last executing test programs: 22.394678493s ago: executing program 0 (id=348): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100), 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x10d040) write$sndseq(r3, &(0x7f0000000400)=[{0x19, 0x3, 0x1, 0x0, @time={0x5}, {0x3, 0xdc}, {0x5, 0x9}, @control={0x8, 0x3ff, 0x6}}, {0x4, 0x2, 0xe, 0xf, @time={0x3ff, 0x10}, {0x5, 0x4}, {0x2, 0x4}, @raw32={[0x1, 0x0, 0x5]}}, {0x3, 0xa0, 0x7, 0x3, @tick=0x100, {0x4, 0xf4}, {0x2, 0x2}, @connect={{0x5, 0x3}, {0x3, 0x10}}}, {0x40, 0x4, 0x9, 0x14, @tick=0x40, {0xe, 0x6}, {0xe7, 0x8}, @connect={{0x4}, {0x8, 0x2}}}, {0x0, 0x6, 0x6, 0x15, @tick=0x7, {0x7f, 0xd}, {0x8, 0xac}, @note={0x7f, 0x5, 0x5b, 0xf9}}, {0x8, 0x6, 0xcf, 0x0, @time={0x4800000, 0x7fffffff}, {0x6}, {0x81, 0x6}, @raw32={[0x6c, 0x8, 0x5]}}, {0x0, 0x81, 0x6, 0x7, @tick=0x4, {0x0, 0x4}, {0x2, 0x40}, @queue={0xa, {0xa, 0x88fe}}}, {0x7, 0x2, 0x3, 0xf6, @time={0x4cd7, 0x4}, {0xfb, 0x53}, {0x5, 0xa1}, @queue={0x57, {0x71d, 0x4}}}, {0x3f, 0xd, 0x7, 0x7f, @time={0x5eeb, 0x9}, {0x9, 0x9}, {0x8, 0x7}, @result={0x5dc8, 0x4}}, {0x0, 0x6, 0x53, 0x7, @time={0x4c6, 0x2}, {0x2, 0x9}, {0x9, 0x39}, @addr={0x4, 0x7}}], 0x118) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000000)=0x800) 20.552765497s ago: executing program 0 (id=352): eventfd2(0x43, 0x1) (async) eventfd2(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x2202, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r5) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) syz_usb_connect$uac3(0x2, 0x0, 0x0, 0x0) (async) syz_usb_connect$uac3(0x2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x11, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r7, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r7, 0x4400, 0x8002}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r8) (async) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 20.413477593s ago: executing program 1 (id=354): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x74, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.328190775s ago: executing program 1 (id=355): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) r0 = getpid() r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x2) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a06050045ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, 0x0, 0xff26) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x32, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 20.020617992s ago: executing program 2 (id=357): syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x10201) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, &(0x7f0000000600)=&(0x7f00000005c0)={&(0x7f00000004c0)={&(0x7f0000000400)={&(0x7f00000003c0)}}, 0x0, &(0x7f0000000580)={&(0x7f0000000540)}}, &(0x7f0000000680)=0xc) syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) 17.609132955s ago: executing program 1 (id=358): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100), 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x10d040) write$sndseq(r2, &(0x7f0000000400)=[{0x19, 0x3, 0x1, 0x0, @time={0x5}, {0x3, 0xdc}, {0x5, 0x9}, @control={0x8, 0x3ff, 0x6}}, {0x4, 0x2, 0xe, 0xf, @time={0x3ff, 0x10}, {0x5, 0x4}, {0x2, 0x4}, @raw32={[0x1, 0x0, 0x5]}}, {0x3, 0xa0, 0x7, 0x3, @tick=0x100, {0x4, 0xf4}, {0x2, 0x2}, @connect={{0x5, 0x3}, {0x3, 0x10}}}, {0x40, 0x4, 0x9, 0x14, @tick=0x40, {0xe, 0x6}, {0xe7, 0x8}, @connect={{0x4}, {0x8, 0x2}}}, {0x0, 0x6, 0x6, 0x15, @tick=0x7, {0x7f, 0xd}, {0x8, 0xac}, @note={0x7f, 0x5, 0x5b, 0xf9}}, {0x8, 0x6, 0xcf, 0x0, @time={0x4800000, 0x7fffffff}, {0x6}, {0x81, 0x6}, @raw32={[0x6c, 0x8, 0x5]}}, {0x0, 0x81, 0x6, 0x7, @tick=0x4, {0x0, 0x4}, {0x2, 0x40}, @queue={0xa, {0xa, 0x88fe}}}, {0x7, 0x2, 0x3, 0xf6, @time={0x4cd7, 0x4}, {0xfb, 0x53}, {0x5, 0xa1}, @queue={0x57, {0x71d, 0x4}}}, {0x3f, 0xd, 0x7, 0x7f, @time={0x5eeb, 0x9}, {0x9, 0x9}, {0x8, 0x7}, @result={0x5dc8, 0x4}}, {0x0, 0x6, 0x53, 0x7, @time={0x4c6, 0x2}, {0x2, 0x9}, {0x9, 0x39}, @addr={0x4, 0x7}}], 0x118) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000000)=0x800) 16.631398369s ago: executing program 2 (id=359): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x26, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}]}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0x6) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffff7fb}) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f00000001c0)={0x0, 0x3, "92aca7", 0x4, 0x3}) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x0, 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x710000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000000)={0x0, r7, 0x1, 0x0, 0x1000000000000}) close_range(r0, 0xffffffffffffffff, 0x0) 16.62920845s ago: executing program 3 (id=360): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x1}, 0xfffffffffffffe9f, 0x80800) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x3, @multicast2}, 0x2, 0x0, 0x4, 0x3}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x9) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x8a1d1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x1070bd2c, 0x25dfdbfd, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r9 = creat(&(0x7f0000000200)='./file1\x00', 0x11f) lseek(r9, 0x8000000000000000, 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}}) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e22, @empty}, 0x80) connect(r0, &(0x7f00000011c0)=@phonet={0x23, 0x1, 0x8, 0x6}, 0x80) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x450000, 0x0) r11 = openat$incfs(r10, &(0x7f0000000140)='.log\x00', 0x3c1282, 0x9c37611dc13d0d0e) r12 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_control_io$cdc_ecm(r12, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_usb_ep_write$ath9k_ep1(r12, 0x82, 0x0, 0x0) fchown(r11, 0x0, 0xee01) write$UHID_INPUT(r11, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) 14.467574297s ago: executing program 2 (id=361): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x4}}, 0xe8) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0x28, 0x0, 0x0, 0xffffff45}, 0x28) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x7, 0x3, 0xdd6, 0x88d7, 0x8f, 0xffffffff, 0x8012, 0x1006, 0xffffffff, 0x40008, 0x7, 0x1000000b, 0x3, 0x0, 0xfffffffd, 0x8, 0x6, 0x9, 0x57, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]}) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) 13.817355158s ago: executing program 0 (id=362): socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000080)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r1, 0xda90) accept4(r1, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, 0x80000) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000002000), 0x0, 0x20441) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r4, 0x0, 0x2, 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000002040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x5509, &(0x7f0000000500)=0x6) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000240)={0x102, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}, 0x88) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x8, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xffea}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xbd1}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) r8 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0x0) fsopen(&(0x7f0000000040)='tracefs\x00', 0x1) 13.699167735s ago: executing program 1 (id=363): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$poke(0x5, r0, 0x0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) utime(&(0x7f0000000100)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f00000000c0)={0xfe, 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0xf5f) accept(0xffffffffffffffff, 0x0, 0x0) 13.345793107s ago: executing program 3 (id=364): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x4}}, 0xe8) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0x28, 0x0, 0x0, 0xffffff45}, 0x28) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r6, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019008400"], 0x48}}, 0x4084) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x7, 0x3, 0xdd6, 0x88d7, 0x8f, 0xffffffff, 0x8012, 0x1006, 0xffffffff, 0x40008, 0x7, 0x1000000b, 0x3, 0x0, 0xfffffffd, 0x8, 0x6, 0x9, 0x57, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]}) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) 11.1222419s ago: executing program 1 (id=365): socket(0x400000000010, 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x800000000f, &(0x7f0000000200)=0x7, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x7f, @loopback, 0x1}, 0x1c) listen(r7, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fcntl$dupfd(r6, 0x406, r6) r9 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r10, &(0x7f0000000280)=ANY=[@ANYBLOB=' \t'], 0x33) close(r10) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) socket$packet(0x11, 0x3, 0x300) 10.390261823s ago: executing program 2 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130007000000080012"], 0x44}}, 0x0) 8.898085165s ago: executing program 0 (id=367): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x6}}, 0xd, 0x3e22, 0x8, 0x9, 0x8}, &(0x7f0000000100)=0x98) (rerun: 64) syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="81b60ff1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 8.313298942s ago: executing program 2 (id=368): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x4}}, 0xe8) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0x28, 0x0, 0x0, 0xffffff45}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r6, @ANYBLOB="1000000000000000280012800b0001006272"], 0x48}}, 0x4084) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x7, 0x3, 0xdd6, 0x88d7, 0x8f, 0xffffffff, 0x8012, 0x1006, 0xffffffff, 0x40008, 0x7, 0x1000000b, 0x3, 0x0, 0xfffffffd, 0x8, 0x6, 0x9, 0x57, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]}) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) 8.030337219s ago: executing program 4 (id=369): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000000)=""/192, 0xc0}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x6e, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x8, 0x1c}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @loopback}, &(0x7f0000000500)=0xc) r6 = open(&(0x7f0000000540)='./file0\x00', 0x92000, 0x119) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x8, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x2b, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x2, 0xa, 0x7, 0x40, 0x8}, @exit, @map_fd={0x18, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, r2}, @exit, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x26b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x3b, 0x0, 0x0, 0x41000, 0x6, '\x00', r5, @fallback=0x4, r6, 0x8, &(0x7f0000000580)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x1, 0x453e, 0x5}, 0x10, r7, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)=[{0x1, 0x4, 0x9, 0x8}], 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r6, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r11, 0x2, &(0x7f00000027c0)=0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002840)={r8, r5, 0x25, 0x18, @val=@kprobe_multi=@addrs={0x1, 0x6, 0x0, &(0x7f0000002800)=[0x6, 0xff, 0x0, 0x3, 0x800, 0xffffffffffffffd2], 0x8}}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002880)={0x0}, &(0x7f00000028c0)=0xc) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r12, 0x3, 0x5004) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x29, &(0x7f0000002900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x7}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb4a3}}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @ldst={0x2, 0x1, 0x4, 0x1, 0x0, 0x0, 0x4}, @ldst={0x3, 0x3, 0x0, 0x0, 0x0, 0x20, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002a80)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x6, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000002ac0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002b00)=[r3, r3, r6, r2, r1, r1], &(0x7f0000002b40)=[{0x4, 0x1, 0xf, 0xc}], 0x10, 0xb}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002cc0)={r2, 0x58, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d00)={r13, r14, 0x25, 0x0, @val=@perf_event={0xa6}}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002d40), 0x100, 0x0) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002d80)=r7, 0x4) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002dc0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffff8, '\x00', r14, r15, 0x5}, 0x50) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000002e40)={0x0, "2b1864"}, 0x6) r17 = dup3(r3, r16, 0x0) r18 = dup2(r8, r10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003140)=@bpf_ext={0x1c, 0x25, &(0x7f0000002e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @map_val={0x18, 0x1, 0x2, 0x0, r17, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff00}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002fc0)='syzkaller\x00', 0x8a, 0x5c, &(0x7f0000003000)=""/92, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000003080)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000030c0)={0x2, 0x6, 0x2, 0x8}, 0x10, 0x3064d, r13, 0x0, &(0x7f0000003100)=[r1, r18, r9], 0x0, 0x10, 0xcfb5}, 0x94) ioctl$UFFDIO_API(r17, 0xc018aa3f, &(0x7f0000003200)={0xaa, 0x21}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000003300)={r1, &(0x7f0000003240)="7f232cec23e0e68a73ca347c4c7130b935c2b332c934599dd96c565c2a2377131eadf4511ec504e420a9cc539a24dd77b3c05a9937ad38a3dac623e783f3be76a35e73910825247fc813f0afae5f27eee5fbde5559a7e546158bb2f2d2967c673f048e71fca3483ce9960c5c666c607d6eea244e24770877c6153a7d6282cefb33b4e898f045ba054e01efca5538785f3911d515636aae4e492e6b50266af10ecabb09eb2f43713614b681c724fefcd82f"}, 0x20) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000003380)={{}, 0x8, &(0x7f0000003340)=[0x5, 0x4, 0x80, 0x1, 0xc79a, 0x9, 0x1, 0x7f], 0x47, 0x3, 0x1}) sendmsg$IPSET_CMD_CREATE(r18, &(0x7f00000034c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003480)={&(0x7f0000003440)={0x20, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x104}, 0x40000) 7.385577736s ago: executing program 4 (id=370): r0 = socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030073030000000000000c0002400000000000000001"], 0x60}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x4000010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080), 0x4) 6.818580011s ago: executing program 3 (id=371): rt_tgsigqueueinfo(0x0, 0x0, 0x1d, &(0x7f0000000080)={0x10011, 0x0, 0x2}) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r0, &(0x7f0000000300), 0x1) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000000c0)=@buf={0x2, &(0x7f0000000080)="dfbb"}) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x3b4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x388, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x374, 0x5, {0x5, 0x4, 0x37, 0x1, 0x97, 0x1, 0x1, 0x3, [{0x0, 0x3, 0x2, 0x80}, {0x2, 0x7, 0xa3, 0x9}, {0xef4, 0x401, 0x4, 0x9}, {0x7, 0x40, 0x12af, 0x101}, {0x5, 0x6, 0x4664, 0x5}, {0x800, 0x9a83, 0x1ff, 0x4e6}, {0xfad, 0x5, 0x1, 0x9}, {0x5, 0xb9, 0x2, 0xfffffff7}, {0x2, 0x2, 0x4, 0x7}, {0x4, 0x401, 0x8, 0x2}, {0x7, 0x400, 0x2, 0x2}, {0x3, 0x0, 0x3, 0x7}, {0x9, 0x58128040, 0x5, 0xa}, {0x6, 0x0, 0x2, 0x1}, {0x7000, 0x6, 0x0, 0x4}, {0x8, 0x1, 0x1000, 0x1}, {0x6, 0x5, 0x8, 0x5}, {0x8000, 0x2980000, 0x1, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x2d, 0x401, 0x3, 0xffff0fb9}, {0x83604ef, 0x1, 0x2, 0x5}, {0xe00, 0x3, 0x2, 0x8}, {0x1, 0xffffffff, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xf}, {0x80, 0x800000b, 0x8000, 0xb8}, {0x0, 0x1, 0x7, 0x8}, {0xfffffffb, 0x9, 0x6, 0x1}, {0xe6a7, 0xffffffdd, 0x4, 0x3}, {0x4, 0x7f, 0x3}, {0x4, 0xfffffff8, 0x8ec, 0x4}, {0xffff9d69, 0x0, 0xe}, {0x3, 0x3, 0x80000001, 0x81}, {0x2, 0x7}, {0x7ff, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x7, 0x44b}, {0x1, 0xda3, 0x2, 0x6}, {0xfffffff9, 0xa, 0x7b, 0x92}, {0x7, 0xfffffff9, 0x9, 0xb581}, {0xcd08, 0xb1f, 0x8001, 0xd}, {0x5c, 0x3, 0x7, 0xa2c}, {0x8, 0x6, 0x5, 0x3}, {0xfffffffa, 0x7, 0x10001, 0x6}, {0x6, 0x80000001}, {0x0, 0x6, 0x8, 0x5}, {0x6, 0x9, 0x1, 0x2}, {0xded, 0x8, 0x1ff, 0xfffffff9}, {0x0, 0x4, 0x7, 0x3}, {0x1, 0x40, 0x4, 0xf}, {0x80, 0x7, 0x34, 0x9}, {0x5, 0x7, 0x4, 0x2}, {0x9, 0x9, 0xe, 0x5}, {0x2, 0x10000, 0xfffffffe, 0x6}, {0x3, 0xf61c, 0x2, 0x8}, {0x7, 0x1, 0x1, 0x4}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}]}}]}, 0x3b4}}, 0x20000000) 4.357114518s ago: executing program 1 (id=372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000"], 0x50) sendfile(r7, r8, 0x0, 0x106f) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'pim6reg1\x00', 0x4}, 0x18) getsockopt$packet_int(r9, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket(0x400000000010, 0x3, 0x0) 2.914155657s ago: executing program 2 (id=373): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x1000006, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000083c0)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)="af62788b83ddc34d9ed49228a4b3", 0xe}, {&(0x7f0000000380)="8bff1463d5aaa64b0862b4c806bf29e1231e4d32eacd7502a61e95e701bc1354531ac637910293b65ffd320a7f76f85d9c120ca01729909079205b2aa1179145147ae3cbeeb2d0e0e74c010a230d8b0c73a390c01998b009c3b01b3d7111bca3111daf25a6581504ac198a2a2e4e7f52f3ab3c2c4ad44c07abbc154cb32459f28f", 0x81}, {&(0x7f0000000440)="10dc165d902e2f12bb793b0c1d981bdf", 0x10}, {&(0x7f0000000480)="55d01e57e21d513d6faf33feda08f4f63896ab24c7f20ca9a9ee4f4a84368a2414fe544c6c5d03caa4d90fc03922b5122e141ca9c02b1d00c4dad39f13822c91d585f90a7414ab59f5771a684e4b3a60bb483a448625e324844bbe48ad4664593a4fe50cb5606ada2203f5af875140a8a9d31f9dfbe478a89712c70b5f4b81f44608c69533d62fac15fcf2009254949f1107ee5dd024a0e7500a31dcea93e0a1ef0e31ccab29a19883228ea01605692c3e1756482363347907ca", 0xba}, {&(0x7f0000000540)="53eb5699c22d540c48398ae64cb286c9b30ffa3b537fe10d76749712e3a66e0fc14876035d325b756597ca8e24bbdb816147caa8", 0x34}], 0x5, &(0x7f0000000640)=[@rights={{0x38, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r1, r0, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x10}}, {{&(0x7f0000000680)=@file={0x2dcdae54e9de5e03, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000700)="7a2ee00bf68fbfce4c4e6077a804ff07cc19cd606fe944fa98b93c1df5c0032995d6cb1598e8683df706c96cb7924deefd84dd606e8e9d5a18c2426c0e7910c6b49afe267ce89181735f5593fade45dad6426dcc36e380cd6063b1c877cec2eee7428954f42ee65c8b0551c30c3abebc4a9f210d2c3751fafbae117dd9530700d140fbfc16ddb50507dff5d8dff9365efb77f65acb711bae049ae471972911a05ae866e3ca89c8ea2daadeff", 