last executing test programs: 9.588153601s ago: executing program 3 (id=565): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000100)=""/21, 0x15, 0x0, &(0x7f0000000200)=""/199, 0xc7}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x148640, 0x78e22799f4a46f1e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$kcm(0x23, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000080)=0x1) write$tun(r6, &(0x7f0000000380)=ANY=[], 0x78) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) socket$nl_xfrm(0x10, 0x3, 0x6) openat(r5, 0x0, 0xc000, 0xa0) 7.882211582s ago: executing program 3 (id=568): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x400, 0x800004, 0x166}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r2 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x1, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000bc0)=@o_path={&(0x7f0000000b80)='./file0\x00', 0xffffffffffffffff, 0x4000, r2}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = signalfd4(r0, &(0x7f0000000140)={[0x2]}, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000063112002000000008510000002000000850000002100000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000000ec"], 0x1c}}, 0x0) r8 = syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1e0}}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x2000, @fd_index=0x3, 0x0, 0x0}) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0x0) syz_io_uring_submit(r12, r10, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x61, 0x0, @fd_index, 0x0, 0x0, 0x3, 0x8, 0x0, {0x0, r6}}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r8, 0xe, &(0x7f0000000b40)={0x5, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000600)=""/233, 0xe9}, {&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000380)=""/5, 0x5}, {&(0x7f0000000700)=""/114, 0x72}, {&(0x7f0000000980)=""/96, 0x60}, {&(0x7f0000000a00)=""/165, 0xa5}], &(0x7f00000003c0)=[0x3, 0x4000000000000000, 0x7, 0x0], 0x7}, 0x20) r13 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r13, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r13}) io_uring_enter(r0, 0x3517, 0x173d, 0x42, 0x0, 0x0) 7.148231235s ago: executing program 3 (id=573): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x2, 0x328, 0x140, 0xa8, 0xfeffffff, 0x140, 0x1e8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @local}}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.230559796s ago: executing program 3 (id=576): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb0102030109022400010000202f0904c40102fffd0180090502021002020000090582020002000000"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x1000, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'sit0\x00', 0x4}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) 4.500803815s ago: executing program 1 (id=581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000001940)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000020206425000036ff0d8f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000a8005e3c089f000000000000ca748216f7fe524d2694f99392cff39492f5a38349d208b97e0285da036510c314ac3eef2069886ee9b98a8763f1dbc177e5ffbadad099084343ea9ea896839402e9eabe4091fe133089aba0254c9a8fcb882fc35a87c600"/183], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000140)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x9, @mcast2, 0x2}}}, 0x30) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r10, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_io_uring_setup(0x1e7f, 0x0, &(0x7f0000000080), &(0x7f0000000000)) io_uring_enter(r12, 0x3512, 0xc2de, 0x44, 0x0, 0x0) splice(r8, 0x0, r11, 0x0, 0xf3a, 0x0) write$binfmt_misc(r11, &(0x7f0000000980), 0xfdef) splice(r6, 0x0, r11, 0x0, 0x80, 0x4) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.094264644s ago: executing program 3 (id=582): mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}, {}]}) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000009500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}], 0x2) 3.484927003s ago: executing program 1 (id=585): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x395180, 0x149) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000002) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000540)={0x1, 0x1, 0x8, 0x5, '\x00', '\x00', '\x00', 0x0, 0x7, 0x9, 0xc, "b6855a32474ffa64f778ddcf29c94337"}) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x9, 0x54083) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x1}) r5 = fsopen(&(0x7f0000000180)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f00000001c0)='hugetlb', &(0x7f0000000200)='./file0\x00', r3) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e21, 0xa19, @rand_addr=' \x01\x00', 0xa}}, 0x0, 0x0, 0x3d, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000000)=0xc, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c) 3.029358714s ago: executing program 3 (id=586): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, 0xee01, &(0x7f00000000c0)={0x0, 0x4, 0x2000200000a95c, 0x9, 0x40000001fe, 0x80000001, 0x200, 0xe, 0x800000e0}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f0000000240), 0x4003) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0xfb08, 0x280000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r7) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x240000) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120101000102030109022400010105800409040009210301010309211001080122df0309058186370310000c89fe0000000000000000"], 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028a40008e819310700000076003c9e", @ANYRES32=r6, @ANYBLOB="0c009900ff070000700000000500530001000000"], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x7, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.552604421s ago: executing program 0 (id=590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xffffff10, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000380)={0x5, 0x0, [{0x80000000, 0xc, 0x7, 0x4, 0xd13, 0x8, 0x6}, {0xc0000001, 0x8, 0x6, 0x1, 0x3, 0x4, 0x2}, {0x2, 0x9, 0x2, 0x81, 0xebc, 0x101, 0xee2a}, {0xc0000001, 0xb3e2, 0x0, 0xfff, 0x9, 0x7, 0x4}, {0xd, 0x6, 0x1, 0x0, 0x68a, 0xd, 0x8}]}) 2.442821956s ago: executing program 2 (id=591): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x3c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400e800}, 0x4004) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.206108187s ago: executing program 0 (id=592): r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002500)={{0x12, 0x1, 0x0, 0xeb, 0xe4, 0x45, 0x20, 0x93a, 0x2603, 0x5301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x96, 0xf3, 0x0, 0xd, 0x80, 0xde}}]}}]}}, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff000000000000040000002c150000000000000401fdfe71f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad05020a7ec910fc0200000000000000000000000000009308e80ec8b633e304ec000000001400000000000000290000003400000000000000000000001400000000000000290000000b0000000000000200000000280000000000000029000000390000003a02007000000000ff010000000000000000000000000001"], 0x150}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(r3, &(0x7f0000000580)=[{&(0x7f00000002c0)}, {&(0x7f0000000340)="9fd7cd64fcb1a5c98c9fa0be2013ee15cfa7090a7ccf8b712b5b028dd41c23bf14a47e200bf8d8e6636737d82a7e3161", 0x30}, {&(0x7f0000000540)="08272fefd7342af91f839fe095fb371e267aff64ca5cff829a9a9203530a", 0x1e}], 0x3, 0x3, 0x3) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x8, 0xdfcd) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2.003961617s ago: executing program 4 (id=593): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000940)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000000c0)) r3 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000004, 0x8, 0x1, 0xc05}) syz_clone3(&(0x7f00000006c0)={0x148a38a00, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) mq_timedreceive(r3, &(0x7f0000000140)=""/107, 0x6b, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000240)=0x4, 0x4) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400), 0x5e5601, 0x0) ioctl$sock_SIOCINQ(r5, 0x50009405, &(0x7f0000000f40)) recvmsg$kcm(r5, &(0x7f00000003c0)={&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000000340)=""/3, 0x2}], 0x1, &(0x7f00000008c0)=""/112, 0x70}, 0x40012083) sendmmsg$unix(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x810) sendmsg$kcm(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="1c044d7e4ba7da1d71c22f7e47003aa94eda33b2f79d49a04fad3fa37feade59bce7ccce481fc6f50d9528dc9f151f73cf662fed9ec65ebdb0dbb2d7b5fb68fbb1402d4ebb54253da345d2e4fffff44212e5bad3102ebc588227170b8733377992fb1095ba025a1eda933f4310d358aa58d4bfee66b201726f70ebc7d510db5ab37ab82415f8b38b1cc90701600b12bc246b56efb686af76970e8e24020ac4a1a10239101ad38b460092be50d3b5e98502fc709375250ef839bfa719596ced11a1585e22bbdd43cc7ec001f99714a59d9b8cbc695526bb", 0xd7}, {&(0x7f0000000540)="0f9cde024244cdc6c1e9489fd05178bfb96dbde0b521d1bf8f1d", 0x1a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000600)=[{0x48, 0x10, 0x9, "f9e2d11604c61f1be09c37425f0b96dd064b906cfa9bebd9c4cb2e5ffaaae70d9523399ae3bd96bd4d8868348ba328d65cd489107c9e"}, {0x70, 0x180, 0x3, "de17b7d1793537568da2f04d7b572337999848bf975453c430f2e341b3cccea160a51e16f1a136638d32e933d3f8df869daf87f9bc3c1572e540f12ae27bf8f597a78a7032fd5e102e34bed5edcf7fb6a2cb68759cbe9d2524b126"}, {0x108, 0x10d, 0x2, "d130f501d948fb4ecd175b4a946c655369382bb29121c5c29152153d80455254c350a696a94aa56cfee36568b777d91d0e2747b61490c8d4e476fb34a2978dd9dc1139b5f0bd9e5939ac685822e2f5e165bc24c7b9472059b866075dce1c10649bd42f081910b4679ecee74f330c12aff8370fa8169c9d5fd5fd4e6437ad06bdf99bbcac5a8bf0b52f0a3e82105b7cd02c0ce7e5dc126650533ce41eb2df44c386aa7f68695de8aa508075a785f2d4423b64b59e8ddd9a9b558bd52e36e1e90e4594f6431bd03cfd9b989dea806c142386c91202a2515d033a27cc24640e45aa98efec27e0a9ecdb22a846b1ebcdc81478d04310"}, {0x98, 0x111, 0x5, "c1f7c3d5a8ac58e89f439739a00c538aa23787107306d531f353238d06c2fc96dfd4c3550001c26d7b783d4a762a3533d06f1dcb5107a2bc07cad754d31bee67ee712b9c4b4ac1d8316ad71e8615072ddd8d6c9b620c6ad943a155a940de7e31db2fa10dd67d33a758c2b21688c33b11e88f259ccdc61cbfae50f35b383d76ee57fdca08d3edab"}], 0x258}, 0x0) 1.956294625s ago: executing program 2 (id=594): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xca, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x7f}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x2}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x12, 0x40, 0x1, 0x2, 0x7, 0x3}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 1.894853973s ago: executing program 1 (id=595): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="75b9a58c68be0208beca252388f7", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) setresuid(r2, r2, 0x0) pivot_root(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400000040000701fcffffff0000010001630000040042800c0001800600060065580000100002800c00038008003f"], 0x34}, 0x1, 0x0, 0x0, 0x4008094}, 0x8000) 1.684493123s ago: executing program 1 (id=596): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x6, @remote, 0x8}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000780)='.', 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e24, 0x4, @remote, 0x5}, 0x1c, &(0x7f0000001900)=[{&(0x7f00000000c0)="bd", 0x1}], 0x1}}], 0x2, 0x4040) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000440)="f7a3eb5f1c6f95844b216b12f89ffef1c993d1fe08aa47e9436e64abb96e1fbb526e9e0face4bd62bc986e2982a81af2e14d82d0509ecbd2310ceb3ed085bcce51ad46469000b82f8a5149252e0676fd422e6a65722600225399701a3ee81d4f2cfb1eeb4654662e5b2c9e1f800b6d391dbf7bdbd9fefea9d92a113418a275250d02e18cf80bf6a57a6393bc88e5b79dc113727fa5f7d19ee6570df4e5a02a70074fe6c827ce48ac157321e13e7805345781ccad488c50d54a516881acd315e27610ba6225fcaf9a1f925993f397265017e75b22f116710a92ae01bd94cf747264d65642a210ebe778c743e41d65f6d1b9e8ce", 0xf3, 0x80}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x4000) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a8400f9ca3a0406c6"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) 1.652044586s ago: executing program 1 (id=597): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0x402) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000400)={0x0, 0x1, 0x5, 0x103, 0x0, 0xffffffff, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8001) socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40820, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) r3 = socket(0xa, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000300)={&(0x7f00000000c0), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x3, 0x3a1, 0x5, {}, {r4, r5/1000+60000}, {0x4, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "f4b7d82676206953"}}, 0x48}, 0x1, 0x0, 0x0, 0x448d0}, 0x20000004) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 1.62544191s ago: executing program 2 (id=598): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = dup2(r1, r0) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24) 1.512587862s ago: executing program 0 (id=599): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x484}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) fcntl$dupfd(r0, 0x406, r0) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x484}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) (async) 1.446074924s ago: executing program 2 (id=600): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffd048, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.388796111s ago: executing program 2 (id=601): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b100c0000000000010902240001000060000904008002030000000921060400010005000905810320"], 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x40, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0x40082104, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0x40082104, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_cache\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_cache\x00') socket$inet_tcp(0x2, 0x1, 0x0) pread64(r3, &(0x7f0000000140)=""/43, 0x2b, 0x3c) (async) pread64(r3, &(0x7f0000000140)=""/43, 0x2b, 0x3c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8b0abe50c8fb226b33662869d37651cda2b2e0b545cce26726fae4770d7a5ba8d95151b06af3fb2294d9571015037515d4d520edb257582e631caff7f11174719643d7c2b5a794684e78e8d621d5149115c2a81793e82ab6cd9bc01aca38ffc589e9f2580cb1f43a6ad55c750a3c92a537e2f1"], 0x24}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="de5ba8232899d96b4812509bba54b2da43cb8783129b0d6ee48beaf23e149f53ea231b16791fe0f19810d23d9cd7373644065d1168a34989afc1", 0x3a) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="de5ba8232899d96b4812509bba54b2da43cb8783129b0d6ee48beaf23e149f53ea231b16791fe0f19810d23d9cd7373644065d1168a34989afc1", 0x3a) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x368, 0xa, 0x148, 0x0, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x1, 0x1, 0x0, 0x1], 0x3}, {0x3, [0x2, 0x6, 0x1, 0x0, 0x0, 0x3], 0x4}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) 1.060203081s ago: executing program 4 (id=602): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) (async, rerun: 32) syz_open_dev$vbi(&(0x7f00000003c0), 0x1, 0x2) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000340)) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) write$tun(0xffffffffffffffff, 0x0, 0x32) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x20200, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$qrtrtun(r3, &(0x7f0000000300)="ca", 0x1) (async, rerun: 64) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000030400000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="00080094073c97448747e8800b00010062726964676500000c001c0007000000ca447c000000000c002e00000000000100"/60], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1.045991396s ago: executing program 4 (id=603): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180400000000000400"/21], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180400000000000400"/21], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x22, 0x2, 0x3) (async) r3 = socket(0x22, 0x2, 0x3) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001600040026bd7000fbdbdf25165c11560a0088ff", @ANYRES32=0x0], 0x18}}, 0x20040800) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001600040026bd7000fbdbdf25165c11560a0088ff", @ANYRES32=0x0], 0x18}}, 0x20040800) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$can_raw(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0x2, 0x1, 0x0, 0x0, "054cded48f95b7b5"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xbab3fa9a080f6fe8) (async) sendmsg$can_raw(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0x2, 0x1, 0x0, 0x0, "054cded48f95b7b5"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xbab3fa9a080f6fe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000280)={'tunl0\x00', r5, 0x700, 0x80, 0x8, 0x3, {{0x1c, 0x4, 0x2, 0x39, 0x70, 0x67, 0x0, 0x81, 0x2f, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0x14, 0x45, 0x1, 0x0, [{@multicast1, 0x7}, {@remote, 0x8}]}, @end, @lsrr={0x83, 0x7, 0x22, [@dev={0xac, 0x14, 0x14, 0xb}]}, @generic={0x58, 0xe, "bbbdcfa499d5263f9a7c751a"}, @cipso={0x86, 0x21, 0xffffffffffffffff, [{0x1, 0x9, "41036f3f9f679e"}, {0x7, 0x4, "b8fc"}, {0x6, 0xe, "45b9ab6716f268cd7350d268"}]}, @rr={0x7, 0xf, 0xb2, [@loopback, @remote, @multicast2]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]}) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17000000070000008c00000001"], 0x50) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r12, &(0x7f0000000000), 