813.391582][ T10] Registered IR keymap rc-empty [ 813.401798][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 813.439108][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input31 [ 813.690546][ T48] usb 2-1: config 7 has an invalid interface number: 186 but max is 0 [ 813.867036][ T48] usb 2-1: config 7 has no interface number 0 [ 813.972492][ T48] usb 2-1: config 7 interface 186 has no altsetting 0 [ 814.058257][ T5927] usb 6-1: USB disconnect, device number 13 [ 814.111025][ T48] usb 2-1: string descriptor 0 read error: -22 [ 814.136522][ T48] usb 2-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 814.149446][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.179307][ T48] usb 2-1: bad CDC descriptors [ 814.408607][T16529] random: crng reseeded on system resumption [ 814.485329][T16529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.494043][T16529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.588721][ T5927] usb 2-1: USB disconnect, device number 54 [ 814.764673][ T30] audit: type=1400 audit(1751114236.310:264094): avc: denied { getopt } for pid=16562 comm="syz.5.3156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 814.812477][T16564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3155'. [ 814.874835][ T30] audit: type=1400 audit(1751114236.420:264095): avc: denied { map } for pid=16561 comm="syz.0.3155" path="socket:[53546]" dev="sockfs" ino=53546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 814.906790][ T5135] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 814.919941][ T5135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 814.930108][ T5135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 814.940506][ T5135] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 814.949203][ T5135] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 815.026709][ T30] audit: type=1400 audit(1751114236.420:264096): avc: denied { accept } for pid=16561 comm="syz.0.3155" path="socket:[53546]" dev="sockfs" ino=53546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 815.051147][ C1] vkms_vblank_simulate: vblank timer overrun [ 815.224942][T16583] binder: 16580:16583 ioctl c0306201 0 returned -14 [ 815.465339][ T30] audit: type=1400 audit(1751114236.950:264097): avc: denied { write } for pid=16575 comm="syz.5.3160" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 815.783645][ T30] audit: type=1400 audit(1751114237.330:264098): avc: denied { override_creds } for pid=16580 comm="syz.2.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 815.803837][ C1] vkms_vblank_simulate: vblank timer overrun [ 815.838595][ T30] audit: type=1400 audit(1751114237.380:264099): avc: denied { ioctl } for pid=16593 comm="syz.1.3163" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 815.891347][T16594] input: syz0 as /devices/virtual/input/input32 [ 816.121964][T16600] netlink: 'syz.0.3165': attribute type 2 has an invalid length. [ 816.165649][ T59] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.389752][T16567] chnl_net:caif_netlink_parms(): no params data found [ 816.481077][ T59] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.585413][ T5927] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 816.606177][ T48] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 816.666231][ T59] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.737158][ T5927] usb 3-1: config 7 has an invalid interface number: 186 but max is 0 [ 816.745531][ T5927] usb 3-1: config 7 has no interface number 0 [ 816.752365][ T5927] usb 3-1: config 7 interface 186 has no altsetting 0 [ 816.765551][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 816.799763][ T48] usb 2-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 816.814578][ T48] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.831115][ T5927] usb 3-1: string descriptor 0 read error: -22 [ 816.837885][ T5927] usb 3-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 816.848389][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.856503][ T48] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 816.872692][ T48] usb 2-1: config 0 interface 0 has no altsetting 0 [ 816.879637][ T48] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 816.895475][ T5927] usb 3-1: bad CDC descriptors [ 816.904928][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.005897][ T5822] Bluetooth: hci3: command tx timeout [ 817.018173][ T48] usb 2-1: config 0 descriptor?? [ 817.100454][ T59] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.144747][T16604] random: crng reseeded on system resumption [ 817.173323][T16567] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.182930][T16604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.196892][T16567] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.211541][T16604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.220505][T16567] bridge_slave_0: entered allmulticast mode [ 817.231001][T16567] bridge_slave_0: entered promiscuous mode [ 817.238901][T16567] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.251683][T16567] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.259553][T16567] bridge_slave_1: entered allmulticast mode [ 817.271390][T16567] bridge_slave_1: entered promiscuous mode [ 817.291422][ T5927] usb 3-1: USB disconnect, device number 71 [ 817.366770][T13356] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 817.438107][ T48] zeroplus 0003:0C12:0030.000D: item fetching failed at offset 3/7 [ 817.450744][ T48] zeroplus 0003:0C12:0030.000D: parse failed [ 817.457257][ T48] zeroplus 0003:0C12:0030.000D: probe with driver zeroplus failed with error -22 [ 817.517561][T13356] usb 6-1: config 7 has an invalid interface number: 186 but max is 0 [ 817.526509][T13356] usb 6-1: config 7 has no interface number 0 [ 817.532787][T13356] usb 6-1: config 7 interface 186 has no altsetting 0 [ 817.541401][T16567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.545097][T13356] usb 6-1: string descriptor 0 read error: -22 [ 817.558416][T13356] usb 6-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 817.567928][T13356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.585807][T13356] usb 6-1: bad CDC descriptors [ 817.638612][ T48] usb 2-1: USB disconnect, device number 55 [ 817.658973][T16567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.786971][T16619] random: crng reseeded on system resumption [ 817.799188][T16619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.808905][T16619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.907428][ T48] usb 6-1: USB disconnect, device number 14 [ 817.933810][T16567] team0: Port device team_slave_0 added [ 817.959826][T16567] team0: Port device team_slave_1 added [ 818.093702][T16635] xt_hashlimit: Unknown mode mask 533A373F, kernel too old? [ 818.697927][T16567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.706133][T16567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.738247][T16567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.085420][ T5822] Bluetooth: hci3: command tx timeout [ 819.287772][T16567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.295245][T16567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.322139][T16567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.576135][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 819.587286][ T30] audit: type=1400 audit(1751114241.120:264100): avc: denied { mount } for pid=16652 comm="syz.5.3180" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 819.627559][ T30] audit: type=1400 audit(1751114241.130:264101): avc: denied { read } for pid=16652 comm="syz.5.3180" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 819.653144][ T30] audit: type=1400 audit(1751114241.130:264102): avc: denied { open } for pid=16652 comm="syz.5.3180" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 819.678152][ T30] audit: type=1400 audit(1751114241.140:264103): avc: denied { ioctl } for pid=16652 comm="syz.5.3180" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 819.778301][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 819.787708][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.799573][ T9] usb 3-1: config 0 descriptor?? [ 819.865429][ T30] audit: type=1400 audit(1751114241.410:264104): avc: denied { bind } for pid=16658 comm="syz.1.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 819.865479][ T30] audit: type=1400 audit(1751114241.410:264105): avc: denied { name_bind } for pid=16658 comm="syz.1.3181" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 819.865515][ T30] audit: type=1400 audit(1751114241.410:264106): avc: denied { node_bind } for pid=16658 comm="syz.1.3181" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 820.009253][T16567] hsr_slave_0: entered promiscuous mode [ 820.015582][T16567] hsr_slave_1: entered promiscuous mode [ 820.021502][T16567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 820.033709][ T9] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 820.037874][T16567] Cannot create hsr debugfs directory [ 820.255115][ T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 820.262000][ T9] [drm] Initialized udl on minor 2 [ 820.278516][ T30] audit: type=1800 audit(1751114241.830:264107): pid=16660 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3179" name="/" dev="fuse" ino=0 res=0 errno=0 [ 820.435962][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 820.455607][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 820.475091][ T30] audit: type=1400 audit(1751114242.020:264108): avc: denied { bind } for pid=16665 comm="syz.0.3183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 820.477277][T16665] delete_channel: no stack [ 821.438629][ T5822] Bluetooth: hci3: command tx timeout [ 821.445331][ T30] audit: type=1400 audit(1751114242.990:264109): avc: denied { setopt } for pid=16667 comm="syz.5.