0xac}, {&(0x7f00000007c0)="d600903cdaeb5df466a0305bf2aaf2d744c952e4e81770c5d1eede0a8a432a25f714f6603a85a16d7c5318210ac8bae26ceb27858b0853c4bab1f026b0ff0a26d1b772a7398b1e0c9a9987e4f7faa9390d6a760100051c2fe4cfec090d282c2405daa9419b85319cdd66672e0aa3625ad02524fbeab1ac59f42e97944411ecf899d5ba9ebe224291578d428a00f6dca74c424af03a6438327769d9fc642120a725e25d5b2a437cad6c551272d7c08cb4cad3e0b682788fd9f8e7c9b2fd03d78a0a282cc9af3818b2321ad3b3982865740da156548178075a55efab3663bd81fcdb1f6f3ce074be75c8cc123f415ad3403f2590aacd8a788718a0052d3805", 0xfe}, {&(0x7f00000008c0)="8fb7b98a83b2d9d31c099471e0b3430c07cd3c667c83e116", 0x18}, {&(0x7f0000000900)="615bd631ef9b1175471c91789063f1135e769ac3e7256802a8741088ba2edae2d51ac2f536ebcd35fcff9f65a8611fffe8f8760e840412e70cd055ac30557508453ec5522fc7", 0x46}, {&(0x7f0000000980)="80c28f2a236a7d625338f41a5af22157fd8de1253e589838e44b9d65183f1b920b5b4099f5383e89653689e015e0f73c77c930dd0e3a68e832588a08008f2ab377b96008706624122c96cd2253c36952b9034bf9bbb68a1bdcbf9380e4a040256bbc8a72b223e7a7be06011fe1f4426298a056aa38e43f6b2b755372927fb7c30f16617217321744dcce47b1761e95b8c80640e82721a5391f9fae1681925ce0b00b45e87c52cda407c825225b190cadb9690e64d96dcda0ab9f6f8eac28db699dcd7eddc406be20b463d70230960d8b25d1967f7059caf257adf8bf5e1bc3ce", 0xe0}, {&(0x7f0000000a80)="8d55134b7afe2b63501f52b0ff85c88993523f1f113cf64c0f1441ecd36ac5bc4d61b167b33816091b81ac9a8e5046947d082ef5c18d782f0810bb2da7f96a09353e606360f2c7b8898c9eca23e6cf15f18a1ce83e938c084053bc19825b8363ca64f23163916b65f57e01902fcfa69d2ff479744d3f519ba7cb945eee8455e0b261e9c12d7d368fb9a4e08af2d2c4b1b9094768f893b69fd6d97fb364a52af7e4edc3e43647d2c296bc82ba1bfc428dcb4c1497396584f32a0fd148d935", 0xbe}, {&(0x7f0000000b40)="fa9af966c5d46a81f73715d47089042cb22e4fd07b91d24e4f25c944c66c9c29388c06f50620ac11e501aa5470f7236e89fb6a7ba1b03ff7726c77824a9a9a6291af9a24c698ec1e4f09e84d46a1a95e92824c50b13944f207d9dd33b15e9ba59ce7b000c47f0354dc51a769564bdbb18da812c3896905a42cf7f3b61fc9d7f76f1b8c6b5b506054711363a1b78125380f20357d23", 0x95}, {&(0x7f0000000c00)="57c19acac24b7777118a05e0b4a2100d523bc9ead807b4b93f6d387028e39b2da6f5e210f25ed0c19a72dcc785336bf699edec5c7c657a1e0af922a5791b9ba8f8c073964d125ea6f148d0ce2f1d97b5b6d1bc2a2dd607061e56ab168ed1dac226e73531d45c4afd317026c3cf32a647ed782402dc806e2d4c85b5d52659554f22385d8091fafbb65099d50dd77cb1b443918761e51d16d50d77f7316b5a923f909cc5ba6ad26a3ba0a03f464ae962b51507243f898a82c28437e8bac474af6db1ace998598c8925b060265318d75c9f0c1486969dc0c374136a875b9f340eb07cb8ba4537d529a0b84cc8c627616b363b3a821988b54847503a0ee4185410be6f34e17e32750e7b4b5a9b34a886391df608c120924cdecab6319b41d700b1254e3f0e33af9554166aa720708631fe1dd94083325786dcd8ef8f336940b43c7cb2c694e5c7869bb87e6d59156d31a42847c3e359656304e8c3da86645a385deb71d05418ad91a06cf850b93d82f4c659c4b61605d7728c3f77a6bd65146bda72dc4c66a857bd33cf170db2330cb512f92fac2a2f4542b405feb89269c476528b34f6f52c8cdc010399f1ae3f032df04fc14ab8c1fcf79db64f37daa5cb3e1471875de15ab4fb207d5c7d9eae8e2ff6a6a5c68159225db83b530031a2e5eb25abc4d5594d033ae9fb0119608e7c4b45f3b1260d2a3d5a43b29b22c76a776658dda2b2bdcdb32218daf6eb5fd57c05725fc85882281fdbd3a1fd97ab4c6eec7941f6d33c737e2df27bb1663160c1db558e76f6a8657f8b46e2be7d6baada8cd52b14cdf7a3fb2e7e4cf47bfb8ebaa009ae8f15684b66ecbeabd9b4ea7dfe6bd5fceae28da6a5ddda1672c8bb3a066a45b0263bba2c1f624ae0da31c0e2211d216d4ea6c70964a73426b1536e43988062735fc8a8e20ed2db3dc93ab32b4ea75e0bbaa2437842a3e9a54dce86c1875c2b095cf120220293e2205945083d11def01736f77b8c1e47f5ce2775fbaad7718602eaab60bddb23296c021253c407e37e18df034613541e1408d5290e081e979f683c4c363e6a190ff673f84acbe80e8ad58f76e077fca895e453db691254d91c6de5c7f1465736e49c12dfa5244a2b73240cb1f1dbb4a900840124ebc424ca8c85557d6ad93342a205e639c2d094cf8bd146303ce03aa82bfe2e8743920b46c2116697e680584475cf86036013e3ca5f79e270939bc07567090575e893033788cc04ab021ff384a791470e0a923bb79093f0356e69c27378b588faa24713203bfbaed2d91e8f408023b6e4bcaef8d5fc143af3ae6f69a98b5aab234f205cf3d0a6ce9dfca9dc478cad80d332e1f9e5479dd9b009ceb4a300db7013828a32d737b5ce4dfc53ffaa866c75e5da0f15b1e4624e5153b77b0ef3417ab5455f7a1addaec509338b56082412c16793d27e7122d45f3178c31a6b1da8e821374ef9d95e4c204738dd6f995fe41b2d803451684ba4cbc621a64277b4411ab08e335340d218ea8e0b13386de5548432c6d0b04975515aafcb6d131d3da41f46c73e1cd9c23cf8535b793a7e5ac721f6f2baf9632464c324649aa3711e6cbae6d9dc19562927d16599b376941665a1b1c256807d787fa0401f814de50059f7786fcb6d9046068a999beef408563732f4a47cd3e94c50c8a675d54d0d8d759fb173764f01838b2aa33e155c2754650f95a04d8b32efba885c44a186b65eff763b0e384c3f956ed893dd2830ff84da0d31f5a4a85345865b965661fb33d138bfe32873907825432bf734618a564cbc7b2de09307d82597510882762f40ae71e048291a2faa7b7fc57f547b56fd8b77edf05f482de9f194449cd456256468875a16d758a6d76a354f2b84fcca6be4b7546e749517d259b11c31a160324c76ba7e923be56750b2b29d91ed35872314b19c6912af4da7af52b3d9cb5821d062ada38a08479416d1092bb56abbd0880d314c5f0a23088c7a36d9c2404d5c771918898c75e6210c02cefd0b1a53c3f0eae692ba48039bf9628c37c679d596200684bf7687b0c296fab3e7af26ce19c2dd1478ffc55740af7b66fcbe3eff8ac4315adaf729a38514fff3668a7c37252e47a50d80cd4af0dcd385a447fd9f9ca9b40dd5af7909c4e44ff45835b5e5a17b57871d7c9221498c8d6036da679d0b16b1f7dfcb4e3d86d77ef4354db15ebdbbed2e45132923ff77485430ce4e081f57d8fc8b707b9120649ebfe141efd401acd0dd6c3426ed0a8a3ab986a3e3ff0abdad5e6c9aceefb0f4811ebb4fbcf769565f37221165b9578a2411e4165408a1a5ccfdd3d4b80b89abf3cf9aebb73bf281b47edb23bf5aafdfba9dd04d5bad3384c928e1da935e64dba464c4e5d679bb42cc9e4a505d262f975e5d7dc8782d700194092d59f965dd5e355be09340b354f1e8287ab1318013e6fbbed74b49c93f382f97fa51dcdead6ad74ccb9571b594a12ad30c9c4ea921fd939f34850cca1c25873f1e7c4c3bdb36e25d1f3f35f2a8f2e0e701792c4df21034189ace0a02f32ff1f73991f3e222cd18b70375efc3c4607bc08d7f19d9707692075079ef38151cba6469544c756295e521e80df67f07a331e52e801424e566ebfa5637a2eb08d2e490c195a8b76630cd66b0bb056e56567a298c4d2dd5c7d58cd2273dc5ec3717c83f804b2c9564d209e9913892ab062d1db9ee321de5f57a40386b6f42dd9f5b080f95b37c65311a150ac855492519183b1e965670aa30bd8cc095664509c631fc4a318536c576e149fbef6bfd005185b231733f09470c8cb0e935aceb6183b69f8bb283f8c597e5f02773420719524d6a7bf70475e46a27a1b10f0ce3ce2caeb9b45f828270b623cb91aa4ed8cfba070c1afa6780e7343ec31a249815cc13af769f5d882aeee3edc31bc7c09c24c5d04369f6ffe833919d33147542757a88f6bb56b8b6239eee6f69f891cdb114675dc1c8e5379f3c51351b8a68e6ad9228bcb00695a789d808345a432f0b1c44665f5a020c53b6f143f390044018581084084d59f4da8ab4ad46cac120d99c83a725460d53a96f2b0cac2739b7df41b102df29a82a69c33e4a943921795b43438970397444bca086f06cd49cadac5554e3c677a8b86545209fb2dc4810525dae5f25691f5c973f8d4f9af32d1244749fa61d8286062b4b92f3005c4bd4ede7dee338357aaf71dda8a55182c174ceef3b9e1b754b568a62d9bf0f8c6596e5859e10f94c0304bda8b20714814959237c49d14f113973f4cc5e456a9aa4ad644c69befbd7f1518e093ed5deab9a67108adb5df4683ebbd3de959e69eaffa9e7f7091bb2c9c7f3075f449c820e9e7d9d97ce3aef9de04531737a7334933ac99ed8568509a3b280c1f47ce93c4cf4113a0d107358569493ff35d9be5baa947930db1c7100c9dbd90db4fa2b3f4e1b3b1012b19f6289b0629f1fd1c1f2cd0f47ae5e495534c458283e8ea8a4358f8f581c464c156e00fa0aec7306b6bdd28457b21aacaa5def03f5e63a0df62c850486d53e95c62765e96a882ca46058838466a4ef7accc3d770b82310400d3338c7ba16ca8739eb48ca2e2bd70fc3bb5b4a17bdf40854da390ca2c63593974cd021cbdcee4bcf0d437d893a821e94501070b45724cdce848184787d3bd9eaf653d05199c6d0205e8689744a54a023c6051edd6f2adc29c76f5f4230b749bd401af90b8db624b7d4672949767816686813b9ec566d52d546099747c519a8b9374fb7d2de6beb05fba8013aaab0d869ac5813b5ae5ed2e0b7c14d937c33c776f27020d6eeaa64122c578291fdaca26a9538dfe8ec24790f612a6ee801dc7007dc7c36f5f5418706063b5a00b21797ddff79be9b7560adab70700d4dc0deb7fa47c2129cafc39fb5f8b6e4dd809be854c0eda6de2259e6bb0d35b892d9b4395187923b63a855f259f66b01d97b625bd54754b222fe5953f7725f8c86ceb2c77b975709f76c11d7cfcb82f271e7e6d5467494e074298b4e70392da014c9c8d1b8877e22b429f6caea500a87b0c3102ed9464228bd3978a90955d935fb52f2f9f2a58779edccabc8f89e13c5e9a50a775849a5b1df912bc71d04d86be6f2297f2aeab16cdc689f3fa2e67f7d8c14245f1354dcfd1b1e472ae7dcedfa8f43e886b61547c0243f8abbc748f57d207112d23161f21908cdf8c517dcf34a89f14248247833b57d7fba5f69ac416fa05b7c50a59a1645d5ce4bc690aab8bb1bf52f01d329f38bf9a986d3050204040c83999d12a5db3c4278cc34a07ed390f2917bc628a2db29b6f0d4f84944bd9757b1ab752b1f97d9e9c2f1aa271e4e94406824079064d7adce694b6fc2f86d6a78fad569844e1cafbb1219bc34bfce78d8acf5dc01cb791ab6b3bf5276d5229728416d282a3c0be4c6a4a3c38ec1c0c3abc1031d61120efc3e88c0b294511f0761d262b6b44ef09e37e1d5ffa332abb58c1f39a2c4286b718eceddfbd5618161a66910bdd03a5b66c400356ec3236bf7fbc7ed0e5667242d96e1ef67886d666244e3e30b4cbc34252f4e1cb38337a838aed8bacf124c5afea7bff2b0997e053dc10207aab037311f0bebd290a572448935b9043587f452e92441b950c239abf266cccd99ae2c3da939577c668bc7509880404a109082c6b12aecdddf60f700658d9e33e55b6082c316db6ae35a73b3a5993322b251a8558dcf2b4af8b062784f4758ff0106092372232e16f6e03205bb2a57b1d0b04760b95f7fb1ceb5eba4acf87395499def71573d0f9a7a5fac8eb571dd7abeb0bc776f8c1c97fdb9fac39a3e0d1cd964b6c431fb98dcb724f4dda6d61399dd4d0c57e70b49b9a5ca26241c9d73f47f165809df9b191c4e340201962b6e3ac9454e5d0f8fbacb20beceaa1bbb0bf6c755988fe2660f8bf8bd61a361b437ddd5b1d43621f2da17145196fc92deb8501319b8fd3a8fd28610b571eaeb2fea81329562a40e87ab2a747725f0d09e5a19178963f16d086b6ba12daf333b354f5284aef5ec61e9c31343af8044700993127b72829cce7f23b2f4bb54428a56cfe6575d8e16ff43d13ad3909be353011583c74d68ee2b5b1af1daa2681d94447659d32bfa941c1ba9021cf9e437123ec4f4c4758b83a3322cb3524d897b963e7339bdeb781827481107e3be1c43e5671d52a5dd479661327ec6be1b088f03036315ac3d3c63929a46089eaf925e55a0ab7c1e2b6abb13fa2406ed65999ffcc99250f54a9073bf935a6b9223579a2ad799976506513223b4337d59e27f9156ddbf2958d96495ce6a26c11f49dd69053317ed9123a1736d03c7d9bb47fd4c89b1175b143c842a8b086cce5c7137d3905440a7516cf0c8680fbd19ee97e21ceb988c696f7fae91884ff7d3f40e9311781f195b9f40e21a1cb00576977a58b8f249c46225c7cd80448e71d44b73c191038c5d7a978f8fae21eb1561e046d425190d054b0bbc9f51126c156bb3134e5b8460110f07ff68a3ce7497108de3497db85289d584473b3dae900f0b13494dee08357158951e6e3b2e02b3f5615772c2dd1989d0a44e33d4658c7c7677209457d65c02651bb661ae86c0b13de8d0b54d89ac527b2d658c231b92abf3bbd8094597705edcede4bce8b0ce2dd4cb3eb20c0c08525747227dc0bf3f4b303753a51ad064f9988e0e9d95906746dee61326843f19cdf43b9e7b897eb7bc6da4e16b19eafca697726c4564c5a525ba035e73cdfeff8f0aeda0ca005823dbddd8bc42fed7f78e53be070e90f797daef9156b2f5c6affcef0c7377030c", 0x1000}], 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001800d049df19cddb8d736519b0f2660000000000000100000001000000", @ANYRES32, @ANYRES32], 0x120}}], 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000002, 0x28011, r4, 0xe7ce3000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)) unlinkat(0xffffffffffffff9c, 0x0, 0x200) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x6040, 0x110, 0x3e}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.895208083s ago: executing program 4 (id=374): r0 = memfd_create(&(0x7f0000000f80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x03n\x0f\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x06\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3\x00\x00\x00\x00\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t\x8a/\x90\xd8\xb7\x80<\xef\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\x89\x9e\v\x9f\xa3\x03hSq\x95\x8f\xe1J\xd3#/f4\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;\x90$\xab\xfd\x92\xb0\xde\xfb\x91b0T\x87\xdd\x00\x1b4\xbb\x13^\xb1~\x02\xc0\xd7\x8e\xdc:8y\xb2\xb7i<[C`\\\x98T\xca\xb4N\xe3@\xa2\xa0\xae&\xde\xa2\xbc\x00'/1188, 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0xfff4, 0x0, 0x0, 0x7}) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000001701000e04000000040000000000000070ad"], 0x88}], 0x1, 0x2000000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000004c0)={r2, 0x3, 0x2, "2a9a"}, 0xa) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 2.771432025s ago: executing program 3 (id=375): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$poke(0x5, r0, 0x0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) utime(&(0x7f0000000100)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f00000000c0)={0xfe, 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0xf5f) accept(0xffffffffffffffff, 0x0, 0x0) 2.687825493s ago: executing program 0 (id=376): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) prctl$PR_SET_THP_DISABLE(0x44, 0x200000000003) r2 = accept4(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r0, &(0x7f0000000480), 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) read$FUSE(r2, &(0x7f00000023c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x4, 0x4) 2.195592632s ago: executing program 4 (id=377): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x26, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}]}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0x6) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffff7fb}) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f00000001c0)={0x0, 0x3, "92aca7", 0x4, 0x3}) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x0, 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x710000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000000)={0x0, r7, 0x1, 0x0, 0x1000000000000}) close_range(r0, 0xffffffffffffffff, 0x0) 1.63203734s ago: executing program 3 (id=378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130007000000080012"], 0x44}}, 0x0) 780.47551ms ago: executing program 0 (id=379): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x70, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x10, 0x1000, 0x80, 0x7f}, {0x8, 0x0, 0x800, 0x3, 0x2, 0x6}, 0xe72d, 0x2, 0x178d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x3454acd1e6f80a22}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcd2e77eb9cafbc50}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r6 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x0, r6}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r6}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x1, 0x41000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0xc0045b0f, 0x0) 697.060391ms ago: executing program 4 (id=380): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timer_create(0x4, 0x0, 0x0) socket(0x23, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4, 0x0, 0x0, 0x1d}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {0x695, 0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {0x0, 0x40000000}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x6}, {}, {0x567c}, {}, {}, {0xf, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x6, 0x0, 0x8}, {0x10}, {0x0, 0x3}, {0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0xc00}, {}, {0x0, 0x0, 0x47c2}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x7d6}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x5}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xb5}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x8, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x4}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) socket$xdp(0x2c, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x10000008b}, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x7e7b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) syz_pidfd_open(0x0, 0x0) ptrace$peek(0x3, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capget(&(0x7f0000000040), 0x0) 213.267833ms ago: executing program 3 (id=381): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x4}}, 0xe8) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0x28, 0x0, 0x0, 0xffffff45}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r6, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x7, 0x3, 0xdd6, 0x88d7, 0x8f, 0xffffffff, 0x8012, 0x1006, 0xffffffff, 0x40008, 0x7, 0x1000000b, 0x3, 0x0, 0xfffffffd, 0x8, 0x6, 0x9, 0x57, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]}) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) 0s ago: executing program 4 (id=382): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x3e, &(0x7f0000000300)={0x0, 0xe26, 0x40, 0x2, 0x2ca}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdb"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x0, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x800002) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) kernel console output (not intermixed with test programs): to HW filter on device team0 [ 91.649338][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.656767][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.667542][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.674853][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.719632][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.809109][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.859745][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.867222][ T3302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.904575][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.918250][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.925539][ T3302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.055868][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.083429][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.113481][ T3376] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.120884][ T3376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.165425][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.202598][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.210122][ T3302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.257372][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.264936][ T3302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.326881][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.334175][ T3302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.430574][ T5619] Bluetooth: hci0: command tx timeout [ 92.430716][ T4930] Bluetooth: hci2: command tx timeout [ 92.513473][ T4930] Bluetooth: hci4: command tx timeout [ 92.555318][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.591555][ T4930] Bluetooth: hci1: command tx timeout [ 92.605178][ T4930] Bluetooth: hci3: command tx timeout [ 92.615612][ T5620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.668432][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.909858][ T5615] veth0_vlan: entered promiscuous