0xd) (async) write$binfmt_misc(r12, &(0x7f0000000000), 0xd) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000180)=0x2) (async) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000180)=0x2) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xc1, 0x3}}, @filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffffff}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e24}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_CHAIN={0x8}]}, 0x98}}, 0x24044094) close_range(r7, 0xffffffffffffffff, 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) 980.448857ms ago: executing program 0 (id=604): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x8, 0x3, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}]}}]}, 0x58}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x800, 0x0, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @sched_cls, r2}, 0x94) userfaultfd(0x100000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, r3, 0x36, 0x2000}, 0x20) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) syz_open_dev$MSR(&(0x7f0000000000), 0x40000000000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f00000001c0)}, 0x10) 780.175301ms ago: executing program 0 (id=605): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80, 0xffc00000}}, './file0\x00'}) sendmsg$sock(r1, &(0x7f0000000640)={&(0x7f0000000040)=@x25, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)="1c149158c08d04c6da73db23db2087fca0bdb9e352b94b950ceea0d2cb5dea2f57a2ccf4d6ca9c23883faaa2104e2fdc2d8f0ba5b938866cd450f3b8ba9fce3e458247eb08b17ed0e71d0078dd642eed70dd6278afde2453b0f0fe009d6acc3a63599b9e680255b8c7273b09ac5babd1e44a8e159b0bc92c7b53111ac996cece84f623295097dcc085c901f3cb65e4ebc3c5a9851218a6314a0d30e8cb8f92f955496faa425fbf92886ea7299abe2301df150eac05aa402411d71aa2a4ea93eb48", 0xc1}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000280)="761bb5a23ecca593fc967a11c99df05814bd5ed1298f6eb94b8c82fdfb6b25be181885f8ac2dd4f6f0f17f8e81424d427b597037d08db3ae77c194e3c0b2aa0a5fa63ccb9a708fd21b90b05133479de1a7733330f4ab2275fba1c3fcc91978c72b4879d4cd531415f12dd1ef252a977d554b94df7e7d832d53aad930e936f3fe0bf87b311e7a5bb11e62e438ff12b6334d3525ab6e2f67513f102184fff296dab9eefc24b96365511d99bf772ea5111f1d8bb8b06653ad8624b076244c06a5f7fd161eec60fc6e79c7aa1e869e803eb88f2f8f2fa830861f924a844cd4c7df22422a", 0xe2}, {&(0x7f0000000380)="3a7482faca1769e48fe1b21d46cc906428c2dce512663e5ae46e2e306bab32c2cf26392af0f20ed4e9ae51df76efc0b6190431ba385cd8bb5fa3d6ac4f431df2d1fc05864ea1cf0a41baede23ceb0a3b1d2d235331a768a38138d8a45fea0edabfde5088df0aa01dc8a4399e5cfc394ad0d8", 0x72}, {&(0x7f0000000400)="ef7c06ffe048610c76cd4ae2468b6747146830c777f6e4039c998f3c199397fd2b9573ac63fa79bfb312a3cc230d33f616f2eb04735c3923990bcf385c69d55eb46ee80314b0bcecd5d5667dab6241", 0x4f}, {&(0x7f0000000480)="1c", 0x1}, {&(0x7f00000004c0)="40bdf8cef5776683c09a470611e1d694fdbff5fd044fc713426eefb2d710f6467174dc95976fa664f9f153100ed0c87037a3b1abd2351275d85b6e8d1447de8f6abb9782994605b6f9ffade93dd7e73d3b33cc00e79458ae6f86794be154066e541a69ece21346710d78b18deb00a2cf5c07a4c1304712d1a93f22bcaec2c36e61b192e2bdf66c62f6e4e10e687eb35f7a70ea48b01dee68d32ce1b4d6dfc69e9ecfea2352f66c69ab34f0bc85b0ab1a5553fe3a05", 0xb5}], 0x7, &(0x7f0000000600)}, 0x400c801) syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000680)=ANY=[@ANYBLOB="12015002000000206b1d01014000010203010902810003010440050904000000010100000a24010300420201020c2407040000eeb25a12b5f2072404060165e30904010000010200060904010101010200000905010940000203e007250180001100090402000001020000090402010101020000082402010703020c0724051804bc130905820900040a07070725010204d70053eaf7839f577b9bcfc8dad6a4950fd30275ee337c5e0b78fa86b0e8b586e5bc24f01cc98188f3a60404f0bf1b94c0fbfeb991c621098c57b0918a6d31a95f2bdf929e737a887d1abd1c9fd8e8cb0f01"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) 779.753097ms ago: executing program 4 (id=606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000e41e3707ffffffc9f3b65cd53caa41088579", @ANYRES64=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) (async) fcntl$setlease(r2, 0x400, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xfffc}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) (async, rerun: 64) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xde8b3c578d0616d0}, 0x40084) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, r3, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="37198e2fb61993fd16f67977a46f7c11"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f60137df0b8021a79bdb08b30c2bf0b2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="69c882129c806be50c00045a3b24a111"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d718e57db5c00ab72157d7d461715bda"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7bc570da56f3f5d0eb0db07d97210e3f"}]}]}, 0x90}}, 0x4804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 776.487021ms ago: executing program 1 (id=607): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = getpid() (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) (async, rerun: 32) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) (async, rerun: 32) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) (async) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) (async, rerun: 32) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201e3ffffffff000000000902e7b32a96703e642cb98f95a924bd86fdfe811944b28382db8e9e474a98e0da9a34364f532491c47395b16347984aa6409d9f9f985d6edf6e2357488568e7de90ea23e1c3936e39513cb58c9b35244608d880d3a66b3ef22bce2a50eb9d73329e1a3d3ca72fa53103d6e4b3f742a5f2ded24ed05b72df926705a3a20d4f0df86e26dc9f32316cba0efd52db"], 0x0) (rerun: 32) sched_setscheduler(0x0, 0x2, 0x0) (async) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async) open(&(0x7f00000001c0)='./file0\x00', 0x148640, 0x78e22799f4a46f1e) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) socket$packet(0x11, 0x3, 0x300) 684.725127ms ago: executing program 4 (id=608): syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYBLOB="ede3a9d333809fa2f259587e103eae0e2c6ff81f81eed92e9f6332bcbdf93c42ba90e2d606a31e5edb56214e6c50258f"], 0x0) 249.3668ms ago: executing program 0 (id=609): unshare(0x66000080) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0xffffffffffffff7a, 0x12, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xfd}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x2, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r6, 0x100000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xff4f, 0xffffffffffffff4f, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f00000001c000100feffffff00010000ff010000000000000000000000000001fc0100000000000000000000031ae5000000010001071c4e230009000000003a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffaffffff01000000000000008000000000350000020001002000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) pwritev(r0, &(0x7f0000001540)=[{&(0x7f0000000000)='\r', 0x1}], 0x1, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 197.116685ms ago: executing program 4 (id=610): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000440)}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$usbip_server(r3, &(0x7f0000001600)=ANY=[@ANYBLOB="00000003000000020000000000000001000000060000a86f000000230000000000000000000000060000000000000000a765dbb92e95e37168d50a1a110bb840ade99da1f7d07155893c48e97726d9f16999b2"], 0x53) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x2, 0x1, 0x5113, 0x8}) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x6, @remote, 0x8}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000780)='.', 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e24, 0x4, @remote, 0x5}, 0x1c, &(0x7f0000001900)=[{&(0x7f00000000c0)="bd", 0x1}], 0x1}}], 0x2, 0x4040) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64], 0x48}}, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5, {0xee00, 0xee01}}, './file0\x00'}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYBLOB="7d5e4572fa2c67c0b391326f4a52f8673783c58f69aae10776d3f7297b19cc4c301fb886396f92dd58baf7f24adfaafdb693e7e92955a85c1629e3d15c41b0d34cffa11209032f85192751e1ace69eb2c674ab35fd6c571909fb02a858b80195581606546f44a8abc432dd82a669"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) 0s ago: executing program 2 (id=611): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_setup(0x1966, &(0x7f0000000680)={0x0, 0xafff, 0x10, 0x6, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) (async) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'macvlan1\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f00000000c0)) recvmmsg(r4, &(0x7f0000004180)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40000000, 0x0) (async) mmap(&(0x7f000003f000/0x2000)=nil, 0x2000, 0x3, 0x110, r4, 0xc3609000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r6, r5, &(0x7f0000002700)=0x23, 0x1c) (async) get_mempolicy(0x0, 0x0, 0x721, &(0x7f0000394000/0x3000)=nil, 0x3) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x4, 0x2}}, 0x10) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) write$FUSE_INIT(r10, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x18394c44, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40}}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$BTRFS_IOC_RM_DEV(r12, 0x8008b705, 0x0) (async) syz_kvm_setup_cpu$x86(r10, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1a00000000ffffffff010073797a300000070008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a010400000000000000000200ffff2c000480280001800e00010044df696d6d65646961746500000014000280080001400000000008000280040002800900010073797a30000000000900100073797a32000000001400000011000100"/128], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): lock+0x10/0x10 [ 110.172484][ T6553] ? __pfx_vfs_read+0x10/0x10 [ 110.172511][ T6553] ? __fget_files+0x20e/0x3c0 [ 110.172539][ T6553] ksys_read+0x12a/0x250 [ 110.172558][ T6553] ? __pfx_ksys_read+0x10/0x10 [ 110.172581][ T6553] ? rcu_is_watching+0x12/0xc0 [ 110.172601][ T6553] do_syscall_64+0xcd/0xf80 [ 110.172624][ T6553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.172641][ T6553] RIP: 0033:0x7f6679d8e15c [ 110.172656][ T6553] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 110.172671][ T6553] RSP: 002b:00007f6677fb4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.172687][ T6553] RAX: ffffffffffffffda RBX: 00007f6679fe6180 RCX: 00007f6679d8e15c [ 110.172697][ T6553] RDX: 000000000000000f RSI: 00007f6677fb40a0 RDI: 000000000000000e [ 110.172707][ T6553] RBP: 00007f6677fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 110.172716][ T6553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.172725][ T6553] R13: 00007f6679fe6218 R14: 00007f6679fe6180 R15: 00007ffde7a96518 [ 110.172751][ T6553] [ 110.415115][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.423376][ T48] usb 3-1: Product: syz [ 110.427585][ T48] usb 3-1: Manufacturer: syz [ 110.432211][ T48] usb 3-1: SerialNumber: syz [ 110.444441][ T48] usb 3-1: config 0 descriptor?? [ 110.451706][ T48] ipw 3-1:0.192: IPWireless converter converter detected [ 110.461751][ T30] audit: type=1400 audit(1765811824.680:316): avc: denied { read } for pid=6554 comm="syz.4.144" path="socket:[10926]" dev="sockfs" ino=10926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.047483][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 111.089772][ T30] audit: type=1400 audit(1765811824.700:317): avc: denied { read } for pid=6554 comm="syz.4.144" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 111.134759][ T30] audit: type=1400 audit(1765811824.700:318): avc: denied { open } for pid=6554 comm="syz.4.144" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 111.161131][ T30] audit: type=1400 audit(1765811824.700:319): avc: denied { ioctl } for pid=6554 comm="syz.4.144" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 111.191745][ T30] audit: type=1326 audit(1765811824.810:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df5f8f749 code=0x7fc00000 [ 111.218613][ T30] audit: type=1400 audit(1765811824.960:321): avc: denied { connect } for pid=6554 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.248260][ T9] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 111.267743][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.288381][ T6558] syz.4.144 (6558) used greatest stack depth: 19176 bytes left [ 111.411042][ T9] usb 4-1: config 0 descriptor?? [ 112.009951][ T9] usb 4-1: selecting invalid altsetting 3 [ 112.014818][ T6580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.027635][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 112.146388][ T48] usb 3-1: USB disconnect, device number 8 [ 112.165291][ T48] ipw 3-1:0.192: device disconnected [ 112.308410][ T6580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.733223][ T6590] netlink: 7 bytes leftover after parsing attributes in process `syz.2.151'. [ 112.742234][ T6590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.151'. [ 112.851936][ T9] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 112.909266][ T9] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 113.036992][ T9] usb 4-1: USB disconnect, device number 10 [ 113.298461][ T6602] fuseblk: Unknown parameter '0x00000000000000040x000000000000000a' [ 113.729318][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 113.828563][ T6610] FAULT_INJECTION: forcing a failure. [ 113.828563][ T6610] name failslab, interval 1, probability 0, space 0, times 0 [ 113.842392][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 113.842403][ T30] audit: type=1400 audit(1765811828.068:328): avc: denied { write } for pid=6613 comm="syz.3.158" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 113.845739][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz.4.157 Not tainted syzkaller #0 PREEMPT(full) [ 113.845760][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.845768][ T6610] Call Trace: [ 113.845773][ T6610] [ 113.845779][ T6610] dump_stack_lvl+0x16c/0x1f0 [ 113.845803][ T6610] should_fail_ex+0x512/0x640 [ 113.845823][ T6610] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 113.845846][ T6610] should_failslab+0xc2/0x120 [ 113.845865][ T6610] kmem_cache_alloc_noprof+0x83/0x770 [ 113.845880][ T6610] ? skb_clone+0x190/0x3f0 [ 113.845900][ T6610] ? skb_clone+0x190/0x3f0 [ 113.845912][ T6610] skb_clone+0x190/0x3f0 [ 113.845927][ T6610] netlink_deliver_tap+0xabd/0xd30 [ 113.845955][ T6610] netlink_unicast+0x71f/0x870 [ 113.845976][ T6610] ? __pfx_netlink_unicast+0x10/0x10 [ 113.845993][ T6610] ? genl_rcv_msg+0x4bb/0x800 [ 113.846018][ T6610] netlink_ack+0x696/0xb80 [ 113.846041][ T6610] netlink_rcv_skb+0x332/0x420 [ 113.846057][ T6610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.846077][ T6610] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.846103][ T6610] ? netlink_deliver_tap+0x1ae/0xd30 [ 113.846122][ T6610] genl_rcv+0x28/0x40 [ 113.846138][ T6610] netlink_unicast+0x5aa/0x870 [ 113.846157][ T6610] ? __pfx_netlink_unicast+0x10/0x10 [ 113.846182][ T6610] netlink_sendmsg+0x8c8/0xdd0 [ 113.846203][ T6610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.846228][ T6610] ____sys_sendmsg+0xa5d/0xc30 [ 113.846247][ T6610] ? copy_msghdr_from_user+0x10a/0x160 [ 113.846261][ T6610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.846290][ T6610] ___sys_sendmsg+0x134/0x1d0 [ 113.846305][ T6610] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.846319][ T6610] ? __pfx___irq_work_queue_local+0x10/0x10 [ 113.846364][ T6610] __sys_sendmsg+0x16d/0x220 [ 113.846378][ T6610] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.846392][ T6610] ? __pfx_bpf_trace_run2+0x10/0x10 [ 113.846418][ T6610] ? syscall_trace_enter+0x1cb/0x220 [ 113.846440][ T6610] ? rcu_is_watching+0x12/0xc0 [ 113.846457][ T6610] do_syscall_64+0xcd/0xf80 [ 113.846476][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.846490][ T6610] RIP: 0033:0x7f32af78f749 [ 113.846502][ T6610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.846515][ T6610] RSP: 002b:00007f32b05cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.846529][ T6610] RAX: ffffffffffffffda RBX: 00007f32af9e5fa0 RCX: 00007f32af78f749 [ 113.846538][ T6610] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 113.846546][ T6610] RBP: 00007f32b05cb090 R08: 0000000000000000 R09: 0000000000000000 [ 113.846554][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.846562][ T6610] R13: 00007f32af9e6038 R14: 00007f32af9e5fa0 R15: 00007ffdf14f4728 [ 113.846584][ T6610] [ 114.156440][ T30] audit: type=1400 audit(1765811828.068:329): avc: denied { ioctl } for pid=6613 comm="syz.3.158" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.184314][ T30] audit: type=1400 audit(1765811828.418:330): avc: denied { read } for pid=6619 comm="syz.4.160" name="mouse0" dev="devtmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 114.211270][ T6623] 9p: Bad value for 'rfdno' [ 114.356240][ T30] audit: type=1400 audit(1765811828.548:331): avc: denied { bind } for pid=6628 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.562657][ T6635] hfs: can't find a HFS filesystem on dev nullb0 [ 114.571336][ T30] audit: type=1400 audit(1765811828.788:332): avc: denied { getopt } for pid=6632 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.733877][ T5815] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 114.747827][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'. [ 114.761297][ T30] audit: type=1400 audit(1765811828.988:333): avc: denied { create } for