last executing test programs: 10m32.918157483s ago: executing program 2 (id=533): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x8c080, 0x0) 10m32.784461648s ago: executing program 2 (id=535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x5623, @rand_addr=0x64010105}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x13, {0x0, 0x0, 0x0, r7, {0x0, 0xb}}}, 0x24}}, 0x0) 10m32.050305322s ago: executing program 2 (id=537): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(r5, &(0x7f0000000340)='./file0\x00', 0xf3) 10m30.568693629s ago: executing program 2 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0xe6, 0x18, 0xf7, 0x8, 0xcf2, 0x6250, 0x8b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x8, 0xa0, 0x75, "", [{{0x9, 0x4, 0xa4, 0x3, 0x0, 0x82, 0x41, 0x46, 0x10}}]}}]}}, 0x0) 10m27.390157327s ago: executing program 2 (id=551): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) fcntl$getown(0xffffffffffffffff, 0x9) io_uring_enter(0xffffffffffffffff, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xfe) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x5, 0x10, 0x4c, @local, @loopback, 0x80, 0x40, 0x1f, 0x6}}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'}) 10m27.143952597s ago: executing program 2 (id=552): syz_emit_ethernet(0x56, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000240)=""/193, 0xc1}, {&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000100)=""/48, 0x30}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/152, 0x98}, {&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f0000001500)=""/161, 0xa1}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001640)=""/112, 0x70}, {&(0x7f00000016c0)=""/153, 0x99}], 0xa}, 0x1}], 0x1, 0x10000, &(0x7f0000001840)={0x0, 0x989680}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000000c0)=r0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) 10m12.814644917s ago: executing program 32 (id=552): syz_emit_ethernet(0x56, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000240)=""/193, 0xc1}, {&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000100)=""/48, 0x30}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/152, 0x98}, {&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f0000001500)=""/161, 0xa1}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001640)=""/112, 0x70}, {&(0x7f00000016c0)=""/153, 0x99}], 0xa}, 0x1}], 0x1, 0x10000, &(0x7f0000001840)={0x0, 0x989680}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000000c0)=r0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) 4m26.746069179s ago: executing program 0 (id=1725): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffff9c, &(0x7f0000000640), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x4000000006, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x3, 0xa, 0x10000000, 0xf, 0x80000006}, 0x0, 0x0) 4m25.957561345s ago: executing program 0 (id=1729): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xc05}}], 0x400000000000181, 0x9200000000000000) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4m24.096896688s ago: executing program 0 (id=1739): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) syz_open_dev$sg(0x0, 0x8000, 0x38182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r2, 0x0, 0x0) r3 = getpgrp(r2) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0xf, 0x10000, 0x4, 0xfffffffe, 0xaa, '@\x00'}) syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 4m22.849833178s ago: executing program 0 (id=1740): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sw_sync(0xffffff9c, &(0x7f0000000100), 0x4b2201, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000300)={0x40000003, "030000000000000023000000debd12ffff00000004000000001000"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000400)=""/39, 0x27) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$poke(0x4, 0xffffffffffffffff, &(0x7f00000000c0), 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_udp(0x2, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{0x0}], 0x1, 0x1006c, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe8000000000080000008f735118d81cc0399493af4b480000000000000000aafc010000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff03000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005b50000020001000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 4m20.976293599s ago: executing program 0 (id=1751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syslog(0x3, &(0x7f00000007c0)=""/210, 0xd2) r5 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) mq_getsetattr(r5, &(0x7f0000000100)={0x800, 0x75f0, 0x9, 0x200000000000098}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xa880, 0x97) r7 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r7) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r9, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdc00, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) 4m15.485201925s ago: executing program 0 (id=1761): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)={0x1104, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x7, 0x3f}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10dc, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x62, 0x1, "ceb40a09a45d95172f765af5196e14f0971aab5392482f6b25fbf2beefca42d43a4e020e6899c610389e951cd4da1518c7bd53d5adcd030c824d7d818b67e9f05badae292942211755bb308460a3a0db30df184520570d9d8094334711d3"}, @NL80211_BAND_5GHZ={0xfc4, 0x1, "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"}, @NL80211_BAND_5GHZ={0x83, 0x1, "941482125e0aec4736d35f3d1571a59c41bc2023e0ab48be4a399ce6d09a60ee69efe1b727f726f241ef003d11eb3d2cb311ce152e377c580983552eb226d154f333fe085004b9e2beef38d2ac41c0baa847fbaa57c9b8942f29888a5a5e397e81c0e5a4a2b86d35da52902f62665497a0a02b435b4b6783208e3d3603d6e1"}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x25, 0x2, "51bc3bd2aad7fe7065795b04ea372e5810527169e6a0ebbdcc67cdea48011cc076"}]}]}, 0x1104}}, 0x8080) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, &(0x7f0000000080)}) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000380)=@generic) r1 = socket$inet6(0xa, 0x80000, 0x22) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountstats\x00') setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x9, @private2, 0xcb7}}, 0x3b, 0xfff7, 0x7, 0x10000, 0x2, 0xd039, 0x8}, 0x9c) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="a80000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400200100000000000000000000000000020c00028005000100000000003c0001800c00028005000100000000002c00018014000300fc02000000000000000000000000000114000400fe8000000000000000000000000000aa0800074000000001140005"], 0xa8}, 0x1, 0x0, 0x0, 0x1000}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_ep_write(r5, 0x81, 0x0, 0x0) 4m14.710501187s ago: executing program 33 (id=1761): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)={0x1104, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x7, 0x3f}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10dc, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x62, 0x1, "ceb40a09a45d95172f765af5196e14f0971aab5392482f6b25fbf2beefca42d43a4e020e6899c610389e951cd4da1518c7bd53d5adcd030c824d7d818b67e9f05badae292942211755bb308460a3a0db30df184520570d9d8094334711d3"}, @NL80211_BAND_5GHZ={0xfc4, 