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 821.628656][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 821.644644][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 821.655811][ T9] usb 3-1: USB disconnect, device number 72 [ 821.670287][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 821.770273][ T48] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 821.928772][ T48] usb 2-1: config 7 has an invalid interface number: 186 but max is 0 [ 821.937467][ T48] usb 2-1: config 7 has no interface number 0 [ 821.943756][ T48] usb 2-1: config 7 interface 186 has no altsetting 0 [ 821.953199][ T48] usb 2-1: string descriptor 0 read error: -22 [ 821.959589][ T48] usb 2-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 821.969041][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.983723][ T48] usb 2-1: bad CDC descriptors [ 822.239574][T16679] random: crng reseeded on system resumption [ 822.250009][T16679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.260592][T16679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.197614][ T59] bond0 (unregistering): Released all slaves [ 823.485631][ T5822] Bluetooth: hci3: command tx timeout [ 823.586299][ T48] usb 2-1: USB disconnect, device number 56 [ 825.213561][T16694] bridge0: entered promiscuous mode [ 825.218996][T16694] macvlan2: entered promiscuous mode [ 825.418386][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 825.469413][ T30] audit: type=1400 audit(1751114247.020:264110): avc: denied { read write } for pid=16705 comm="syz.2.3196" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 825.520109][ T30] audit: type=1400 audit(1751114247.020:264111): avc: denied { open } for pid=16705 comm="syz.2.3196" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 825.564171][T16709] xt_hashlimit: Unknown mode mask 533A373F, kernel too old? [ 825.594578][ T30] audit: type=1400 audit(1751114247.140:264112): avc: denied { read write } for pid=16708 comm="syz.5.3198" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 825.596177][T16710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16710 comm=syz.5.3198 [ 825.619908][ T30] audit: type=1400 audit(1751114247.140:264113): avc: denied { open } for pid=16708 comm="syz.5.3198" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 825.642787][ T30] audit: type=1400 audit(1751114247.190:264114): avc: denied { ioctl } for pid=16705 comm="syz.2.3196" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 825.684731][ T30] audit: type=1400 audit(1751114247.210:264115): avc: denied { ioctl } for pid=16708 comm="syz.5.3198" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 825.687296][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 825.725786][ T59] hsr_slave_0: left promiscuous mode [ 825.734898][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.767391][ T59] hsr_slave_1: left promiscuous mode [ 825.777324][ T10] usb 2-1: config 0 descriptor?? [ 825.800449][ T10] cp210x 2-1:0.0: cp210x converter detected [ 825.845809][ T59] veth1_macvtap: left promiscuous mode [ 825.867881][ T59] veth0_macvtap: left promiscuous mode [ 825.874924][ T59] veth1_vlan: left promiscuous mode [ 825.880653][ T59] veth0_vlan: left promiscuous mode [ 826.000774][ T10] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 826.009119][ T10] cp210x 2-1:0.0: querying part number failed [ 826.019977][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 826.088220][ T48] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 826.120696][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 826.218817][T16697] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 826.225372][T16697] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 826.235395][T16697] vhci_hcd vhci_hcd.0: Device attached [ 826.242554][T16718] vhci_hcd: connection closed [ 826.243082][T13274] usb 2-1: USB disconnect, device number 57 [ 826.255044][T14799] vhci_hcd: stop threads [ 826.272243][T14799] vhci_hcd: release socket [ 826.283603][ T48] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 826.298325][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 826.305509][T14799] vhci_hcd: disconnect device [ 826.312176][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 826.320683][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.321343][ T9] usb 6-1: config 179 has no interface number 0 [ 826.336050][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 826.336519][T13274] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 826.352164][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 826.369376][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 826.370977][T13274] cp210x 2-1:0.0: device disconnected [ 826.385697][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 826.387305][ T48] usb 1-1: config 0 descriptor?? [ 826.407152][ T9] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 826.423169][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 826.449969][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.471888][T16717] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 826.647148][ T48] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 826.705975][ T30] audit: type=1326 audit(1751114248.260:264116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16716 comm="syz.5.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d638e929 code=0x7fc00000 [ 826.755794][ T30] audit: type=1326 audit(1751114248.310:264117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16716 comm="syz.5.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f10d63858e7 code=0x7fc00000 [ 826.780601][ T30] audit: type=1326 audit(1751114248.310:264118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16716 comm="syz.5.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10d632ab19 code=0x7fc00000 [ 826.861521][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input33 [ 826.876963][ T30] audit: type=1326 audit(1751114248.310:264119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16716 comm="syz.5.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f10d632abdf code=0x7fc00000 [ 826.937387][ T48] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 826.944622][ T48] [drm] Initialized udl on minor 2 [ 827.010877][T16720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.062513][ T48] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 827.093454][ T48] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 827.093533][T16720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.165705][T13274] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 827.321347][T13274] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 827.348059][T13274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.359817][T13274] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 827.370040][T13274] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 827.389374][T13274] usb 2-1: Manufacturer: syz [ 827.396758][T13274] usb 2-1: config 0 descriptor?? [ 827.497329][T13274] rc_core: IR keymap rc-hauppauge not found [ 827.505268][T13274] Registered IR keymap rc-empty [ 827.512205][T13274] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 827.534868][T13274] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input34 [ 828.057946][T13274] usb 2-1: USB disconnect, device number 58 [ 828.898065][T13274] usb 6-1: USB disconnect, device number 15 [ 828.898169][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 828.912393][T13274] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 828.914706][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 829.175416][ T9] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 829.187273][T16732] netlink: 'syz.5.3204': attribute type 29 has an invalid length. [ 829.352250][T16735] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3205'. [ 829.353092][ T9] usb 2-1: config 7 has an invalid interface number: 186 but max is 0 [ 829.369549][ T9] usb 2-1: config 7 has no interface number 0 [ 829.379015][ T9] usb 2-1: config 7 interface 186 has no altsetting 0 [ 829.390758][ T9] usb 2-1: string descriptor 0 read error: -22 [ 829.397300][ T9] usb 2-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 829.407712][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.421091][ T9] usb 2-1: bad CDC descriptors [ 829.629972][T16728] random: crng reseeded on system resumption [ 829.640530][T16728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.653751][T16728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.750657][T13274] usb 2-1: USB disconnect, device number 59 [ 831.828799][ T5932] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 831.829230][ T10] usb 1-1: USB disconnect, device number 58 [ 831.843339][ T5932] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 833.315462][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3207'. [ 833.382619][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3207'. [ 833.932583][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 833.932599][ T30] audit: type=1400 audit(1751114255.480:264121): avc: denied { connect } for pid=16764 comm="syz.0.3211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 833.979709][T16766] unsupported nlmsg_type 40 [ 834.001483][ T30] audit: type=1400 audit(1751114255.520:264122): avc: denied { mounton } for pid=16764 comm="syz.0.3211" path="/proc/207/task" dev="proc" ino=54223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 834.060044][ T30] audit: type=1400 audit(1751114255.530:264123): avc: denied { lock } for pid=16764 comm="syz.0.3211" path="socket:[54221]" dev="sockfs" ino=54221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 834.145419][ T48] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 834.163632][ T30] audit: type=1400 audit(1751114255.700:264124): avc: denied { ioctl } for pid=16773 comm="syz.5.3212" path="socket:[54235]" dev="sockfs" ino=54235 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 834.343919][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 834.374494][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.436748][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.500006][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3212'. [ 834.518663][ T48] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 834.565935][ T48] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 834.577561][ T48] usb 2-1: New USB device strings: Mfr=225, Product=0, SerialNumber=0 [ 834.599861][ T48] usb 2-1: Manufacturer: syz [ 834.626251][ T48] usb 2-1: config 0 descriptor?? [ 834.683845][T16785] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 835.093291][T16761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3210'. [ 835.137517][T16761] : entered promiscuous mode [ 835.158783][ T48] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 835.187309][ T48] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 835.210671][ T48] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 835.237109][ T48] ryos 0003:1E7D:3138.000E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 835.521725][T13274] usb 2-1: USB disconnect, device number 60 [ 835.561943][T16800] xt_hashlimit: Unknown mode mask 533A373F, kernel too old? [ 835.726434][ T48] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 835.967412][T16567] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 836.082020][T16567] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 836.093342][ T48] usb 6-1: config 0 has an invalid interface number: 23 but max is 0 [ 836.127446][ T48] usb 6-1: config 0 has no interface number 0 [ 836.133635][ T48] usb 6-1: config 0 interface 23 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 836.170998][ T48] usb 6-1: config 0 interface 23 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 836.218010][ T48] usb 6-1: config 0 interface 23 has no altsetting 0 [ 836.241133][ T48] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=66.30 [ 836.258431][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.283740][ T48] usb 6-1: Product: syz [ 836.295564][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 836.314993][ T48] usb 6-1: Manufacturer: syz [ 836.326704][ T48] usb 6-1: SerialNumber: syz [ 836.355885][T16567] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 836.364543][ T48] usb 6-1: config 0 descriptor?? [ 836.392696][T16796] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 836.413374][T16796] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 836.512544][T16567] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 836.568403][ T30] audit: type=1400 audit(1751114258.120:264125): avc: denied { ioctl } for pid=16818 comm="syz.2.3219" path="socket:[55355]" dev="sockfs" ino=55355 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 836.597466][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 836.734270][ T30] audit: type=1400 audit(1751114258.210:264126): avc: denied { name_connect } for pid=16816 comm="syz.1.3220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 836.980894][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.001582][ T9] usb 1-1: config 0 descriptor?? [ 837.149224][ T48] usbtest 6-1:0.23: couldn't get endpoints, -71 [ 837.292444][ T9] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 837.302462][ T48] usbtest 6-1:0.23: probe with driver