pid=6630 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 114.780633][ T30] audit: type=1400 audit(1765811828.988:334): avc: denied { write } for pid=6630 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.086483][ T5815] usb 2-1: device descriptor read/64, error -71 [ 115.798698][ T5873] kernel read not supported for file /binder/transactions (pid: 5873 comm: kworker/1:5) [ 115.997321][ T5815] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 116.239623][ T5815] usb 2-1: device descriptor read/64, error -71 [ 116.274156][ T30] audit: type=1400 audit(1765811830.507:335): avc: denied { ioctl } for pid=6655 comm="syz.3.170" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.359952][ T5815] usb usb2-port1: attempt power cycle [ 117.184184][ T30] audit: type=1400 audit(1765811830.507:336): avc: denied { set_context_mgr } for pid=6655 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 117.203946][ T30] audit: type=1400 audit(1765811830.507:337): avc: denied { map } for pid=6655 comm="syz.3.170" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.503537][ T5815] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 117.534364][ T6672] netlink: 'syz.0.175': attribute type 8 has an invalid length. [ 117.642437][ T5815] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 117.654635][ T6674] tipc: Started in network mode [ 117.660745][ T6674] tipc: Node identity 7a1fcc7e44db, cluster identity 4711 [ 117.674595][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.682431][ T6419] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 117.689969][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.702470][ T6674] tipc: Enabled bearer , priority 0 [ 117.703372][ T5815] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 117.723156][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.755638][ T6674] syzkaller0: entered promiscuous mode [ 117.770700][ T6674] syzkaller0: entered allmulticast mode [ 117.882359][ T6419] usb 5-1: Using ep0 maxpacket: 16 [ 117.889277][ T6419] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.900764][ T6419] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.910871][ T6419] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.924449][ T6419] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.933844][ T6419] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.990304][ T5815] usb 2-1: config 0 descriptor?? [ 118.008877][ T6419] usb 5-1: config 0 descriptor?? [ 118.187311][ T6678] tipc: Resetting bearer [ 118.196135][ T6673] tipc: Resetting bearer [ 118.248327][ T6673] tipc: Disabling bearer [ 118.708624][ T6669] mkiss: ax0: crc mode is auto. [ 118.954460][ T6692] fuse: Unknown parameter '000000000000000000000030x0000000000000004' [ 119.137947][ T5815] usbhid 2-1:0.0: can't add hid device: -71 [ 119.149378][ T5815] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 119.181573][ T5815] usb 2-1: USB disconnect, device number 12 [ 119.206715][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 120.103223][ T30] audit: type=1400 audit(1765811833.427:341): avc: denied { mount } for pid=6696 comm="syz.3.182" name="/" dev="autofs" ino=11977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 120.138034][ T6695] ptrace attach of "./syz-executor exec"[5821] was attempted by "./syz-executor exec"[6695] [ 120.314194][ T30] audit: type=1400 audit(1765811834.367:342): avc: denied { lock } for pid=6691 comm="syz.2.181" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 120.510447][ T30] audit: type=1400 audit(1765811834.637:343): avc: denied { setopt } for pid=6696 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.903133][ T6705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.183'. [ 120.907733][ T30] audit: type=1400 audit(1765811835.087:344): avc: denied { create } for pid=6691 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.956118][ T66] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.981091][ T66] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.988919][ T976] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.999634][ T6419] usbhid 5-1:0.0: can't add hid device: -71 [ 121.009563][ T30] audit: type=1400 audit(1765811835.087:345): avc: denied { setopt } for pid=6691 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.028920][ T6702] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 121.040396][ T6419] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 121.100821][ T6419] usb 5-1: USB disconnect, device number 12 [ 121.195011][ T6708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.184'. [ 121.209102][ T6702] usb 4-1: Using ep0 maxpacket: 32 [ 121.213777][ T6710] SELinux: syz.0.186 (6710) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 121.214732][ T976] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.245251][ T6702] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 121.258667][ T6702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.284636][ T6702] usb 4-1: config 0 descriptor?? [ 121.470507][ T6702] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 121.471168][ T6719] process 'syz.2.188' launched './file1' with NULL argv: empty string added [ 121.521693][ T30] audit: type=1400 audit(1765811835.747:346): avc: denied { execute_no_trans } for pid=6716 comm="syz.2.188" path="/41/file1" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.522489][ T5960] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 121.622128][ T6712] netlink: 1 bytes leftover after parsing attributes in process `syz.4.185'. [ 121.970114][ T6726] macsec1: entered promiscuous mode [ 121.975459][ T6726] macsec1: entered allmulticast mode [ 122.020538][ T976] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.072916][ T6702] gspca_vc032x: reg_w err -110 [ 122.200260][ T5960] usb 2-1: Using ep0 maxpacket: 8 [ 122.217891][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.229780][ T5960] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 122.260095][ T5960] usb 2-1: config 0 has no interface number 0 [ 122.352899][ T6728] 9p: Bad value for 'rfdno' [ 122.415622][ T5960] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 122.425579][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.433833][ T5960] usb 2-1: Product: syz [ 122.438795][ T5960] usb 2-1: Manufacturer: syz [ 122.443572][ T5960] usb 2-1: SerialNumber: syz [ 122.457639][ T5960] usb 2-1: config 0 descriptor?? [ 123.217353][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.553111][ T30] audit: type=1400 audit(1765811837.787:347): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 123.620014][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.629225][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.634600][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.640170][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.667547][ T6734] netlink: 'syz.3.191': attribute type 8 has an invalid length. [ 123.764628][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.770017][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.779253][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.785021][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.790317][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.795927][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.802341][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.807632][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.813913][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.820127][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.825611][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.830929][ T6702] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.836281][ T6702] gspca_vc032x: Unknown sensor... [ 123.841597][ T6702] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 123.857490][ T6702] usb 4-1: USB disconnect, device number 11 [ 124.752425][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 124.957854][ T5960] uvcvideo 2-1:0.31: Found Unit with invalid ID 0 [ 125.933517][ T5960] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 125.940808][ T5960] uvcvideo 2-1:0.31: No valid video chain found. [ 125.976571][ T5960] usb 2-1: USB disconnect, device number 13 [ 127.180966][ T30] audit: type=1400 audit(1765811840.767:348): avc: denied { create } for pid=6746 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 127.558960][ T6761] Malformed UNC in devname [ 127.558960][ T6761] [ 127.815559][ T30] audit: type=1400 audit(1765811841.657:349): avc: denied { read } for pid=6754 comm="syz.4.196" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.839082][ T30] audit: type=1400 audit(1765811841.657:350): avc: denied { open } for pid=6754 comm="syz.4.196" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.869860][ T6757] overlay: Unknown parameter '/' [ 127.891430][ T30] audit: type=1400 audit(1765811842.087:351): avc: denied { bind } for pid=6745 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.939990][ T6762] Malformed UNC in devname [ 127.939990][ T6762] [ 127.955226][ T6761] CIFS: VFS: Malformed UNC in devname [ 127.991360][ T30] audit: type=1400 audit(1765811842.087:352): avc: denied { name_bind } for pid=6745 comm="syz.1.194" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 128.033941][ T6762] CIFS: VFS: Malformed UNC in devname [ 128.132354][ T30] audit: type=1400 audit(1765811842.087:353): avc: denied { node_bind } for pid=6745 comm="syz.1.194" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 128.175539][ T30] audit: type=1400 audit(1765811842.087:354): avc: denied { connect } for pid=6745 comm="syz.1.194" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.222466][ T30] audit: type=1400 audit(1765811842.087:355): avc: denied { write } for pid=6745 comm="syz.1.194" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.248708][ T30] audit: type=1400 audit(1765811842.107:356): avc: denied { read } for pid=6745 comm="syz.1.194" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.325252][ T30] audit: type=1400 audit(1765811842.157:357): avc: denied { create } for pid=6763 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.464562][ T6774] ptrace attach of "./syz-executor exec"[5821] was attempted by "./syz-executor exec"[6774] [ 128.552518][ T6702] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 128.743428][ T6702] usb 5-1: Using ep0 maxpacket: 16 [ 128.758778][ T6702] usb 5-1: config 1 interface 0 has no altsetting 0 [ 128.779284][ T6702] usb 5-1: New USB device found, idVendor=0b05, idProduct=1869, bcdDevice= 0.40 [ 128.789132][ T6702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.798145][ T6702] usb 5-1: Product: syz [ 128.802954][ T6702] usb 5-1: Manufacturer: syz [ 128.807599][ T6702] usb 5-1: SerialNumber: syz [ 129.199920][ T6789] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 129.265954][ T5815] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 129.342609][ T976] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 129.460328][ T6702] usbhid 5-1:1.0: can't add hid device: -71 [ 129.467236][ T6702] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 129.486295][ T6702] usb 5-1: USB disconnect, device number 13 [ 129.572471][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 129.577706][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 129.594267][ T5815] usb 2-1: config 0 has no interfaces? [ 129.601617][ T976] usb 4-1: config 8 has an invalid interface number: 57 but max is 0 [ 129.697572][ T976] usb 4-1: config 8 has no interface number 0 [ 129.704214][ T976] usb 4-1: config 8 interface 57 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 129.715196][ T976] usb 4-1: config 8 interface 57 altsetting 5 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 129.728390][ T976] usb 4-1: config 8 interface 57 has no altsetting 0 [ 129.737368][ T5815] usb 2-1: New USB device found, idVendor=045e, idProduct=d357, bcdDevice=a7.7c [ 129.750557][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.761639][ T5815] usb 2-1: Product: syz [ 129.770645][ T976] usb 4-1: New USB device found, idVendor=39c6, idProduct=8f68, bcdDevice=dd.44 [ 129.793688][ T5815] usb 2-1: Manufacturer: syz [ 129.798348][ T5815] usb 2-1: SerialNumber: syz [ 129.803821][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.811879][ T976] usb 4-1: Product: syz [ 129.846214][ T976] usb 4-1: Manufacturer: syz [ 129.850987][ T976] usb 4-1: SerialNumber: syz [ 130.745445][ T5815] usb 2-1: config 0 descriptor?? [ 131.045127][ T5893] usb 2-1: USB disconnect, device number 14 [ 131.045831][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.086277][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.130291][ T976] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.146274][ T976] usb 4-1: MIDIStreaming interface descriptor not found [ 131.209829][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 131.242365][ T5960] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 131.244059][ T976] usb 4-1: USB disconnect, device number 12 [ 131.422515][ T5960] usb 1-1: Using ep0 maxpacket: 8 [ 131.448903][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.473889][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.499722][ T5960] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 131.519947][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.540390][ T5960] usb 1-1: config 0 descriptor?? [ 131.962606][ T5971] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 131.981050][ T5960] cherry 0003:046A:0027.0003: unknown main item tag 0x2 [ 131.990180][ T5960] cherry 0003:046A:0027.0003: unknown main item tag 0x0 [ 132.012743][ T5960] cherry 0003:046A:0027.0003: unknown main item tag 0x0 [ 132.043205][ T5960] cherry 0003:046A:0027.0003: unknown main item tag 0x0 [ 132.058973][ T5960] cherry 0003:046A:0027.0003: unknown main item tag 0x0 [ 132.073499][ T5960] cherry 0003:046A:0027.0003: unknown main item tag 0x0 [ 132.101791][ T5960] cherry 0003:046A:0027.0003: unknown main item tag 0x0 [ 132.110428][ T5971] usb 2-1: device descriptor read/64, error -71 [ 132.125819][ T5960] cherry 0003:046A:0027.0003: unknown main item tag 0x0 [ 132.139582][ T5960] cherry 0003:046A:0027.0003: unknown main item tag 0x0 [ 132.146732][ T5960] cherry 0003:046A:0027.0003: unknown main item tag 0x0 [ 132.163105][ T5960] cherry 0003:046A:0027.0003: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.0-1/input0 [ 132.344731][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.354980][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.361256][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.372462][ T5971] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 132.512496][ T5971] usb 2-1: device descriptor read/64, error -71 [ 132.623698][ T5971] usb usb2-port1: attempt power cycle [ 132.688284][ T5960] usb 1-1: USB disconnect, device number 9 [ 132.980102][ T5971] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 133.012758][ T5971] usb 2-1: device descriptor read/8, error -71 [ 133.249023][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.218'. [ 133.262338][ T5971] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 133.313708][ T5971] usb 2-1: device descriptor read/8, error -71 [ 133.434118][ T5971] usb usb2-port1: unable to enumerate USB device [ 133.629298][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 133.629374][ T30] audit: type=1400 audit(1765811847.857:370): avc: denied { write } for pid=6844 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.696206][ T30] audit: type=1400 audit(1765811847.927:371): avc: denied { getopt } for pid=6844 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.992384][ T5960] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 134.113338][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 134.114493][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 134.154043][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 134.161737][ T5960] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 134.174697][ T5960] usb 1-1: config 0 has no interface number 0 [ 134.183144][ T5960] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 134.192534][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.200608][ T5960] usb 1-1: Product: syz [ 134.205016][ T5960] usb 1-1: Manufacturer: syz [ 134.209666][ T5960] usb 1-1: SerialNumber: syz [ 134.217022][ T5960] usb 1-1: config 0 descriptor?? [ 134.412335][ T5971] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 134.451214][ T5960] ipheth 1-1:0.4: Unable to find alternate settings interface [ 134.478040][ T5960] usb 1-1: USB disconnect, device number 10 [ 134.582495][ T5971] usb 4-1: Using ep0 maxpacket: 8 [ 134.599293][ T5971] usb 4-1: config 84 has an invalid descriptor of length 0, skipping remainder of the config [ 134.618152][ T5971] usb 4-1: config 84 has 0 interfaces, different from the descriptor's value: 1 [ 134.628257][ T5971] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 1.00 [ 134.638341][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.729730][ T30] audit: type=1400 audit(1765811848.957:372): avc: denied { mount } for pid=6855 comm="syz.1.222" name="/" dev="ramfs" ino=13314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 134.858619][ T6852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.868922][ T6852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.082355][ T976] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 135.284068][ T6702] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.305733][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.318492][ T976] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 135.332021][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.346660][ T976] usb 2-1: config 0 descriptor?? [ 135.464073][ T6702] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 135.478593][ T6702] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.488825][ T6702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 135.497841][ T6702] usb 3-1: SerialNumber: syz [ 135.502411][ T5971] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 135.559292][ T30] audit: type=1400 audit(1765811849.787:373): avc: denied { lock } for pid=6892 comm="syz.4.231" path="socket:[12848]" dev="sockfs" ino=12848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.585165][ T30] audit: type=1400 audit(1765811849.817:374): avc: denied { ioctl } for pid=6892 comm="syz.4.231" path="socket:[12848]" dev="sockfs" ino=12848 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.611120][ T30] audit: type=1400 audit(1765811849.827:375): avc: denied { ioctl } for pid=6892 comm="syz.4.231" path="socket:[13358]" dev="sockfs" ino=13358 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.758140][ T30] audit: type=1400 audit(1765811849.977:376): avc: denied { write } for pid=6857 comm="syz.1.223" path="socket:[12849]" dev="sockfs" ino=12849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 135.824107][ T5971] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.935822][ T5971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 135.938703][ T976] usbhid 2-1:0.0: can't add hid device: -71 [ 135.951109][ T5971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 135.972505][ T5971] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.985652][ T976] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 135.989142][ T5971] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.009115][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.016203][ T976] usb 2-1: USB disconnect, device number 19 [ 136.022462][ T5971] usb 1-1: config 0 descriptor?? [ 136.030819][ T6876] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 136.146035][ T6702] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 136.279494][ T30] audit: type=1400 audit(1765811850.507:377): avc: denied { mount } for pid=6872 comm="syz.0.228" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 136.280986][ T5971] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 136.334933][ T30] audit: type=1400 audit(1765811850.547:378): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 136.454234][ T30] audit: type=1400 audit(1765811850.677:379): avc: denied { ioctl } for pid=6909 comm="syz.0.234" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 136.506945][ T5971] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 136.584760][ T5971] usb 1-1: USB disconnect, device number 11 [ 136.619884][ T6702] usb 3-1: USB disconnect, device number 9 [ 136.645530][ T6702] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 136.954611][ T6914] fido_id[6914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 137.111396][ T6798] usb 4-1: USB disconnect, device number 13 [ 137.385003][ T6926] Falling back ldisc for ttyS3. [ 137.783387][ T5971] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 138.076522][ T5971] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.145186][ T5971] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 138.187573][ T5971] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 138.221441][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.233927][ T6702] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 138.258676][ T5971] usb 5-1: config 0 descriptor?? [ 138.466253][ T6702] usb 3-1: Using ep0 maxpacket: 16 [ 139.043831][ T6702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.054874][ T6702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.065622][ T6702] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 139.079354][ T6702] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 139.256221][ T6702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.284272][ T6702] usb 3-1: config 0 descriptor?? [ 139.630208][ T30] kauditd_printk_skb: 430 callbacks suppressed [ 139.630240][ T30] audit: type=1400 audit(1765811853.857:810): avc: denied { read write } for pid=6942 comm="syz.2.240" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 139.660512][ T6960] random: crng reseeded on system resumption [ 139.948593][ T6702] usbhid 3-1:0.0: can't add hid device: -32 [ 139.968098][ T6702] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 140.068526][ T30] audit: type=1400 audit(1765811853.897:811): avc: denied { ioctl open } for pid=6942 comm="syz.2.240" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 140.234527][ T6961] mmap: syz.3.242 (6961) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.006382][ T5971] Bluetooth: Can't get state to change to load ram patch err [ 141.026087][ T5971] Bluetooth: Loading patch file failed [ 141.038152][ T5971] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 141.054844][ T5971] usb 5-1: USB disconnect, device number 14 [ 141.090927][ T5873] usb 3-1: USB disconnect, device number 10 [ 141.370852][ T30] audit: type=1326 audit(1765811855.577:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.1.248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6679d8f749 code=0x0 [ 141.410224][ T6987] IPv6: NLM_F_REPLACE set, but no existing node found! [ 141.875371][ T5971] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 142.106441][ T5971] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 142.129997][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.184160][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.245320][ T5971] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.361350][ T30] audit: type=1400 audit(1765811856.587:813): avc: denied { create } for pid=6998 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.404180][ T7003] qnx6: unable to read the first superblock [ 142.414402][ T7003] qnx6: unable to read the first superblock [ 142.420313][ T7003] qnx6: unable to read the first superblock [ 143.114243][ T7002] cgroup: Invalid name [ 143.133769][ T5971] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.142869][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.151975][ T30] audit: type=1400 audit(1765811856.687:814): avc: denied { bind } for pid=6998 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 143.188568][ T5971] usb 5-1: config 0 descriptor?? [ 143.361523][ T30] audit: type=1400 audit(1765811857.587:815): avc: denied { create } for pid=7010 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 143.572999][ T30] audit: type=1400 audit(1765811857.587:816): avc: denied { bind } for pid=7010 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 144.392444][ T5971] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 144.504768][ T5971] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 144.519854][ T5971] usb 5-1: USB disconnect, device number 15 [ 144.608218][ T7020] fido_id[7020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 144.710820][ T7022] capability: warning: `syz.4.256' uses 32-bit capabilities (legacy support in use) [ 144.857244][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 144.891276][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 144.900719][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 145.167968][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 145.195065][ T30] audit: type=1400 audit(1765811859.147:817): avc: denied { ioctl } for pid=7027 comm="syz.0.257" path="socket:[13582]" dev="sockfs" ino=13582 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.195706][ T7030] netlink: 'syz.4.259': attribute type 12 has an invalid length. [ 145.307068][ T7029] netlink: 'syz.4.259': attribute type 12 has an invalid length. [ 145.342322][ T30] audit: type=1400 audit(1765811859.477:818): avc: denied { read } for pid=7010 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 145.402000][ T7012] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 145.612861][ T5815] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 145.703563][ T5828] Bluetooth: hci3: command 0x0401 tx timeout [ 145.751347][ T30] audit: type=1400 audit(1765811859.977:819): avc: denied { create } for pid=7055 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.770661][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 145.772094][ T5815] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 145.802378][ T5815] usb 1-1: config 179 has no interface number 0 [ 145.819225][ T5815] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 145.851112][ T30] audit: type=1400 audit(1765811860.037:820): avc: denied { connect } for pid=7055 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.880255][ T5815] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 145.945358][ T5815] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.007056][ T5815] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 146.072023][ T5815] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 146.212477][ T5815] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 146.284085][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.492963][ T5959] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 146.535547][ T7044] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.762647][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 146.770862][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.784164][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.794896][ T5959] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.794945][ T30] audit: type=1400 audit(1765811861.037:821): avc: denied { setopt } for pid=7065 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.832043][ T5818] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 146.832066][ T5828] Bluetooth: hci5: command 0xfc11 tx timeout [ 146.833745][ T30] audit: type=1400 audit(1765811861.057:822): avc: denied { ioctl } for pid=7065 comm="syz.2.269" path="socket:[13194]" dev="sockfs" ino=13194 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.845878][ T5815] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input11 [ 146.882251][ T30] audit: type=1400 audit(1765811861.057:823): avc: denied { write } for pid=7065 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.937891][ T5959] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 146.961680][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.971788][ T30] audit: type=1400 audit(1765811861.207:824): avc: denied { append } for pid=7069 comm="syz.4.270" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.972330][ T5971] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 147.010289][ T5959] usb 4-1: config 0 descriptor?? [ 147.062477][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.113542][ T9] usb 1-1: USB disconnect, device number 12 [ 147.120036][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 147.128891][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 147.182347][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 147.189402][ T5971] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 147.198377][ T30] audit: type=1400 audit(1765811861.427:825): avc: denied { ioctl } for pid=7074 comm="syz.4.271" path="socket:[13764]" dev="sockfs" ino=13764 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.199833][ T5971] usb 2-1: can't read configurations, error -61 [ 147.268860][ T7077] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 147.275377][ T7077] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 147.284998][ T7077] vhci_hcd vhci_hcd.0: Device attached [ 147.363996][ T5971] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 147.522434][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 147.522472][ T5815] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 147.529324][ T5971] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 147.546473][ T9] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 147.554219][ T5971] usb 2-1: can't read configurations, error -61 [ 147.561301][ T5971] usb usb2-port1: attempt power cycle [ 147.682414][ T9] usb 5-1: device descriptor read/64, error -71 [ 147.730438][ T30] audit: type=1400 audit(1765811861.957:826): avc: denied { bind } for pid=7082 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 147.736761][ T7086] netlink: 'syz.2.274': attribute type 4 has an invalid length. [ 147.758174][ T7086] netlink: 152 bytes leftover after parsing attributes in process `syz.2.274'. [ 147.775131][ T7086] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 147.902390][ T5971] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 147.934000][ T9] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 147.956567][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 147.966111][ T5971] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 147.974151][ T5971] usb 2-1: can't read configurations, error -61 [ 148.212336][ T9] usb 5-1: device descriptor read/64, error -71 [ 148.218801][ T5971] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 148.322802][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 148.329617][ T5971] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 148.337988][ T5971] usb 2-1: can't read configurations, error -61 [ 148.344794][ T5971] usb usb2-port1: unable to enumerate USB device [ 148.402688][ T9] usb usb5-port1: attempt power cycle [ 148.754433][ T9] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 148.802965][ T9] usb 5-1: device descriptor read/8, error -71 [ 148.857762][ T5959] usbhid 4-1:0.0: can't add hid device: -71 [ 148.878341][ T5959] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 148.901031][ T5959] usb 4-1: USB disconnect, device number 14 [ 149.052595][ T9] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 149.096421][ T9] usb 5-1: device descriptor read/8, error -71 [ 149.241970][ T9] usb usb5-port1: unable to enumerate USB device [ 149.398179][ T7109] ªªªªªª: renamed from lo (while UP) [ 150.747050][ T7078] vhci_hcd: connection reset by peer [ 150.762187][ T6884] vhci_hcd vhci_hcd.4: stop threads [ 150.773796][ T6884] vhci_hcd vhci_hcd.4: release socket [ 150.781946][ T6884] vhci_hcd vhci_hcd.4: disconnect device [ 150.800264][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 150.800280][ T30] audit: type=1400 audit(1765811865.027:835): avc: denied { map } for pid=7114 comm="syz.1.282" path="socket:[13281]" dev="sockfs" ino=13281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 150.904369][ T30] audit: type=1400 audit(1765811865.027:836): avc: denied { read accept } for pid=7114 comm="syz.1.282" path="socket:[13281]" dev="sockfs" ino=13281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 151.109658][ T30] audit: type=1400 audit(1765811865.337:837): avc: denied { read } for pid=7124 comm="syz.4.285" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 151.135715][ T30] audit: type=1400 audit(1765811865.337:838): avc: denied { open } for pid=7124 comm="syz.4.285" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 151.457237][ T89] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 151.714045][ T89] usb 3-1: Using ep0 maxpacket: 32 [ 151.812742][ T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.329988][ T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.362975][ T89] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 152.373858][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.399186][ T89] usb 3-1: config 0 descriptor?? [ 152.406586][ T30] audit: type=1400 audit(1765811866.637:839): avc: denied { append } for pid=7139 comm="syz.3.288" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 152.640790][ T7143] hfs: can't find a HFS filesystem on dev nullb0 [ 152.652570][ T5815] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 152.702367][ T6742] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 153.232337][ T6742] usb 2-1: Using ep0 maxpacket: 8 [ 153.298557][ T89] usb 3-1: can't set config #0, error -71 [ 153.299538][ T6742] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 153.311950][ T89] usb 3-1: USB disconnect, device number 11 [ 153.376165][ T6742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.459418][ T6742] usb 2-1: config 0 descriptor?? [ 153.721534][ T6742] asix 2-1:0.0: probe with driver asix failed with error -22 [ 153.807399][ T5971] usb 2-1: USB disconnect, device number 24 [ 153.846237][ T30] audit: type=1400 audit(1765811868.077:840): avc: denied { read } for pid=7155 comm="syz.3.295" name="file0" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.875157][ T30] audit: type=1400 audit(1765811868.077:841): avc: denied { open } for pid=7155 comm="syz.3.295" path="/59/file0" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.086141][ T6742] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 154.346591][ T6742] usb 3-1: Using ep0 maxpacket: 8 [ 154.363863][ T6742] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 154.375219][ T6742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.386588][ T6742] usb 3-1: Product: syz [ 154.391891][ T6742] usb 3-1: Manufacturer: syz [ 154.399913][ T6742] usb 3-1: SerialNumber: syz [ 154.413141][ T6742] usb 3-1: config 0 descriptor?? [ 154.648158][ T6742] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 154.789713][ T30] audit: type=1400 audit(1765811869.017:842): avc: denied { watch watch_reads } for