0x1, "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"}, @NL80211_BAND_5GHZ={0x83, 0x1, "941482125e0aec4736d35f3d1571a59c41bc2023e0ab48be4a399ce6d09a60ee69efe1b727f726f241ef003d11eb3d2cb311ce152e377c580983552eb226d154f333fe085004b9e2beef38d2ac41c0baa847fbaa57c9b8942f29888a5a5e397e81c0e5a4a2b86d35da52902f62665497a0a02b435b4b6783208e3d3603d6e1"}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x25, 0x2, "51bc3bd2aad7fe7065795b04ea372e5810527169e6a0ebbdcc67cdea48011cc076"}]}]}, 0x1104}}, 0x8080) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, &(0x7f0000000080)}) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000380)=@generic) r1 = socket$inet6(0xa, 0x80000, 0x22) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountstats\x00') setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x9, @private2, 0xcb7}}, 0x3b, 0xfff7, 0x7, 0x10000, 0x2, 0xd039, 0x8}, 0x9c) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="a80000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400200100000000000000000000000000020c00028005000100000000003c0001800c00028005000100000000002c00018014000300fc02000000000000000000000000000114000400fe8000000000000000000000000000aa0800074000000001140005"], 0xa8}, 0x1, 0x0, 0x0, 0x1000}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_ep_write(r5, 0x81, 0x0, 0x0) 17.31544948s ago: executing program 1 (id=2468): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x48}}, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x100002}) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7, 0x1f000000}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000000c0)=0xc0, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r9, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x2) 9.782514432s ago: executing program 4 (id=2487): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(pcrypt(rfc4543(gcm_base(cbc-des3_ede-asm,sha224-generic)))'}, 0x58) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000000c0)={0x2, @sliced={0x2, [0x6312, 0x6, 0x5, 0x3, 0x9, 0x6, 0x6, 0x6, 0xa, 0x0, 0x9, 0x44d, 0xffff, 0x954, 0x580, 0x5, 0x5, 0x800, 0x3, 0x3d, 0x4, 0xd1cc, 0x0, 0x5, 0xd, 0x2, 0x2c, 0x4, 0x40, 0xff, 0x3, 0x8, 0x4, 0xb, 0x3, 0x5, 0xa, 0x10, 0x9, 0x9, 0x67c, 0x1, 0x6, 0x0, 0x76c, 0x1, 0x2b51, 0x2], 0x2}}) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) readv(r4, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}, {0x0, 0x3f00}], 0x2) 9.161049678s ago: executing program 1 (id=2490): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0xfffffff9, 0xfffffffc, 0xfddffff8, 0xffffffff, 0x80, "ff0000bb719b98fb73e53a0000000600"}) syz_open_pts(r1, 0x0) syz_open_pts(r1, 0x105000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x3d, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x6}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_OSF_TTL={0x5, 0x2, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 8.273239441s ago: executing program 4 (id=2493): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x8000054) 8.207137271s ago: executing program 1 (id=2494): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) eventfd(0xfffffff9) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6cc0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@getchain={0x5c, 0x66, 0x8, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xa, 0x1ffc0}, {0xf, 0x9}, {0x5, 0xffe0}}, [{0x8, 0xb, 0x66}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x618}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x100, 0x0, 0x20, 0x0, 0x0, @remote}, 0x10) 8.135025329s ago: executing program 4 (id=2495): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2040, 0x0) ioctl$COMEDI_UNLOCK(r0, 0x6406) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r3, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xe, 0xc, 0xcd, &(0x7f0000000040)}) 8.07978682s ago: executing program 3 (id=2496): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r1, 0x0, 0xf3c, 0x0) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x6}}, 0x20) write(r0, 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000240)={{0x2, @name="8128124f570403b557a3b2d694f4b6eb448447d028101946b127cbb56dd461d0"}, "9c2023770beeb94dc2d307d71d2b15f646a89edb68f62cb61252c375799e6067"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001e00000000000000200018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b27, &(0x7f0000000040)) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$loop(0x0, 0x6, 0x8201) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getitimer(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) 7.70680416s ago: executing program 4 (id=2497): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) syz_open_dev$sg(0x0, 0x8000, 0x38182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0xf, 0x10000, 0x4, 0xfffffffe, 0xaa, '@\x00'}) r6 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 7.705676258s ago: executing program 1 (id=2498): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0xb) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000040)='./file0\x00', 0x4b) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) userfaultfd(0x1) 6.832709524s ago: executing program 3 (id=2500): landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x8095) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x18addbae, 0xfff, 0x0, 0x180, 0x7, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x1}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.294569487s ago: executing program 3 (id=2502): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000100)="cfed", 0x2}, {0x0, 0x4000}], 0x2) getdents64(0xffffffffffffffff, &(0x7f0000002440)=""/181, 0xb5) 4.797698976s ago: executing program 6 (id=2507): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x370, 0x2e8, 0x2e8, 0x370, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev={0xac, 0x14, 0x14, 0x8}, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x2}, [0xffffffff], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440200) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000280)={0x8000000000000001, r1, 'id0\x00'}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f0000000040)=0x2000) 4.771296724s ago: executing program 4 (id=2508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd) read(r2, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x1, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) fchdir(r5) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r6 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r6, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x40) 4.646031047s ago: executing program 5 (id=2509): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0x35cb, 0xa, 0x14, 0x0, "0c449f9069584bd7896acc94537bb3d1e1ce3cda422f8ef8d863bc3a8a03e9a61cdbdfdda13e4328ceeda87aa3ec552d3160b65c097552749cc74fd2aff66adc", "c9dc81b7e58abb1b5c50a539c87c778099ca9cbe6bcbbf3b12ff0c6f6e424e7d", [0x7, 0x400]}) ioctl$BLKRRPART(r1, 0x125f, 0x0) getdents(r0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000000c0)) 4.538070372s ago: executing program 6 (id=2510): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r1, 0x0, 0xf3c, 0x0) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x6}}, 0x20) write(r0, 