usbtest failed with error -71 [ 837.355650][ T48] usb 6-1: USB disconnect, device number 16 [ 837.384503][T16834] IPVS: stopping backup sync thread 16835 ... [ 837.393072][T16835] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 837.786739][ T9] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 837.810795][ T9] [drm] Initialized udl on minor 2 [ 837.824745][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 837.838655][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 837.850887][T16567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.050704][T16567] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.111090][T13223] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.118282][T13223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.146516][T16819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3219'. [ 838.308090][T13223] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.315312][T13223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.344186][T13532] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 838.358874][T13532] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 838.367190][ T9] usb 1-1: USB disconnect, device number 59 [ 838.387562][T13532] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 838.596569][T16858] FAULT_INJECTION: forcing a failure. [ 838.596569][T16858] name failslab, interval 1, probability 0, space 0, times 0 [ 838.611343][T16858] CPU: 0 UID: 0 PID: 16858 Comm: syz.1.3225 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 838.611370][T16858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 838.611381][T16858] Call Trace: [ 838.611387][T16858] [ 838.611394][T16858] dump_stack_lvl+0x16c/0x1f0 [ 838.611426][T16858] should_fail_ex+0x512/0x640 [ 838.611449][T16858] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 838.611480][T16858] should_failslab+0xc2/0x120 [ 838.611506][T16858] __kmalloc_cache_noprof+0x6a/0x3e0 [ 838.611525][T16858] ? __pfx___might_resched+0x10/0x10 [ 838.611547][T16858] ? vhost_task_create+0xe5/0x2e0 [ 838.611563][T16858] ? rcu_is_watching+0x12/0xc0 [ 838.611584][T16858] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 838.611610][T16858] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 838.611641][T16858] vhost_task_create+0xe5/0x2e0 [ 838.611658][T16858] ? __pfx_vhost_task_create+0x10/0x10 [ 838.611683][T16858] ? __pfx_vhost_task_fn+0x10/0x10 [ 838.611718][T16858] kvm_mmu_post_init_vm+0x1b7/0x370 [ 838.611741][T16858] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 838.611764][T16858] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 838.611791][T16858] kvm_vcpu_ioctl+0x5eb/0x1690 [ 838.611815][T16858] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 838.611843][T16858] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 838.611872][T16858] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 838.611905][T16858] ? hook_file_ioctl_common+0x145/0x410 [ 838.611939][T16858] ? selinux_file_ioctl+0x180/0x270 [ 838.611958][T16858] ? selinux_file_ioctl+0xb4/0x270 [ 838.611979][T16858] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 838.612001][T16858] __x64_sys_ioctl+0x18b/0x210 [ 838.612024][T16858] do_syscall_64+0xcd/0x4c0 [ 838.612051][T16858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.612068][T16858] RIP: 0033:0x7ff60f78e929 [ 838.612083][T16858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.612100][T16858] RSP: 002b:00007ff61053c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 838.612118][T16858] RAX: ffffffffffffffda RBX: 00007ff60f9b5fa0 RCX: 00007ff60f78e929 [ 838.612130][T16858] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 838.612141][T16858] RBP: 00007ff61053c090 R08: 0000000000000000 R09: 0000000000000000 [ 838.612152][T16858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.612162][T16858] R13: 0000000000000000 R14: 00007ff60f9b5fa0 R15: 00007ffc2a49f428 [ 838.612187][T16858] [ 838.862241][ C0] vkms_vblank_simulate: vblank timer overrun [ 838.917031][T13274] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 839.099549][T13274] usb 6-1: Using ep0 maxpacket: 8 [ 839.126451][T13274] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 839.142422][T13274] usb 6-1: config 179 has no interface number 0 [ 839.170437][T13274] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 839.214998][T16567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.232714][T13274] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 839.261613][ T30] audit: type=1400 audit(1751114260.790:264127): avc: denied { getopt } for pid=16874 comm="syz.1.3228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 839.296920][T13274] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 839.330185][T13274] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 839.352609][T13274] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 839.385077][T13274] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 839.411949][T13274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.449636][T16854] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 839.774713][T13274] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input35 [ 839.987004][T16854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.064444][T16854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.120791][T16854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.136256][T16854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.234054][T16854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.310803][T16854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.361261][T16567] veth0_vlan: entered promiscuous mode [ 840.454431][T16567] veth1_vlan: entered promiscuous mode [ 840.467431][T16854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.507617][T16854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.538556][T16903] IPVS: stopping backup sync thread 16904 ... [ 840.544758][T16904] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 840.587577][T16567] veth0_macvtap: entered promiscuous mode [ 840.607407][T16567] veth1_macvtap: entered promiscuous mode [ 840.659140][T13356] usb 6-1: USB disconnect, device number 17 [ 840.659140][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 840.659268][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 840.923985][T13356] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 840.940523][T16567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.190944][T16567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.364029][T16567] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.383558][T16567] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.403818][T16567] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.504129][T16567] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.591799][T16920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3235'. [ 842.670111][ C1] Unknown status report in ack skb [ 842.833817][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.842790][T16931] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 842.845653][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.862717][T16932] IPVS: stopping backup sync thread 16931 ... [ 842.892912][ T6480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.908768][ T6480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.758707][T16954] IPVS: stopping backup sync thread 16956 ... [ 844.768235][T16956] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 844.793353][T16958] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 844.805704][T16957] IPVS: stopping backup sync thread 16958 ... [ 845.035684][T16961] IPVS: stopping backup sync thread 16291 ... [ 846.037017][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 846.226820][ T9] usb 1-1: config 0 has an invalid interface number: 45 but max is 0 [ 846.234972][ T9] usb 1-1: config 0 has no interface number 0 [ 846.248575][ T9] usb 1-1: too many endpoints for config 0 interface 45 altsetting 49: 52, using maximum allowed: 30 [ 846.260615][ T9] usb 1-1: config 0 interface 45 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 846.295290][ T48] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 846.370844][ T9] usb 1-1: config 0 interface 45 has no altsetting 0 [ 846.395077][ T9] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 846.851938][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.870964][ T9] usb 1-1: config 0 descriptor?? [ 846.997347][ T48] usb 2-1: config 0 has an invalid interface number: 45 but max is 0 [ 847.005706][ T48] usb 2-1: config 0 has no interface number 0 [ 847.011832][ T48] usb 2-1: too many endpoints for config 0 interface 45 altsetting 49: 52, using maximum allowed: 30 [ 847.027065][ T48] usb 2-1: config 0 interface 45 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 847.079562][ T30] audit: type=1400 audit(1751114268.630:264128): avc: denied { shutdown } for pid=16980 comm="syz.5.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 847.090270][T16967] delete_channel: no stack [ 847.100731][ T48] usb 2-1: config 0 interface 45 has no altsetting 0 [ 847.140974][ T48] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 847.150884][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.166526][ T48] usb 2-1: config 0 descriptor?? [ 847.233233][ T9] kaweth 1-1:0.45: Firmware present in device. [ 847.254031][ T30] audit: type=1400 audit(1751114268.800:264129): avc: denied { append } for pid=16989 comm="syz.4.3250" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 847.291722][ T9] kaweth 1-1:0.45: Error reading configuration (-71), no net device created [ 847.331937][ T9] kaweth 1-1:0.45: probe with driver kaweth failed with error -5 [ 847.383671][ T9] usb 1-1: USB disconnect, device number 60 [ 847.436487][T16970] delete_channel: no stack [ 847.482515][ T48] kaweth 2-1:0.45: Firmware present in device. [ 847.489236][ T48] kaweth 2-1:0.45: Error reading configuration (-71), no net device created [ 847.498508][ T48] kaweth 2-1:0.45: probe with driver kaweth failed with error -5 [ 847.519259][ T48] usb 2-1: USB disconnect, device number 61 [ 847.582645][T16998] ubi31: attaching mtd0 [ 847.595867][T16998] ubi31: scanning is finished [ 847.782859][ T30] audit: type=1400 audit(1751114269.130:264130): avc: denied { append } for pid=16989 comm="syz.4.3250" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 847.997632][ T30] audit: type=1400 audit(1751114269.220:264131): avc: denied { create } for pid=16989 comm="syz.4.3250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 848.028579][ T30] audit: type=1400 audit(1751114269.270:264132): avc: denied { sys_admin } for pid=16989 comm="syz.4.3250" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 848.069849][T16998] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 848.077587][T16998] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 848.084917][T16998] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 848.092342][T16998] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 848.099900][T16998] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 848.107084][T16998] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 848.115280][T16998] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 783773739 [ 848.127084][T16998] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 848.145126][T17005] ubi31: background thread "ubi_bgt31d" started, PID 17005 [ 848.366059][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3252'. [ 848.847827][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3253'. [ 849.085796][ T5135] Bluetooth: hci3: command 0x0405 tx timeout [ 849.264516][T17025] IPVS: stopping backup sync thread 16785 ... [ 849.661375][T17040] netlink: 'syz.5.3259': attribute type 6 has an invalid length. [ 852.497495][T17063] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 852.511384][T17062] IPVS: stopping backup sync thread 17063 ... [ 853.044841][T17070] xt_nat: multiple ranges no longer supported [ 853.064529][T17070] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 853.073683][T17070] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 853.482047][T17074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3267'. [ 853.629397][T17078] tipc: Enabling of bearer rejected, failed to enable media [ 854.801907][ T30] audit: type=1400 audit(1751114276.350:264133): avc: denied { unmount } for pid=14958 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 855.600796][ T30] audit: type=1400 audit(1751114277.130:264134): avc: denied { sqpoll } for pid=17114 comm="syz.1.