mode [ 92.944660][ T5618] veth0_vlan: entered promiscuous mode [ 92.986284][ T5615] veth1_vlan: entered promiscuous mode [ 93.017822][ T5618] veth1_vlan: entered promiscuous mode [ 93.179633][ T5618] veth0_macvtap: entered promiscuous mode [ 93.227690][ T5615] veth0_macvtap: entered promiscuous mode [ 93.249733][ T5618] veth1_macvtap: entered promiscuous mode [ 93.262040][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.287164][ T5615] veth1_macvtap: entered promiscuous mode [ 93.379724][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.407322][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.427187][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.438630][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.479735][ T3302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.507812][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.520149][ T3302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.532099][ T3302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.548460][ T3302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.598620][ T3376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.623764][ T3302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.666475][ T3302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.702681][ T3302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.779878][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.866111][ T5624] veth0_vlan: entered promiscuous mode [ 93.914531][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.924324][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.958111][ T5624] veth1_vlan: entered promiscuous mode [ 93.986698][ T5616] veth0_vlan: entered promiscuous mode [ 94.047217][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.059367][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.073186][ T5616] veth1_vlan: entered promiscuous mode [ 94.088349][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.122054][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.147630][ T30] audit: type=1400 audit(1777655882.329:85): avc: denied { mounton } for pid=5615 comm="syz-executor" path="/root/syzkaller.nZ1WkR/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 94.175999][ T30] audit: type=1400 audit(1777655882.329:86): avc: denied { mount } for pid=5615 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.193737][ T3376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.215078][ T3376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.221013][ T30] audit: type=1400 audit(1777655882.339:87): avc: denied { mounton } for pid=5615 comm="syz-executor" path="/root/syzkaller.nZ1WkR/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 94.273045][ T30] audit: type=1400 audit(1777655882.339:88): avc: denied { mount } for pid=5615 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 94.305649][ T30] audit: type=1400 audit(1777655882.349:89): avc: denied { mounton } for pid=5615 comm="syz-executor" path="/root/syzkaller.nZ1WkR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 94.309091][ T5616] veth0_macvtap: entered promiscuous mode [ 94.339253][ T30] audit: type=1400 audit(1777655882.349:90): avc: denied { mounton } for pid=5615 comm="syz-executor" path="/root/syzkaller.nZ1WkR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 94.377108][ T30] audit: type=1400 audit(1777655882.359:91): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 94.379889][ T5615] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.398486][ T30] audit: type=1400 audit(1777655882.399:92): avc: denied { mounton } for pid=5615 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 94.424356][ T5620] veth0_vlan: entered promiscuous mode [ 94.439756][ T30] audit: type=1400 audit(1777655882.399:93): avc: denied { mount } for pid=5615 comm="syz-executor" name="/" dev="gadgetfs" ino=8231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 94.448686][ T5624] veth0_macvtap: entered promiscuous mode [ 94.482545][ T5616] veth1_macvtap: entered promiscuous mode [ 94.484268][ T30] audit: type=1400 audit(1777655882.439:94): avc: denied { mount } for pid=5615 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 94.500466][ T5620] veth1_vlan: entered promiscuous mode [ 94.534833][ T5624] veth1_macvtap: entered promiscuous mode [ 94.540597][ T4930] Bluetooth: hci2: command tx timeout [ 94.543534][ T5619] Bluetooth: hci0: command tx timeout [ 94.579673][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.591092][ T5619] Bluetooth: hci4: command tx timeout [ 94.594972][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.671447][ T5619] Bluetooth: hci3: command tx timeout [ 94.671493][ T4930] Bluetooth: hci1: command tx timeout [ 94.714386][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.727006][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.763100][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.786826][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.805867][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.823880][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.845980][ T5620] veth0_macvtap: entered promiscuous mode [ 94.892318][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.923809][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.943351][ T5620] veth1_macvtap: entered promiscuous mode [ 94.967828][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.996785][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.061428][ T5742] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.116948][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.127697][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.341957][ T5742] usb 2-1: Using ep0 maxpacket: 32 [ 95.503412][ T5742] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 95.548645][ T5742] usb 2-1: config 0 has no interface number 0 [ 95.566537][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.576080][ T5742] usb 2-1: config 0 interface 184 has no altsetting 0 [ 95.585025][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.598277][ T5742] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 95.608166][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.621538][ T5742] usb 2-1: Product: syz [ 95.627101][ T5742] usb 2-1: Manufacturer: syz [ 95.634629][ T5742] usb 2-1: SerialNumber: syz [ 95.655833][ T5742] usb 2-1: config 0 descriptor?? [ 95.661472][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.681637][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.711927][ T3302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.738015][ T3302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.909970][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.927329][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.133910][ T5742] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 96.204207][ T5742] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 96.271204][ T5742] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 96.286911][ T3302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.335359][ T3302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.343311][ T5742] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 96.801621][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.810157][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.875646][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.903694][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.996041][ T3302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.039348][ T3302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.969908][ T5742] usb 2-1: USB disconnect, device number 2 [ 98.176576][ T5838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8'. [ 98.727735][ T5845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10'. [ 98.923491][ T5742] libceph: connect (1)[c::]:6789 error -101 [ 98.931778][ T5742] libceph: mon0 (1)[c::]:6789 connect error [ 98.948537][ T5742] libceph: connect (1)[c::]:6789 error -101 [ 98.959851][ T5847] ceph: No mds server is up or the cluster is laggy [ 98.969461][ T5742] libceph: mon0 (1)[c::]:6789 connect error [ 99.428321][ T29] libceph: connect (1)[c::]:6789 error -101 [ 99.588254][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 99.626245][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 99.626267][ T30] audit: type=1400 audit(1777655887.809:153): avc: denied { unmount } for pid=5624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 99.898066][ T5863] netlink: 'syz.4.13': attribute type 49 has an invalid length. [ 99.975616][ T30] audit: type=1400 audit(1777655888.159:154): avc: denied { setopt } for pid=5864 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.279311][ T5873] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 100.304684][ T5873] netlink: 72 bytes leftover after parsing attributes in process `syz.3.17'. [ 100.319407][ T30] audit: type=1400 audit(1777655888.449:155): avc: denied { mounton } for pid=5868 comm="syz.3.17" path="/2" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.614830][ T30] audit: type=1400 audit(1777655888.489:156): avc: denied { write } for pid=5868 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.653431][ T5807] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.677496][ T30] audit: type=1400 audit(1777655888.489:157): avc: denied { nlmsg_write } for pid=5868 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.728889][ T5863] ip6gretap0: entered promiscuous mode [ 100.735812][ T30] audit: type=1400 audit(1777655888.819:158): avc: denied { write } for pid=5864 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.764040][ T5863] ip6gretap0: entered allmulticast mode [ 100.813329][ T5874] warning: `syz.0.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.874558][ T5807] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.963141][ T5807] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.984295][ T5807] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.007389][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.066479][ T30] audit: type=1400 audit(1777655889.209:159): avc: denied { create } for pid=5860 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.107422][ T5867] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 101.132912][ T30] audit: type=1400 audit(1777655889.279:160): avc: denied { getopt } for pid=5860 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.163535][ T30] audit: type=1400 audit(1777655889.339:161): avc: denied { read } for pid=5275 comm="dhcpcd" name="n508" dev="tmpfs" ino=1921 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.282004][ T30] audit: type=1400 audit(1777655889.339:162): avc: denied { open } for pid=5275 comm="dhcpcd" path="/run/udev/data/n508" dev="tmpfs" ino=1921 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.368207][ T5807] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.082242][ T5885] bridge1: entered promiscuous mode [ 102.087547][ T5885] bridge1: entered allmulticast mode [ 102.095985][ T5885] team0: Port device bridge1 added [ 102.146627][ T5889] overlayfs: missing 'lowerdir' [ 103.198922][ T5807] usb 2-1: USB disconnect, device number 3 [ 103.679428][ T5912] xt_TCPMSS: Only works on TCP SYN packets [ 103.958223][ T5915] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5915 comm=syz.3.21 [ 104.118738][ T5912] sit1: entered allmulticast mode [ 105.331994][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 105.332014][ T30] audit: type=1400 audit(1777655893.519:171): avc: denied { relabelfrom } for pid=5910 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.368064][ T30] audit: type=1400 audit(1777655893.549:172): avc: denied { relabelto } for pid=5910 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.428071][ T5923] netlink: 136 bytes leftover after parsing attributes in process `syz.4.23'. [ 105.807504][ T5931] netlink: 136 bytes leftover after parsing attributes in process `syz.4.24'. [ 107.082334][ T5938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'. [ 107.136190][ T30] audit: type=1400 audit(1777655895.279:173): avc: denied { bind } for pid=5934 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.157244][ T30] audit: type=1400 audit(1777655895.289:174): avc: denied { name_bind } for pid=5934 comm="syz.0.25" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 107.184348][ T30] audit: type=1400 audit(1777655895.289:175): avc: denied { node_bind } for pid=5934 comm="syz.0.25" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 107.620530][ T30] audit: type=1400 audit(1777655895.289:176): avc: denied { connect } for pid=5934 comm="syz.0.25" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.706698][ T30] audit: type=1400 audit(1777655895.289:177): avc: denied { name_connect } for pid=5934 comm="syz.0.25" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 107.771767][ T30] audit: type=1400 audit(1777655895.889:178): avc: denied { prog_run } for pid=5942 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.855810][ T5949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.26'. [ 108.409035][ T30] audit: type=1400 audit(1777655896.589:179): avc: denied { create } for pid=5951 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.480418][ T5807] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.700410][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 108.710906][ T5807] usb 3-1: Using ep0 maxpacket: 32 [ 108.718059][ T30] audit: type=1400 audit(1777655896.899:180): avc: denied { map_read map_write } for pid=5954 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.726526][ T5807] usb 3-1: config 0 interface 0 altsetting 193 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.924050][ T5807] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.002137][ T5807] usb 3-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 109.059900][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.095616][ T5807] usb 3-1: config 0 descriptor?? [ 109.642227][ T5977] netlink: 136 bytes leftover after parsing attributes in process `syz.4.34'. [ 109.971119][ T5968] ALSA: mixer_oss: invalid OSS volume 'zkaller' [ 110.170946][ T10] libceph: connect (1)[c::]:6789 error -101 [ 110.309586][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 110.341160][ T5946] ceph: No mds server is up or the cluster is laggy [ 110.658231][ T5807] usbhid 3-1:0.0: can't add hid device: -71 [ 110.674817][ T5807] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 110.686615][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.726676][ T5807] usb 3-1: USB disconnect, device number 2 [ 110.867297][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 110.925817][ T10] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 110.966214][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 110.966232][ T30] audit: type=1400 audit(1777655899.149:191): avc: denied { create } for pid=5984 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.966245][ T10] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.011269][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.022426][ T10] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 111.034843][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.202714][ T10] usb 4-1: config 0 descriptor?? [ 111.844047][ T30] audit: type=1400 audit(1777655899.369:192): avc: denied { create } for pid=5984 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.989949][ T30] audit: type=1400 audit(1777655899.399:193): avc: denied { bind } for pid=5984 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.075760][ T30] audit: type=1400 audit(1777655899.469:194): avc: denied { connect } for pid=5984 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.113222][ T5991] Zero length message leads to an empty skb [ 112.145409][ T10] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 112.158125][ T30] audit: type=1400 audit(1777655899.489:195): avc: denied { write } for pid=5984 comm="syz.4.35" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.238813][ T30] audit: type=1400 audit(1777655900.369:196): avc: denied { execute } for pid=5970 comm="syz.3.33" path="/8/cpu.stat" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.340922][ T5989] ceph: No mds server is up or the cluster is laggy [ 112.397972][ T3100] libceph: connect (1)[c::]:6789 error -101 [ 112.488662][ T3100] libceph: mon0 (1)[c::]:6789 connect error [ 112.528189][ T10] corsair-cpro 0003:1B1C:0C10.0001: probe with driver corsair-cpro failed with error -90 [ 112.571739][ T30] audit: type=1400 audit(1777655900.739:197): avc: denied { mount } for pid=5994 comm="syz.1.37" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 112.609196][ T10] usb 4-1: USB disconnect, device number 2 [ 112.816649][ T3100] libceph: connect (1)[c::]:6789 error -101 [ 112.849327][ T3100] libceph: mon0 (1)[c::]:6789 connect error [ 113.667292][ T30] audit: type=1400 audit(1777655901.849:198): avc: denied { name_bind } for pid=5999 comm="syz.2.38" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 113.747955][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 113.760155][ T30] audit: type=1400 audit(1777655901.869:199): avc: denied { bind } for pid=5999 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.838026][ T30] audit: type=1400 audit(1777655901.999:200): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 114.555183][ T6009] input: syz1 as /devices/virtual/input/input5 [ 114.657093][ T6014] QAT: failed to copy from user cfg_data. [ 114.680281][ T6014] netlink: 'syz.2.44': attribute type 1 has an invalid length. [ 114.781540][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.966027][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 114.994884][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.006358][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.023646][ T10] usb 5-1: string descriptor 0 read error: -22 [ 115.109347][ T10] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 115.126105][ T6018] netlink: 136 bytes leftover after parsing attributes in process `syz.2.45'. [ 115.265562][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.018920][ T10] usb 5-1: selecting invalid altsetting 1 [ 116.058648][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 116.058668][ T30] audit: type=1400 audit(1777655904.209:207): avc: denied { bind } for pid=6022 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 116.103081][ T10] usb 5-1: unit 3 not