pid=7183 comm="syz.3.300" path="/61" dev="tmpfs" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 154.842507][ T7184] bond1: option xmit_hash_policy: invalid value (6) [ 154.851632][ T7184] bond1 (unregistering): Released all slaves [ 154.872419][ T7083] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 154.881737][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 154.891120][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.300'. [ 155.012804][ T5815] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 155.023781][ T7083] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 155.031943][ T7083] usb 2-1: config 0 has no interface number 0 [ 155.055329][ T7083] usb 2-1: too many endpoints for config 0 interface 184 altsetting 1: 91, using maximum allowed: 30 [ 155.055354][ T7083] usb 2-1: config 0 interface 184 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 155.055369][ T7083] usb 2-1: config 0 interface 184 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 155.055397][ T7083] usb 2-1: config 0 interface 184 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 91 [ 155.055412][ T7083] usb 2-1: config 0 interface 184 has no altsetting 0 [ 155.068483][ T7157] netlink: 96 bytes leftover after parsing attributes in process `syz.2.294'. [ 155.094498][ T7083] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 155.126481][ T6742] gspca_sunplus: reg_w_riv err -71 [ 155.131646][ T6742] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 155.133522][ T6742] usb 3-1: USB disconnect, device number 12 [ 155.148137][ T5815] usb 5-1: device descriptor read/64, error -71 [ 155.160590][ T7083] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.160615][ T7083] usb 2-1: Product: syz [ 155.160630][ T7083] usb 2-1: Manufacturer: syz [ 155.160644][ T7083] usb 2-1: SerialNumber: syz [ 155.173931][ T7083] usb 2-1: config 0 descriptor?? [ 155.200964][ T7179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.201068][ T7179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.203548][ T7083] smsc75xx v1.0.0 [ 155.402394][ T5815] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 155.404032][ T7179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.422483][ T7179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.455548][ T7083] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 155.455577][ T7083] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 155.455597][ T7083] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 155.455940][ T7083] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 155.471679][ T7083] usb 2-1: USB disconnect, device number 25 [ 155.536527][ T5815] usb 5-1: device descriptor read/64, error -71 [ 155.622086][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 155.693364][ T5815] usb usb5-port1: attempt power cycle [ 155.721406][ T30] audit: type=1400 audit(1765811869.797:843): avc: denied { create } for pid=7193 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 155.739405][ T30] audit: type=1400 audit(1765811869.897:844): avc: denied { ioctl } for pid=7193 comm="syz.1.302" path="socket:[14416]" dev="sockfs" ino=14416 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 156.564827][ T30] audit: type=1400 audit(1765811870.437:845): avc: denied { connect } for pid=7201 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.596244][ T7083] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 156.605018][ T5815] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 156.635746][ T5815] usb 5-1: device descriptor read/8, error -71 [ 156.792382][ T7083] usb 3-1: Using ep0 maxpacket: 32 [ 156.799129][ T7083] usb 3-1: config 2 has an invalid interface number: 145 but max is 0 [ 156.810582][ T7083] usb 3-1: config 2 has no interface number 0 [ 156.818803][ T7083] usb 3-1: config 2 interface 145 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 156.832112][ T7083] usb 3-1: config 2 interface 145 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 156.843748][ T7083] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a2, bcdDevice= c.9b [ 156.894928][ T7083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.903521][ T5815] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 156.919437][ T7212] futex_wake_op: syz.0.307 tries to shift op by -1; fix this program [ 156.955947][ T5815] usb 5-1: device descriptor read/8, error -71 [ 156.963731][ T7198] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.059281][ T5818] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 157.083304][ T5815] usb usb5-port1: unable to enumerate USB device [ 157.189005][ T7083] usb 3-1: string descriptor 0 read error: -71 [ 157.197845][ T7083] em28xx 3-1:2.145: New device @ 480 Mbps (0ccd:10a2, interface 145, class 145) [ 157.207476][ T7083] em28xx 3-1:2.145: Video interface 145 found: [ 157.252381][ T5971] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 157.273416][ T7083] em28xx 3-1:2.145: unknown em28xx chip ID (0) [ 157.342416][ T5815] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 157.354989][ T7083] em28xx 3-1:2.145: reading from i2c device at 0xa0 failed (error=-5) [ 157.363997][ T7083] em28xx 3-1:2.145: board has no eeprom [ 157.403092][ T5971] usb 4-1: Using ep0 maxpacket: 8 [ 157.409387][ T5971] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 157.417994][ T5971] usb 4-1: config 179 has no interface number 0 [ 157.424303][ T5971] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 157.432643][ T7083] em28xx 3-1:2.145: Identified as Terratec Cinergy H5 (card=79) [ 157.443029][ T5971] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 157.443057][ T5971] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 157.454756][ T7083] em28xx 3-1:2.145: Currently, V4L2 is not supported on this model [ 157.473936][ T5971] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 157.485620][ T5971] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 157.486583][ T6730] em28xx 3-1:2.145: Binding DVB extension [ 157.502543][ T5971] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 157.511679][ T6730] em28xx 3-1:2.145: no endpoint for DVB mode and transfer type 0 [ 157.515097][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.533344][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 157.540379][ T7083] usb 3-1: USB disconnect, device number 13 [ 157.547316][ T7216] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 157.554054][ T7083] em28xx 3-1:2.145: Disconnecting em28xx [ 157.560323][ T6730] em28xx 3-1:2.145: failed to pre-allocate USB transfer buffers for DVB. [ 157.562948][ T7216] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 157.569938][ T6730] em28xx 3-1:2.145: Remote control support is not available for this card. [ 157.585859][ T7083] em28xx 3-1:2.145: Closing input extension [ 157.596106][ T5815] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 157.604921][ T5815] usb 2-1: config 0 has no interface number 0 [ 157.611396][ T5815] usb 2-1: config 0 interface 196 has no altsetting 0 [ 157.620112][ T5815] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 157.648493][ T7083] em28xx 3-1:2.145: Freeing device [ 157.662811][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.680643][ T5815] usb 2-1: Product: syz [ 157.688891][ T5815] usb 2-1: Manufacturer: syz [ 157.693999][ T5815] usb 2-1: SerialNumber: syz [ 157.701104][ T5815] usb 2-1: config 0 descriptor?? [ 157.769448][ T30] audit: type=1400 audit(1765811871.997:846): avc: denied { write } for pid=7226 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.820885][ T6730] usb 4-1: USB disconnect, device number 15 [ 157.820921][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 157.835347][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 157.973306][ T5815] ipheth 2-1:0.196: Unable to find endpoints [ 158.032938][ T5815] usb 2-1: USB disconnect, device number 26 [ 158.439110][ T5971] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 158.733217][ T5971] usb 5-1: Using ep0 maxpacket: 16 [ 158.740606][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.751723][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.761888][ T5971] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 158.775329][ T5971] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 159.526019][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.543164][ T5971] usb 5-1: config 0 descriptor?? [ 160.849953][ T30] audit: type=1400 audit(1765811875.077:847): avc: denied { watch_mount } for pid=7259 comm="syz.3.319" path="/69" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 161.916381][ T30] audit: type=1400 audit(1765811875.107:848): avc: denied { watch } for pid=7259 comm="syz.3.319" path="/69" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 161.939014][ T30] audit: type=1400 audit(1765811875.117:849): avc: denied { watch_sb } for pid=7259 comm="syz.3.319" path="/69" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 162.022669][ T5971] usbhid 5-1:0.0: can't add hid device: -71 [ 162.048298][ T5971] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 162.159718][ T5971] usb 5-1: USB disconnect, device number 24 [ 162.341199][ T7273] random: crng reseeded on system resumption [ 162.433601][ T30] audit: type=1400 audit(1765811876.647:850): avc: denied { connect } for pid=7268 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 162.671671][ T30] audit: type=1400 audit(1765811876.647:851): avc: denied { write } for pid=7268 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 162.826227][ T30] audit: type=1400 audit(1765811876.697:852): avc: denied { write } for pid=7262 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.573739][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 163.742374][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 163.766481][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 163.774133][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 163.795681][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.818382][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.836238][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.869090][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 163.884794][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 163.906164][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.929539][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.952807][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.974399][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 163.981833][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 163.996753][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.012782][ T30] audit: type=1400 audit(1765811878.237:853): avc: denied { relabelfrom } for pid=7262 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 164.058902][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 164.063700][ T30] audit: type=1400 audit(1765811878.287:854): avc: denied { relabelto } for pid=7262 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 164.070325][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 164.138365][ T10] usb 4-1: string descriptor 0 read error: -22 [ 164.171836][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 164.181556][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.200449][ T10] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 164.385891][ T30] audit: type=1400 audit(1765811878.617:855): avc: denied { listen } for pid=7289 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.462714][ T30] audit: type=1400 audit(1765811878.617:856): avc: denied { getopt } for pid=7289 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.517102][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 164.679047][ T30] audit: type=1400 audit(1765811878.677:857): avc: denied { connect } for pid=7277 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.713309][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 164.783848][ T10] usb 5-1: config 0 has an invalid interface number: 88 but max is 3 [ 164.951103][ T10] usb 5-1: config 0 has an invalid interface number: 250 but max is 3 [ 165.204365][ T10] usb 5-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 165.232971][ T10] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 165.244129][ T10] usb 5-1: config 0 has no interface number 0 [ 165.251293][ T10] usb 5-1: config 0 has no interface number 1 [ 165.259571][ T10] usb 5-1: config 0 interface 88 has no altsetting 0 [ 165.268339][ T10] usb 5-1: config 0 interface 250 has no altsetting 0 [ 165.344130][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 165.395265][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.479798][ T10] usb 5-1: config 0 descriptor?? [ 166.586442][ T5920] usb 4-1: USB disconnect, device number 16 [ 167.708745][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 167.708759][ T30] audit: type=1400 audit(1765811881.937:864): avc: denied { mount } for pid=7333 comm="syz.0.335" name="/" dev="rpc_pipefs" ino=14739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 167.851946][ T10] usb 5-1: string descriptor 0 read error: -71 [ 167.899119][ T10] usb 5-1: USB disconnect, device number 25 [ 167.910847][ T7337] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 167.917378][ T7337] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.067551][ T7337] vhci_hcd vhci_hcd.0: Device attached [ 168.976594][ T7338] vhci_hcd: connection closed [ 168.986418][ T5815] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 169.002419][ T12] vhci_hcd vhci_hcd.2: stop threads [ 169.007631][ T12] vhci_hcd vhci_hcd.2: release socket [ 169.052460][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 169.123374][ T30] audit: type=1400 audit(1765811883.357:865): avc: denied { map } for pid=7359 comm="syz.2.342" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 169.170630][ T30] audit: type=1400 audit(1765811883.357:866): avc: denied { execute } for pid=7359 comm="syz.2.342" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 169.228865][ T30] audit: type=1400 audit(1765811883.457:867): avc: denied { listen } for pid=7360 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.301333][ T30] audit: type=1400 audit(1765811883.497:868): avc: denied { accept } for pid=7360 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.388115][ T30] audit: type=1400 audit(1765811883.617:869): avc: denied { mounton } for pid=7373 comm="syz.1.347" path="/proc/261/cgroup" dev="proc" ino=14791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 169.413966][ T30] audit: type=1400 audit(1765811883.617:870): avc: denied { read } for pid=7360 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.660686][ T7388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.692882][ T30] audit: type=1400 audit(1765811883.887:871): avc: denied { setopt } for pid=7387 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.772631][ T10] hid_parser_main: 48 callbacks suppressed [ 169.772655][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 170.456051][ T10] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.859442][ T7414] overlayfs: failed to clone upperpath [ 170.865860][ T7412] netlink: 'syz.3.356': attribute type 10 has an invalid length. [ 170.945443][ T30] audit: type=1400 audit(1765811885.177:872): avc: denied { ioctl } for pid=7417 comm="syz.4.357" path="socket:[14298]" dev="sockfs" ino=14298 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 171.075679][ T7412] team0 (unregistering): Port device team_slave_0 removed [ 171.097337][ T7412] team0 (unregistering): Port device team_slave_1 removed [ 171.182347][ T6742] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 171.410050][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 171.442325][ T6742] usb 5-1: Using ep0 maxpacket: 32 [ 171.453980][ T6742] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.542411][ T6742] usb 5-1: config 0 has no interface number 0 [ 171.560626][ T6742] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 171.582382][ T6742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.590402][ T6742] usb 5-1: Product: syz [ 171.610294][ T6742] usb 5-1: Manufacturer: syz [ 171.619968][ T6742] usb 5-1: SerialNumber: syz [ 171.634966][ T6742] usb 5-1: config 0 descriptor?? [ 171.643188][ T7441] netlink: 'syz.2.365': attribute type 12 has an invalid length. [ 171.655504][ T6742] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 171.665039][ T6742] usb 5-1: selecting invalid altsetting 1 [ 171.670795][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 171.673351][ T6742] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 171.688314][ T30] audit: type=1400 audit(1765811885.907:873): avc: denied { nlmsg_read } for pid=7440 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.739383][ T6742] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 171.756542][ T6742] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 171.773105][ T6742] usb 5-1: media controller created [ 171.780548][ T7446] futex_wake_op: syz.2.367 tries to shift op by -1; fix this program [ 171.812843][ T10] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 171.818761][ T6742] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.853923][ T7451] 9pnet_fd: Insufficient options for proto=fd [ 172.180781][ T6742] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 172.224448][ T6742] zl10353_read_register: readreg error (reg=127, ret==-71) [ 172.233865][ T6742] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 172.257468][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 172.281277][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.296466][ T7457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7457 comm=syz.2.369 [ 172.317206][ T10] usb 4-1: config 0 descriptor?? [ 172.321006][ T6742] usb 5-1: USB disconnect, device number 26 [ 172.614373][ T7464] netlink: get zone limit has 4 unknown bytes [ 173.085556][ T7471] syz.4.372 uses obsolete (PF_INET,SOCK_PACKET) [ 173.189758][ T10] pegasus 4-1:0.0: probe with driver pegasus failed with error -32 [ 173.660057][ T7481] netlink: 'syz.1.374': attribute type 2 has an invalid length. [ 173.695760][ T30] audit: type=1400 audit(1765811887.907:874): avc: denied { create } for pid=7478 comm="syz.1.374" name="#d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 173.739981][ T30] audit: type=1400 audit(1765811887.917:875): avc: denied { link } for pid=7478 comm="syz.1.374" name="#d" dev="tmpfs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 173.799634][ T30] audit: type=1400 audit(1765811887.917:876): avc: denied { rename } for pid=7478 comm="syz.1.374" name="#e" dev="tmpfs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 174.077315][ T7491] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 174.086919][ T7491] tipc: Enabled bearer , priority 10 [ 174.191828][ T5815] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 174.549405][ T10] usb 4-1: USB disconnect, device number 17 [ 174.582488][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.598111][ T30] audit: type=1400 audit(1765811888.827:877): avc: denied { name_connect } for pid=7496 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 174.630783][ T6702] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 174.792385][ T6702] usb 5-1: Using ep0 maxpacket: 32 [ 174.793939][ T6702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.793967][ T6702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.793997][ T6702] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 174.794018][ T6702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.816645][ T6702] usb 5-1: config 0 descriptor?? [ 174.820879][ T6702] hub 5-1:0.0: USB hub found [ 175.203670][ T6742] tipc: Node number set to 2361167936 [ 175.235939][ T6702] hub 5-1:0.0: 1 port detected [ 175.458538][ T30] audit: type=1400 audit(1765811889.687:878): avc: denied { bind } for pid=7527 comm="syz.1.