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 855.819242][ T30] audit: type=1400 audit(1751114277.370:264135): avc: denied { read } for pid=17113 comm="syz.0.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 855.891544][T17128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3280'. [ 855.901258][ T30] audit: type=1400 audit(1751114277.420:264136): avc: denied { create } for pid=17113 comm="syz.0.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 856.142484][T17135] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 856.209287][T17137] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17137 comm=syz.5.3283 [ 856.235358][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 856.398890][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 856.410101][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 856.421224][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 856.432614][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.444299][T17132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 856.454653][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 856.475264][T13532] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 856.638348][T13532] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.650617][T13532] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.734186][T13532] usb 3-1: config 1 interface 1 has no altsetting 1 [ 856.781405][T13532] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 856.804620][T13532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.815705][T13532] usb 3-1: Product: syz [ 856.836040][ T30] audit: type=1400 audit(1751114278.370:264137): avc: denied { ioctl } for pid=17130 comm="syz.4.3281" path="socket:[57763]" dev="sockfs" ino=57763 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 856.862216][T13532] usb 3-1: Manufacturer: syz [ 856.875637][T13532] usb 3-1: SerialNumber: syz [ 857.038716][T13532] usb 3-1: selecting invalid altsetting 1 [ 857.250526][T13356] usb 5-1: USB disconnect, device number 53 [ 857.791160][T13532] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 857.837559][T13532] cdc_ncm 3-1:1.0: bind() failure [ 857.847076][T13532] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 857.890390][T13532] cdc_ncm 3-1:1.1: bind() failure [ 857.936717][T13532] usb 3-1: USB disconnect, device number 73 [ 859.363260][T17175] Bluetooth: MGMT ver 1.23 [ 859.565266][ T5932] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 859.618031][ T30] audit: type=1400 audit(1751114281.170:264138): avc: denied { mount } for pid=17184 comm="syz.2.3296" name="/" dev="autofs" ino=56173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 859.652635][ T30] audit: type=1400 audit(1751114281.200:264139): avc: denied { read } for pid=17184 comm="syz.2.3296" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 859.676074][ C0] vkms_vblank_simulate: vblank timer overrun [ 859.683777][ T30] audit: type=1400 audit(1751114281.200:264140): avc: denied { open } for pid=17184 comm="syz.2.3296" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 859.707623][ C0] vkms_vblank_simulate: vblank timer overrun [ 859.720080][ T30] audit: type=1400 audit(1751114281.200:264141): avc: denied { ioctl } for pid=17184 comm="syz.2.3296" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 859.761922][ T5932] usb 1-1: config 7 has an invalid interface number: 186 but max is 0 [ 859.785573][ T30] audit: type=1400 audit(1751114281.230:264142): avc: denied { unmount } for pid=16098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 859.808025][ T5932] usb 1-1: config 7 has no interface number 0 [ 859.814499][ T5932] usb 1-1: config 7 interface 186 has no altsetting 0 [ 859.833981][ T5932] usb 1-1: string descriptor 0 read error: -22 [ 859.840921][ T48] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 859.851917][ T5932] usb 1-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 859.866034][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.039118][ T48] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 860.783349][ T5932] usb 1-1: bad CDC descriptors [ 860.788478][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.794583][T17173] random: crng reseeded on system resumption [ 860.802603][ T48] usb 5-1: config 0 descriptor?? [ 860.834265][T17173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.843995][T17173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.886253][T17173] bpq0: entered promiscuous mode [ 860.930927][ T5932] usb 1-1: USB disconnect, device number 61 [ 861.049183][ T30] audit: type=1400 audit(1751114282.570:264143): avc: denied { setopt } for pid=17182 comm="syz.4.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 861.427886][T17212] ubi: mtd0 is already attached to ubi31 [ 862.294274][T17218] FAULT_INJECTION: forcing a failure. [ 862.294274][T17218] name failslab, interval 1, probability 0, space 0, times 0 [ 862.314306][T17218] CPU: 0 UID: 0 PID: 17218 Comm: syz.5.3304 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 862.314328][T17218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 862.314337][T17218] Call Trace: [ 862.314345][T17218] [ 862.314353][T17218] dump_stack_lvl+0x16c/0x1f0 [ 862.314382][T17218] should_fail_ex+0x512/0x640 [ 862.314403][T17218] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 862.314422][T17218] should_failslab+0xc2/0x120 [ 862.314439][T17218] __kmalloc_cache_noprof+0x6a/0x3e0 [ 862.314451][T17218] ? __pfx___might_resched+0x10/0x10 [ 862.314466][T17218] ? vhost_task_create+0xe5/0x2e0 [ 862.314476][T17218] ? rcu_is_watching+0x12/0xc0 [ 862.314496][T17218] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 862.314521][T17218] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 862.314549][T17218] vhost_task_create+0xe5/0x2e0 [ 862.314564][T17218] ? __pfx_vhost_task_create+0x10/0x10 [ 862.314579][T17218] ? __pfx_vhost_task_fn+0x10/0x10 [ 862.314596][T17218] kvm_mmu_post_init_vm+0x1b7/0x370 [ 862.314612][T17218] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 862.314626][T17218] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 862.314651][T17218] kvm_vcpu_ioctl+0x5eb/0x1690 [ 862.314674][T17218] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 862.314700][T17218] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 862.314720][T17218] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 862.314740][T17218] ? hook_file_ioctl_common+0x145/0x410 [ 862.314762][T17218] ? selinux_file_ioctl+0x180/0x270 [ 862.314780][T17218] ? selinux_file_ioctl+0xb4/0x270 [ 862.314803][T17218] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 862.314823][T17218] __x64_sys_ioctl+0x18b/0x210 [ 862.314844][T17218] do_syscall_64+0xcd/0x4c0 [ 862.314863][T17218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.314875][T17218] RIP: 0033:0x7f10d638e929 [ 862.314885][T17218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.314896][T17218] RSP: 002b:00007f10d7235038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 862.314907][T17218] RAX: ffffffffffffffda RBX: 00007f10d65b5fa0 RCX: 00007f10d638e929 [ 862.314915][T17218] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 862.314925][T17218] RBP: 00007f10d7235090 R08: 0000000000000000 R09: 0000000000000000 [ 862.314936][T17218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.314946][T17218] R13: 0000000000000000 R14: 00007f10d65b5fa0 R15: 00007ffec80faa18 [ 862.314969][T17218] [ 862.562824][ C0] vkms_vblank_simulate: vblank timer overrun [ 862.705889][T17211] delete_channel: no stack [ 862.705994][T17226] FAULT_INJECTION: forcing a failure. [ 862.705994][T17226] name failslab, interval 1, probability 0, space 0, times 0 [ 862.730856][ T48] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 862.768055][T17226] CPU: 1 UID: 0 PID: 17226 Comm: syz.0.3306 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 862.768074][T17226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 862.768081][T17226] Call Trace: [ 862.768085][T17226] [ 862.768090][T17226] dump_stack_lvl+0x16c/0x1f0 [ 862.768110][T17226] should_fail_ex+0x512/0x640 [ 862.768124][T17226] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 862.768140][T17226] should_failslab+0xc2/0x120 [ 862.768157][T17226] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 862.768171][T17226] ? getname_flags.part.0+0x4c/0x550 [ 862.768184][T17226] getname_flags.part.0+0x4c/0x550 [ 862.768197][T17226] getname_flags+0x93/0xf0 [ 862.768211][T17226] __x64_sys_rename+0x65/0xa0 [ 862.768227][T17226] do_syscall_64+0xcd/0x4c0 [ 862.768244][T17226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.768258][T17226] RIP: 0033:0x7fa89218e929 [ 862.768267][T17226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.768277][T17226] RSP: 002b:00007fa892fbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 862.768288][T17226] RAX: ffffffffffffffda RBX: 00007fa8923b5fa0 RCX: 00007fa89218e929 [ 862.768296][T17226] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000580 [ 862.768302][T17226] RBP: 00007fa892fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 862.768312][T17226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.768318][T17226] R13: 0000000000000000 R14: 00007fa8923b5fa0 R15: 00007ffd7ea461d8 [ 862.768332][T17226] [ 862.942416][ T48] [drm:udl_init] *ERROR* Selecting channel failed [ 862.983248][ T48] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 862.990844][ T48] [drm] Initialized udl on minor 2 [ 862.997251][ T48] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 863.006043][ T48] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 863.014880][ T48] usb 5-1: USB disconnect, device number 54 [ 863.023853][T13274] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 863.592932][ T30] audit: type=1400 audit(1751114285.140:264144): avc: denied { mount } for pid=17230 comm="syz.5.3309" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 864.602754][ T48] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 865.531674][ T30] audit: type=1400 audit(1751114287.080:264145): avc: denied { append } for pid=17260 comm="syz.1.3317" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 866.083341][ T48] usb 1-1: config 7 has an invalid interface number: 186 but max is 0 [ 866.099568][ T48] usb 1-1: config 7 has no interface number 0 [ 866.119655][ T48] usb 1-1: config 7 interface 186 has no altsetting 0 [ 866.163835][ T48] usb 1-1: string descriptor 0 read error: -22 [ 866.176860][ T48] usb 1-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 866.202879][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.230329][ T48] usb 1-1: bad CDC descriptors [ 866.253983][ T30] audit: type=1400 audit(1751114287.800:264146): avc: denied { create } for pid=17280 comm="syz.2.