found! [ 116.166993][ T30] audit: type=1400 audit(1777655904.219:208): avc: denied { setopt } for pid=6022 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 116.198415][ T30] audit: type=1400 audit(1777655904.229:209): avc: denied { create } for pid=6019 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.204331][ T10] usb 5-1: cannot request logical cluster ID: 0 (err: -5) [ 116.271060][ T10] usb 5-1: invalid MIXER UNIT descriptor 6 [ 116.332078][ T30] audit: type=1400 audit(1777655904.239:210): avc: denied { write } for pid=6019 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.522425][ T5728] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.538506][ T6021] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 116.560718][ T30] audit: type=1400 audit(1777655904.279:211): avc: denied { create } for pid=6022 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.593968][ T6021] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 116.666445][ T30] audit: type=1400 audit(1777655904.279:212): avc: denied { create } for pid=6022 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.770694][ T5728] usb 3-1: Using ep0 maxpacket: 32 [ 116.825149][ T30] audit: type=1400 audit(1777655904.299:213): avc: denied { write } for pid=6024 comm="syz.2.48" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 116.852409][ T5728] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 116.884418][ T5728] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.894156][ T30] audit: type=1400 audit(1777655904.309:214): avc: denied { bind } for pid=6022 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.914087][ T5728] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 116.924363][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.934381][ T30] audit: type=1400 audit(1777655904.329:215): avc: denied { connect } for pid=6022 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.973064][ T30] audit: type=1400 audit(1777655904.599:216): avc: denied { create } for pid=6008 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.007281][ T5728] usb 3-1: config 0 descriptor?? [ 117.108505][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 117.165560][ T10] usb 5-1: USB disconnect, device number 2 [ 117.440450][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 117.629583][ T3302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.648575][ T3302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.417546][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.554552][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.568661][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.584009][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.045031][ T10] IPVS: starting estimator thread 0... [ 119.141753][ T6053] IPVS: using max 43 ests per chain, 103200 per kthread [ 119.256948][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 119.266779][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.54'. [ 119.284945][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 119.294182][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.54'. [ 119.338639][ T6062] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 119.480992][ T803] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.504505][ T24] usb 4-1: usb_control_msg returned -32 [ 119.591031][ T24] usbtmc 4-1:16.0: can't read capabilities [ 119.760776][ T803] usb 2-1: Using ep0 maxpacket: 16 [ 119.951817][ T803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.261777][ T803] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 120.510953][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.692382][ T803] usb 2-1: Product: syz [ 120.807788][ T803] usb 2-1: Manufacturer: syz [ 120.924497][ T803] usb 2-1: SerialNumber: syz [ 121.482472][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 121.482494][ T30] audit: type=1400 audit(1777655909.649:240): avc: denied { watch } for pid=6033 comm="syz.3.50" path="/11" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 121.539041][ T803] usb 2-1: config 0 descriptor?? [ 121.912873][ T803] usb 2-1: selecting invalid altsetting 1 [ 122.068802][ T803] usb 2-1: Can not set alternate setting to 1, error: -22 [ 122.077384][ T803] synaptics_usb 2-1:0.0: probe with driver synaptics_usb failed with error -22 [ 122.102868][ T30] audit: type=1400 audit(1777655909.699:241): avc: denied { watch_sb watch_reads } for pid=6033 comm="syz.3.50" path="/11" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 122.153618][ T5728] usbhid 3-1:0.0: can't add hid device: -71 [ 122.249752][ T5728] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 122.571960][ T30] audit: type=1400 audit(1777655910.709:242): avc: denied { map } for pid=6060 comm="syz.1.55" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.596023][ T5728] usb 3-1: USB disconnect, device number 3 [ 122.648318][ T6072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.669696][ T30] audit: type=1400 audit(1777655910.709:243): avc: denied { read write } for pid=6060 comm="syz.1.55" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.714095][ T6072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.775045][ T30] audit: type=1400 audit(1777655910.789:244): avc: denied { read open } for pid=6073 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.854943][ T30] audit: type=1400 audit(1777655910.789:245): avc: denied { getattr } for pid=6073 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.888440][ T5807] usb 4-1: USB disconnect, device number 3 [ 122.933557][ T6080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.58'. [ 122.966648][ T6080] netlink: 72 bytes leftover after parsing attributes in process `syz.0.58'. [ 123.587907][ T6080] netlink: 'syz.0.58': attribute type 21 has an invalid length. [ 123.600611][ T6080] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.638636][ T30] audit: type=1400 audit(1777655911.819:246): avc: denied { accept } for pid=6085 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 123.672629][ T30] audit: type=1400 audit(1777655911.819:247): avc: denied { write } for pid=6085 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 123.750194][ T30] audit: type=1400 audit(1777655911.929:248): avc: denied { read } for pid=6085 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 123.798232][ T30] audit: type=1400 audit(1777655911.979:249): avc: denied { ioctl } for pid=6085 comm="syz.2.60" path="socket:[10398]" dev="sockfs" ino=10398 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.909181][ T5728] usb 2-1: USB disconnect, device number 4 [ 124.121749][ T5807] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.358825][ T803] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.827091][ T803] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 124.928726][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.047307][ T803] usb 1-1: Product: syz [ 125.088003][ T803] usb 1-1: Manufacturer: syz [ 125.130166][ T803] usb 1-1: SerialNumber: syz [ 125.662972][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.747144][ T5807] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 125.757943][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.766373][ T5807] usb 4-1: Product: syz [ 125.770862][ T5807] usb 4-1: Manufacturer: syz [ 125.775571][ T5807] usb 4-1: SerialNumber: syz [ 125.788962][ T6110] input: syz1 as /devices/virtual/input/input6 [ 125.822128][ T803] usb 1-1: config 0 descriptor?? [ 125.827998][ T5807] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 125.918426][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.936191][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.951298][ T803] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 002 [ 125.963402][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.994094][ T3100] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 126.014669][ T29] usb 5-1: string descriptor 0 read error: -22 [ 126.021559][ T29] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 126.033728][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.082537][ T6106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.107005][ T6106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.164900][ T803] (null): failure setting delay to 10us [ 126.172621][ T803] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 126.201316][ T29] usb 5-1: selecting invalid altsetting 1 [ 126.233052][ T29] usb 5-1: unit 3 not found! [ 126.247664][ T803] usb 1-1: USB disconnect, device number 2 [ 126.403385][ T6123] QAT: Invalid ioctl 1074030123 [ 126.419327][ T29] usb 5-1: cannot request logical cluster ID: 0 (err: -5) [ 126.450760][ T29] usb 5-1: invalid MIXER UNIT descriptor 6 [ 126.500152][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 126.500171][ T30] audit: type=1400 audit(1777655914.679:257): avc: denied { write } for pid=6121 comm="syz.1.66" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 126.507798][ T6122] binder: 6121:6122 ioctl c0306201 200000001440 returned -11 [ 126.532859][ T30] audit: type=1400 audit(1777655914.679:258): avc: denied { map } for pid=6121 comm="syz.1.66" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 126.602463][ T29] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 126.646557][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.67'. [ 126.684668][ T5807] usb 4-1: USB disconnect, device number 4 [ 126.701904][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.67'. [ 126.812454][ T29] usb 5-1: USB disconnect, device number 3 [ 127.312713][ T3100] usb 4-1: Service connection timeout for: 256 [ 127.313437][ T6126] syz.2.67 (6126) used greatest stack depth: 19720 bytes left [ 127.340148][ T3100] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 127.354385][ T3100] ath9k_htc: Failed to initialize the device [ 127.363580][ T5807] usb 4-1: ath9k_htc: USB layer deinitialized [ 127.380238][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 127.390888][ T6130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.68'. [ 127.418191][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 127.427592][ T6130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.68'. [ 127.517041][ T6130] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 128.132282][ T30] audit: type=1400 audit(1777655916.319:259): avc: denied { ioctl } for pid=6135 comm="syz.2.71" path="socket:[9635]" dev="sockfs" ino=9635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.646635][ T6151] process 'syz.4.73' launched './file0' with NULL argv: empty string added [ 128.689718][ T30] audit: type=1400 audit(1777655916.869:260): avc: denied { execute_no_trans } for pid=6150 comm="syz.4.73" path="/15/file0" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.758978][ T6148] ALSA: mixer_oss: invalid OSS volume 'zkaller' [ 129.457802][ T6151] ÿ: renamed from dummy0 (while UP) [ 129.589981][ T30] audit: type=1400 audit(1777655917.599:261): avc: denied { setopt } for pid=6150 comm="syz.4.73" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.862516][ T30] audit: type=1400 audit(1777655918.009:262): avc: denied { accept } for pid=6154 comm="syz.3.75" lport=49436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.384633][ T30] audit: type=1400 audit(1777655918.479:263): avc: denied { listen } for pid=6154 comm="syz.3.75" lport=49436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.530791][ T30] audit: type=1400 audit(1777655918.559:264): avc: denied { ioctl } for pid=6154 comm="syz.3.75" path="socket:[9663]" dev="sockfs" ino=9663 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.604775][ T30] audit: type=1400 audit(1777655918.629:265): avc: denied { ioctl } for pid=6154 comm="syz.3.75" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9658 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.430727][ T6181] netlink: 96 bytes leftover after parsing attributes in process `syz.3.79'. [ 131.797798][ T6185] ÿ: renamed from dummy0 (while UP) [ 131.846000][ T30] audit: type=1400 audit(1777655920.029:266): avc: denied { block_suspend } for pid=6180 comm="syz.3.79" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 131.905761][ T30] audit: type=1400 audit(1777655920.089:267): avc: denied { create } for pid=6180 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.983981][ T30] audit: type=1400 audit(1777655920.119:268): avc: denied { write } for pid=6180 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.533531][ T30] audit: type=1400 audit(1777655920.709:269): avc: denied { setopt } for pid=6203 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.660125][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 132.677436][ T6202] ceph: No mds server is up or the cluster is laggy [ 132.704643][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 132.898482][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.910006][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.183580][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 133.194395][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.85'. [ 133.214255][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 133.224633][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.85'. [ 133.255080][ T6216] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 133.499151][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.518396][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.104078][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.294407][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.976869][ T6224] libceph: connect (1)[c::]:6789 error -101 [ 135.983775][ T6224] libceph: mon0 (1)[c::]:6789 connect error [ 136.361814][ T6238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.87'. [ 136.425227][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.87'. [ 136.980874][ T1143] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.014576][ T1143] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.154449][ T1143] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.240481][ T30] audit: type=1400 audit(1777655925.359:270): avc: denied { create } for pid=6246 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.393834][ T6252] netlink: 'syz.0.92': attribute type 2 has an invalid length. [ 137.964339][ T1143] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.246307][ T10] libceph: connect (1)[c::]:6789 error -101 [ 138.256155][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 138.268830][ T6253] ceph: No mds server is up or the cluster is laggy [ 138.269122][ T10] libceph: connect (1)[c::]:6789 error -101 [ 138.288996][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 138.549279][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.93'. [ 138.562024][ T6264] misc userio: Invalid payload size [ 138.569722][ T6264] misc userio: No port type given on /dev/userio [ 138.890444][ T6273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.96'. [ 138.908618][ T6273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.96'. [ 138.933960][ T6273] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 138.980413][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.478897][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 140.607394][ T6275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.97'. [ 140.711125][ T6275] netlink: 72 bytes leftover after parsing attributes in process `syz.4.97'. [ 142.237765][ T6283] input: syz1 as /devices/virtual/input/input7 [ 142.246212][ T10] usb 3-1: device descriptor read/all, error -71 [ 142.295536][ T6287] netlink: 'syz.4.97': attribute type 21 has an invalid length. [ 142.306547][ T6287] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.583130][ T5735] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 143.119918][ T5735] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.359893][ T5735] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.419220][ T5735] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.009305][ T6295] binder: BINDER_SET_CONTEXT_MGR already set [ 144.025953][ T5735] usb 2-1: string descriptor 0 read error: -22 [ 144.063013][ T6295] binder: 6289:6295 ioctl 4018620d 200000001000 returned -16 [ 144.075904][ T5735] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 144.117627][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.233390][ T6290] syzkaller0: entered promiscuous mode [ 144.260273][ T6290] syzkaller0: entered allmulticast mode [ 144.302508][ T5735] usb 2-1: selecting invalid altsetting 1 [ 144.309956][ T5735] usb 2-1: unit 3 not found! [ 144.366811][ T6303] ÿ: renamed from dummy0 (while UP) [ 144.518687][ T5735] usb 2-1: cannot request logical cluster ID: 0 (err: -71) [ 144.535444][ T5735] usb 2-1: invalid MIXER UNIT descriptor 6 [ 144.546794][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.605871][ T6307] binder: 6305:6307 ioctl c0306201 0 returned -14 [ 144.639374][ T6307] binder: 6305:6307 ioctl c0306201 200000000140 returned -11 [ 144.671192][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 144.723674][ T6307] binder: 6305:6307 ioctl c004500a 200000000080 returned -22 [ 144.851508][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 144.963639][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.191257][ T10] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 145.242568][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.262139][ T5735] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 145.272581][ T10] usb 5-1: Product: syz [ 145.280046][ T30] audit: type=1400 audit(1777655933.459:271): avc: denied { write } for pid=6305 comm="syz.0.105" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 145.332638][ T10] usb 5-1: Manufacturer: syz [ 145.384525][ T5735] usb 2-1: USB disconnect, device number 5 [ 145.391375][ T10] usb 5-1: SerialNumber: syz [ 145.418316][ T30] audit: type=1400 audit(1777655933.499:272): avc: denied { ioctl } for pid=6305 comm="syz.0.105" path="/dev/sg0" dev="devtmpfs" ino=815 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 145.459646][ T10] usb 5-1: config 0 descriptor?? [ 145.473640][ T10] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 145.498247][ T10] usb 5-1: selecting invalid altsetting 1 [ 145.549187][ T6317] ALSA: mixer_oss: invalid OSS volume 'zkaller' [ 146.041553][ T10] gspca_stk014: reg_r err -110 [ 146.055298][ T6301] fuse: Bad value for 'group_id' [ 146.063143][ T30] audit: type=1400 audit(1777655934.229:273): avc: denied { create } for pid=6300 comm="syz.4.