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000240)={{0x2, @name="8128124f570403b557a3b2d694f4b6eb448447d028101946b127cbb56dd461d0"}, "9c2023770beeb94dc2d307d71d2b15f646a89edb68f62cb61252c375799e6067"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001e00000000000000200018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b27, &(0x7f0000000040)) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$loop(0x0, 0x6, 0x8201) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getitimer(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) 4.409108388s ago: executing program 5 (id=2511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2db55b2106a2378e004b0000000000000c000006", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) creat(&(0x7f0000000480)='./file0\x00', 0x0) splice(r1, 0x0, r2, &(0x7f00000002c0), 0x6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)}, 0x20) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)={0x64, r6, 0x1, 0x70bd2d, 0x65dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0xfc, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8004}, 0x40800) fgetxattr(r3, &(0x7f0000000100)=@known='com.apple.FinderInfo\x00', &(0x7f0000000140)=""/29, 0x1d) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0xfffffffffffffcf0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x0, 0xffffff01}, 0x48) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) r9 = semget$private(0x0, 0x7, 0x191) semtimedop(r9, &(0x7f00000002c0)=[{0x0, 0xffff}], 0x1, 0x0) semctl$SETVAL(r9, 0x0, 0x10, &(0x7f0000000080)=0x3) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8001) ioctl$EVIOCREVOKE(r11, 0x40044591, 0x0) write$evdev(r10, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 3.824693089s ago: executing program 1 (id=2512): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000008700dbdf25210000000800037e5771df00", @ANYRES32=r2, @ANYBLOB="08009e0048000000"], 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0x9}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) r7 = socket(0x3, 0x3, 0xffffffff) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd09666d49f173998}, {0x8, 0x8}, {0x2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd7f4f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(r10, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r12) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 3.750073124s ago: executing program 5 (id=2513): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x10000, &(0x7f0000000240)='fsr\x04\x00\x00\x00\x00\x00\x00\x00\x00otq') chdir(&(0x7f0000000140)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) 3.703237348s ago: executing program 6 (id=2514): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2.240340012s ago: executing program 5 (id=2515): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000000)={0x18, 0x0, 0x1, 0x0, 0x0, 0x8}) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x2, 0x25}, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x67f4, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@setlink={0x50, 0x13, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x28e31, 0xf991}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffc, 0x120}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x5b556efbb1a58058}, 0x400c010) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.983841289s ago: executing program 6 (id=2516): ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x8000054) 1.907854234s ago: executing program 6 (id=2517): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18e82d001e685f1200000000070000005d56fcfff0ffffff95000000000000001fd12050fa11d71325602a001b4cc8da36652d1d9bc855c11953a538d1d7ccabbca94e672ccd04a8dec632dbd3962fc6415a4e16d8e4fadb6bbbb35ceb189b73bed52ad376f87c5ac0662d78ae020ad3a9a2ce7b26cc4e7c5244015242ea41734cae65c02da834531dcb47e341e9d583dff6ea33c0e44dd8d62d86997dc63cec95fa3b3aa9a8e150ccac1a0731a00daf45a9fc2469dafe3d42a750797fe88ed45f6ea78b8a1d73408a734c101c52f58868122e83ef406e00be"], &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x55, &(0x7f00000002c0)=""/85, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x7, 0x6, 0x200}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xce, &(0x7f0000000380)=""/206, 0x0, 0xe4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x596b, &(0x7f0000000080)={0x0, 0xa8f3, 0x10000, 0x1, 0x31b}, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x3, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x178}}, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) 1.907391199s ago: executing program 3 (id=2518): write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e", 0x5) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000076dd604dd30800200601fe800000000000000000000000000023fe8000000000000008000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000080ac5833c80000000070000"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000500)="50981a1f6d047db18cc91ee86ac4cfd7d07f078e2aaaa1eb956d2de729b2ecef010d49211ee022f211a069044ace6611443a36875edd0d27ad50c8c653d1fb2dfac7091bddeb0824db8841f5774babcc0cc9ec4beccbbd91a7ca72d0b60bdb9855239b5bbff1c7215bc682d6020238b79e56d9f50e5fd3c75bdaac15f068e5d41629b13f194340e6f014862516b96eda8a589306e95ad93e9b9a80f8c087555e549fbaee0096262bc0d8a993b2", 0xad}, {&(0x7f0000000600)="7164245da20fccdee39bb8f4f2055dfa97e2710832cd4a27793e79bc409cb5c38a8ad35c9ff44014744d4fab508d57d9fa7e1c831f7e576883c122358fec103da82522517d9243dfe9f77e8f69f4501e6070573756b0538bca622f5b51783625ac3ccea6782360267389f674cbf7e7c1d310bc9fb645bc7f20518e7ba5807ce4e54b1bd58f058215932892ed0a8a831b5441f58f6a2b63a2763923c51ae9b87c58417173a18b24e341ea0f0fc33f2cca12e0abfa556e7f8aceb8ee2a675937", 0xbf}, {&(0x7f0000002840)="7d5beb7cb055ec77e4d220fa5ec13bfa899e7a7ae12dfc7b282b2f9e05f1988910aa1035051316b2eed061f9a455b94ae62dc66c9189cb93eccae4c650e97d9f464a522334da2de14c70864a567105165fc44377be9fe44f45332510e09b3bfe0d05fdb132637d1c8be8b9f7d6bf14681584d27030b0341e7193ba18d29a166a91a8c67b83acddd9938a2c4c6d30b5a75f4749c5016804f1331777113c4c627f9a1b88fc71c0cf90069ca5fc5187549d589eee1450c70a1779524e1de760a750a45a798c645402019f257adbeaf6d0038d80cddd0d26cd0ddb7f115631355d5d13add385b4419609147360df781e3db0ad5fd37ad49316fc4a1a6ed5a4f75915f8fc9f18dd534938357bec33ff3a80db5ce75f364a176631b11a597ed76ce8e94a5264ce4cdd5bf64231470d8a0e15731251a08880b1df237bdb1c4dc462e7601458fd7d776c2121b78826a4b8180ad965c92054266d91cb38266695a9293860f10bda34e0a373fb79f6723e5421822c13932a146ba13d07741fefa351b0feb003957d92f8860f88be2b81bbaff9c6d7433a3c78a8ba714f3db8e7cf5c3a0f9943183b3bcb5e639cd3a420a9de8774dcbd13d8c99826845a1bd9f845f0929bc9eaa84a3fa2a8a0049695d66e9c3ec92a11c78f09797592aa27c277f86e2ed6bafb0b0f37d25e442e7e33b6670784c127bf430825feea664346e319d902d845b13aa4d49e71bb54ea0d07ba251b617779678677449959382e8451507b3981501404eed56ac0cd32bb72a6a9c3aa3b0e5f226e177eb70559b337b4a5e898aef2575e216163c7ad7cf20327d572bc44edb618038365d7af9454eccca63e3282d488345046d0aa13e4769d5820c456e524c2fe6b85bb61dc1e9c26a8957830edaa92d623c9302782532cd8d51994f80afae5ddca010e1cc41afb53a3f2d2a42c980d22965e7053d69bbebfc4023d4061506e5d8790fadbafaea8cff9b50045198682e1bbc50a2c16421043d4d0cf0505fbb14dbd197af0d6c6129750ada809b3a95bd3d84312b5574f2534540ee42923d5350144d1119fd64f7845f644f3b469045b43483f79e5ce7b6ddfecdf6b6056769e4f28