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.483090][ T30] audit: type=1400 audit(1765811889.687:879): avc: denied { name_bind } for pid=7527 comm="syz.1.385" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 175.516379][ T30] audit: type=1400 audit(1765811889.717:880): avc: denied { node_bind } for pid=7527 comm="syz.1.385" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 175.572404][ T5893] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 175.631292][ T7530] 9p: Bad value for 'msize' [ 175.814817][ T5893] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 175.825486][ T5893] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 175.838796][ T5893] usb 3-1: config 8 has an invalid descriptor of length 55, skipping remainder of the config [ 175.847906][ T6702] hub 5-1:0.0: activate --> -90 [ 175.850173][ T5893] usb 3-1: config 8 has no interface number 0 [ 175.869585][ T7534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.387'. [ 175.942737][ T5893] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 175.954561][ T5893] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.970024][ T5893] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 175.979286][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.987379][ T5893] usb 3-1: Product: syz [ 175.991670][ T5893] usb 3-1: Manufacturer: syz [ 175.999651][ T5893] usb 3-1: SerialNumber: syz [ 176.161161][ T7540] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20002 [ 176.407827][ T10] IPVS: starting estimator thread 0... [ 176.489325][ T30] audit: type=1400 audit(1765811890.647:881): avc: denied { read } for pid=7539 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 176.582615][ T7543] IPVS: using max 42 ests per chain, 100800 per kthread [ 177.063858][ T5818] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 177.073241][ T5818] Bluetooth: hci4: Injecting HCI hardware error event [ 177.081472][ T5828] Bluetooth: hci4: hardware error 0x00 [ 177.363175][ T6702] usb 5-1-port1: cannot reset (err = -110) [ 177.376496][ T6702] usb 5-1-port1: cannot reset (err = -32) [ 177.384526][ T6702] usb 5-1-port1: Cannot enable. Maybe the USB cable is bad? [ 177.399122][ T6702] usb 5-1-port1: cannot disable (err = -32) [ 177.406246][ T6702] usb 5-1-port1: cannot reset (err = -32) [ 177.416166][ T6702] usb 5-1-port1: cannot reset (err = -32) [ 177.421909][ T6702] usb 5-1-port1: Cannot enable. Maybe the USB cable is bad? [ 177.427450][ T30] audit: type=1400 audit(1765811890.647:882): avc: denied { connect } for pid=7539 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.429583][ T6702] usb 5-1-port1: cannot disable (err = -32) [ 177.485221][ T6702] usb 5-1-port1: attempt power cycle [ 177.556750][ T10] usb 5-1: USB disconnect, device number 27 [ 177.662637][ T5920] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 177.794816][ T7574] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 177.794816][ T7574] The task syz.1.393 (7574) triggered the difference, watch for misbehavior. [ 177.827039][ T5920] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 177.839536][ T5920] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 177.851439][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 177.860693][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 177.874369][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 177.891455][ T5920] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 177.900632][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 177.908674][ T5920] usb 4-1: Product: syz [ 177.913146][ T5920] usb 4-1: Manufacturer: syz [ 177.922636][ T5920] cdc_wdm 4-1:1.0: skipping garbage [ 177.927914][ T5920] cdc_wdm 4-1:1.0: skipping garbage [ 177.935814][ T5920] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 177.941767][ T5920] cdc_wdm 4-1:1.0: Unknown control protocol [ 178.052385][ T6702] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 178.182081][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 178.213651][ T6702] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 178.222118][ T6702] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.236617][ T6702] usb 2-1: config 0 has no interface number 0 [ 178.243286][ T6702] usb 2-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 178.255941][ T6702] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 48, changing to 9 [ 178.273094][ T6702] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid maxpacket 24624, setting to 1024 [ 178.287049][ T6702] usb 2-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 178.305255][ T6702] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 178.314470][ T6702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.322517][ T6702] usb 2-1: Product: syz [ 178.326776][ T6702] usb 2-1: Manufacturer: syz [ 178.331465][ T6702] usb 2-1: SerialNumber: syz [ 178.344382][ T6702] usb 2-1: config 0 descriptor?? [ 178.355134][ T6702] symbolserial 2-1:0.175: symbol converter detected [ 178.364859][ T6702] usb 2-1: symbol converter now attached to ttyUSB0 [ 178.399987][ T10] usb 4-1: USB disconnect, device number 18 [ 178.501352][ T5893] usb 3-1: USB disconnect, device number 14 [ 178.852380][ T5893] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 179.462517][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 179.682470][ T5893] usb 3-1: unable to get BOS descriptor or descriptor too short [ 179.821155][ T5893] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 179.829991][ T5893] usb 3-1: can't read configurations, error -71 [ 180.521712][ T5138] Bluetooth: hci3: command 0x0401 tx timeout [ 180.527880][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 180.533950][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 180.541111][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 181.086059][ T6742] usb 2-1: USB disconnect, device number 27 [ 181.117356][ T6742] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 181.132357][ T30] audit: type=1400 audit(1765811895.347:883): avc: denied { shutdown } for pid=7615 comm="syz.0.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.132784][ T6742] symbolserial 2-1:0.175: device disconnected [ 181.228300][ T7083] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 181.253576][ T30] audit: type=1400 audit(1765811895.487:884): avc: denied { bind } for pid=7623 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.289568][ T30] audit: type=1400 audit(1765811895.507:885): avc: denied { listen } for pid=7623 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.313112][ T5829] Bluetooth: hci1: hardware error 0x06 [ 181.382655][ T7631] devpts: Bad value for 'uid' [ 181.387450][ T7631] devpts: Bad value for 'uid' [ 181.393614][ T5893] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 181.403503][ T7083] usb 5-1: Using ep0 maxpacket: 16 [ 181.410900][ T7083] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.443032][ T7083] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.454542][ T7083] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 181.478914][ T7635] overlayfs: failed to clone upperpath [ 181.514946][ T7083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.561907][ T7083] usb 5-1: config 0 descriptor?? [ 181.565264][ T5893] usb 3-1: config 2 has an invalid interface number: 255 but max is 0 [ 181.578456][ T5893] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 181.646063][ T5893] usb 3-1: config 2 has no interface number 0 [ 181.685438][ T5893] usb 3-1: too many endpoints for config 2 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 181.730656][ T5893] usb 3-1: config 2 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 181.744924][ T5893] usb 3-1: config 2 interface 255 has no altsetting 0 [ 181.755602][ T5893] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 181.766266][ T30] audit: type=1400 audit(1765811896.007:886): avc: denied { map } for pid=7623 comm="syz.1.406" path="socket:[15282]" dev="sockfs" ino=15282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.179533][ T7645] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 182.189883][ T7645] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 182.259471][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 182.267780][ T5920] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 182.276914][ T5893] usb 3-1: Product: syz [ 182.282716][ T30] audit: type=1400 audit(1765811896.007:887): avc: denied { read } for pid=7623 comm="syz.1.406" path="socket:[15282]" dev="sockfs" ino=15282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.306032][ T5893] usb 3-1: Manufacturer: syz [ 182.311121][ T5893] usb 3-1: SerialNumber: syz [ 182.444204][ T5920] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 182.453482][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.523833][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 182.552901][ T5920] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.569665][ T5920] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.579906][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.589298][ T5920] usb 4-1: Product: syz [ 182.593950][ T5920] usb 4-1: Manufacturer: syz [ 182.621002][ T5920] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 182.673220][ T5893] usb 3-1: USB disconnect, device number 16 [ 182.823693][ T7625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.838728][ T7625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.077631][ T7653] futex_wake_op: syz.1.414 tries to shift op by -1; fix this program [ 183.392421][ T5829] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 183.652175][ T7083] usbhid 5-1:0.0: can't add hid device: -71 [ 183.663946][ T7083] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 183.689935][ T7083] usb 5-1: USB disconnect, device number 32 [ 183.748446][ T7662] Driver unsupported XDP return value 0 on prog (id 147) dev N/A, expect packet loss! [ 183.761008][ T7662] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 183.769414][ T7662] overlayfs: failed to set xattr on upper [ 183.777210][ T7662] overlayfs: ...falling back to redirect_dir=nofollow. [ 183.788997][ T30] audit: type=1400 audit(1765811897.997:888): avc: denied { mounton } for pid=7661 comm="syz.4.416" path="/bus" dev="ramfs" ino=15716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 183.802517][ T7662] overlayfs: ...falling back to uuid=null. [ 184.080579][ T7672] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 184.366824][ T7083] usb 4-1: USB disconnect, device number 19 [ 184.618585][ T7688] netlink: 44 bytes leftover after parsing attributes in process `syz.3.422'. [ 185.063628][ T6742] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 185.141547][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 185.178330][ T30] audit: type=1400 audit(1765811899.367:889): avc: denied { bind } for pid=7678 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 185.274059][ T6742] usb 2-1: Using ep0 maxpacket: 8 [ 185.414879][ T6742] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 185.424142][ T6742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.432392][ T6742] usb 2-1: Product: syz [ 185.436618][ T6742] usb 2-1: Manufacturer: syz [ 185.441187][ T6742] usb 2-1: SerialNumber: syz [ 185.650816][ T6742] usb 2-1: config 0 descriptor?? [ 185.843512][ T30] audit: type=1400 audit(1765811900.077:890): avc: denied { append } for pid=7704 comm="syz.3.427" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 185.868061][ T7705] random: crng reseeded on system resumption [ 185.908580][ T6742] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 186.226010][ T7720] futex_wake_op: syz.2.430 tries to shift op by -1; fix this program [ 187.477571][ T6742] usb write operation failed. (-71) [ 187.484301][ T6742] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 187.526378][ T6742] dvbdev: DVB: registering new adapter (Terratec H7) [ 187.565134][ T6742] usb 2-1: media controller created [ 187.650492][ T6742] usb read operation failed. (-71) [ 187.656019][ T6742] usb write operation failed. (-71) [ 187.665704][ T6742] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 187.704982][ T6742] usb 2-1: USB disconnect, device number 28 [ 187.918188][ T30] audit: type=1326 audit(1765811902.017:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b7f8f749 code=0x7ffc0000 [ 188.002426][ T5959] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 188.150003][ T30] audit: type=1326 audit(1765811902.027:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b7f8f749 code=0x7ffc0000 [ 188.161763][ T7741] openvswitch: netlink: IPv4 tunnel dst address is zero [ 188.173408][ T30] audit: type=1326 audit(1765811902.027:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f15b7f8f749 code=0x7ffc0000 [ 188.203716][ T30] audit: type=1326 audit(1765811902.377:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b7f8f749 code=0x7ffc0000 [ 188.229838][ T30] audit: type=1326 audit(1765811902.377:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b7f8f749 code=0x7ffc0000 [ 188.284823][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.311246][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.329353][ T5959] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.354043][ T5959] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.452309][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.480986][ T5959] usb 3-1: config 0 descriptor?? [ 188.518592][ T7751] capability: warning: `syz.1.439' uses deprecated v2 capabilities in a way that may be insecure [ 188.595822][ T30] audit: type=1400 audit(1765811902.827:896): avc: denied { write } for pid=7755 comm="syz.1.441" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 188.726534][ T30] audit: type=1400 audit(1765811902.927:897): avc: denied { setopt } for pid=7748 comm="syz.4.