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 146.091182][ T6301] fuse: Bad value for 'group_id' [ 146.096323][ T10] stk014 5-1:0.0: probe with driver stk014 failed with error -110 [ 146.168692][ T30] audit: type=1400 audit(1777655934.239:274): avc: denied { mounton } for pid=6300 comm="syz.4.103" path="/21/file0" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 146.458140][ T30] audit: type=1400 audit(1777655934.629:275): avc: denied { ioctl } for pid=6328 comm="syz.1.110" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 146.490849][ T5714] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 146.651581][ T30] audit: type=1400 audit(1777655934.829:276): avc: denied { shutdown } for pid=6328 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.686938][ T5714] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.710558][ T5714] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.721152][ T5714] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.730874][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.752579][ T6324] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.782355][ T5714] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.970817][ T6222] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.031650][ T29] usb 1-1: USB disconnect, device number 3 [ 147.141351][ T6222] usb 2-1: Using ep0 maxpacket: 8 [ 147.173852][ T6222] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 147.188899][ T6222] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.202736][ T6222] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.225625][ T6222] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.241340][ T6222] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.423312][ T6222] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.436128][ T6222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.585170][ T6336] overlayfs: missing 'lowerdir' [ 148.281872][ T6226] usb 5-1: USB disconnect, device number 4 [ 149.411249][ T6340] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 150.497372][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.112'. [ 150.514292][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.112'. [ 150.537486][ T6343] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 153.000879][ T6222] usb 2-1: usb_control_msg returned -110 [ 153.008213][ T6222] usbtmc 2-1:16.0: can't read capabilities [ 153.209490][ T30] audit: type=1400 audit(1777655941.389:277): avc: denied { read } for pid=6346 comm="syz.4.113" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.256638][ T30] audit: type=1400 audit(1777655941.439:278): avc: denied { read write } for pid=6344 comm="syz.0.114" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 153.363158][ T30] audit: type=1400 audit(1777655941.439:279): avc: denied { open } for pid=6344 comm="syz.0.114" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 153.420056][ T30] audit: type=1400 audit(1777655941.439:280): avc: denied { write } for pid=6346 comm="syz.4.113" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.607801][ T6352] netlink: 104 bytes leftover after parsing attributes in process `syz.4.113'. [ 154.989001][ T6355] syz.0.115 (6355): drop_caches: 2 [ 155.175641][ T6360] input: syz1 as /devices/virtual/input/input8 [ 155.465163][ T5714] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 155.493969][ T6331] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 155.515509][ T5814] usb 2-1: USB disconnect, device number 6 [ 155.623760][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short [ 155.651251][ T5714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.689118][ T5714] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.729047][ T5714] usb 1-1: string descriptor 0 read error: -22 [ 155.743757][ T5714] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 155.764225][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.792602][ T5714] usb 1-1: selecting invalid altsetting 1 [ 155.814090][ T5714] usb 1-1: unit 3 not found! [ 155.985448][ T5714] usb 1-1: cannot request logical cluster ID: 0 (err: -5) [ 156.129408][ T30] audit: type=1400 audit(1777655944.309:281): avc: denied { getopt } for pid=6363 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.454568][ T5714] usb 1-1: invalid MIXER UNIT descriptor 6 [ 157.361886][ T6385] ======================================================= [ 157.361886][ T6385] WARNING: The mand mount option has been deprecated and [ 157.361886][ T6385] and is ignored by this kernel. Remove the mand [ 157.361886][ T6385] option from the mount to silence this warning. [ 157.361886][ T6385] ======================================================= [ 157.978470][ T30] audit: type=1400 audit(1777655945.969:282): avc: denied { mount } for pid=6383 comm="syz.1.123" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 158.592505][ T5714] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 158.602622][ T6390] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 158.637848][ T6390] overlayfs: overlapping lowerdir path [ 158.652403][ T5714] usb 1-1: USB disconnect, device number 4 [ 158.903074][ T30] audit: type=1400 audit(1777655947.089:283): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 159.626592][ T5735] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 160.323722][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.323749][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.323764][ T5735] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.323792][ T5735] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.323806][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.337143][ T5735] usb 4-1: config 0 descriptor?? [ 161.256552][ T6418] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 161.607428][ T30] audit: type=1400 audit(1777655949.789:284): avc: denied { call } for pid=6397 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 161.678385][ T5735] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 161.691414][ T30] audit: type=1400 audit(1777655949.809:285): avc: denied { transfer } for pid=6397 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 161.763054][ T6421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.133'. [ 161.902291][ T6421] netlink: 72 bytes leftover after parsing attributes in process `syz.4.133'. [ 162.072963][ T6430] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 162.552343][ T6427] input: syz1 as /devices/virtual/input/input10 [ 162.643842][ T6432] netlink: 'syz.4.133': attribute type 21 has an invalid length. [ 162.744396][ T5814] usb 4-1: USB disconnect, device number 5 [ 163.105485][ T5735] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 163.274624][ T30] audit: type=1400 audit(1777655951.449:286): avc: denied { bind } for pid=6435 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.575903][ T30] audit: type=1400 audit(1777655951.449:287): avc: denied { listen } for pid=6435 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.677496][ T30] audit: type=1400 audit(1777655951.459:288): avc: denied { accept } for pid=6435 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.757052][ T5735] usb 3-1: unable to get BOS descriptor or descriptor too short [ 163.786527][ T5735] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.829035][ T5735] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.832852][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 163.835530][ T5735] usb 3-1: string descriptor 0 read error: -22 [ 163.835655][ T5735] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 163.835686][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.856000][ T5735] usb 3-1: selecting invalid altsetting 1 [ 163.859143][ T5735] usb 3-1: unit 3 not found! [ 163.901434][ T30] audit: type=1400 audit(1777655952.089:289): avc: denied { connect } for pid=6442 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.915486][ T30] audit: type=1400 audit(1777655952.099:290): avc: denied { write } for pid=6442 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.012951][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 164.022996][ T10] usb 1-1: string descriptor 0 read error: -22 [ 164.023149][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.40 [ 164.023176][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.028264][ T30] audit: type=1400 audit(1777655952.209:291): avc: denied { setopt } for pid=6442 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.075871][ T30] audit: type=1400 audit(1777655952.259:292): avc: denied { bind } for pid=6455 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.253495][ T30] audit: type=1400 audit(1777655952.439:293): avc: denied { connect } for pid=6457 comm="syz.1.142" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.278888][ T5735] usb 3-1: cannot request logical cluster ID: 0 (err: -71) [ 164.278931][ T5735] usb 3-1: invalid MIXER UNIT descriptor 6 [ 164.424517][ T5735] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 164.434149][ T5735] usb 3-1: USB disconnect, device number 6 [ 164.516943][ T10] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 164.661992][ T10] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 164.674633][ T10] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 164.713686][ T6465] netlink: 136 bytes leftover after parsing attributes in process `syz.1.143'. [ 164.890751][ T10] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 164.987170][ T10] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 165.075241][ T10] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 165.172316][ T10] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 165.286929][ T10] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 165.422446][ T10] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 165.519012][ T10] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 165.605090][ T10] hid-rmi 0003:06CB:81A7.0003: hidraw0: USB HID vff.7d Device [HID 06cb:81a7] on usb-dummy_hcd.0-1/input0 [ 165.719019][ T10] usb 1-1: USB disconnect, device number 5 [ 165.793075][ T6473] fido_id[6473]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 166.193183][ T30] audit: type=1400 audit(1777655954.309:294): avc: denied { write } for pid=6474 comm="syz.3.146" path="socket:[11450]" dev="sockfs" ino=11450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 166.315447][ T6486] syz.1.147 uses obsolete (PF_INET,SOCK_PACKET) [ 166.786272][ T30] audit: type=1400 audit(1777655954.409:295): avc: denied { setopt } for pid=6474 comm="syz.3.146" lport=46012 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 167.144689][ T6490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.149'. [ 167.168731][ T6490] netlink: 72 bytes leftover after parsing attributes in process `syz.0.149'. [ 167.354667][ T6496] netlink: 'syz.0.149': attribute type 21 has an invalid length. [ 168.235706][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.150'. [ 168.248386][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.150'. [ 168.267355][ T6499] capability: warning: `syz.3.151' uses deprecated v2 capabilities in a way that may be insecure [ 168.285522][ T6499] capability: warning: `syz.3.151' uses 32-bit capabilities (legacy support in use) [ 168.297962][ T30] audit: type=1400 audit(1777655956.469:296): avc: denied { bind } for pid=6494 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.877622][ T6499] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 169.079541][ T30] audit: type=1400 audit(1777655957.259:297): avc: denied { write } for pid=6501 comm="syz.2.153" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 169.184655][ T30] audit: type=1400 audit(1777655957.259:298): avc: denied { open } for pid=6501 comm="syz.2.153" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 169.217217][ T30] audit: type=1400 audit(1777655957.309:299): avc: denied { ioctl } for pid=6501 comm="syz.2.153" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 169.941812][ T30] audit: type=1326 audit(1777655957.449:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.2.153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee5439cdd9 code=0x7ff70000 [ 170.051991][ T30] audit: type=1400 audit(1777655958.239:301): avc: denied { create } for pid=6509 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 170.126951][ T30] audit: type=1400 audit(1777655958.239:302): avc: denied { sys_admin } for pid=6509 comm="syz.0.156" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 170.162800][ T30] audit: type=1400 audit(1777655958.239:303): avc: denied { connect } for pid=6509 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 170.360457][ T4930] Bluetooth: hci0: command 0x0401 tx timeout [ 170.780711][ T5714] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 170.974377][ T5714] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 171.012987][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.058995][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.100612][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 171.160699][ T5714] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 171.232720][ T6525] netlink: 136 bytes leftover after parsing attributes in process `syz.2.157'. [ 172.201837][ T5714] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 172.210615][ T5714] usb 1-1: Manufacturer: syz [ 172.227569][ T5714] usb 1-1: config 0 descriptor?? [ 172.402489][ T30] audit: type=1400 audit(1777655960.589:304): avc: denied { search } for pid=6526 comm="syz.4.161" name="/" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.468830][ T6226] libceph: connect (1)[c::]:6789 error -101 [ 172.492361][ T30] audit: type=1400 audit(1777655960.609:305): avc: denied { search } for pid=6526 comm="syz.4.161" name="/" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.520741][ T6226] libceph: mon0 (1)[c::]:6789 connect error [ 172.533260][ T6527] ceph: No mds server is up or the cluster is laggy [ 172.612661][ T30] audit: type=1400 audit(1777655960.619:306): avc: denied { read open } for pid=6526 comm="syz.4.161" path="/" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.816243][ T6226] libceph: connect (1)[c::]:6789 error -101 [ 172.878921][ T6226] libceph: mon0 (1)[c::]:6789 connect error [ 173.421188][ T5721] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 173.672397][ T5721] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.254298][ T5721] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 174.266804][ T5721] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 174.278127][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.354572][ T6535] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 174.413572][ T5721] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.492419][ T6542] infiniband syz2: set active [ 174.499185][ T6542] infiniband syz2: added bridge_slave_1 [ 174.514572][ T6542] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 174.518407][ T6542] infiniband syz2: Couldn't open port 1 [ 174.539344][ T6542] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 174.554986][ T6542] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 174.574516][ T6542] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 174.648708][ T6542] RDS/IB: syz2: added [ 174.653632][ T6542] smc: adding ib device syz2 with port count 1 [ 174.660449][ T6542] smc: ib device syz2 port 1 has no pnetid [ 175.960532][ T6556] overlayfs: missing 'lowerdir' [ 176.924328][ T5721] usb 4-1: USB disconnect, device number 6 [ 178.154443][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 178.154462][ T30] audit: type=1400 audit(1777655966.329:313): avc: denied { write } for pid=6558 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 178.263280][ T6564] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 178.348549][ T5714] usbhid 1-1:0.0: can't add hid device: -71 [ 178.378790][ T5714] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 178.446794][ T5714] usb 1-1: USB disconnect, device number 6 [ 178.480486][ T6222] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.650425][ T6222] usb 5-1: Using ep0 maxpacket: 8 [ 178.667223][ T6222] usb 5-1: config 1 has an invalid interface number: 163 but max is 0 [ 178.702688][ T6222] usb 5-1: config 1 has no interface number 0 [ 178.741046][ T6222] usb 5-1: config 1 interface 163 altsetting 248 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 178.764381][ T5735] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 178.782311][ T6222] usb 5-1: config 1 interface 163 has no altsetting 0 [ 178.824795][ T6222] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=2f.87 [ 178.845861][ T6222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.862627][ T6222] usb 5-1: Product: syz [ 178.874776][ T6222] usb 5-1: Manufacturer: syz [ 178.902486][ T6222] usb 5-1: SerialNumber: syz [ 178.960529][ T5735] usb 3-1: Using ep0 maxpacket: 8 [ 178.998166][ T5735] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 179.039534][ T5735] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.077569][ T5735] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.090466][ T6226] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 179.104310][ T5735] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 179.304942][ T5735] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.323472][ T5735] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.333016][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.395332][ T6222] usb 5-1: Firmware version (0.0) predates our first public release. [ 179.475458][ T6587] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 179.494577][ T6587] netlink: 72 bytes leftover after parsing attributes in process `syz.3.171'. [ 179.904109][ T6222] usb 5-1: Please update to version 0.2 or newer [ 179.972050][ T6226] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.991913][ T6226] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 180.087084][ T6226] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.118024][ T5735] usb 3-1: usb_control_msg returned -71 [ 180.125741][ T6226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.139354][ T5735] usbtmc 3-1:16.0: can't read capabilities [ 180.225438][ T6583] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 180.236792][ T5735] usb 3-1: USB disconnect, device number 7 [ 181.093566][ T6226] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 181.123575][ T6222] usb 5-1: USB disconnect, device number 5 [ 181.449283][ T6592] netlink: 136 bytes leftover after parsing attributes in process `syz.3.172'. [ 181.543917][ T6600] overlayfs: missing 'lowerdir' [ 183.603608][ T6226] usb 1-1: USB disconnect, device number 7 [ 183.631956][ T6602] ALSA: mixer_oss: invalid OSS volume '' [ 183.982035][ T30] audit: type=1400 audit(1777655972.169:314): avc: denied { bind } for pid=6609 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 184.136881][ T30] audit: type=1400 audit(1777655972.169:315): avc: denied { node_bind } for pid=6609 comm="syz.2.175" saddr=2001:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 184.226010][ T30] audit: type=1400 audit(1777655972.409:316): avc: denied { write } for pid=6609 comm="syz.2.175" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 184.681596][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 184.691072][ T6623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'. [ 184.707346][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 184.716387][ T6623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'. [ 184.746962][ T6623] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 189.310875][ T6650] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 189.335824][ T6650] netlink: 72 bytes leftover after parsing attributes in process `syz.1.185'. [ 191.055701][ T6661] ALSA: mixer_oss: invalid OSS volume '' [ 191.905966][ T6226] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 192.095907][ T6226] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 192.126255][ T6226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.150852][ T6226] usb 1-1: Product: syz [ 192.157645][ T6226] usb 1-1: Manufacturer: syz [ 192.223996][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.193'. [ 192.235404][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.193'. [ 192.275847][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.193'. [ 192.285228][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.193'. [ 192.336499][ T6676] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 193.300493][ T6680] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 194.610467][ T6226] usb 1-1: SerialNumber: syz [ 194.655404][ T6226] usb 1-1: config 0 descriptor?? [ 194.660849][ T30] audit: type=1400 audit(1777655982.839:317): avc: denied { unmount } for pid=5624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 194.759627][ T6226] usb 1-1: can't set config #0, error -71 [ 194.791228][ T6226] usb 1-1: USB disconnect, device number 8 [ 194.922897][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.937723][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.978165][ T6683] ÿ: renamed from dummy0 (while UP) [ 195.967156][ T30] audit: type=1400 audit(1777655983.589:318): avc: denied { mounton } for pid=6684 comm="syz.2.195" path="/38/file0" dev="tmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 196.372335][ T6694] tmpfs: Bad value for 'mpol' [ 196.884785][ T5813] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 197.362605][ T5813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.737955][ T30] audit: type=1400 audit(1777655985.919:319): avc: denied { read write } for pid=6699 comm="syz.0.200" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 197.801821][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.832376][ T30] audit: type=1400 audit(1777655985.919:320): avc: denied { open } for pid=6699 comm="syz.0.200" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 197.843330][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 197.931875][ T30] audit: type=1400 audit(1777655985.959:321): avc: denied { map } for pid=6699 comm="syz.0.200" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 198.002775][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 198.021352][ T5813] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 198.038521][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.047295][ T5813] usb 5-1: Product: syz [ 198.071726][ T5813] usb 5-1: Manufacturer: syz [ 198.137248][ T5813] usb 5-1: SerialNumber: syz [ 198.405028][ T5813] usb 5-1: config 0 descriptor?? [ 198.630118][ T5813] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 198.794940][ T5813] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 198.879057][ T5813] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 198.982613][ T6717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.204'. [ 198.997246][ T30] audit: type=1400 audit(1777655987.159:322): avc: denied { connect } for pid=6706 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.033076][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.204'. [ 199.047024][ T5813] usb 5-1: USB disconnect, device number 6 [ 199.108098][ T5813] garmin_gps 5-1:0.0: device disconnected [ 199.138923][ T30] audit: type=1400 audit(1777655987.319:323): avc: denied { mount } for pid=6719 comm="syz.1.205" name="/" dev="ramfs" ino=12951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 199.233794][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 199.373608][ T30] audit: type=1400 audit(1777655987.549:324): avc: denied { bind } for pid=6719 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 199.489690][ T30] audit: type=1400 audit(1777655987.669:325): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 199.564880][ T30] audit: type=1400 audit(1777655987.739:326): avc: denied { mount } for pid=6724 comm="syz.3.207" name="/" dev="hugetlbfs" ino=12121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 199.607304][ T6727] netlink: 'syz.4.206': attribute type 5 has an invalid length. [ 199.637153][ T6726] FAULT_INJECTION: forcing a failure. [ 199.637153][ T6726] name failslab, interval 1, probability 0, space 0, times 1 [ 199.678653][ T6726] CPU: 0 UID: 0 PID: 6726 Comm: syz.3.207 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.678690][ T6726] Tainted: [L]=SOFTLOCKUP [ 199.678697][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.678715][ T6726] Call Trace: [ 199.678722][ T6726] [ 199.678731][ T6726] dump_stack_lvl+0x100/0x190 [ 199.678780][ T6726] should_fail_ex.cold+0x5/0xa [ 199.678810][ T6726] should_failslab+0xc2/0x120 [ 199.678833][ T6726] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 199.678863][ T6726] ? do_getname+0x35/0x390 [ 199.678905][ T6726] do_getname+0x35/0x390 [ 199.678934][ T6726] __x64_sys_mkdirat+0x78/0xc0 [ 199.678962][ T6726] do_syscall_64+0x10b/0xf80 [ 199.678990][ T6726] ? clear_bhb_loop+0x40/0x90 [ 199.679015][ T6726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.679033][ T6726] RIP: 0033:0x7f77d4d9cdd9 [ 199.679056][ T6726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.679079][ T6726] RSP: 002b:00007f77d5b9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 199.679104][ T6726] RAX: ffffffffffffffda RBX: 00007f77d5016090 RCX: 00007f77d4d9cdd9 [ 199.679118][ T6726] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 199.679131][ T6726] RBP: 00007f77d5b9b090 R08: 0000000000000000 R09: 0000000000000000 [ 199.679156][ T6726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.679168][ T6726] R13: 00007f77d5016128 R14: 00007f77d5016090 R15: 00007ffce09ce258 [ 199.679198][ T6726] [ 199.987477][ T6728] netlink: 'syz.4.206': attribute type 5 has an invalid length. [ 200.044592][ T6729] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 202.156695][ T6728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6728 comm=syz.4.206 [ 203.218161][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 203.259121][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'. [ 203.281691][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 203.292267][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'. [ 203.328882][ T6737] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 203.569007][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 204.900661][ T5813] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 205.230661][ T5813] usb 2-1: Using ep0 maxpacket: 16 [ 205.334479][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.460783][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.609608][ T5813] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 205.761377][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.160694][ T5813] usb 2-1: config 0 descriptor?? [ 206.316560][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 206.361496][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 206.375034][ T5813] usb 2-1: can't set config #0, error -71 [ 206.415447][ T6733] ceph: No mds server is up or the cluster is laggy [ 206.439370][ T5813] usb 2-1: USB disconnect, device number 7 [ 206.483357][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 206.490619][ T6750] ALSA: mixer_oss: invalid OSS volume '' [ 206.539297][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 206.943666][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 207.018559][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 208.941503][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.219'. [ 209.016561][ T6773] netlink: 72 bytes leftover after parsing attributes in process `syz.2.219'. [ 209.361030][ T6777] netlink: 'syz.2.219': attribute type 21 has an invalid length. [ 209.381295][ T6777] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.819897][ T30] audit: type=1400 audit(1777655997.999:327): avc: denied { read } for pid=6778 comm="syz.1.220" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 209.918902][ T30] audit: type=1400 audit(1777655998.029:328): avc: denied { open } for pid=6778 comm="syz.1.220" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 209.980568][ T30] audit: type=1400 audit(1777655998.039:329): avc: denied { ioctl } for pid=6778 comm="syz.1.220" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.058531][ T30] audit: type=1400 audit(1777655998.099:330): avc: denied { write } for pid=6778 comm="syz.1.220" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.542111][ T30] audit: type=1400 audit(1777655998.629:331): avc: denied { create } for pid=6780 comm="syz.2.221" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 210.597677][ T30] audit: type=1400 audit(1777655998.629:332): avc: denied { write } for pid=6780 comm="syz.2.221" name="file0" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 210.650640][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 210.660005][ T30] audit: type=1400 audit(1777655998.629:333): avc: denied { open } for pid=6780 comm="syz.2.221" path="/45/file0" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 210.718697][ T30] audit: type=1400 audit(1777655998.629:334): avc: denied { ioctl } for pid=6780 comm="syz.2.221" path="/45/file0" dev="tmpfs" ino=259 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 210.788462][ T30] audit: type=1400 audit(1777655998.639:335): avc: denied { ioctl } for pid=6780 comm="syz.2.221" path="socket:[13020]" dev="sockfs" ino=13020 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 210.864126][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 210.876566][ T10] usb 4-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 210.910724][ T30] audit: type=1400 audit(1777655998.639:336): avc: denied { write } for pid=6780 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 210.931197][ T10] usb 4-1: config 65 has 2 interfaces, different from the descriptor's value: 3 [ 210.954447][ T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 210.984620][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.000107][ T10] usb 4-1: Product: syz [ 211.009704][ T10] usb 4-1: Manufacturer: syz [ 211.018024][ T10] usb 4-1: SerialNumber: syz [ 211.051489][ T10] usb 4-1: 0:2 : does not exist [ 211.065995][ T10] usb 4-1: unit 130 not found! [ 211.071833][ T5714] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.260993][ T5714] usb 2-1: device descriptor read/64, error -71 [ 211.590540][ T5714] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 211.780599][ T5714] usb 2-1: device descriptor read/64, error -71 [ 211.903318][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 211.913554][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.224'. [ 211.939943][ T5714] usb usb2-port1: attempt power cycle [ 211.954212][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 211.963559][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.224'. [ 211.997044][ T6796] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 212.412554][ T5714] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 212.453348][ T4930] Bluetooth: hci3: command 0x0406 tx timeout [ 212.591219][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 212.601919][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 212.606659][ T5619] Bluetooth: hci0: command 0x0401 tx timeout [ 212.608141][ T4930] Bluetooth: hci2: command 0x0406 tx timeout [ 212.643602][ T5714] usb 2-1: device descriptor read/8, error -71 [ 212.923096][ T5714] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 213.640687][ T5735] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 213.671284][ T5714] usb 2-1: device descriptor read/8, error -71 [ 213.895105][ T5714] usb usb2-port1: unable to enumerate USB device [ 213.986465][ T5735] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 214.012664][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.024065][ T5735] usb 1-1: Product: syz [ 214.028747][ T5735] usb 1-1: Manufacturer: syz [ 214.042741][ T5735] usb 1-1: SerialNumber: syz [ 214.140740][ T5735] usb 1-1: config 0 descriptor?? [ 214.401952][ T5735] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 009 [ 214.716484][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.772695][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.810375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 214.834896][ T5735] (null): failure setting delay to 10us [ 214.867276][ T5735] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 214.930275][ T5735] usb 1-1: USB disconnect, device number 9 [ 214.983341][ T6802] netlink: 136 bytes leftover after parsing attributes in process `syz.1.227'. [ 215.233331][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 215.233349][ T30] audit: type=1400 audit(1777656003.419:339): avc: denied { getopt } for pid=6803 comm="syz.4.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 215.850262][ T6814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.232'. [ 215.898760][ T6814] netlink: 72 bytes leftover after parsing attributes in process `syz.2.232'. [ 216.629227][ T6816] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 216.727077][ T10] usb 4-1: USB disconnect, device number 7 [ 216.770791][ T6825] netlink: 'syz.2.232': attribute type 21 has an invalid length. [ 216.831974][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:65.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.016769][ T6831] netlink: 220 bytes leftover after parsing attributes in process `syz.4.235'. [ 217.026742][ T6831] tc_dump_action: action bad kind [ 217.052288][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 217.117087][ T30] audit: type=1400 audit(1777656005.249:340): avc: denied { accept } for pid=6826 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.203708][ T6829] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 217.212812][ T6829] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 217.223765][ T6829] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 217.722905][ T30] audit: type=1400 audit(1777656005.409:341): avc: denied { firmware_load } for pid=6828 comm="syz.3.236" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 217.949541][ T6841] netlink: 136 bytes leftover after parsing attributes in process `syz.3.238'. [ 218.238805][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 218.248309][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.242'. [ 218.267544][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 218.282938][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.242'. [ 218.306708][ T6853] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 218.350508][ T5619] Bluetooth: hci0: command 0x0401 tx timeout [ 220.376017][ T6861] input: syz1 as /devices/virtual/input/input11 [ 220.950505][ T30] audit: type=1400 audit(1777656009.119:342): avc: denied { ioctl } for pid=6859 comm="syz.2.243" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 221.806539][ T30] audit: type=1400 audit(1777656009.139:343): avc: denied { mount } for pid=6859 comm="syz.2.243" name="/" dev="autofs" ino=13152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 221.910625][ T6872] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 222.452287][ T30] audit: type=1400 audit(1777656010.639:344): avc: denied { unmount } for pid=5624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 222.616112][ T6883] ALSA: mixer_oss: invalid OSS volume 'zkaller' [ 222.683180][ T6887] netlink: 136 bytes leftover after parsing attributes in process `syz.1.251'. [ 223.124172][ T29] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 223.310479][ T5619] Bluetooth: hci0: command 0x0401 tx timeout [ 223.490792][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 223.556895][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.629069][ T29] usb 3-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.658520][ T6895] ALSA: mixer_oss: invalid OSS volume 'zkaller' [ 223.717862][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 223.755512][ T29] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 223.836072][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.918143][ T29] usb 3-1: config 0 descriptor?? [ 223.956423][ T29] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 224.463219][ T30] audit: type=1400 audit(1777656012.649:345): avc: denied { write } for pid=6890 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.526100][ T30] audit: type=1400 audit(1777656012.699:346): avc: denied { setopt } for pid=6890 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.566478][ T10] usb 3-1: USB disconnect, device number 8 [ 224.832077][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 224.841867][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.257'. [ 224.871674][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 224.881097][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.257'. [ 224.957536][ T6908] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 227.345692][ T6916] binder_alloc: 6915: binder_alloc_buf, no vma [ 227.727660][ T6925] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 228.518615][ T30] audit: type=1400 audit(1777656016.509:347): avc: denied { append } for pid=6928 comm="syz.2.263" name="event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 228.906380][ T30] audit: type=1400 audit(1777656016.849:348): avc: denied { append } for pid=6928 comm="syz.2.263" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 229.845774][ T6923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6923 comm=syz.1.261 [ 230.024408][ T6934] netlink: 136 bytes leftover after parsing attributes in process `syz.0.264'. [ 231.232427][ T5814] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 232.092694][ T5814] usb 5-1: Using ep0 maxpacket: 32 [ 232.100851][ T5814] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 232.112013][ T5814] usb 5-1: config 0 has no interface number 0 [ 232.122572][ T5814] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 232.131912][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.141187][ T5814] usb 5-1: Product: syz [ 232.145423][ T5814] usb 5-1: Manufacturer: syz [ 232.154124][ T5814] usb 5-1: SerialNumber: syz [ 232.192472][ T5814] usb 5-1: config 0 descriptor?? [ 232.219296][ T5814] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 232.495324][ T6950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.517481][ T6950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.547552][ T30] audit: type=1400 audit(1777656020.729:349): avc: denied { write } for pid=6949 comm="syz.4.269" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 232.548251][ T6950] random: crng reseeded on system resumption [ 232.633437][ T6971] netlink: 72 bytes leftover after parsing attributes in process `syz.1.271'. [ 232.650616][ T30] audit: type=1400 audit(1777656020.729:350): avc: denied { open } for pid=6949 comm="syz.4.269" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 233.110741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 233.426529][ T6976] binder: 6975:6976 ioctl 40305828 200000000000 returned -22 [ 233.486947][ T30] audit: type=1400 audit(1777656021.669:351): avc: denied { listen } for pid=6975 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.632017][ T6982] binder: 6975:6982 ioctl 40046205 0 returned -22 [ 234.084512][ T5814] usb 5-1: qt2_attach - failed to power on unit: -71 [ 234.465049][ T5814] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 234.473506][ T30] audit: type=1400 audit(1777656021.669:352): avc: denied { setopt } for pid=6975 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.497804][ T5814] usb 5-1: USB disconnect, device number 7 [ 235.205190][ T6986] netlink: 136 bytes leftover after parsing attributes in process `syz.2.277'. [ 235.480824][ T30] audit: type=1400 audit(1777656023.659:353): avc: denied { compute_member } for pid=6977 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 235.625482][ T30] audit: type=1400 audit(1777656023.789:354): avc: denied { mount } for pid=6990 comm="syz.2.279" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 235.940131][ T30] audit: type=1400 audit(1777656023.809:355): avc: denied { remount } for pid=6990 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 236.064850][ T29] libceph: connect (1)[c::]:6789 error -101 [ 236.071374][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 236.114655][ T7007] ceph: No mds server is up or the cluster is laggy [ 236.342784][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 236.369216][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 236.684549][ T5714] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 236.971993][ T5714] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.002854][ T5714] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 237.039332][ T5714] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.068642][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.179055][ T7014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 237.726664][ T5714] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.057465][ T7022] netlink: 72 bytes leftover after parsing attributes in process `syz.0.285'. [ 238.263732][ T5714] usb 3-1: USB disconnect, device number 9 [ 239.392346][ T30] audit: type=1400 audit(1777656027.529:356): avc: denied { getopt } for pid=7034 comm="syz.0.287" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 239.568981][ T30] audit: type=1400 audit(1777656027.649:357): avc: denied { ioctl } for pid=7037 comm="syz.4.288" path="socket:[13905]" dev="sockfs" ino=13905 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 239.933806][ T7014] overlayfs: missing 'lowerdir' [ 239.981479][ T5714] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 240.233172][ T7040] netlink: 136 bytes leftover after parsing attributes in process `syz.1.289'. [ 240.261086][ T30] audit: type=1400 audit(1777656027.659:358): avc: denied { bind } for pid=7037 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.302798][ T5714] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 240.328440][ T30] audit: type=1400 audit(1777656027.659:359): avc: denied { write } for pid=7037 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.338295][ T5714] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 240.409074][ T5714] usb 1-1: config 0 interface 0 has no altsetting 0 [ 240.425740][ T5714] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 240.435975][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 240.445119][ T5714] usb 1-1: Product: syz [ 240.452419][ T5714] usb 1-1: Manufacturer: syz [ 240.462989][ T5714] usb 1-1: SerialNumber: syz [ 240.473168][ T5714] usb 1-1: config 0 descriptor?? [ 240.481322][ T5714] hub 1-1:0.0: bad descriptor, ignoring hub [ 240.490979][ T5714] hub 1-1:0.0: probe with driver hub failed with error -5 [ 240.502726][ T5714] usb 1-1: selecting invalid altsetting 0 [ 240.671218][ T7055] netlink: 252 bytes leftover after parsing attributes in process `syz.1.293'. [ 240.681975][ T7055] netlink: 52 bytes leftover after parsing attributes in process `syz.1.293'. [ 240.866329][ T30] audit: type=1400 audit(1777656029.049:360): avc: denied { relabelfrom } for pid=7044 comm="syz.3.291" name="RAW" dev="sockfs" ino=14483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.894803][ T7054] SELinux: Context system_u:object_r:udev_rules_t:s0 is not valid (left unmapped). [ 240.921259][ T30] audit: type=1400 audit(1777656029.079:361): avc: denied { unlink } for pid=7044 comm="syz.3.291" name="#1" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 241.112699][ T5714] usb 1-1: USB disconnect, device number 10 [ 241.177070][ T30] audit: type=1400 audit(1777656029.159:362): avc: denied { relabelto } for pid=7044 comm="syz.3.291" name="RAW" dev="sockfs" ino=14483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="system_u:object_r:udev_rules_t:s0" [ 241.391623][ T30] audit: type=1400 audit(1777656029.429:363): avc: denied { mount } for pid=7044 comm="syz.3.291" name="/" dev="overlay" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 241.484399][ T30] audit: type=1400 audit(1777656029.629:364): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 242.881069][ T7070] netlink: 'syz.4.297': attribute type 10 has an invalid length. [ 242.890976][ T7070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.297'. [ 242.903948][ T7070] bridge0: port 3(5ÿ) entered blocking state [ 242.911036][ T7070] bridge0: port 3(5ÿ) entered disabled state [ 242.918297][ T7070] ÿ: entered allmulticast mode [ 242.942030][ T7070] ÿ: entered promiscuous mode [ 242.948859][ T7072] ±ÿ: renamed from lo [ 243.085666][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.299'. [ 243.106306][ T7079] netlink: 72 bytes leftover after parsing attributes in process `syz.1.299'. [ 243.881788][ T7088] netlink: 'syz.1.299': attribute type 21 has an invalid length. [ 243.897056][ T7088] IPv6: NLM_F_CREATE should be specified when creating new route [ 243.907222][ T7082] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 244.450405][ T7096] netlink: 136 bytes leftover after parsing attributes in process `syz.1.303'. [ 244.474178][ T7091] ALSA: mixer_oss: invalid OSS volume 'zkaller' [ 246.560862][ T5619] Bluetooth: hci0: command 0x0401 tx timeout [ 247.198112][ T7109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.307'. [ 247.234333][ T7109] netlink: 72 bytes leftover after parsing attributes in process `syz.1.307'. [ 248.204132][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 248.220415][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 248.251076][ T7123] netlink: 'syz.1.307': attribute type 21 has an invalid length. [ 248.305470][ T7122] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.314228][ T7122] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.393333][ T7122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.404660][ T7122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.516725][ T47] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.544649][ T47] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.582765][ T47] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.619563][ T47] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.629489][ T5714] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 248.791981][ T5714] usb 5-1: Using ep0 maxpacket: 8 [ 248.811239][ T5714] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 248.834560][ T5714] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.867231][ T5714] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 248.884871][ T5714] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 248.897308][ T5714] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.024040][ T5721] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 249.191419][ T5814] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 249.307821][ T5714] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 249.318032][ T5721] usb 2-1: device descriptor read/64, error -71 [ 249.328162][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.402972][ T5814] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 249.423171][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33808, setting to 1024 [ 249.442362][ T5814] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 249.456499][ T5814] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 249.489438][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.506536][ T5814] usb 3-1: config 0 descriptor?? [ 249.520050][ T7136] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 249.560856][ T5721] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 249.580967][ T5714] usb 5-1: GET_CAPABILITIES returned 0 [ 249.589977][ T5714] usbtmc 5-1:16.0: can't read capabilities [ 249.701519][ T30] audit: type=1400 audit(1777656037.879:365): avc: denied { read } for pid=7139 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 249.702597][ T5721] usb 2-1: device descriptor read/64, error -71 [ 249.806808][ T5735] usb 5-1: USB disconnect, device number 8 [ 249.844450][ T5721] usb usb2-port1: attempt power cycle [ 249.947231][ T7136] tmpfs: Unknown parameter '' [ 249.956732][ T5814] usbhid 3-1:0.0: can't add hid device: -71 [ 249.971888][ T5814] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 249.997276][ T5814] usb 3-1: USB disconnect, device number 10 [ 250.069261][ T7154] netlink: 136 bytes leftover after parsing attributes in process `syz.0.317'. [ 250.340517][ T5721] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 250.993001][ T30] audit: type=1400 audit(1777656039.159:366): avc: denied { unmount } for pid=5624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 251.011082][ T5721] usb 2-1: device descriptor read/8, error -71 [ 251.250518][ T5721] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 251.331501][ T7163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.322'. [ 251.331798][ T5721] usb 2-1: device descriptor read/8, error -71 [ 251.342979][ T7163] netlink: 72 bytes leftover after parsing attributes in process `syz.0.322'. [ 251.386669][ T7165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.318'. [ 251.429460][ T7167] fuse: Bad value for 'fd' [ 251.430195][ T7165] team0: No ports can be present during mode change [ 251.489109][ T7163] netlink: 'syz.0.322': attribute type 21 has an invalid length. [ 251.511089][ T5721] usb usb2-port1: unable to enumerate USB device [ 251.606332][ T30] audit: type=1400 audit(1777656039.789:367): avc: denied { mounton } for pid=7170 comm="syz.0.324" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 251.690557][ T5714] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 251.794425][ T5814] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 251.810216][ T7173] FAULT_INJECTION: forcing a failure. [ 251.810216][ T7173] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 251.825526][ T7173] CPU: 0 UID: 0 PID: 7173 Comm: syz.1.325 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.825549][ T7173] Tainted: [L]=SOFTLOCKUP [ 251.825553][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.825575][ T7173] Call Trace: [ 251.825582][ T7173] [ 251.825589][ T7173] dump_stack_lvl+0x100/0x190 [ 251.825612][ T7173] should_fail_ex.cold+0x5/0xa [ 251.825640][ T7173] ? prepare_alloc_pages+0x16d/0x5f0 [ 251.825658][ T7173] should_fail_alloc_page+0xeb/0x140 [ 251.825672][ T7173] prepare_alloc_pages+0x1f0/0x5f0 [ 251.825687][ T7173] ? __lock_acquire+0x4a5/0x2630 [ 251.825706][ T7173] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 251.825726][ T7173] ? __lock_acquire+0x4a5/0x2630 [ 251.825745][ T7173] ? __lock_acquire+0x4a5/0x2630 [ 251.825762][ T7173] ? __bfs+0x150/0x2a0 [ 251.825774][ T7173] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 251.825797][ T7173] ? __lock_acquire+0x4a5/0x2630 [ 251.825818][ T7173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.825835][ T7173] ? policy_nodemask+0xed/0x4f0 [ 251.825850][ T7173] alloc_pages_mpol+0x1fb/0x540 [ 251.825865][ T7173] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 251.825885][ T7173] ? __lock_acquire+0x4a5/0x2630 [ 251.825902][ T7173] folio_alloc_mpol_noprof+0x36/0x260 [ 251.825919][ T7173] vma_alloc_folio_noprof+0xed/0x1d0 [ 251.825934][ T7173] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 251.825955][ T7173] do_anonymous_page+0xb46/0x2050 [ 251.825974][ T7173] ? rcu_read_unlock+0x2d/0xb0 [ 251.825996][ T7173] __handle_mm_fault+0x1d2c/0x2a00 [ 251.826016][ T7173] ? mt_find+0x45e/0x8e0 [ 251.826032][ T7173] ? __pfx___handle_mm_fault+0x10/0x10 [ 251.826048][ T7173] ? __pfx_mt_find+0x10/0x10 [ 251.826071][ T7173] ? find_vma+0xbf/0x140 [ 251.826083][ T7173] ? __pfx_find_vma+0x10/0x10 [ 251.826097][ T7173] handle_mm_fault+0x36d/0xa20 [ 251.826117][ T7173] do_user_addr_fault+0x74c/0x12f0 [ 251.826138][ T7173] ? trace_page_fault_kernel+0x7a/0x200 [ 251.826156][ T7173] exc_page_fault+0x6f/0xd0 [ 251.826171][ T7173] asm_exc_page_fault+0x26/0x30 [ 251.826184][ T7173] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 251.826204][ T7173] Code: 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 251.826216][ T7173] RSP: 0018:ffffc9000d7778e8 EFLAGS: 00050202 [ 251.826227][ T7173] RAX: 0000000000000001 RBX: 00000000000003ae RCX: 00000000000003ae [ 251.826235][ T7173] RDX: 0000000000000001 RSI: ffff888036c78000 RDI: 0000200000004980 [ 251.826242][ T7173] RBP: ffffc9000d777af8 R08: 0000000000000000 R09: ffffed1006d8f075 [ 251.826250][ T7173] R10: ffff888036c783ad R11: 0000000000000000 R12: ffff888036c78000 [ 251.826257][ T7173] R13: 0000000000000000 R14: 0000200000004980 R15: 00000000000003ae [ 251.826273][ T7173] _copy_to_iter+0x4c5/0x1720 [ 251.826296][ T7173] ? __pfx__copy_to_iter+0x10/0x10 [ 251.826312][ T7173] ? snd_seq_info_clients_read+0x672/0x940 [ 251.826335][ T7173] seq_read_iter+0xdab/0x1270 [ 251.826358][ T7173] seq_read+0x33b/0x4c0 [ 251.826372][ T7173] ? __pfx_seq_read+0x10/0x10 [ 251.826386][ T7173] ? __lock_acquire+0x4a5/0x2630 [ 251.826403][ T7173] ? import_ubuf+0x1b6/0x220 [ 251.826421][ T7173] ? selinux_file_permission+0x8f/0x6d0 [ 251.826440][ T7173] ? __pfx_seq_read+0x10/0x10 [ 251.826454][ T7173] proc_reg_read+0x240/0x330 [ 251.826473][ T7173] ? __pfx_proc_reg_read+0x10/0x10 [ 251.826488][ T7173] vfs_readv+0x5d8/0x8d0 [ 251.826505][ T7173] ? __pfx_vfs_readv+0x10/0x10 [ 251.826517][ T7173] ? find_held_lock+0x2b/0x80 [ 251.826528][ T7173] ? ksys_write+0x190/0x250 [ 251.826551][ T7173] ? __fget_files+0x21f/0x3d0 [ 251.826570][ T7173] ? do_readv+0x13e/0x340 [ 251.826580][ T7173] do_readv+0x13e/0x340 [ 251.826592][ T7173] ? __pfx_do_readv+0x10/0x10 [ 251.826604][ T7173] ? rcu_is_watching+0x12/0xc0 [ 251.826626][ T7173] do_syscall_64+0x10b/0xf80 [ 251.826640][ T7173] ? clear_bhb_loop+0x40/0x90 [ 251.826655][ T7173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.826667][ T7173] RIP: 0033:0x7f9072d9cdd9 [ 251.826680][ T7173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.826692][ T7173] RSP: 002b:00007f9073c34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 251.826702][ T7173] RAX: ffffffffffffffda RBX: 00007f9073015fa0 RCX: 00007f9072d9cdd9 [ 251.826710][ T7173] RDX: 0000000000000001 RSI: 00002000000038c0 RDI: 0000000000000006 [ 251.826717][ T7173] RBP: 00007f9073c34090 R08: 0000000000000000 R09: 0000000000000000 [ 251.826724][ T7173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.826731][ T7173] R13: 00007f9073016038 R14: 00007f9073015fa0 R15: 00007ffdaa66f6c8 [ 251.826748][ T7173] [ 252.344863][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 252.355611][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 252.367278][ T5714] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 252.377144][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.393711][ T5714] usb 3-1: config 0 descriptor?? [ 252.509808][ T5814] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 252.541288][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.557824][ T5814] usb 4-1: Product: syz [ 252.573927][ T5814] usb 4-1: Manufacturer: syz [ 252.585327][ T5814] usb 4-1: SerialNumber: syz [ 252.642787][ T7165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.651931][ T7165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.702383][ T7179] mmap: syz.0.328 (7179): VmData 37593088 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 252.791252][ T7183] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 