b824657cd3ce3d5c24a185c2b11cd3e013dc999b5bd754ff2c3b720a85dd94d2cce2908edb0e3a83fddbf90898220cf6f4ccc04d0f6e2697931d07d55f9fb7319b36f7dea9c60c72fd7969155ae5b2b71c60b820e8cacfd8ffa578b25e3070948691e811449691f7d7f7313fce6f146339d298bcd261cd6db51f864660bce476ac49e107a6cf07f422ddf6df6a0f3edb48797b3ee5d1837947aaebaf05fdd742eb85dee4a1d3e5255aac6778c1427937bb709d4eaa289e41380922c74699160ccf30ac6a1db62f3278218003b5ff46cb4f1200005f843e190b5ca1d08aed950f51eccc27a78ddd1c236b1e38bd184e3d7f9c700273231c659f237a2945c16e1b11d8a06a289646d831d0fefc1f614799685bcc0680696313cac1e04fedc3e363e98d522c46829acbf79b6948c480e8a3099e40d5bc5941f1eb045fba2f5865141bf2b727915551407095f54d8699438bd00df24cc9b7cec79718dae18fc16c29fcb5baf04f6c1b20543927c8c6621f45fe465e1accb73c3bba82333f9ef1dd2ce2f1d8f1700a1572564dcd789dbfde46da73f75ef9aaf6dd66df22e3958212c1401f291092d19d2ab7792cbf383a4e1d139598c35b3f2c05eab0918b3bc0aefff31d4dbcebd1d033b968f6cd5a1cbddf3cf7b20096f58c48c6702b7ae992c948da6cd61afcb22730ebb0893addad83f380a4c268e66652e05963cc6fa71a9fde375b4c1faa421cd166e53d00ac267d33263deee37a6b6b16a736d5faad6d1e61135932931818ba10bcd4748aaac09b27759fe4a1517bd6a8b021bf3f7ec6c4bab4a875904d025086e4a06d631572a0a48d01c03294704131acd1ec6bebd5c2fcaf368ac51a0613f2681ddb8cfd63a27f06955115c8a36b485bc743aca55a34eb288ed53a28073b3a16b48acb62aae7d1f9a33ee75f97a1a9905d232d1855f17a7cd152a125061cf356d0f57cc8483a2e22f93f11db61aa9dd0302c8bf0a9ced5aefba6dd59ec3603fd1bf05ffa5024e8d28bda201eb83f865340af578a3e9369291efe58cf9ee9ae26bc509689276d12c255aabbeb802c6fdbd7608e38b4f06e795f89643bcb8cac8cc0dc8eb121525b4fd5aaf747498354db89ad839ac2334d64d3a70c99aa9ee338273a8af9f4396d73145991185632c56d5ea4ff7740d0ed1342c68b2f2f97fa14cf597c58cc04445724aae9b36a68efaa5fcab325848eb17d2d6ce9c9db487201aacd0ccc336e2b577c3c0b2e7d1adeb3496cc84fe1c68c0d58c19798626f63e4c510082c8efe3d8a696491946af8273f766eb924c7be03c4b0cbcf3cb1d7123e85aaa9c75ce0c1886e1e1b58f3cdb30c31b1843e347136e4ddea8e7ef682ffd6f7f8f2ed0fefcc1c0d1673949627f186305b8e51d87c07d9aa7d4a2a342b95d421b94d1668856ddd207cf803c67b508e49a0e6199ce9ae31eb653c8d88aae3e9089698c886d204041122e4a367d0775d1d4c174f602046789c9295c8187d3dbdd15607a057a26f4416d33e0126f3645464a2231dc23c13da492e554440871d76f69882acfa345192d6aaadf28110f05de13e0197f8ab3c9fa344552bd03bced4e75f76daa3b8b4ef6b10e65435f2f0a9d7a47b7aea9482848a0f5523e88ed6b228d41789eb083c2bf2f913126f0b1f84a3058fcff148b3e600f9b194e4f1ddc7adda842cc46c4c0585e360407ee284e32bf1967f8a5990f7123439216ce536d0e7beafe8e0b477cc35f2b232ea3fdec61aa49e4d22fb175bf1473e7ad0d13ea510fcbd3838aa75ab1891dde1ccddbcf3f74ed2a208e3013f2fc1a1ff1fbad22083c6692e53cb0ca771fd409e37257b1415938742975b80ffaaef7cd1da6bce934d7d47687448f3d152bdb04e089ed07d6c28e14533c0cb8d436fa2dcebd41a21a4fa2c4a8bd5ff6884051ad670af62f4d685d0379c69adb01b3ae6787f2e9cb13a70f022ea53fa11499b8b9faf251657826bf9390df01c879677aa91f3192a18e3629d6fb3580796de1b27ac55aefc3457274b575ad91c7ef27d2943a96920eede205e5cd3359fd891e9ad1bfcd49b3c9260ff09ba76e97a716eac3b89f1e32eb138bec9eeb5b10d341d62b63c4a99803db00e91ae6cc1cf8ecd8a15a14e24a3d722d12d4c5f8581bf83dba972f710b414ca2085f73c6e2676e7ce8eb9de1c419da1162e83ca6b705e4b1a94ccd2c604d207049ea08aafe991007b372036fc730d0880973163788d161d8413f9cbf1ffeedbce1fe57b219d4e9de7e47a9e73f137b93f4acaa19deb0a3b7269583b6364c18b14c8333906eacec192a38154996a8b6f4e5709a06dbed200de4e49f68bbafe52bf504230cc97a3de64a31cece3e8ae890b51db7c34335bd579d085576d8fba077f60acc63251c5345f67337324f3cdd9d3468cab6bf2299f70aa539ac7012ddfb856070fd4431ce7147e57caa8829c093aa3c16f65558b57c3e22d799abad32db2a85d703a3b1c89414b4512fdc254553af99aea97b3c9a2dff921c1d3c8a966f1c275ff46857b7017c09a50bfbd8e99f6e4f14341f309d6284c703dc247333420a08813c27ea4976d867a03a3aec281efe5521857e5db44326577fefd1617ab56a29249be69d5549854e4377102fbac1407ca5b26392e2b7fb3c136916a40095c482dcce0cdadab3a92232a5be62a2ab9689340e078e70f60cac9fc68affd13b1e5b38aa018ae4fd1b8b91789d83845ba339936021f54542c6c42ec6a501190cf3f11a60a77a3fdb165a59f79128ae6510a36ab2eb756e00ad0179668fb789e116faf395b862c0f18f0d8f04c01711e01a2aa01211edfa786c3a46e222bed96424793def7fccc36e9b6fb58917e1c719c650165071856443597f9414754e9a0ad94d2b7698a31f2e6896341afb1e807c2c4f715d7d76f298c1394358c511d8ea2b15bdbbdb262b611b13d536c737ff1fd0e563921f69b074ea9d01483e15fd0139e5114e8e6b2665ad4b49ba2d538e8d8a20217ca7decb0fe0b4bf4eb85cc1b320c4438819c21fdba3992dd782f0c5638df12993d3f18c7400764e92e2ded2fc85af34329717963478001c57076b77eaae3492b17b6363262ca83ab1678b407659fafbad350bd3b38a60ab5dea20a50da9ae0af9214b3166609a008033a9d9eaf85433c96fd79e8838b25b001f46ac7f51a101df82e870a5d61e664ab4a53316e44d37799c5fc434ba2b08756d1b4f9e71dc4c71252d146076e0e68e74c859cd2492b34b6cd4cb6ac690a1e34152ebce639403da9922aa29d3a232a43dd91a05ec9d4cc59f3be83a7e3de3cb8285a58316421c030490a25983f2bd80e3fa1329a5b7f90743d80dd5293bbcdd6d83699caad89e9c8b18992607b9587644c3b2aab4ea2489d46ee0470985b0bb1791ec300244f852b8b7349492a765425ab632df6c0f3d417e2d6864dba0a0898f1afdd141b724a2905b6abc9bf7ffedc88210e213c2c0795ec0bce864601f5ad1225c90e2ffad5f4027c3ceffadd9c201eab66980866c17c40c0eda88a34fcef2e65560643c524b57d0cd9b24d888e5fff071cada8a5b035a67e59c31779703de3900e64087ad596ed1929af8e8f1bd867618338f8c4cf3fb55083abad0e877a7233d7a608f55aec0dad5687c3ff731aadb33f2c95729bc4d6a14292762b6f2bb5fb934309cbf5ea389b44474c520067a6be9da0c44219bdfd7ff3db9397bd562bb13d979cc187a8cb82b6744cd50321bf78e32d9d64f273f9a4701bc4bd45394c54fdefa26479200c6f7a1704cde75ccf07c1755bff0d378d4184fb877ee3c8a59d613b4df914cbb3e9242f1dcf8ee9f7c2c27c662f5a31dc6c10807d5b21d31571fab12354f785829d09d9d23bed7a7a2e57d552687c7215ff377581d755cb2d74e346aba1a400950701f50d73632add5e2eb1f986ef952ee1545ab313f804177db1fff6d4", 0xe00}, {&(0x7f00000002c0)="fb4a738b8fff03179d36d97a7e768c605c5a276efb8604f121d8c3432483ec477b13316313b6ebd165904c8e245bcd4fda069923032292004d8efce529dab99fa5d682b52473829f561f11ac11a428eab9985d916240ec7d21a11926bc5353ea29c9ebd9aed10aa3403a5e35a1116b7b", 0x70}, {&(0x7f0000000880)="b8e4d28ec970bdf146d717bed673a03be982338e021e1058d00776227b342db7671f5a0a2d75e9e5a7fbd4ecc62684a793ab69989c8836473cf7744072ef0bd03758c8c6cb740f2c8abc1b69715c98796adbec917f572e32a4f6977abd032183f498075de23e212c05e37d608df3d5ca7f4b7e08f974d4f12d6c3b6c90c44b9355f52cf1e5a88049a7ab8952d5232e812f6cf20679d54d51950da095fbacb3365e30f62093a40e3c", 0xa8}, {&(0x7f0000000780)="5c06f00294cc721081e366131c0fcd179066c58c4951ef284a51dfc59d67e247edf1b4fc93718f3d1d6f3bd71ab442cb6b6ebc9f4bb562848ec35bfd1a443267ca11db6125b298f33c1fc9ab", 0x4c}, {0x0}, {&(0x7f0000000ec0)="6598c590eb73ec1ac1cce9664c5dbc3b6d9685d587ebdf52f29b7cad419f7bb403de35224456e9f506a3ba418e022d95925faf708865169a6ba6250d6275cd6a87f81062b11c2cf0440cf3fb94fa8244fb33299dea4c69eda426e3f7475b57155062b609f56046302a44bfc56e32841c66b772326d2394596778149d", 0x7c}, {&(0x7f0000000e00)}, {&(0x7f0000000c40)="8c87ae7dc3a1e41d808b729a7f992fcd10bf446bba2823fa0867f4ebbc9858852027a4c0a9681773961d1e44be4f2b9181e639856ced68ac4a29c8dd327abb9200876aae3fc55bcc6ff8f9a32a00b60448f8b57890578daddcddcad87ee7da5dd0df0f7fe978b92dfd2d2dbea58a81a037131eb4e1d00f7f29636d7dac7bc12420fb69d5e42df30502a17b31b431ddab03dde401f0885b6a53679a53a202cf3caf0c10cdbd6477ff6eec4bd31367da38ad81f4425da68f6f42e5b7a97838921eff094558413b041a69b0b1fff19132c1616d214f35b149534c9cda294cb32127994d0d1cfab82e10bc4c", 0xea}], 0xa, 0xfffffffd, 