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 188.802345][ T5920] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 188.930089][ T7730] netlink: 96 bytes leftover after parsing attributes in process `syz.2.434'. [ 188.957999][ T5959] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 188.972340][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 188.987796][ T5920] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 189.066554][ T5920] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 189.086116][ T30] audit: type=1400 audit(1765811903.317:898): avc: denied { map } for pid=7761 comm="syz.0.442" path="socket:[16546]" dev="sockfs" ino=16546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.150565][ T5920] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 189.160205][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.219924][ T30] audit: type=1400 audit(1765811903.357:899): avc: denied { accept } for pid=7761 comm="syz.0.442" path="socket:[16546]" dev="sockfs" ino=16546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.496465][ T7753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.523493][ T7753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.005563][ T5920] usb 4-1: string descriptor 0 read error: -71 [ 190.058291][ T5920] usb 4-1: USB disconnect, device number 20 [ 190.272565][ C1] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 190.530413][ T30] audit: type=1400 audit(1765811904.757:900): avc: denied { map } for pid=7775 comm="syz.4.447" path="/proc/291/net/route" dev="proc" ino=4026532832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 191.107709][ T10] usb 3-1: USB disconnect, device number 17 [ 191.651291][ T7813] xt_TCPMSS: Only works on TCP SYN packets [ 191.836247][ T7818] fuse: Unknown parameter 'roo' [ 191.903254][ T7823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65504 sclass=netlink_route_socket pid=7823 comm=syz.3.456 [ 192.443044][ T7832] vxlan0: entered promiscuous mode [ 192.448188][ T7832] vxlan0: entered allmulticast mode [ 192.453493][ T5920] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 192.516921][ T4928] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.527095][ T4928] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.549136][ T4928] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.572349][ T4928] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.614537][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.625708][ T5920] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 192.650801][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.683639][ T5920] usb 4-1: config 0 descriptor?? [ 194.110136][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.116484][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.485906][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.692632][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.352840][ T10] usb 4-1: USB disconnect, device number 21 [ 196.962721][ T7877] binder: 7876:7877 ioctl 4018620d 0 returned -22 [ 196.968304][ T7878] binder: 7876:7878 ioctl 4018620d 0 returned -22 [ 197.007242][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 197.007256][ T30] audit: type=1400 audit(1765811911.237:906): avc: denied { setopt } for pid=7876 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 197.091389][ T7886] gfs2: path_lookup on Qß.- returned error -2 [ 197.134765][ T30] audit: type=1400 audit(1765811911.357:907): avc: denied { connect } for pid=7876 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.595096][ T7898] syzkaller0: entered promiscuous mode [ 197.603852][ T7898] syzkaller0: entered allmulticast mode [ 197.752743][ T7891] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 197.888650][ T6742] libceph: connect (1)[c::]:6789 error -101 [ 197.906450][ T6742] libceph: mon0 (1)[c::]:6789 connect error [ 198.332567][ T6742] libceph: connect (1)[c::]:6789 error -101 [ 198.803019][ T7910] ceph: No mds server is up or the cluster is laggy [ 198.863251][ T30] audit: type=1400 audit(1765811912.727:908): avc: denied { setopt } for pid=7918 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.372680][ T6742] libceph: mon0 (1)[c::]:6789 connect error [ 199.571341][ T30] audit: type=1400 audit(1765811913.797:909): avc: denied { setopt } for pid=7926 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.669184][ T5829] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 199.679324][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) [ 199.679350][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.679363][ T5829] Workqueue: hci0 hci_rx_work [ 199.679386][ T5829] Call Trace: [ 199.679392][ T5829] [ 199.679399][ T5829] dump_stack_lvl+0x16c/0x1f0 [ 199.679424][ T5829] sysfs_warn_dup+0x7f/0xa0 [ 199.679448][ T5829] sysfs_create_dir_ns+0x24b/0x2b0 [ 199.679471][ T5829] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 199.679491][ T5829] ? find_held_lock+0x2b/0x80 [ 199.679526][ T5829] ? do_raw_spin_unlock+0x172/0x230 [ 199.679553][ T5829] kobject_add_internal+0x2c4/0x9d0 [ 199.679585][ T5829] kobject_add+0x16e/0x240 [ 199.679611][ T5829] ? __pfx_kobject_add+0x10/0x10 [ 199.679641][ T5829] ? kobject_put+0xaf/0x6f0 [ 199.679663][ T5829] ? _raw_spin_unlock+0x3e/0x50 [ 199.679690][ T5829] device_add+0x288/0x1980 [ 199.679710][ T5829] ? __pfx_dev_set_name+0x10/0x10 [ 199.679731][ T5829] ? __pfx_device_add+0x10/0x10 [ 199.679750][ T5829] ? mgmt_send_event_skb+0x2fb/0x460 [ 199.679777][ T5829] hci_conn_add_sysfs+0x1a8/0x260 [ 199.679801][ T5829] le_conn_complete_evt+0x11ed/0x1fa0 [ 199.679828][ T5829] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 199.679855][ T5829] hci_le_conn_complete_evt+0x23c/0x3a0 [ 199.679880][ T5829] hci_le_meta_evt+0x357/0x610 [ 199.679901][ T5829] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 199.679925][ T5829] hci_event_packet+0x685/0x1210 [ 199.679944][ T5829] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 199.679966][ T5829] ? __pfx_hci_event_packet+0x10/0x10 [ 199.679997][ T5829] ? kcov_remote_start+0x3a9/0x680 [ 199.680023][ T5829] hci_rx_work+0x2c9/0x1020 [ 199.680046][ T5829] process_one_work+0x9ba/0x1b20 [ 199.680081][ T5829] ? __pfx_process_one_work+0x10/0x10 [ 199.680114][ T5829] ? assign_work+0x1a0/0x250 [ 199.680138][ T5829] worker_thread+0x6c8/0xf10 [ 199.680168][ T5829] ? __kthread_parkme+0x19e/0x250 [ 199.680186][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 199.680209][ T5829] kthread+0x3c5/0x780 [ 199.680230][ T5829] ? __pfx_kthread+0x10/0x10 [ 199.680253][ T5829] ? rcu_is_watching+0x12/0xc0 [ 199.680270][ T5829] ? __pfx_kthread+0x10/0x10 [ 199.680296][ T5829] ret_from_fork+0x983/0xb10 [ 199.680317][ T5829] ? __pfx_ret_from_fork+0x10/0x10 [ 199.680340][ T5829] ? __switch_to+0x7af/0x10d0 [ 199.680363][ T5829] ? __pfx_kthread+0x10/0x10 [ 199.680386][ T5829] ret_from_fork_asm+0x1a/0x30 [ 199.680426][ T5829] [ 199.916668][ T5829] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 199.930939][ T5829] Bluetooth: hci0: failed to register connection device [ 199.964516][ T7933] evm: overlay not supported [ 199.976564][ T7932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.988414][ T7932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.046815][ T7938] 9pnet_fd: Insufficient options for proto=fd [ 200.465346][ T30] audit: type=1400 audit(1765811913.887:910): avc: denied { listen } for pid=7930 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.558767][ T7943] overlayfs: failed to clone upperpath [ 200.592334][ T5970] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 200.647742][ T30] audit: type=1400 audit(1765811914.877:911): avc: denied { setopt } for pid=7944 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.197342][ T30] audit: type=1400 audit(1765811915.247:912): avc: denied { bind } for pid=7942 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 201.250530][ T5970] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 201.278843][ T5970] usb 4-1: config 0 interface 0 has no altsetting 0 [ 201.300298][ T30] audit: type=1400 audit(1765811915.247:913): avc: denied { setopt } for pid=7942 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 201.322828][ T5970] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 201.334650][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.349300][ T5970] usb 4-1: Product: syz [ 201.358059][ T5970] usb 4-1: Manufacturer: syz [ 201.365585][ T5970] usb 4-1: SerialNumber: syz [ 201.433856][ T5970] usb 4-1: config 0 descriptor?? [ 201.669117][ T5970] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 201.684881][ T5970] imon 4-1:0.0: unable to initialize intf0, err -19 [ 201.734617][ T5970] imon:imon_probe: failed to initialize context! [ 201.760378][ T5970] imon 4-1:0.0: unable to register, err -19 [ 201.780004][ T5970] usb 4-1: USB disconnect, device number 22 [ 202.212349][ T6742] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 203.474373][ T6742] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 203.512681][ T6742] usb 5-1: can't read configurations, error -71 [ 205.152100][ T30] audit: type=1400 audit(1765811919.377:914): avc: denied { create } for pid=7980 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 205.200884][ T30] audit: type=1400 audit(1765811919.377:915): avc: denied { write } for pid=7980 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 205.433857][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.494'. [ 205.464201][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.494'. [ 205.765283][ T30] audit: type=1400 audit(1765811919.997:916): avc: denied { write } for pid=7991 comm="syz.1.496" name="file0" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 205.902625][ T30] audit: type=1400 audit(1765811920.017:917): avc: denied { ioctl } for pid=7991 comm="syz.1.496" path="/96/file0" dev="tmpfs" ino=543 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 206.422348][ T7927] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 207.867589][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 207.882321][ T7927] usb 5-1: Using ep0 maxpacket: 16 [ 207.889547][ T7927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.900464][ T7927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.910530][ T7927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 208.347608][ T7927] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 208.357322][ T7927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.384195][ T7927] usb 5-1: config 0 descriptor?? [ 208.474326][ T30] audit: type=1400 audit(1765811922.707:918): avc: denied { setattr } for pid=8018 comm="syz.0.503" name="KCM" dev="sockfs" ino=17073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 208.497360][ T30] audit: type=1400 audit(1765811922.707:919): avc: denied { ioctl } for pid=8018 comm="syz.0.503" path="socket:[17073]" dev="sockfs" ino=17073 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 208.693551][ T8031] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.507'. [ 208.704593][ T8031] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.507'. [ 208.759202][ T8035] ip6gre1: entered promiscuous mode [ 208.764626][ T8035] ip6gre1: entered allmulticast mode [ 208.823231][ T30] audit: type=1400 audit(1765811923.047:920): avc: denied { write } for pid=8033 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 208.844596][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'. [ 209.814459][ T89] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 210.012592][ T89] usb 2-1: Using ep0 maxpacket: 32 [ 210.790324][ T7927] usbhid 5-1:0.0: can't add hid device: -71 [ 210.983411][ T89] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 210.992826][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.994446][ T7927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 211.000844][ T89] usb 2-1: Product: syz [ 211.000862][ T89] usb 2-1: Manufacturer: syz [ 211.000875][ T89] usb 2-1: SerialNumber: syz [ 211.025821][ T89] usb 2-1: config 0 descriptor?? [ 211.222302][ T89] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 211.243246][ T7927] usb 5-1: USB disconnect, device number 35 [ 211.754261][ T8047] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 211.952434][ T89] gspca_stk1135: reg_w 0x0 err -110 [ 212.802313][ T89] gspca_stk1135: serial bus timeout: status=0x00 [ 212.811580][ T89] gspca_stk1135: Sensor write failed [ 212.816900][ T89] gspca_stk1135: serial bus timeout: status=0x00 [ 212.823230][ T89] gspca_stk1135: Sensor write failed [ 212.828509][ T89] gspca_stk1135: serial bus timeout: status=0x00 [ 212.835064][ T89] gspca_stk1135: Sensor read failed [ 212.840267][ T89] gspca_stk1135: serial bus timeout: status=0x00 [ 212.846680][ T89] gspca_stk1135: Sensor read failed [ 212.851852][ T89] gspca_stk1135: Detected sensor type unknown (0x0) [ 212.897855][ T89] gspca_stk1135: serial bus timeout: status=0x00 [ 212.905478][ T89] gspca_stk1135: Sensor read failed [ 212.910988][ T89] gspca_stk1135: serial bus timeout: status=0x00 [ 212.937952][ T89] gspca_stk1135: Sensor read failed [ 212.943850][ T89] gspca_stk1135: serial bus timeout: status=0x00 [ 213.083228][ T89] gspca_stk1135: Sensor write failed [ 213.097626][ T89] gspca_stk1135: serial bus timeout: status=0x00 [ 213.131908][ T89] gspca_stk1135: Sensor write failed [ 213.148060][ T89] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 213.933304][ T6419] usb 2-1: USB disconnect, device number 29 [ 214.401811][ T7927] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 214.452468][ T5934] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 214.535228][ T7927] usb 5-1: device descriptor read/64, error -71 [ 214.642325][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 214.654277][ T5934] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.664524][ T5934] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.671303][ T5934] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 214.684332][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.710089][ T5934] usb 2-1: config 0 descriptor?? [ 215.226355][ T7927] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 215.251605][ T5934] hid (null): report_id 65501 is invalid [ 215.382728][ T7927] usb 5-1: device descriptor read/64, error -71 [ 216.067890][ T5934] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 216.114139][ T7927] usb usb5-port1: attempt power cycle [ 216.120117][ T5934] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 216.130213][ T5934] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 216.148302][ T5934] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 216.157714][ T5934] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 216.169122][ T5934] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 216.189878][ T5934] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 216.209608][ T5934] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 216.224686][ T5934] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 216.232976][ T6742] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 216.247392][ T5934] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 216.282172][ T5934] cougar 0003:060B:500A.0008: report_id 65501 is invalid [ 216.299459][ T5934] cougar 0003:060B:500A.0008: item 0 2 1 8 parsing failed [ 216.309830][ T5934] cougar 0003:060B:500A.0008: parse failed [ 216.317428][ T5934] cougar 0003:060B:500A.0008: probe with driver cougar failed with error -22 [ 216.502298][ T7927] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 216.523584][ T7927] usb 5-1: device descriptor read/8, error -71 [ 216.622340][ T6419] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 216.782577][ T6419] usb 3-1: Using ep0 maxpacket: 16 [ 216.796329][ T6419] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 216.817936][ T6419] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 216.842063][ T6419] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 216.856577][ T6419] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.866131][ T6419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 216.876108][ T6419] usb 3-1: SerialNumber: syz [ 216.885258][ T8113] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 217.067635][ T30] audit: type=1400 audit(1765811931.297:921): avc: denied { ioctl } for pid=8131 comm="syz.4.534" path="socket:[17205]" dev="sockfs" ino=17205 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 217.095704][ T30] audit: type=1400 audit(1765811931.327:922): avc: denied { ioctl } for pid=8131 comm="syz.4.534" path="socket:[17713]" dev="sockfs" ino=17713 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 217.128054][ T6419] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 217.144411][ T6419] usb 3-1: USB disconnect, device number 18 [ 217.238952][ T8133] delete_channel: no stack [ 217.248450][ T89] usb 2-1: USB disconnect, device number 30 [ 217.427799][ T30] audit: type=1326 audit(1765811931.627:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8140 comm="syz.4.537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32af78f749 code=0x0 [ 217.700448][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.535'. [ 218.038873][ T8137] bridge0: port 3(vlan2) entered blocking state [ 218.076188][ T8137] bridge0: port 3(vlan2) entered disabled state [ 218.103696][ T8137] vlan2: entered allmulticast mode [ 218.196167][ T8137] bridge0: entered allmulticast mode [ 218.224312][ T8137] vlan2: left allmulticast mode [ 218.232358][ T8137] bridge0: left allmulticast mode [ 218.521482][ T30] audit: type=1400 audit(1765811932.747:924): avc: denied { read } for pid=8158 comm="syz.4.