253.079999][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 253.175937][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 253.243298][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 253.294038][ T7189] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 253.308332][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 253.426098][ T7195] loop7: detected capacity change from 0 to 16384 [ 253.432346][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 253.472196][ T5714] ath6kl: Failed to submit usb control message: -110 [ 253.489008][ T5714] ath6kl: unable to send the bmi data to the device: -110 [ 253.517556][ T5714] ath6kl: Unable to send get target info: -110 [ 253.549475][ T5714] ath6kl: Failed to init ath6kl core: -110 [ 253.576230][ T5814] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 253.622284][ T5714] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 253.697033][ T5814] usb 4-1: USB disconnect, device number 8 [ 253.844405][ T7199] netlink: 136 bytes leftover after parsing attributes in process `syz.1.332'. [ 254.218406][ T30] audit: type=1400 audit(1777656042.389:368): avc: denied { setopt } for pid=7200 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 254.320837][ T5814] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 254.791103][ T5814] usb 4-1: Using ep0 maxpacket: 8 [ 254.803197][ T5814] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 254.815316][ T5814] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 254.866091][ T5814] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 254.895563][ T5814] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 254.980573][ T5714] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 255.151085][ T5714] usb 5-1: device descriptor read/64, error -71 [ 255.192094][ T5721] usb 3-1: USB disconnect, device number 11 [ 255.486889][ T5714] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 255.684373][ T5714] usb 5-1: device descriptor read/64, error -71 [ 255.828023][ T30] audit: type=1400 audit(1777656044.009:369): avc: denied { getopt } for pid=7209 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.871239][ T5714] usb usb5-port1: attempt power cycle [ 256.080160][ T5814] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.263972][ T5714] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 256.312111][ T5714] usb 5-1: device descriptor read/8, error -71 [ 256.364260][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.371872][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.621534][ T5714] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 256.651688][ T5714] usb 5-1: device descriptor read/8, error -71 [ 256.789864][ T5714] usb usb5-port1: unable to enumerate USB device [ 256.797405][ T5814] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.827268][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.851204][ T5814] usb 4-1: can't set config #16, error -71 [ 256.860296][ T5814] usb 4-1: USB disconnect, device number 9 [ 257.169122][ T30] audit: type=1400 audit(1777656045.349:370): avc: denied { read } for pid=7227 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 257.502451][ T29] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 258.202122][ T7236] overlayfs: missing 'lowerdir' [ 258.300800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 259.409494][ T29] usb 3-1: too many configurations: 72, using maximum allowed: 8 [ 259.430612][ T7235] netlink: 136 bytes leftover after parsing attributes in process `syz.0.344'. [ 259.679034][ T29] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 259.705215][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.845904][ T29] usb 3-1: config 0 descriptor?? [ 260.742950][ T7251] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 260.803922][ T7253] ALSA: mixer_oss: invalid OSS volume 'zkaller' [ 260.868208][ T10] usb 3-1: USB disconnect, device number 12 [ 262.143029][ T7264] netlink: 72 bytes leftover after parsing attributes in process `syz.1.350'. [ 262.214048][ T7264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.350'. [ 262.270258][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 262.750559][ T5619] Bluetooth: hci0: command 0x0401 tx timeout [ 263.256652][ T7281] netlink: 2 bytes leftover after parsing attributes in process `syz.1.355'. [ 264.366393][ T7282] netlink: 136 bytes leftover after parsing attributes in process `syz.3.356'. [ 268.445149][ T7300] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 269.202020][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 269.416963][ T7312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.361'. [ 269.433079][ T7312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.361'. [ 269.453885][ T7312] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 269.474564][ T10] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 269.483363][ T10] usb 4-1: config 0 has no interface number 0 [ 269.569789][ T30] audit: type=1400 audit(1777656057.749:371): avc: denied { ioctl } for pid=7308 comm="syz.0.362" path="socket:[14905]" dev="sockfs" ino=14905 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.590216][ T10] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 12064, setting to 64 [ 269.607061][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 269.619502][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 269.628925][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 269.636589][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 269.644284][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 269.656834][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 269.666492][ T10] usb 4-1: string descriptor 0 read error: -32 [ 269.675147][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 269.687566][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.804205][ T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 269.804413][ T5619] Bluetooth: hci0: command 0x0401 tx timeout [ 270.292333][ T10] usb 4-1: config 0 descriptor?? [ 270.528530][ T10] usb 4-1: can't set config #0, error -71 [ 271.066227][ T10] usb 4-1: USB disconnect, device number 10 [ 272.730594][ T29] usb 5-1: device not accepting address 13, error -71 [ 272.815516][ T7325] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 275.155311][ T30] audit: type=1400 audit(1777656063.319:372): avc: denied { create } for pid=7328 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.275608][ T30] audit: type=1400 audit(1777656063.319:373): avc: denied { ioctl } for pid=7328 comm="syz.0.367" path="socket:[14940]" dev="sockfs" ino=14940 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.355903][ T30] audit: type=1400 audit(1777656063.499:374): avc: denied { ioctl } for pid=7336 comm="syz.4.369" path="socket:[15706]" dev="sockfs" ino=15706 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 275.388625][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 275.397861][ T7340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.368'. [ 275.425688][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 275.435246][ T7340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.368'. [ 275.482381][ T7342] ALSA: mixer_oss: invalid OSS volume 'zkaller' [ 275.494935][ T7340] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 275.651639][ T7324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=7324 comm=syz.3.364 [ 277.612156][ T7348] netlink: 136 bytes leftover after parsing attributes in process `syz.4.370'. [ 280.947205][ T30] audit: type=1400 audit(1777656069.129:375): avc: denied { read } for pid=7359 comm="syz.0.376" path="socket:[15024]" dev="sockfs" ino=15024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 282.436711][ T7374] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 282.535551][ T7378] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 282.574172][ T30] audit: type=1400 audit(1777656070.749:376): avc: denied { create } for pid=7381 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 283.085349][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 283.094555][ T7387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.381'. [ 283.201345][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.220489][ T5814] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 283.311541][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 283.321141][ T7387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.381'. [ 283.378354][ T7388] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 283.477546][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 283.880777][ T5619] Bluetooth: hci0: command 0x0401 tx timeout [ 283.936131][ T7387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=7387 comm=syz.3.381 [ 283.956567][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.030196][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.103198][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.179060][ T7390] smc: removing ib device syz2 [ 284.292760][ T7390] smbdirect: ib_dev[syz2] removed [ 284.929695][ T7390] ------------[ cut here ]------------ [ 284.937589][ T7390] !xa_empty(&pool->xa) [ 284.937601][ T7390] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.4.382/7390 [ 284.953933][ T7390] Modules linked in: [ 284.958492][ T7390] CPU: 0 UID: 0 PID: 7390 Comm: syz.4.382 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.969692][ T7390] Tainted: [L]=SOFTLOCKUP [ 284.974049][ T7390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.984977][ T7390] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 284.990768][ T7390] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 f6 d1 4f f9 5b c3 cc cc cc cc e8 eb d1 4f f9 90 <0f> 0b 90 e8 e2 d1 4f f9 5b c3 cc cc cc cc e8 f7 8a bd f9 eb d0 0f [ 285.014070][ T7390] RSP: 0018:ffffc90006d1f160 EFLAGS: 00010246 [ 285.021338][ T7390] RAX: 0000000000080000 RBX: ffff8880788d9398 RCX: ffffc9000ec62000 [ 285.030500][ T7390] RDX: 0000000000080000 RSI: ffffffff88b8b9b5 RDI: ffff8880788d9418 [ 285.039000][ T7390] RBP: ffffffff88b71710 R08: 0000000000000005 R09: 0000000000000001 [ 285.047559][ T7390] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880788d8698 [ 285.055787][ T7390] R13: ffff8880788d7fe0 R14: ffff8880788d7fe0 R15: ffff8880788d90f8 [ 285.064111][ T7390] FS: 00007f83367106c0(0000) GS:ffff888124376000(0000) knlGS:0000000000000000 [ 285.075098][ T7390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.082072][ T7390] CR2: 0000200000280030 CR3: 0000000074a5b000 CR4: 00000000003526f0 [ 285.091642][ T7390] Call Trace: [ 285.095821][ T7390] [ 285.099527][ T7390] rxe_dealloc+0x25/0xc0 [ 285.104004][ T7390] ib_dealloc_device+0x49/0x230 [ 285.109134][ T7390] __ib_unregister_device+0x396/0x480 [ 285.115291][ T7390] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 285.121280][ T7390] ib_unregister_device_and_put+0x5a/0x80 [ 285.127088][ T7390] nldev_dellink+0x2a7/0x3c0 [ 285.132526][ T7390] ? __pfx_nldev_dellink+0x10/0x10 [ 285.137975][ T7390] ? rcu_is_watching+0x12/0xc0 [ 285.143125][ T7390] ? cap_capable+0x10b/0x440 [ 285.148006][ T7390] ? bpf_lsm_capable+0x9/0x10 [ 285.152888][ T7390] ? security_capable+0x80/0x260 [ 285.157917][ T7390] ? ns_capable+0xd2/0xf0 [ 285.162680][ T7390] ? __pfx_nldev_dellink+0x10/0x10 [ 285.168085][ T7390] rdma_nl_rcv_msg+0x392/0x6f0 [ 285.172933][ T7390] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 285.178264][ T7390] ? __lock_acquire+0x4a5/0x2630 [ 285.183765][ T7390] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 285.190298][ T7390] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 285.197542][ T7390] ? netlink_deliver_tap+0x1ae/0xcc0 [ 285.202903][ T7390] netlink_unicast+0x585/0x850 [ 285.208109][ T7390] ? __pfx_netlink_unicast+0x10/0x10 [ 285.213523][ T7390] netlink_sendmsg+0x8b0/0xda0 [ 285.218291][ T7390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.223849][ T7390] ? __might_fault+0x90/0x140 [ 285.228803][ T7390] ____sys_sendmsg+0x9e1/0xb70 [ 285.234390][ T7390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.239819][ T7390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.246594][ T7390] ? __pfx_futex_wake_mark+0x10/0x10 [ 285.252108][ T7390] ___sys_sendmsg+0x190/0x1e0 [ 285.257247][ T7390] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.265118][ T7390] __sys_sendmsg+0x170/0x220 [ 285.269982][ T7390] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.275251][ T7390] ? __x64_sys_futex+0x34f/0x4d0 [ 285.280283][ T7390] ? rcu_is_watching+0x12/0xc0 [ 285.285757][ T7390] do_syscall_64+0x10b/0xf80 [ 285.290652][ T7390] ? clear_bhb_loop+0x40/0x90 [ 285.295725][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.305830][ T7390] RIP: 0033:0x7f833579cdd9 [ 285.310502][ T7390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.330836][ T7390] RSP: 002b:00007f8336710028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.341491][ T7390] RAX: ffffffffffffffda RBX: 00007f8335a15fa0 RCX: 00007f833579cdd9 [ 285.350259][ T7390] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 285.358750][ T7390] RBP: 00007f8335832d69 R08: 0000000000000000 R09: 0000000000000000 [ 285.367591][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.376344][ T7390] R13: 00007f8335a16038 R14: 00007f8335a15fa0 R15: 00007fff46f2e258 [ 285.386235][ T7390] [ 285.389348][ T7390] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 285.396642][ T7390] CPU: 0 UID: 0 PID: 7390 Comm: syz.4.382 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.408377][ T7390] Tainted: [L]=SOFTLOCKUP [ 285.412699][ T7390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.422932][ T7390] Call Trace: [ 285.427501][ T7390] [ 285.430444][ T7390] dump_stack_lvl+0x100/0x190 [ 285.435188][ T7390] vpanic+0x552/0x970 [ 285.439255][ T7390] ? __pfx_vpanic+0x10/0x10 [ 285.446371][ T7390] panic+0xd1/0xe0 [ 285.450363][ T7390] ? __pfx_panic+0x10/0x10 [ 285.455088][ T7390] check_panic_on_warn.cold+0x19/0x34 [ 285.460852][ T7390] ? rxe_pool_cleanup+0x46/0x60 [ 285.466791][ T7390] __warn.cold+0x191/0x328 [ 285.471228][ T7390] __report_bug+0x296/0x3d0 [ 285.475735][ T7390] ? rxe_pool_cleanup+0x46/0x60 [ 285.483211][ T7390] ? __pfx___report_bug+0x10/0x10 [ 285.488355][ T7390] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 285.495932][ T7390] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 285.504524][ T7390] ? __flush_workqueue+0x426/0x1200 [ 285.509890][ T7390] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 285.515702][ T7390] ? rxe_pool_cleanup+0x46/0x60 [ 285.520926][ T7390] report_bug+0xb2/0x220 [ 285.526803][ T7390] ? rxe_pool_cleanup+0x46/0x60 [ 285.532280][ T7390] handle_bug+0x16a/0x2a0 [ 285.537248][ T7390] exc_invalid_op+0x17/0x50 [ 285.542002][ T7390] asm_exc_invalid_op+0x1a/0x20 [ 285.548080][ T7390] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 285.553545][ T7390] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 f6 d1 4f f9 5b c3 cc cc cc cc e8 eb d1 4f f9 90 <0f> 0b 90 e8 e2 d1 4f f9 5b c3 cc cc cc cc e8 f7 8a bd f9 eb d0 0f [ 285.575907][ T7390] RSP: 0018:ffffc90006d1f160 EFLAGS: 00010246 [ 285.583684][ T7390] RAX: 0000000000080000 RBX: ffff8880788d9398 RCX: ffffc9000ec62000 [ 285.592299][ T7390] RDX: 0000000000080000 RSI: ffffffff88b8b9b5 RDI: ffff8880788d9418 [ 285.600458][ T7390] RBP: ffffffff88b71710 R08: 0000000000000005 R09: 0000000000000001 [ 285.608597][ T7390] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880788d8698 [ 285.616781][ T7390] R13: ffff8880788d7fe0 R14: ffff8880788d7fe0 R15: ffff8880788d90f8 [ 285.624833][ T7390] ? __pfx_rxe_dealloc+0x10/0x10 [ 285.629955][ T7390] ? rxe_pool_cleanup+0x45/0x60 [ 285.634821][ T7390] rxe_dealloc+0x25/0xc0 [ 285.639059][ T7390] ib_dealloc_device+0x49/0x230 [ 285.643944][ T7390] __ib_unregister_device+0x396/0x480 [ 285.650801][ T7390] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 285.657157][ T7390] ib_unregister_device_and_put+0x5a/0x80 [ 285.664132][ T7390] nldev_dellink+0x2a7/0x3c0 [ 285.668940][ T7390] ? __pfx_nldev_dellink+0x10/0x10 [ 285.674523][ T7390] ? rcu_is_watching+0x12/0xc0 [ 285.679304][ T7390] ? cap_capable+0x10b/0x440 [ 285.683945][ T7390] ? bpf_lsm_capable+0x9/0x10 [ 285.689426][ T7390] ? security_capable+0x80/0x260 [ 285.694541][ T7390] ? ns_capable+0xd2/0xf0 [ 285.699154][ T7390] ? __pfx_nldev_dellink+0x10/0x10 [ 285.704509][ T7390] rdma_nl_rcv_msg+0x392/0x6f0 [ 285.709693][ T7390] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 285.715204][ T7390] ? __lock_acquire+0x4a5/0x2630 [ 285.720174][ T7390] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 285.727017][ T7390] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 285.734162][ T7390] ? netlink_deliver_tap+0x1ae/0xcc0 [ 285.739582][ T7390] netlink_unicast+0x585/0x850 [ 285.744487][ T7390] ? __pfx_netlink_unicast+0x10/0x10 [ 285.749829][ T7390] netlink_sendmsg+0x8b0/0xda0 [ 285.754981][ T7390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.760447][ T7390] ? __might_fault+0x90/0x140 [ 285.765328][ T7390] ____sys_sendmsg+0x9e1/0xb70 [ 285.770286][ T7390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.775684][ T7390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.781097][ T7390] ? __pfx_futex_wake_mark+0x10/0x10 [ 285.786721][ T7390] ___sys_sendmsg+0x190/0x1e0 [ 285.791423][ T7390] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.796877][ T7390] __sys_sendmsg+0x170/0x220 [ 285.801556][ T7390] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.807066][ T7390] ? __x64_sys_futex+0x34f/0x4d0 [ 285.812057][ T7390] ? rcu_is_watching+0x12/0xc0 [ 285.816920][ T7390] do_syscall_64+0x10b/0xf80 [ 285.821617][ T7390] ? clear_bhb_loop+0x40/0x90 [ 285.827575][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.833667][ T7390] RIP: 0033:0x7f833579cdd9 [ 285.838531][ T7390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.859464][ T7390] RSP: 002b:00007f8336710028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.868345][ T7390] RAX: ffffffffffffffda RBX: 00007f8335a15fa0 RCX: 00007f833579cdd9 [ 285.876425][ T7390] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 285.885457][ T7390] RBP: 00007f8335832d69 R08: 0000000000000000 R09: 0000000000000000 [ 285.894283][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.902372][ T7390] R13: 00007f8335a16038 R14: 00007f8335a15fa0 R15: 00007fff46f2e258 [ 285.910563][ T7390] [ 285.914282][ T7390] Kernel Offset: disabled [ 285.918627][ T7390] Rebooting in 86400 seconds..