0x2000008) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) gettid() bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$vim2m(&(0x7f0000000000), 0x10000000000047b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setrlimit(0xd, &(0x7f00000000c0)={0x3, 0x4}) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) shutdown(r4, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_ATTR(r5, &(0x7f0000005340)={0x78, 0x0, 0x0, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, 0x0, 0x0, 0xb, 0x8, 0x1000000}}}, 0x78) connect$bt_rfcomm(r4, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) 1.595483385s ago: executing program 1 (id=2519): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bind$ax25(0xffffffffffffffff, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) prlimit64(0x0, 0x10, &(0x7f0000000200)={0x4, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x15, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000002fba0000180000782b5a00", @ANYRES16, @ANYRES32=r1], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000500)=0xd0) recvmsg$can_raw(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x0, {{0x3ff, 0x1, 0x1}}}, 0x28) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) socket$kcm(0x10, 0x2, 0x10) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0x5, 0x1, "df"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.436501047s ago: executing program 5 (id=2520): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x8003bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r4, 0x0, &(0x7f0000000000)="bd", 0x1, 0x100, 0x1}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="50010000100013070000000000000000fc020000000000000000000000000001fc00000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d53300000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000a00000000000000000000005d001400636d616328616573290000000000000000000800"/213], 0x150}}, 0x0) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)="84", 0x1e) 1.342113598s ago: executing program 3 (id=2521): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x2, 0x1, 0x7}, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}]) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r5 = syz_open_dev$dvb_demux(&(0x7f0000000180), 0x7, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000000000), 0x0) close_range(r6, r6, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 1.331769536s ago: executing program 5 (id=2522): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0xb) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000680)={0x0, 0x10000201, 0x7, 0x81, 0x1, [], [0x3fd86826, 0xfffffffd, 0xfffffffe], [0x7f, 0x7, 0x109], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) userfaultfd(0x1) 323.065063ms ago: executing program 3 (id=2523): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4005, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, 0x0, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040050}, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x200008, 0x0) 17.875057ms ago: executing program 6 (id=2524): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r2 = syz_open_dev$vivid(&(0x7f00000028c0), 0x1, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) mmap(&(0x7f0000613000/0x1000)=nil, 0x1000, 0x0, 0x11012, r2, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r5, 0x15b77000) r6 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10, 0x0) r7 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ifreq(r8, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='gre0\x00'}) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) prlimit64(r7, 0x7, &(0x7f0000000640)={0x3, 0x400}, 0x0) recvmmsg(r6, &(0x7f00000005c0)=[{{&(0x7f0000000080)=@ax25={{0x3, @bcast}, [@rose, @null, @netrom, @rose, @netrom, @default, @default, @netrom]}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/229, 0xe5}], 0x1, &(0x7f0000000240)=""/243, 0xf3}, 0x6}, {{&(0x7f0000000340)=@nfc, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/199, 0xc7}], 0x1, &(0x7f0000000500)=""/161, 0xa1}, 0x5}], 0x2, 0x100, 0x0) 0s ago: executing program 4 (id=2525): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x8280, 0x0) r4 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000040}, 0x10}, 0x94) close(r3) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000400)) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000980), 0x0, 0x40000, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x4}) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r9, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x5, 0x80, 0x0}}]}}, 0x0) kernel console output (not intermixed with test programs): 270][ T5889] usb 2-1: Manufacturer: syz [ 706.480721][ T5889] usb 2-1: SerialNumber: syz [ 706.482923][ T30] audit: type=1400 audit(2000000398.903:2663): avc: denied { map } for pid=14522 comm="syz.5.2070" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 706.537501][ T5889] usb 2-1: config 0 descriptor?? [ 706.553539][ T5889] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 706.570397][ T30] audit: type=1400 audit(2000000398.903:2664): avc: denied { execute } for pid=14522 comm="syz.5.2070" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 706.571597][ T5889] usb 2-1: Detected FT232R [ 706.646313][ T30] audit: type=1400 audit(2000000399.207:2665): avc: denied { shutdown } for pid=14527 comm="syz.3.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 706.675700][ T30] audit: type=1400 audit(2000000399.217:2666): avc: denied { getopt } for pid=14527 comm="syz.3.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 706.695794][ T30] audit: type=1400 audit(2000000399.217:2667): avc: denied { name_connect } for pid=14527 comm="syz.3.2071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 706.724877][ T30] audit: type=1400 audit(2000000399.238:2668): avc: denied { create } for pid=14527 comm="syz.3.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 706.757975][ T5889] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 706.765837][T14515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.777346][ T30] audit: type=1400 audit(2000000399.238:2669): avc: denied { write } for pid=14527 comm="syz.3.