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 866.395690][T13274] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 866.624139][T13274] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.643984][T13274] usb 5-1: config 0 has no interfaces? [ 866.645142][T17247] random: crng reseeded on system resumption [ 866.654922][T13274] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 866.666916][T13274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.696511][T13274] usb 5-1: config 0 descriptor?? [ 867.153825][T17285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.175715][T17285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.444858][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3319'. [ 867.461263][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3319'. [ 867.528343][T13532] usb 1-1: USB disconnect, device number 62 [ 867.592604][T17299] xt_hashlimit: Unknown mode mask 533A373F, kernel too old? [ 867.785907][ T30] audit: type=1400 audit(1751114289.320:264147): avc: denied { read } for pid=5170 comm="acpid" name="mouse1" dev="devtmpfs" ino=3774 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 867.983466][ T30] audit: type=1400 audit(1751114289.320:264148): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3774 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 868.045913][ T30] audit: type=1400 audit(1751114289.330:264149): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3774 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 868.255381][T13356] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 868.380701][ T30] audit: type=1400 audit(1751114289.920:264150): avc: denied { bind } for pid=17309 comm="syz.1.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 868.440417][T17310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3330'. [ 868.507845][T13356] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 868.539667][T13356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.552154][T13356] usb 3-1: config 0 descriptor?? [ 868.777243][T13356] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 869.091921][T13356] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 869.100602][T13356] [drm] Initialized udl on minor 2 [ 869.184196][T13274] usb 5-1: USB disconnect, device number 55 [ 869.199465][ T30] audit: type=1326 audit(1751114290.740:264151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.1.3333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff60f78e929 code=0x0 [ 869.291625][T13356] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 869.328297][T17323] syz_tun: entered allmulticast mode [ 869.328585][T13356] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 869.349933][T17323] syz_tun: left allmulticast mode [ 869.366742][ T30] audit: type=1400 audit(1751114290.910:264152): avc: denied { write } for pid=17324 comm="syz.4.3335" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 869.418578][ T30] audit: type=1400 audit(1751114290.950:264153): avc: denied { ioctl } for pid=17324 comm="syz.4.3335" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 869.459024][ T30] audit: type=1400 audit(1751114290.950:264154): avc: denied { write } for pid=17324 comm="syz.4.3335" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 869.515353][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 869.777106][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.915055][ T9] usb 6-1: config 0 has no interfaces? [ 869.935035][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 869.962414][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.973895][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.973947][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.006715][ T9] usb 6-1: config 0 descriptor?? [ 870.379973][ T974] usb 3-1: USB disconnect, device number 74 [ 870.386253][T13532] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 870.409580][T13532] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 871.191905][T17352] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3334'. [ 871.204443][T17352] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3334'. [ 871.225274][T13532] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 871.419232][T13532] usb 1-1: config 7 has an invalid interface number: 186 but max is 0 [ 871.435887][T13532] usb 1-1: config 7 has no interface number 0 [ 871.443166][T13532] usb 1-1: config 7 interface 186 has no altsetting 0 [ 871.456147][T13532] usb 1-1: string descriptor 0 read error: -22 [ 871.464329][T13532] usb 1-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 871.491299][T13532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.637428][T13532] usb 1-1: bad CDC descriptors [ 871.851303][T17347] random: crng reseeded on system resumption [ 871.923946][T17347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.946043][T17347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.954931][T17370] FAULT_INJECTION: forcing a failure. [ 871.954931][T17370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.971579][ T5882] usb 1-1: USB disconnect, device number 63 [ 871.971887][T17370] CPU: 1 UID: 0 PID: 17370 Comm: syz.1.3346 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 871.971909][T17370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 871.971920][T17370] Call Trace: [ 871.971925][T17370] [ 871.971932][T17370] dump_stack_lvl+0x16c/0x1f0 [ 871.971961][T17370] should_fail_ex+0x512/0x640 [ 871.971984][T17370] _copy_from_user+0x2e/0xd0 [ 871.972008][T17370] sctp_setsockopt+0x2045/0xb870 [ 871.972028][T17370] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 871.972050][T17370] ? proc_fail_nth_write+0x9f/0x250 [ 871.972073][T17370] ? __pfx_sctp_setsockopt+0x10/0x10 [ 871.972090][T17370] ? __lock_acquire+0x622/0x1c90 [ 871.972119][T17370] ? selinux_socket_setsockopt+0x6a/0x80 [ 871.972137][T17370] ? sock_common_setsockopt+0x2e/0xf0 [ 871.972154][T17370] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 871.972171][T17370] do_sock_setsockopt+0x224/0x470 [ 871.972186][T17370] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 871.972214][T17370] __sys_setsockopt+0x1a0/0x230 [ 871.972238][T17370] __x64_sys_setsockopt+0xbd/0x160 [ 871.972257][T17370] ? do_syscall_64+0x91/0x4c0 [ 871.972280][T17370] ? lockdep_hardirqs_on+0x7c/0x110 [ 871.972301][T17370] do_syscall_64+0xcd/0x4c0 [ 871.972324][T17370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.972340][T17370] RIP: 0033:0x7ff60f78e929 [ 871.972354][T17370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.972369][T17370] RSP: 002b:00007ff61053c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 871.972384][T17370] RAX: ffffffffffffffda RBX: 00007ff60f9b5fa0 RCX: 00007ff60f78e929 [ 871.972394][T17370] RDX: 0000000000000002 RSI: 0000000000000084 RDI: 0000000000000003 [ 871.972404][T17370] RBP: 00007ff61053c090 R08: 0000000000000008 R09: 0000000000000000 [ 871.972413][T17370] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 871.972423][T17370] R13: 0000000000000000 R14: 00007ff60f9b5fa0 R15: 00007ffc2a49f428 [ 871.972444][T17370] [ 872.043327][ T30] audit: type=1400 audit(1751114293.590:264155): avc: denied { create } for pid=17372 comm="syz.1.3348" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 872.116070][T13532] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 872.241678][T17373] fuse: Unknown parameter '000000000000000000050x0000000000000005' [ 872.242343][ T30] audit: type=1400 audit(1751114293.790:264156): avc: denied { mounton } for pid=17372 comm="syz.1.3348" path="/64/file0" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 872.295982][ T30] audit: type=1400 audit(1751114293.800:264157): avc: denied { read } for pid=17372 comm="syz.1.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 872.339819][ T9] usb 6-1: USB disconnect, device number 18 [ 872.423478][T13532] usb 5-1: Using ep0 maxpacket: 8 [ 872.483962][ T30] audit: type=1400 audit(1751114293.930:264158): avc: denied { write } for pid=17372 comm="syz.1.3348" name="file0" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 872.657563][T13532] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 872.667690][T13532] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.684734][ T30] audit: type=1400 audit(1751114293.930:264159): avc: denied { open } for pid=17372 comm="syz.1.3348" path="/64/file0" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 872.686743][T13532] usb 5-1: config 0 has no interface number 0 [ 872.876428][T13532] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 872.891564][T13532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.038895][ T30] audit: type=1400 audit(1751114294.590:264160): avc: denied { unlink } for pid=15813 comm="syz-executor" name="file0" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 873.075355][T13532] usb 5-1: Product: syz [ 873.079578][T13532] usb 5-1: Manufacturer: syz [ 873.135638][T13274] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 873.390397][T13274] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 873.462577][T13274] usb 1-1: config 0 has no interface number 0 [ 873.570614][T13274] usb 1-1: config 0 interface 23 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 873.588706][T13274] usb 1-1: config 0 interface 23 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 873.603181][T13274] usb 1-1: config 0 interface 23 has no altsetting 0 [ 873.605721][T13532] usb 5-1: SerialNumber: syz [ 873.613703][T13274] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=66.30 [ 873.624834][T13274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.632354][T13532] usb 5-1: config 0 descriptor?? [ 873.637904][T13274] usb 1-1: Product: syz [ 873.637928][T13274] usb 1-1: Manufacturer: syz [ 873.637944][T13274] usb 1-1: SerialNumber: syz [ 873.658467][ T5882] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 873.659672][T13274] usb 1-1: config 0 descriptor?? [ 873.689036][T17387] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 873.696833][T17387] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 873.725592][ T974] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 873.830474][ T5882] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 873.840019][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.866891][ T5882] usb 6-1: config 0 descriptor?? [ 873.940957][T13274] usbtest 1-1:0.23: couldn't get endpoints, -71 [ 873.948650][T13274] usbtest 1-1:0.23: probe with driver usbtest failed with error -71 [ 873.966685][ T974] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.977672][ T974] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 874.003199][T13274] usb 1-1: USB disconnect, device number 64 [ 874.010887][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.134664][T17384] delete_channel: no stack [ 874.150377][ T974] usb 2-1: config 0 descriptor?? [ 874.158816][ T5882] kaweth 6-1:0.0: Firmware present in device. [ 874.169308][ T5882] kaweth 6-1:0.0: Error reading configuration (-71), no net device created [ 874.174690][ T974] pwc: Askey VC010 type 2 USB webcam detected. [ 874.690596][ T5882] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 874.703732][ T5882] usb 6-1: USB disconnect, device number 19 [ 875.419809][ T30] audit: type=1400 audit(1751114296.970:264161): avc: denied { read write } for pid=16098 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 875.609794][T13532] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 875.621310][ T30] audit: type=1400 audit(1751114297.000:264162): avc: denied { open } for pid=16098 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 875.716749][T13532] usb 5-1: No valid video chain found. [ 876.074374][T13532] usb 5-1: USB disconnect, device number 56 [ 876.122766][ T30] audit: type=1400 audit(1751114297.000:264163): avc: denied { ioctl } for pid=16098 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 876.277246][ T30] audit: type=1400 audit(1751114297.170:264164): avc: denied { read } for pid=17404 comm="syz.5.3357" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 876.604841][ T974] pwc: send_video_command error -71 [ 876.621356][ T974] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 877.080058][ T974] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 877.099505][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 877.099524][ T30] audit: type=1400 audit(1751114298.650:264210): avc: denied { map } for pid=17419 comm="syz.4.3359" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 877.101508][ T974] usb 2-1: USB disconnect, device number 62 [ 877.159187][ T30] audit: type=1400 audit(1751114298.650:264211): avc: denied { write execute } for pid=17419 comm="syz.4.3359" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 877.183855][ C0] vkms_vblank_simulate: vblank timer overrun [ 877.826206][ T30] audit: type=1400 audit(1751114298.690:264212): avc: denied { create } for pid=17415 comm="syz.5.