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.688648][ T30] audit: type=1400 audit(1765811932.917:925): avc: denied { bind } for pid=8171 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.722055][ T7927] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 218.868150][ T30] audit: type=1400 audit(1765811933.097:926): avc: denied { connect } for pid=8171 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 218.892346][ T6742] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 218.922416][ T7927] usb 3-1: Using ep0 maxpacket: 8 [ 218.933110][ T7927] usb 3-1: config 0 has an invalid interface number: 88 but max is 3 [ 218.942045][ T7927] usb 3-1: config 0 has an invalid interface number: 250 but max is 3 [ 218.950602][ T7927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.961156][ T7927] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 218.971779][ T7927] usb 3-1: config 0 has no interface number 0 [ 218.978097][ T7927] usb 3-1: config 0 has no interface number 1 [ 218.984518][ T7927] usb 3-1: config 0 interface 88 has no altsetting 0 [ 218.991252][ T7927] usb 3-1: config 0 interface 250 has no altsetting 0 [ 218.998409][ T7927] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 219.007708][ T7927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.026545][ T7927] usb 3-1: config 0 descriptor?? [ 219.042340][ T6742] usb 2-1: Using ep0 maxpacket: 16 [ 219.061093][ T6742] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 219.078675][ T6742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.100240][ T6742] usb 2-1: config 0 descriptor?? [ 219.114772][ T6742] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 219.565639][ T8190] : entered promiscuous mode [ 220.008131][ T8170] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 220.014553][ T8170] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 220.026288][ T8170] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 220.041404][ T8170] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 220.047620][ T8170] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 220.056235][ T8170] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 220.062154][ T8170] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 220.085538][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.132775][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.384841][ T8201] netlink: 36 bytes leftover after parsing attributes in process `syz.3.550'. [ 220.396410][ T8196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=8196 comm=syz.0.549 [ 220.418976][ T8201] netlink: 36 bytes leftover after parsing attributes in process `syz.3.550'. [ 220.907920][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 221.207068][ T8228] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20001 [ 221.434235][ T6742] gspca_sonixj: reg_r err -32 [ 221.440473][ T6742] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 221.472034][ T6742] usb 2-1: USB disconnect, device number 31 [ 222.122432][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 222.128536][ T5822] Bluetooth: hci3: command 0x0401 tx timeout [ 222.194901][ T7927] usb 3-1: string descriptor 0 read error: -71 [ 222.211796][ T7927] usb 3-1: selecting invalid altsetting 0 [ 222.226119][ T7927] usb 3-1: Could not set interface, error -22 [ 222.250679][ T7927] usb 3-1: USB disconnect, device number 19 [ 222.994786][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 223.351353][ T8252] netlink: 'syz.3.561': attribute type 29 has an invalid length. [ 223.360316][ T8252] netlink: 'syz.3.561': attribute type 29 has an invalid length. [ 223.388844][ T30] audit: type=1400 audit(1765811937.607:927): avc: denied { write } for pid=7927 comm="kworker/1:13" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17973 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 223.430862][ T8253] netlink: 524 bytes leftover after parsing attributes in process `syz.3.561'. [ 223.529646][ T8214] syz.4.551 (8214): drop_caches: 2 [ 223.946436][ T8275] IPVS: sh: FWM 3 0x00000003 - no destination available [ 223.953782][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 223.979546][ T6419] IPVS: starting estimator thread 0... [ 224.122771][ T8276] IPVS: using max 37 ests per chain, 88800 per kthread [ 224.133023][ T8277] netlink: 2768 bytes leftover after parsing attributes in process `syz.4.567'. [ 224.182332][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 224.188403][ T5822] Bluetooth: hci3: command 0x0401 tx timeout [ 224.384332][ T8277] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 225.073344][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 225.595043][ T8283] netlink: 'syz.3.568': attribute type 1 has an invalid length. [ 226.277117][ T8297] netlink: 'syz.0.569': attribute type 10 has an invalid length. [ 226.949309][ T30] audit: type=1400 audit(1765811940.797:928): avc: denied { write } for pid=8299 comm="syz.2.574" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 226.958216][ T8303] netlink: 'syz.0.569': attribute type 10 has an invalid length. [ 227.914944][ T5934] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 228.106646][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 228.130821][ T5934] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 228.155519][ T5934] usb 4-1: config 0 has no interface number 0 [ 228.182660][ T5934] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 228.217326][ T5934] usb 4-1: config 0 interface 196 has no altsetting 0 [ 228.247144][ T5934] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 228.274504][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.307553][ T5934] usb 4-1: Product: syz [ 228.315904][ T5934] usb 4-1: Manufacturer: syz [ 228.328795][ T5934] usb 4-1: SerialNumber: syz [ 228.350392][ T5934] usb 4-1: config 0 descriptor?? [ 228.370431][ T8309] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.610424][ T5934] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 228.629617][ T5934] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 228.647380][ T8324] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 228.653911][ T8324] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.680123][ T5934] usb 4-1: USB disconnect, device number 24 [ 228.704151][ T8324] vhci_hcd vhci_hcd.0: Device attached [ 228.738019][ T8324] sctp: [Deprecated]: syz.4.580 (pid 8324) Use of int in maxseg socket option. [ 228.738019][ T8324] Use struct sctp_assoc_value instead [ 228.952380][ T5920] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 229.353689][ T8342] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.582'. [ 229.379315][ T8339] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.582'. [ 229.409415][ T8325] vhci_hcd: connection reset by peer [ 229.434698][ T6891] vhci_hcd vhci_hcd.4: stop threads [ 229.440197][ T6891] vhci_hcd vhci_hcd.4: release socket [ 229.449654][ T6891] vhci_hcd vhci_hcd.4: disconnect device [ 229.622441][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.852292][ T30] audit: type=1400 audit(1765811944.077:929): avc: denied { watch_sb watch_reads } for pid=8345 comm="syz.0.584" path="/127/file5" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 230.248131][ T30] audit: type=1400 audit(1765811944.437:930): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 230.642569][ T6742] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 230.817519][ T6742] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 230.854629][ T6742] usb 4-1: config 0 has no interface number 0 [ 230.879740][ T6742] usb 4-1: config 0 interface 98 has no altsetting 0 [ 230.917935][ T6742] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 230.973561][ T6742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.042592][ T6742] usb 4-1: Product: syz [ 231.046919][ T6742] usb 4-1: Manufacturer: syz [ 231.095618][ T6742] usb 4-1: SerialNumber: syz [ 231.128800][ T6742] usb 4-1: config 0 descriptor?? [ 231.420230][ T6742] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 231.741924][ T30] audit: type=1400 audit(1765811945.967:931): avc: denied { append } for pid=8392 comm="syz.1.597" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 231.973543][ T6742] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 232.092356][ T89] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 232.130573][ T6742] usb 4-1: device descriptor read/64, error -71 [ 232.201800][ T30] audit: type=1400 audit(1765811946.427:932): avc: denied { write } for pid=8410 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 232.282520][ T89] usb 3-1: Using ep0 maxpacket: 32 [ 232.300944][ T89] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.312788][ T89] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.333852][ T89] usb 3-1: config 0 interface 0 has no altsetting 0 [ 232.334060][ T8417] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 232.340474][ T89] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 232.340497][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.369251][ T89] usb 3-1: config 0 descriptor?? [ 232.383335][ T6742] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 232.385430][ T89] usbhid 3-1:0.0: can't add hid device: -22 [ 232.401725][ T89] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 232.582410][ T6742] usb 4-1: device descriptor read/64, error -71 [ 232.593823][ T8404] Cannot find del_set index 3 as target [ 232.601566][ T89] usb 3-1: USB disconnect, device number 20 [ 232.742387][ T7927] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 232.832407][ T6742] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 232.852875][ T6742] usb 4-1: device descriptor read/8, error -71 [ 232.872381][ T7927] usb 2-1: device descriptor read/64, error -71 [ 233.151678][ T6742] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 233.183549][ T6742] usb 4-1: device descriptor read/8, error -71 [ 233.213430][ T30] audit: type=1400 audit(1765811947.447:933): avc: denied { read } for pid=8439 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 233.246098][ T7927] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 233.254575][ T8437] netlink: 220 bytes leftover after parsing attributes in process `syz.0.609'. [ 233.268782][ T30] audit: type=1400 audit(1765811947.467:934): avc: denied { map } for pid=8439 comm="syz.2.611" path="socket:[18321]" dev="sockfs" ino=18321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 233.297718][ T6742] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 233.308276][ T6742] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 233.319563][ T5934] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 233.328670][ T5934] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 233.339696][ T30] audit: type=1400 audit(1765811947.567:935): avc: denied { firmware_load } for pid=5934 comm="kworker/1:6" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 233.361380][ T6742] usb 4-1: USB disconnect, device number 25 [ 233.387399][ T5934] ------------[ cut here ]------------ [ 233.393075][ T5934] WARNING: fs/kernfs/dir.c:537 at kernfs_get.part.0+0x6e/0x80, CPU#1: kworker/1:6/5934 [ 233.402830][ T5934] Modules linked in: [ 233.406908][ T5934] CPU: 1 UID: 0 PID: 5934 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 233.416391][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.426532][ T5934] Workqueue: events request_firmware_work_func [ 233.432875][ T5934] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 233.438479][ T5934] Code: f8 9a 54 ff 85 ed 74 1c e8 4f a0 54 ff be 04 00 00 00 48 89 df e8 92 7d be ff f0 ff 03 5b 5d e9 d8 df 10 09 e8 33 a0 54 ff 90 <0f> 0b 90 eb d9 48 89 df e8 75 75 be ff eb c0 0f 1f 00 90 90 90 90 [ 233.458213][ T5934] RSP: 0018:ffffc900047cf718 EFLAGS: 00010293 [ 233.464748][ T5934] RAX: 0000000000000000 RBX: ffff888052495d20 RCX: ffffffff826a43a8 [ 233.472976][ T5934] RDX: ffff88802d368000 RSI: ffffffff826a43cd RDI: 0000000000000005 [ 233.480999][ T5934] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 233.489439][ T5934] R10: 0000000000000000 R11: ffff88802d368b30 R12: ffff888031b040b0 [ 233.498113][ T5934] R13: ffff88804abcc6b0 R14: 0000000000000000 R15: ffff88804abcc6a8 [ 233.506145][ T5934] FS: 0000000000000000(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 233.515217][ T5934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.521862][ T5934] CR2: 0000000000000000 CR3: 0000000061e93000 CR4: 00000000003526f0 [ 233.522423][ T30] audit: type=1400 audit(1765811947.627:936): avc: denied { lock } for pid=8435 comm="syz.4.610" path="socket:[18946]" dev="sockfs" ino=18946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.529892][ T5934] Call Trace: [ 233.556245][ T5934] [ 233.559227][ T5934] kernfs_get+0x1f/0x30 [ 233.563463][ T5934] kobject_add_internal+0x353/0x9d0 [ 233.568728][ T5934] kobject_add+0x16e/0x240 [ 233.573230][ T5934] ? __pfx_kobject_add+0x10/0x10 [ 233.578234][ T5934] get_device_parent+0x399/0x4e0 [ 233.583661][ T5934] device_add+0x1ad/0x1980 [ 233.588480][ T5934] ? __pfx_device_add+0x10/0x10 [ 233.593436][ T5934] ? __init_waitqueue_head+0xca/0x150 [ 233.598886][ T5934] firmware_fallback_sysfs+0x2ec/0xc40 [ 233.604436][ T5934] _request_firmware+0x101c/0x14e0 [ 233.609601][ T5934] ? __pfx__request_firmware+0x10/0x10 [ 233.615158][ T5934] ? do_raw_spin_unlock+0x172/0x230 [ 233.620409][ T5934] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 233.626563][ T5934] ? debug_object_deactivate+0x1ec/0x3a0 [ 233.632282][ T5934] ? finish_task_switch.isra.0+0x202/0xbd0 [ 233.638136][ T5934] request_firmware_work_func+0xea/0x250 [ 233.643869][ T5934] ? __pfx_request_firmware_work_func+0x10/0x10 [ 233.650153][ T5934] ? rcu_is_watching+0x12/0xc0 [ 233.654996][ T5934] process_one_work+0x9ba/0x1b20 [ 233.659982][ T5934] ? __pfx_process_one_work+0x10/0x10 [ 233.665427][ T5934] ? assign_work+0x1a0/0x250 [ 233.670054][ T5934] worker_thread+0x6c8/0xf10 [ 233.674735][ T5934] ? __pfx_worker_thread+0x10/0x10 [ 233.679873][ T5934] kthread+0x3c5/0x780 [ 233.684035][ T5934] ? __pfx_kthread+0x10/0x10 [ 233.689124][ T5934] ? rcu_is_watching+0x12/0xc0 [ 233.694352][ T5934] ? __pfx_kthread+0x10/0x10 [ 233.699010][ T5934] ret_from_fork+0x983/0xb10 [ 233.703691][ T5934] ? __pfx_ret_from_fork+0x10/0x10 [ 233.708838][ T5934] ? rcu_is_watching+0x12/0xc0 [ 233.713671][ T5934] ? __switch_to+0x7af/0x10d0 [ 233.718380][ T5934] ? __pfx_kthread+0x10/0x10 [ 233.723022][ T5934] ret_from_fork_asm+0x1a/0x30 [ 233.727831][ T5934] [ 233.730867][ T5934] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 233.738146][ T5934] CPU: 1 UID: 0 PID: 5934 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 233.747515][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.757575][ T5934] Workqueue: events request_firmware_work_func [ 233.763742][ T5934] Call Trace: [ 233.767019][ T5934] [ 233.769943][ T5934] dump_stack_lvl+0x3d/0x1f0 [ 233.774548][ T5934] vpanic+0x640/0x6f0 [ 233.778526][ T5934] ? kernfs_get.part.0+0x6e/0x80 [ 233.783452][ T5934] panic+0xca/0xd0 [ 233.787191][ T5934] ? __pfx_panic+0x10/0x10 [ 233.791593][ T5934] ? check_panic_on_warn+0x1f/0xb0 [ 233.796690][ T5934] check_panic_on_warn+0xab/0xb0 [ 233.801619][ T5934] __warn+0x108/0x3c0 [ 233.805584][ T5934] __report_bug+0x2a0/0x520 [ 233.810064][ T5934] ? kernfs_get.part.0+0x6e/0x80 [ 233.814985][ T5934] ? __pfx___report_bug+0x10/0x10 [ 233.819989][ T5934] ? find_held_lock+0x2b/0x80 [ 233.824658][ T5934] ? kernfs_add_one+0x37d/0x840 [ 233.829514][ T5934] ? up_write+0x282/0x4e0 [ 233.833836][ T5934] ? kernfs_get.part.0+0x6e/0x80 [ 233.838765][ T5934] report_bug+0xb2/0x220 [ 233.842999][ T5934] ? kernfs_get.part.0+0x6e/0x80 [ 233.847924][ T5934] handle_bug+0x127/0x260 [ 233.852420][ T5934] exc_invalid_op+0x17/0x50 [ 233.856928][ T5934] asm_exc_invalid_op+0x1a/0x20 [ 233.861763][ T5934] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 233.867303][ T5934] Code: f8 9a 54 ff 85 ed 74 1c e8 4f a0 54 ff be 04 00 00 00 48 89 df e8 92 7d be ff f0 ff 03 5b 5d e9 d8 df 10 09 e8 33 a0 54 ff 90 <0f> 0b 90 eb d9 48 89 df e8 75 75 be ff eb c0 0f 1f 00 90 90 90 90 [ 233.886894][ T5934] RSP: 0018:ffffc900047cf718 EFLAGS: 00010293 [ 233.892943][ T5934] RAX: 0000000000000000 RBX: ffff888052495d20 RCX: ffffffff826a43a8 [ 233.900915][ T5934] RDX: ffff88802d368000 RSI: ffffffff826a43cd RDI: 0000000000000005 [ 233.908868][ T5934] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 233.916815][ T5934] R10: 0000000000000000 R11: ffff88802d368b30 R12: ffff888031b040b0 [ 233.924762][ T5934] R13: ffff88804abcc6b0 R14: 0000000000000000 R15: ffff88804abcc6a8 [ 233.932718][ T5934] ? kernfs_get.part.0+0x48/0x80 [ 233.937639][ T5934] ? kernfs_get.part.0+0x6d/0x80 [ 233.942556][ T5934] ? kernfs_get.part.0+0x6d/0x80 [ 233.947475][ T5934] kernfs_get+0x1f/0x30 [ 233.951609][ T5934] kobject_add_internal+0x353/0x9d0 [ 233.956791][ T5934] kobject_add+0x16e/0x240 [ 233.961188][ T5934] ? __pfx_kobject_add+0x10/0x10 [ 233.966116][ T5934] get_device_parent+0x399/0x4e0 [ 233.971046][ T5934] device_add+0x1ad/0x1980 [ 233.975442][ T5934] ? __pfx_device_add+0x10/0x10 [ 233.980270][ T5934] ? __init_waitqueue_head+0xca/0x150 [ 233.985630][ T5934] firmware_fallback_sysfs+0x2ec/0xc40 [ 233.991078][ T5934] _request_firmware+0x101c/0x14e0 [ 233.996179][ T5934] ? __pfx__request_firmware+0x10/0x10 [ 234.001621][ T5934] ? do_raw_spin_unlock+0x172/0x230 [ 234.006807][ T5934] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 234.012596][ T5934] ? debug_object_deactivate+0x1ec/0x3a0 [ 234.018205][ T5934] ? finish_task_switch.isra.0+0x202/0xbd0 [ 234.023997][ T5934] request_firmware_work_func+0xea/0x250 [ 234.029612][ T5934] ? __pfx_request_firmware_work_func+0x10/0x10 [ 234.035833][ T5934] ? rcu_is_watching+0x12/0xc0 [ 234.040575][ T5934] process_one_work+0x9ba/0x1b20 [ 234.045500][ T5934] ? __pfx_process_one_work+0x10/0x10 [ 234.050855][ T5934] ? assign_work+0x1a0/0x250 [ 234.055425][ T5934] worker_thread+0x6c8/0xf10 [ 234.060063][ T5934] ? __pfx_worker_thread+0x10/0x10 [ 234.065155][ T5934] kthread+0x3c5/0x780 [ 234.069204][ T5934] ? __pfx_kthread+0x10/0x10 [ 234.073776][ T5934] ? rcu_is_watching+0x12/0xc0 [ 234.078516][ T5934] ? __pfx_kthread+0x10/0x10 [ 234.083085][ T5934] ret_from_fork+0x983/0xb10 [ 234.087657][ T5934] ? __pfx_ret_from_fork+0x10/0x10 [ 234.092747][ T5934] ? rcu_is_watching+0x12/0xc0 [ 234.097490][ T5934] ? __switch_to+0x7af/0x10d0 [ 234.102155][ T5934] ? __pfx_kthread+0x10/0x10 [ 234.106811][ T5934] ret_from_fork_asm+0x1a/0x30 [ 234.111570][ T5934] [ 234.114842][ T5934] Kernel Offset: disabled [ 234.119143][ T5934] Rebooting in 86400 seconds..