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 706.847658][T14515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.305946][T14515] overlayfs: failed to clone upperpath [ 707.342239][ T5889] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 707.350431][ T5889] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 707.368375][ T5889] usb 2-1: USB disconnect, device number 78 [ 707.396501][ T5889] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 707.430334][ T5889] ftdi_sio 2-1:0.0: device disconnected [ 707.455857][ T5930] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 707.608317][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 707.619462][ T5930] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 707.632086][ T5930] usb 5-1: config 0 has no interface number 0 [ 707.647855][ T5930] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.675194][ T5930] usb 5-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 707.703551][ T5930] usb 5-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 707.732188][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.753446][ T5930] usb 5-1: config 0 descriptor?? [ 708.294606][ T5930] logitech-djreceiver 0003:046D:C537.0012: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.4-1/input4 [ 709.399456][ T5930] usb 5-1: USB disconnect, device number 64 [ 709.536559][T14555] fido_id[14555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 709.587146][T14557] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 709.618309][T14557] PKCS7: Only support pkcs7_signedData type [ 710.195770][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.256721][ T789] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 710.332689][ T5930] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 710.514035][ T789] usb 2-1: Using ep0 maxpacket: 16 [ 710.521843][ T789] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 710.659616][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 710.671103][ T5930] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 711.663530][ T789] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 711.676889][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 711.676905][ T30] audit: type=1400 audit(2000000404.540:2698): avc: denied { read write } for pid=8311 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 711.711973][ T5930] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 711.720464][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.036490][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.045594][ T5930] usb 4-1: Product: syz [ 712.049885][ T5930] usb 4-1: Manufacturer: syz [ 712.054485][ T5930] usb 4-1: SerialNumber: syz [ 712.055549][ T789] usb 2-1: Product: syz [ 712.061465][ T5930] usb 4-1: config 0 descriptor?? [ 712.086245][ T5930] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 712.088693][ T789] usb 2-1: Manufacturer: syz [ 712.094554][ T5930] usb 4-1: Detected FT232R [ 712.100630][ T30] audit: type=1400 audit(2000000404.571:2699): avc: denied { open } for pid=8311 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 712.133388][ T789] usb 2-1: SerialNumber: syz [ 712.140861][ T30] audit: type=1400 audit(2000000404.571:2700): avc: denied { ioctl } for pid=8311 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 712.140955][T14586] x_tables: duplicate underflow at hook 2 [ 712.167773][ T789] usb 2-1: config 0 descriptor?? [ 712.207716][ T30] audit: type=1400 audit(2000000404.960:2701): avc: denied { create } for pid=14585 comm="syz.5.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 712.215221][T14589] xt_hashlimit: size too large, truncated to 1048576 [ 712.229350][ T789] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 712.254718][ T789] usb 2-1: Detected FT232R [ 712.261866][ T30] audit: type=1400 audit(2000000404.960:2702): avc: denied { setopt } for pid=14585 comm="syz.5.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 712.281971][ T30] audit: type=1400 audit(2000000405.023:2703): avc: denied { bind } for pid=14585 comm="syz.5.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 712.325679][ T30] audit: type=1400 audit(2000000405.023:2704): avc: denied { name_bind } for pid=14585 comm="syz.5.2087" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 712.339714][ T5930] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 712.349412][ T30] audit: type=1400 audit(2000000405.023:2705): avc: denied { node_bind } for pid=14585 comm="syz.5.2087" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 712.377134][ T30] audit: type=1400 audit(2000000405.023:2706): avc: denied { create } for pid=14585 comm="syz.5.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 712.398145][ T30] audit: type=1400 audit(2000000405.023:2707): avc: denied { setopt } for pid=14585 comm="syz.5.2087" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 712.454537][ T789] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 712.468944][T14569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.696643][T14571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.983411][T14569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.104881][T14571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.588768][ T789] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 714.609747][ T789] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 714.667977][ T5930] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 714.675705][ T789] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 714.704381][ T5930] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 714.723567][ T5930] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 714.733890][ T789] usb 2-1: USB disconnect, device number 79 [ 714.755314][ T5930] usb 4-1: USB disconnect, device number 59 [ 714.773866][ T789] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 714.776127][ T5930] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 714.813360][ T789] ftdi_sio 2-1:0.0: device disconnected [ 714.815942][ T5930] ftdi_sio 4-1:0.0: device disconnected [ 714.954593][ T975] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 715.233325][ T975] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 715.255244][ T975] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 715.277526][ T975] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 715.291745][ T975] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 715.307231][ T975] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 715.328607][ T975] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 715.337522][ T975] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 715.353567][ T975] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 715.366147][ T975] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 715.383963][ T975] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 715.417575][ T975] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 715.435394][ T975] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 715.496378][ T975] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 715.519004][ T975] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 715.549379][ T975] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 715.592265][ T975] usb 7-1: string descriptor 0 read error: -22 [ 715.621394][T14650] gfs2: Unknown parameter 'nZªZorecovery' [ 715.621507][ T975] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 715.645246][ T975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.701581][ T975] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 715.992657][ T975] usb 7-1: USB disconnect, device number 12 [ 716.143535][ T5868] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 716.843049][ T5868] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 716.871708][ T5868] usb 5-1: config 0 has no interface number 0 [ 716.902174][ T5868] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 716.912069][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.929066][ T5868] usb 5-1: config 0 descriptor?? [ 716.941357][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 716.941375][ T30] audit: type=1400 audit(2000000410.062:2807): avc: denied { remove_name } for pid=14676 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=10800 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.995892][ T30] audit: type=1400 audit(2000000410.104:2808): avc: denied { unlink } for pid=14676 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=10800 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 717.031290][ T5868] usb 5-1: selecting invalid altsetting 1 [ 717.037128][ T5868] dvb_ttusb_budget: ttusb_init_controller: error [ 717.058119][ T5868] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 717.168766][ T30] audit: type=1400 audit(2000000410.303:2809): avc: denied { map_create } for pid=14681 comm="syz.6.