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 877.925795][ T30] audit: type=1400 audit(1751114298.750:264213): avc: denied { prog_run } for pid=17415 comm="syz.5.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 877.985650][ T30] audit: type=1400 audit(1751114299.510:264214): avc: denied { bind } for pid=17427 comm="syz.1.3362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 878.022941][ T30] audit: type=1400 audit(1751114299.510:264215): avc: denied { ioctl } for pid=17427 comm="syz.1.3362" path="socket:[60122]" dev="sockfs" ino=60122 ioctlcmd=0x48d5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 878.077598][ T30] audit: type=1400 audit(1751114299.510:264216): avc: denied { getopt } for pid=17427 comm="syz.1.3362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 878.200462][ C0] vkms_vblank_simulate: vblank timer overrun [ 878.206911][ T30] audit: type=1400 audit(1751114299.510:264217): avc: denied { setopt } for pid=17427 comm="syz.1.3362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 878.226964][T13356] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 878.785995][T17438] 9pnet_fd: Insufficient options for proto=fd [ 878.851418][ T30] audit: type=1400 audit(1751114299.510:264218): avc: denied { read write } for pid=17427 comm="syz.1.3362" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 878.898459][ T30] audit: type=1400 audit(1751114299.510:264219): avc: denied { open } for pid=17427 comm="syz.1.3362" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 878.932937][T13356] usb 2-1: config 7 has an invalid interface number: 186 but max is 0 [ 878.950493][T13356] usb 2-1: config 7 has no interface number 0 [ 879.029018][T13356] usb 2-1: config 7 interface 186 has no altsetting 0 [ 879.039506][T13356] usb 2-1: string descriptor 0 read error: -22 [ 879.046619][T13356] usb 2-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=e0.aa [ 879.058894][T13356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.073311][T13356] usb 2-1: bad CDC descriptors [ 879.255506][T17400] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 879.768280][T17428] random: crng reseeded on system resumption [ 879.780550][T17458] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 879.815342][T13356] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 879.829420][T17428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.865092][T17428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.894817][ T48] usb 2-1: USB disconnect, device number 63 [ 879.909227][T17400] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 879.919631][T17400] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.953654][T17400] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 879.964876][T17400] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 879.992282][T17400] usb 6-1: Manufacturer: syz [ 880.011293][T17400] usb 6-1: config 0 descriptor?? [ 880.025317][T13356] usb 1-1: Using ep0 maxpacket: 8 [ 880.047136][T13356] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 880.072316][T13356] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 880.097145][T13356] usb 1-1: Product: syz [ 880.101379][T13356] usb 1-1: Manufacturer: syz [ 880.128357][T13356] usb 1-1: SerialNumber: syz [ 880.140222][T13356] usb 1-1: config 0 descriptor?? [ 880.143520][T17400] rc_core: IR keymap rc-hauppauge not found [ 880.307924][T17400] Registered IR keymap rc-empty [ 880.323539][T13356] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 880.325844][T17400] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 880.570328][T17400] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input36 [ 880.943442][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 881.046247][T13356] gspca_zc3xx: reg_r err -110 [ 881.051110][T13356] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 881.344795][T13356] usb 6-1: USB disconnect, device number 20 [ 882.305351][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 882.305387][ T30] audit: type=1400 audit(1751114303.690:264246): avc: denied { read write } for pid=17481 comm="syz.4.3375" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 882.585681][T13356] usb 1-1: USB disconnect, device number 65 [ 882.612436][ T30] audit: type=1400 audit(1751114303.690:264247): avc: denied { open } for pid=17481 comm="syz.4.3375" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 882.663010][ T30] audit: type=1400 audit(1751114303.690:264248): avc: denied { mounton } for pid=17481 comm="syz.4.3375" path="/22/file0" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 882.713478][ T30] audit: type=1400 audit(1751114303.710:264249): avc: denied { mount } for pid=17481 comm="syz.4.3375" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 882.850610][ T30] audit: type=1400 audit(1751114304.380:264250): avc: denied { unmount } for pid=16567 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 883.388733][ T30] audit: type=1400 audit(1751114304.480:264251): avc: denied { create } for pid=17489 comm="syz.0.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 883.426539][ T30] audit: type=1400 audit(1751114304.490:264252): avc: denied { setopt } for pid=17489 comm="syz.0.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 883.611377][ T30] audit: type=1400 audit(1751114304.620:264253): avc: denied { bind } for pid=17489 comm="syz.0.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 883.820852][ T48] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 883.852437][ T30] audit: type=1400 audit(1751114304.620:264254): avc: denied { getopt } for pid=17489 comm="syz.0.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 883.882632][ T30] audit: type=1400 audit(1751114305.390:264255): avc: denied { write } for pid=17498 comm="syz.2.3380" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 884.075489][ T5882] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 884.085512][ T48] usb 6-1: Using ep0 maxpacket: 8 [ 884.088723][T17506] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3382'. [ 884.092300][ T48] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 884.108481][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 884.113676][T17505] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3382'. [ 884.120178][ T48] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 884.142044][T17509] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 884.303197][ T5882] usb 3-1: config 0 has an invalid interface number: 45 but max is 0 [ 884.414215][ T5882] usb 3-1: config 0 has no interface number 0 [ 884.538343][ T5882] usb 3-1: too many endpoints for config 0 interface 45 altsetting 49: 52, using maximum allowed: 30 [ 884.551676][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 884.563478][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 884.600620][ T48] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 884.619099][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 884.636856][ T48] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 884.644497][ T5882] usb 3-1: config 0 interface 45 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 884.662890][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 884.680282][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 884.692322][ T48] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 884.702497][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 884.718171][ T5882] usb 3-1: config 0 interface 45 has no altsetting 0 [ 884.731775][ T48] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 884.745819][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 884.747920][ T5882] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 884.785615][ T48] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 884.804013][ T48] usb 6-1: string descriptor 0 read error: -22 [ 884.811881][ T48] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 884.876270][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.893085][ T5882] usb 3-1: config 0 descriptor?? [ 884.915142][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.950362][ T48] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 884.965267][T13274] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 885.019589][T17516] IPVS: stopping backup sync thread 17517 ... [ 885.032852][T17517] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 885.110679][T17499] delete_channel: no stack [ 885.131057][T13274] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 885.132848][ T5882] kaweth 3-1:0.45: Firmware present in device. [ 885.141079][T17494] FAULT_INJECTION: forcing a failure. [ 885.141079][T17494] name failslab, interval 1, probability 0, space 0, times 0 [ 885.146292][ T5882] kaweth 3-1:0.45: Error reading configuration (-71), no net device created [ 885.594069][ T5882] kaweth 3-1:0.45: probe with driver kaweth failed with error -5 [ 885.605312][T17494] CPU: 0 UID: 0 PID: 17494 Comm: syz.5.3378 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 885.605342][T17494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 885.605353][T17494] Call Trace: [ 885.605359][T17494] [ 885.605367][T17494] dump_stack_lvl+0x16c/0x1f0 [ 885.605398][T17494] should_fail_ex+0x512/0x640 [ 885.605420][T17494] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 885.605446][T17494] should_failslab+0xc2/0x120 [ 885.605472][T17494] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 885.605495][T17494] ? alloc_empty_file+0x55/0x1e0 [ 885.605515][T17494] alloc_empty_file+0x55/0x1e0 [ 885.605531][T17494] path_openat+0xda/0x2cb0 [ 885.605555][T17494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.605581][T17494] ? __pfx_path_openat+0x10/0x10 [ 885.605604][T17494] ? __lock_acquire+0xb8a/0x1c90 [ 885.605633][T17494] do_filp_open+0x20b/0x470 [ 885.605656][T17494] ? __pfx_do_filp_open+0x10/0x10 [ 885.605696][T17494] ? alloc_fd+0x471/0x7d0 [ 885.605725][T17494] do_sys_openat2+0x11b/0x1d0 [ 885.605740][T17494] ? __pfx_do_sys_openat2+0x10/0x10 [ 885.605758][T17494] ? __fget_files+0x20e/0x3c0 [ 885.605780][T17494] __x64_sys_openat+0x174/0x210 [ 885.605791][T17494] ? __pfx___x64_sys_openat+0x10/0x10 [ 885.605801][T17494] ? ksys_write+0x1ac/0x250 [ 885.605819][T17494] do_syscall_64+0xcd/0x4c0 [ 885.605837][T17494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.605849][T17494] RIP: 0033:0x7f10d638d290 [ 885.605858][T17494] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 885.605869][T17494] RSP: 002b:00007f10d7234b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 885.605879][T17494] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f10d638d290 [ 885.605886][T17494] RDX: 0000000000000002 RSI: 00007f10d7234c10 RDI: 00000000ffffff9c [ 885.605893][T17494] RBP: 00007f10d7234c10 R08: 0000000000000000 R09: 00007f10d7234987 [ 885.605899][T17494] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 885.605905][T17494] R13: 0000000000000000 R14: 00007f10d65b5fa0 R15: 00007ffec80faa18 [ 885.605919][T17494] [ 885.606895][T13356] usb 6-1: USB disconnect, device number 21 [ 885.675678][T13274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.691416][ T5882] usb 3-1: USB disconnect, device number 75 [ 885.929854][T13274] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 885.941127][T13274] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 886.059120][T13274] usb 2-1: Manufacturer: syz [ 886.078492][T13274] usb 2-1: config 0 descriptor?? [ 886.125535][T13274] rc_core: IR keymap rc-hauppauge not found [ 886.640361][T13274] Registered IR keymap rc-empty [ 886.657996][T13274] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 886.697033][T13274] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input37 [ 886.769712][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 886.980312][ T5882] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 887.022868][ T9] usb 2-1: USB disconnect, device number 64 [ 887.135384][T13356] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 887.166942][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.184300][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.195139][ T5882] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 887.204928][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.220058][ T5882] usb 3-1: config 0 descriptor?? [ 887.297594][T13356] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 887.313100][T13356] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.324844][T13356] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 887.334894][T13356] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 887.345602][T13356] usb 6-1: Manufacturer: syz [ 887.356036][T13356] usb 6-1: config 0 descriptor?? [ 887.427019][T13356] rc_core: IR keymap rc-hauppauge not found [ 887.433469][T13356] Registered IR keymap rc-empty [ 887.443977][T13356] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 887.458839][T13356] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input38 [ 887.549027][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 887.549045][ T30] audit: type=1400 audit(1751114309.100:264264): avc: denied { bind } for pid=17545 comm="syz.0.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 887.603198][ T30] audit: type=1400 audit(1751114309.100:264265): avc: denied { write } for pid=17545 comm="syz.0.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 887.655387][ T5135] Bluetooth: hci0: command 0x0406 tx timeout [ 887.717153][ T30] audit: type=1400 audit(1751114309.270:264266): avc: denied { write } for pid=17550 comm="syz.0.3393" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 887.804563][ T30] audit: type=1400 audit(1751114309.350:264267): avc: denied { read write } for pid=17548 comm="syz.1.3392" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 887.823649][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 887.838416][T13532] usb 6-1: USB disconnect, device number 22 [ 887.843722][ T30] audit: type=1400 audit(1751114309.350:264268): avc: denied { open } for pid=17548 comm="syz.1.3392" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 887.879211][ T30] audit: type=1400 audit(1751114309.360:264269): avc: denied { ioctl } for pid=17548 comm="syz.1.3392" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 887.888005][ T5882] usbhid 3-1:0.0: can't add hid device: -32 [ 887.917958][ T5882] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 887.967484][ T30] audit: type=1326 audit(1751114309.460:264270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17529 comm="syz.2.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4238e929 code=0x7ffc0000 [ 888.021819][T17556] xt_hashlimit: Unknown mode mask 533A373F, kernel too old? [ 888.050272][ T30] audit: type=1326 audit(1751114309.460:264271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17529 comm="syz.2.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4238e929 code=0x7ffc0000 [ 888.086659][ T30] audit: type=1326 audit(1751114309.460:264272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17529 comm="syz.2.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8d4238e929 code=0x7ffc0000 [ 888.111862][ T30] audit: type=1326 audit(1751114309.460:264273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17529 comm="syz.2.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4238e929 code=0x7ffc0000 [ 888.436542][ T48] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 889.898894][ T48] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 889.963986][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.997254][ T48] usb 5-1: config 0 descriptor?? [ 890.088718][T13274] usb 3-1: USB disconnect, device number 76 [ 890.185344][T13532] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 890.206954][T17400] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 890.305254][ T974] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 890.542385][ T48] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 890.590660][T17582] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 890.590906][T17581] IPVS: stopping backup sync thread 17582 ... [ 890.655826][T13532] usb 1-1: config 0 has an invalid interface number: 45 but max is 0 [ 890.663968][T13532] usb 1-1: config 0 has no interface number 0 [ 890.673245][T13532] usb 1-1: too many endpoints for config 0 interface 45 altsetting 49: 52, using maximum allowed: 30 [ 890.684837][T13532] usb 1-1: config 0 interface 45 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 890.698902][T17400] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 890.700344][T13532] usb 1-1: config 0 interface 45 has no altsetting 0 [ 890.754401][T13532] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 890.792393][ T974] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.806436][T17400] usb 2-1: config 0 has no interface number 0 [ 890.812591][T17400] usb 2-1: config 0 interface 23 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 890.817961][T13532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.824615][ T48] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 890.841642][ T974] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 890.858362][ T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.867401][T17400] usb 2-1: config 0 interface 23 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 890.878633][ T48] [drm] Initialized udl on minor 2 [ 890.881259][T13532] usb 1-1: config 0 descriptor?? [ 890.887071][ T974] usb 6-1: config 0 descriptor?? [ 890.899160][T17400] usb 2-1: config 0 interface 23 has no altsetting 0 [ 890.911068][T17400] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=66.30 [ 890.924539][ T974] pwc: Askey VC010 type 2 USB webcam detected. [ 890.932879][T17400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.942982][T17400] usb 2-1: Product: syz [ 890.948036][T17400] usb 2-1: Manufacturer: syz [ 890.952675][T17400] usb 2-1: SerialNumber: syz [ 890.961058][T17400] usb 2-1: config 0 descriptor?? [ 890.967234][T17570] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 890.974512][T17570] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 890.982680][ T48] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 890.992843][ T48] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 891.176047][T17572] delete_channel: no stack [ 891.197690][T13532] kaweth 1-1:0.45: Firmware present in device. [ 891.204456][T13532] kaweth 1-1:0.45: Error reading configuration (-71), no net device created [ 891.217712][T13532] kaweth 1-1:0.45: probe with driver kaweth failed with error -5 [ 891.237064][T13532] usb 1-1: USB disconnect, device number 66 [ 891.374790][T17400] usbtest 2-1:0.23: couldn't get endpoints, -71 [ 891.382355][T17400] usbtest 2-1:0.23: probe with driver usbtest failed with error -71 [ 891.416313][T17400] usb 2-1: USB disconnect, device number 65 [ 891.824291][ T5927] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 891.872331][ T5927] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 891.880376][ T48] usb 5-1: USB disconnect, device number 57 [ 892.186443][T13532] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 892.371785][T17601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3407'. [ 892.738566][T13532] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 892.758574][T13532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.785741][T13532] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 892.798611][T13532] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 892.807948][T13532] usb 3-1: Manufacturer: syz [ 892.822936][T13532] usb 3-1: config 0 descriptor?? [ 892.862943][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 892.862961][ T30] audit: type=1400 audit(1751114314.410:264393): avc: denied { prog_load } for pid=17603 comm="syz.1.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 892.905955][ T30] audit: type=1400 audit(1751114314.440:264394): avc: denied { bpf } for pid=17603 comm="syz.1.3408" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 892.932729][ T30] audit: type=1400 audit(1751114314.440:264395): avc: denied { map_create } for pid=17603 comm="syz.1.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 892.955494][ T30] audit: type=1400 audit(1751114314.440:264396): avc: denied { map_read map_write } for pid=17603 comm="syz.1.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 893.065420][T13532] rc_core: IR keymap rc-hauppauge not found [ 893.072692][T13532] Registered IR keymap rc-empty [ 893.510411][ T30] audit: type=1400 audit(1751114314.440:264397): avc: denied { perfmon } for pid=17603 comm="syz.1.3408" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 893.533035][T13532] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 893.544980][T13532] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input40 [ 893.556443][ T974] pwc: send_video_command error -71 [ 893.589693][ T30] audit: type=1400 audit(1751114314.450:264398): avc: denied { prog_run } for pid=17603 comm="syz.1.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 893.635717][ T974] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 893.647837][ T30] audit: type=1400 audit(1751114314.450:264399): avc: denied { create } for pid=17603 comm="syz.1.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 893.682394][ T30] audit: type=1400 audit(1751114314.630:264400): avc: denied { read } for pid=17596 comm="syz.2.3406" dev="nsfs" ino=4026533620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 893.703790][ C0] vkms_vblank_simulate: vblank timer overrun [ 893.728090][ T974] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 893.771966][ T974] usb 6-1: USB disconnect, device number 23 [ 893.821995][ T30] audit: type=1400 audit(1751114314.630:264401): avc: denied { open } for pid=17596 comm="syz.2.3406" path="net:[4026533620]" dev="nsfs" ino=4026533620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 893.888897][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 893.890115][T17400] usb 3-1: USB disconnect, device number 77 [ 893.895111][ C0] igorplugusb 3-1:0.0: submit urb failed: -19 [ 893.953716][ T30] audit: type=1400 audit(1751114314.630:264402): avc: denied { create } for pid=17596 comm="syz.2.