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 717.197035][T14680] syzkaller0: entered promiscuous mode [ 717.214736][T14680] syzkaller0: entered allmulticast mode [ 718.969624][ T5868] DVB: Unable to find symbol cx22700_attach() [ 718.980436][ T30] audit: type=1400 audit(2000000410.303:2810): avc: denied { perfmon } for pid=14681 comm="syz.6.2104" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 719.469732][ T30] audit: type=1400 audit(2000000410.303:2811): avc: denied { map_read map_write } for pid=14681 comm="syz.6.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 719.667008][ T30] audit: type=1400 audit(2000000410.324:2812): avc: denied { create } for pid=14657 comm="syz.4.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 719.706724][ T30] audit: type=1400 audit(2000000410.324:2813): avc: denied { write } for pid=14657 comm="syz.4.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 719.727622][ T5868] DVB: Unable to find symbol tda10046_attach() [ 719.733874][ T5868] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 719.766276][ T5868] usb 5-1: USB disconnect, device number 65 [ 719.912824][ T30] audit: type=1400 audit(2000000410.324:2814): avc: denied { shutdown } for pid=14657 comm="syz.4.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 721.163463][ T30] audit: type=1400 audit(2000000410.324:2815): avc: denied { create } for pid=14678 comm="syz.5.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 721.241210][T14699] netlink: 'syz.6.2108': attribute type 1 has an invalid length. [ 721.259482][ T30] audit: type=1400 audit(2000000410.324:2816): avc: denied { ioctl } for pid=14678 comm="syz.5.2103" path="socket:[48777]" dev="sockfs" ino=48777 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 721.500877][T14705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.773494][T14705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.820849][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 721.820868][ T30] audit: type=1400 audit(2000000415.174:2846): avc: denied { create } for pid=14709 comm="syz.1.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 721.956297][ T30] audit: type=1400 audit(2000000415.332:2847): avc: denied { read write } for pid=14709 comm="syz.1.2111" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 722.008674][ T30] audit: type=1400 audit(2000000415.332:2848): avc: denied { open } for pid=14709 comm="syz.1.2111" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 722.130275][ T30] audit: type=1400 audit(2000000415.384:2849): avc: denied { read write } for pid=14712 comm="syz.6.2112" name="radio7" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 722.163821][ T30] audit: type=1400 audit(2000000415.384:2850): avc: denied { open } for pid=14712 comm="syz.6.2112" path="/dev/radio7" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 722.188743][ T30] audit: type=1400 audit(2000000415.384:2851): avc: denied { ioctl } for pid=14712 comm="syz.6.2112" path="/dev/radio7" dev="devtmpfs" ino=997 ioctlcmd=0x5666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 722.660727][ T30] audit: type=1400 audit(2000000416.056:2852): avc: denied { create } for pid=14709 comm="syz.1.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 722.707214][ T30] audit: type=1400 audit(2000000416.088:2853): avc: denied { read } for pid=14709 comm="syz.1.2111" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 722.751986][ T30] audit: type=1400 audit(2000000416.088:2854): avc: denied { open } for pid=14709 comm="syz.1.2111" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 722.883813][ T30] audit: type=1400 audit(2000000416.088:2855): avc: denied { ioctl } for pid=14709 comm="syz.1.2111" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 723.249638][ T975] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 723.802313][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 723.820134][ T975] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 723.873318][ T975] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 723.935508][ T975] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 724.036318][ T975] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 724.109538][ T975] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 724.145222][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.173671][ T975] usb 4-1: Product: syz [ 724.177862][ T975] usb 4-1: Manufacturer: syz [ 724.177947][T14730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.194056][ T975] usb 4-1: SerialNumber: syz [ 724.307168][T14730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.314130][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 725.396940][ T975] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input38 [ 725.538293][ T975] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 725.564167][ T975] (id 0x00) [ 725.678539][ T975] rc_core: IR keymap rc-imon-pad not found [ 725.697874][ T975] Registered IR keymap rc-empty [ 725.702848][ T975] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 725.749787][ T975] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 725.796915][ T975] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 725.822982][ T975] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input39 [ 725.888556][ T975] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:60> initialized [ 726.079402][ T975] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 726.211993][ T975] usb 7-1: device descriptor read/64, error -71 [ 726.459874][ T975] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 726.593143][ T975] usb 7-1: device descriptor read/64, error -71 [ 726.707539][ T975] usb usb7-port1: attempt power cycle [ 726.716270][T14756] snd_dummy snd_dummy.0: control 0:0:1073741824:syz0:-4 is already present [ 726.745981][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 726.745993][ T30] audit: type=1400 audit(2000000420.360:2870): avc: denied { create } for pid=14746 comm="syz.5.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 726.793081][ T9] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 726.955175][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 726.961663][ T9] usb 2-1: config 129 has an invalid interface number: 164 but max is 0 [ 726.970666][ T9] usb 2-1: config 129 has no interface number 0 [ 726.977031][ T9] usb 2-1: config 129 interface 164 has no altsetting 0 [ 726.986290][ T9] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8b.16 [ 726.996757][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.006432][ T9] usb 2-1: Product: syz [ 727.010631][ T9] usb 2-1: Manufacturer: syz [ 727.015451][ T9] usb 2-1: SerialNumber: syz [ 727.040654][ T975] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 727.061513][ T975] usb 7-1: device descriptor read/8, error -71 [ 727.288629][ T975] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 727.317756][ T975] usb 7-1: device descriptor read/8, error -71 [ 727.422787][ T975] usb usb7-port1: unable to enumerate USB device [ 727.434263][ T30] audit: type=1400 audit(2000000421.074:2871): avc: denied { getopt } for pid=14750 comm="syz.1.