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 894.121581][T17626] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 894.121609][T17624] IPVS: stopping backup sync thread 17626 ... [ 895.081589][T17636] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3416'. [ 895.107301][T17636] vlan2: entered allmulticast mode [ 895.606168][T17645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.616787][T17645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.721697][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3419'. [ 895.886965][T17650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3419'. [ 895.973370][T17650] ================================================================== [ 895.981498][T17650] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x549/0x640 [ 895.989160][T17650] Read of size 1 at addr ffff888027152830 by task syz.1.3419/17650 [ 895.997066][T17650] [ 895.999399][T17650] CPU: 1 UID: 0 PID: 17650 Comm: syz.1.3419 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 895.999426][T17650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 895.999440][T17650] Call Trace: [ 895.999449][T17650] [ 895.999459][T17650] dump_stack_lvl+0x116/0x1f0 [ 895.999495][T17650] print_report+0xcd/0x680 [ 895.999521][T17650] ? __virt_addr_valid+0x81/0x610 [ 895.999545][T17650] ? __phys_addr+0xe8/0x180 [ 895.999569][T17650] ? rose_get_neigh+0x549/0x640 [ 895.999593][T17650] kasan_report+0xe0/0x110 [ 895.999620][T17650] ? rose_get_neigh+0x549/0x640 [ 895.999646][T17650] rose_get_neigh+0x549/0x640 [ 895.999672][T17650] rose_connect+0x2d4/0x1540 [ 895.999693][T17650] ? __pfx_rose_connect+0x10/0x10 [ 895.999712][T17650] ? selinux_netlbl_socket_connect+0x30/0x40 [ 895.999738][T17650] ? rcu_is_watching+0x12/0xc0 [ 895.999762][T17650] ? __local_bh_enable_ip+0xa4/0x120 [ 895.999785][T17650] ? lockdep_hardirqs_on+0x7c/0x110 [ 895.999812][T17650] ? selinux_netlbl_socket_connect+0x30/0x40 [ 895.999838][T17650] ? __local_bh_enable_ip+0xa4/0x120 [ 895.999861][T17650] ? selinux_netlbl_socket_connect+0x30/0x40 [ 895.999885][T17650] ? selinux_socket_connect+0x6b/0x80 [ 895.999910][T17650] ? __pfx_rose_connect+0x10/0x10 [ 895.999927][T17650] __sys_connect_file+0x13e/0x1a0 [ 895.999954][T17650] __sys_connect+0x13b/0x160 [ 895.999976][T17650] ? __pfx___sys_connect+0x10/0x10 [ 896.000002][T17650] ? xfd_validate_state+0x61/0x180 [ 896.000030][T17650] __x64_sys_connect+0x72/0xb0 [ 896.000052][T17650] ? lockdep_hardirqs_on+0x7c/0x110 [ 896.000078][T17650] do_syscall_64+0xcd/0x4c0 [ 896.000106][T17650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.000131][T17650] RIP: 0033:0x7ff60f78e929 [ 896.000149][T17650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.000168][T17650] RSP: 002b:00007ff61053c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 896.000189][T17650] RAX: ffffffffffffffda RBX: 00007ff60f9b5fa0 RCX: 00007ff60f78e929 [ 896.000204][T17650] RDX: 000000000000001c RSI: 0000200000000100 RDI: 000000000000000a [ 896.000217][T17650] RBP: 00007ff60f810b39 R08: 0000000000000000 R09: 0000000000000000 [ 896.000232][T17650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.000244][T17650] R13: 0000000000000000 R14: 00007ff60f9b5fa0 R15: 00007ffc2a49f428 [ 896.000266][T17650] [ 896.000274][T17650] [ 896.006011][T13532] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 896.012322][T17650] Allocated by task 16297: [ 896.253378][T17650] kasan_save_stack+0x33/0x60 [ 896.258059][T17650] kasan_save_track+0x14/0x30 [ 896.262726][T17650] __kasan_kmalloc+0xaa/0xb0 [ 896.267314][T17650] kernfs_fop_open+0x244/0xda0 [ 896.272087][T17650] do_dentry_open+0x744/0x1c10 [ 896.276849][T17650] vfs_open+0x82/0x3f0 [ 896.280913][T17650] path_openat+0x1de4/0x2cb0 [ 896.285506][T17650] do_filp_open+0x20b/0x470 [ 896.289997][T17650] do_sys_openat2+0x11b/0x1d0 [ 896.294656][T17650] __x64_sys_openat+0x174/0x210 [ 896.299488][T17650] do_syscall_64+0xcd/0x4c0 [ 896.303983][T17650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.309861][T17650] [ 896.312186][T17650] Freed by task 16297: [ 896.316253][T17650] kasan_save_stack+0x33/0x60 [ 896.320962][T17650] kasan_save_track+0x14/0x30 [ 896.325628][T17650] kasan_save_free_info+0x3b/0x60 [ 896.330670][T17650] __kasan_slab_free+0x51/0x70 [ 896.335423][T17650] kfree+0x2b4/0x4d0 [ 896.339301][T17650] kernfs_fop_release+0x12c/0x1e0 [ 896.344317][T17650] __fput+0x3ff/0xb70 [ 896.348285][T17650] fput_close_sync+0x118/0x260 [ 896.353034][T17650] __x64_sys_close+0x8b/0x120 [ 896.357699][T17650] do_syscall_64+0xcd/0x4c0 [ 896.362194][T17650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.368071][T17650] [ 896.370381][T17650] The buggy address belongs to the object at ffff888027152800 [ 896.370381][T17650] which belongs to the cache kmalloc-512 of size 512 [ 896.384602][T17650] The buggy address is located 48 bytes inside of [ 896.384602][T17650] freed 512-byte region [ffff888027152800, ffff888027152a00) [ 896.398299][T17650] [ 896.400616][T17650] The buggy address belongs to the physical page: [ 896.407094][T17650] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027152800 pfn:0x27150 [ 896.417151][T17650] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 896.425632][T17650] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 896.434118][T17650] page_type: f5(slab) [ 896.438086][T17650] raw: 00fff00000000240 ffff88801b841c80 ffffea000161d810 ffffea0000ab4610 [ 896.446674][T17650] raw: ffff888027152800 000000000010000e 00000000f5000000 0000000000000000 [ 896.455242][T17650] head: 00fff00000000240 ffff88801b841c80 ffffea000161d810 ffffea0000ab4610 [ 896.463900][T17650] head: ffff888027152800 000000000010000e 00000000f5000000 0000000000000000 [ 896.472576][T17650] head: 00fff00000000002 ffffea00009c5401 00000000ffffffff 00000000ffffffff [ 896.481243][T17650] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 896.489903][T17650] page dumped because: kasan: bad access detected [ 896.496321][T17650] page_owner tracks the page as allocated [ 896.502018][T17650] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5199, tgid 5199 (udevadm), ts 26152975852, free_ts 24594059750 [ 896.523037][T17650] post_alloc_hook+0x1c0/0x230 [ 896.527805][T17650] get_page_from_freelist+0x1321/0x3890 [ 896.533346][T17650] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 896.539230][T17650] alloc_pages_mpol+0x1fb/0x550 [ 896.544072][T17650] new_slab+0x23b/0x330 [ 896.548214][T17650] ___slab_alloc+0xd9c/0x1940 [ 896.552878][T17650] __slab_alloc.constprop.0+0x56/0xb0 [ 896.558234][T17650] __kmalloc_cache_noprof+0xfb/0x3e0 [ 896.563505][T17650] kernfs_fop_open+0x244/0xda0 [ 896.568256][T17650] do_dentry_open+0x744/0x1c10 [ 896.573008][T17650] vfs_open+0x82/0x3f0 [ 896.577067][T17650] path_openat+0x1de4/0x2cb0 [ 896.581662][T17650] do_filp_open+0x20b/0x470 [ 896.586156][T17650] do_sys_openat2+0x11b/0x1d0 [ 896.590816][T17650] __x64_sys_openat+0x174/0x210 [ 896.595648][T17650] do_syscall_64+0xcd/0x4c0 [ 896.600229][T17650] page last free pid 5194 tgid 5194 stack trace: [ 896.606534][T17650] __free_frozen_pages+0x7fe/0x1180 [ 896.611719][T17650] __put_partials+0x16d/0x1c0 [ 896.616391][T17650] qlist_free_all+0x4d/0x120 [ 896.620966][T17650] kasan_quarantine_reduce+0x195/0x1e0 [ 896.626435][T17650] __kasan_slab_alloc+0x69/0x90 [ 896.631284][T17650] __kmalloc_noprof+0x1d4/0x510 [ 896.636136][T17650] tomoyo_realpath_from_path+0xc2/0x6e0 [ 896.641696][T17650] tomoyo_path_perm+0x274/0x460 [ 896.646542][T17650] security_inode_getattr+0x116/0x290 [ 896.651903][T17650] vfs_fstat+0x4b/0xe0 [ 896.655958][T17650] __do_sys_newfstat+0x87/0x100 [ 896.660801][T17650] do_syscall_64+0xcd/0x4c0 [ 896.665293][T17650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.671172][T17650] [ 896.673491][T17650] Memory state around the buggy address: [ 896.679107][T17650] ffff888027152700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 896.687160][T17650] ffff888027152780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 896.695215][T17650] >ffff888027152800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 896.703266][T17650] ^ [ 896.708877][T17650] ffff888027152880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 896.716928][T17650] ffff888027152900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 896.724971][T17650] ================================================================== [ 896.733121][T17650] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 896.740331][T17650] CPU: 1 UID: 0 PID: 17650 Comm: syz.1.3419 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 896.752409][T17650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 896.762473][T17650] Call Trace: [ 896.765739][T17650] [ 896.768671][T17650] dump_stack_lvl+0x3d/0x1f0 [ 896.773251][T17650] panic+0x71c/0x800 [ 896.777151][T17650] ? __pfx_panic+0x10/0x10 [ 896.781581][T17650] ? irqentry_exit+0x3b/0x90 [ 896.786194][T17650] ? lockdep_hardirqs_on+0x7c/0x110 [ 896.791383][T17650] ? rose_get_neigh+0x549/0x640 [ 896.796221][T17650] ? rose_get_neigh+0x549/0x640 [ 896.801067][T17650] check_panic_on_warn+0xab/0xb0 [ 896.806010][T17650] end_report+0x107/0x170 [ 896.810345][T17650] kasan_report+0xee/0x110 [ 896.814757][T17650] ? rose_get_neigh+0x549/0x640 [ 896.819589][T17650] rose_get_neigh+0x549/0x640 [ 896.824248][T17650] rose_connect+0x2d4/0x1540 [ 896.828841][T17650] ? __pfx_rose_connect+0x10/0x10 [ 896.833890][T17650] ? selinux_netlbl_socket_connect+0x30/0x40 [ 896.839918][T17650] ? rcu_is_watching+0x12/0xc0 [ 896.844680][T17650] ? __local_bh_enable_ip+0xa4/0x120 [ 896.849957][T17650] ? lockdep_hardirqs_on+0x7c/0x110 [ 896.855150][T17650] ? selinux_netlbl_socket_connect+0x30/0x40 [ 896.861143][T17650] ? __local_bh_enable_ip+0xa4/0x120 [ 896.866418][T17650] ? selinux_netlbl_socket_connect+0x30/0x40 [ 896.872393][T17650] ? selinux_socket_connect+0x6b/0x80 [ 896.877760][T17650] ? __pfx_rose_connect+0x10/0x10 [ 896.882773][T17650] __sys_connect_file+0x13e/0x1a0 [ 896.887794][T17650] __sys_connect+0x13b/0x160 [ 896.892376][T17650] ? __pfx___sys_connect+0x10/0x10 [ 896.897478][T17650] ? xfd_validate_state+0x61/0x180 [ 896.902586][T17650] __x64_sys_connect+0x72/0xb0 [ 896.907337][T17650] ? lockdep_hardirqs_on+0x7c/0x110 [ 896.912534][T17650] do_syscall_64+0xcd/0x4c0 [ 896.917033][T17650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.922919][T17650] RIP: 0033:0x7ff60f78e929 [ 896.927323][T17650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.946925][T17650] RSP: 002b:00007ff61053c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 896.955328][T17650] RAX: ffffffffffffffda RBX: 00007ff60f9b5fa0 RCX: 00007ff60f78e929 [ 896.963300][T17650] RDX: 000000000000001c RSI: 0000200000000100 RDI: 000000000000000a [ 896.971257][T17650] RBP: 00007ff60f810b39 R08: 0000000000000000 R09: 0000000000000000 [ 896.979226][T17650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.987185][T17650] R13: 0000000000000000 R14: 00007ff60f9b5fa0 R15: 00007ffc2a49f428 [ 896.995156][T17650] [ 896.998392][T17650] Kernel Offset: disabled [ 897.002715][T17650] Rebooting in 86400 seconds..