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 727.464341][ T30] audit: type=1400 audit(2000000421.106:2872): avc: denied { module_request } for pid=14750 comm="syz.1.2121" kmod="nfnetlink-subsys-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 727.515252][ T30] audit: type=1400 audit(2000000421.158:2873): avc: denied { ioctl } for pid=14750 comm="syz.1.2121" path="socket:[49597]" dev="sockfs" ino=49597 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 727.556619][ T30] audit: type=1400 audit(2000000421.158:2874): avc: denied { setopt } for pid=14750 comm="syz.1.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 727.583608][ T9] ums_eneub6250 2-1:129.164: USB Mass Storage device detected [ 727.613978][ T9] usb 2-1: USB disconnect, device number 80 [ 727.726223][ T30] audit: type=1400 audit(2000000421.379:2875): avc: denied { relabelfrom } for pid=14746 comm="syz.5.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 727.747003][ T30] audit: type=1400 audit(2000000421.379:2876): avc: denied { relabelto } for pid=14746 comm="syz.5.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 727.774752][ T975] usb 4-1: USB disconnect, device number 60 [ 727.786597][T14754] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2118'. [ 727.921991][T14766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.932653][T14766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.675297][ T30] audit: type=1400 audit(2000000422.376:2877): avc: denied { setopt } for pid=14764 comm="syz.5.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 728.737203][ T5813] Bluetooth: hci5: Unknown advertising packet type: 0x73 [ 728.737265][ T5813] Bluetooth: hci5: Malformed LE Event: 0x0d [ 728.755112][ T5868] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 728.910763][ T30] audit: type=1400 audit(2000000422.618:2878): avc: denied { ioctl } for pid=14773 comm="syz.1.2125" path="socket:[48904]" dev="sockfs" ino=48904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 728.939364][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 728.955414][ T30] audit: type=1400 audit(2000000422.618:2879): avc: denied { bind } for pid=14773 comm="syz.1.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 728.957640][ T5868] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 729.662072][ T5868] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 729.705765][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.794893][ T5868] usb 5-1: Product: syz [ 729.817456][ T5868] usb 5-1: Manufacturer: syz [ 729.847423][ T5868] usb 5-1: SerialNumber: syz [ 729.887225][ T5868] usb 5-1: config 0 descriptor?? [ 729.958682][ T5868] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 729.990527][ T5868] usb 5-1: Detected FT232R [ 730.229256][ T5868] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 730.263307][T14767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.545050][T14767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.691805][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 731.691820][ T30] audit: type=1400 audit(2000000425.546:2891): avc: denied { mounton } for pid=14765 comm="syz.4.2122" path="/468/file2" dev="tmpfs" ino=2498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 731.841284][ T5868] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 731.873339][ T30] audit: type=1400 audit(2000000425.578:2892): avc: denied { unlink } for pid=14765 comm="syz.4.2122" name="#49" dev="tmpfs" ino=2502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 731.938584][ T30] audit: type=1400 audit(2000000425.578:2893): avc: denied { mount } for pid=14765 comm="syz.4.2122" name="/" dev="overlay" ino=2498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 732.016110][T14806] netlink: 'syz.5.2131': attribute type 1 has an invalid length. [ 732.037867][T14806] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2131'. [ 732.082151][T14806] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2131'. [ 732.107258][T14806] netlink: 658 bytes leftover after parsing attributes in process `syz.5.2131'. [ 732.195548][ T9] usb 5-1: USB disconnect, device number 66 [ 732.425190][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 732.518281][ T5868] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 732.834926][ T9] ftdi_sio 5-1:0.0: device disconnected [ 732.943740][ T30] audit: type=1400 audit(2000000426.859:2894): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 733.098902][ T5868] usb 7-1: Using ep0 maxpacket: 16 [ 733.141077][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 733.157630][ T5868] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 733.171484][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.197629][ T5868] usb 7-1: Product: syz [ 733.201811][ T5868] usb 7-1: Manufacturer: syz [ 733.232372][ T5868] usb 7-1: SerialNumber: syz [ 733.252405][ T5868] usb 7-1: config 0 descriptor?? [ 733.282036][ T5868] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 733.327879][ T5868] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 733.427363][ T30] audit: type=1400 audit(2000000427.352:2895): avc: denied { create } for pid=14816 comm="syz.5.2135" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 733.579909][ T30] audit: type=1400 audit(2000000427.531:2896): avc: denied { mounton } for pid=14816 comm="syz.5.2135" path="/371/file0" dev="tmpfs" ino=2002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 734.013800][T14821] FAT-fs (loop11): unable to read boot sector [ 734.032199][ T30] audit: type=1400 audit(2000000428.003:2897): avc: denied { connect } for pid=14816 comm="syz.5.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 734.096402][T14819] syzkaller0: entered promiscuous mode [ 734.123085][ T30] audit: type=1400 audit(2000000428.003:2898): avc: denied { name_connect } for pid=14816 comm="syz.5.2135" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 734.127676][T14819] syzkaller0: entered allmulticast mode [ 734.268597][ T5868] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 734.299389][ T30] audit: type=1400 audit(2000000428.265:2899): avc: denied { create } for pid=14811 comm="syz.6.2133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 734.444087][T14830] snd_dummy snd_dummy.0: control 0:0:1073741824:syz0:-4 is already present [ 735.267728][T14812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.277153][ T30] audit: type=1400 audit(2000000429.294:2900): avc: denied { ioctl } for pid=14811 comm="syz.6.2133" path="socket:[49780]" dev="sockfs" ino=49780 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 735.280804][T14812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.404369][T14829] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2134'. [ 735.810154][T14846] pimreg: entered allmulticast mode [ 736.393280][ T5868] em28xx 7-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 736.419545][ T5868] em28xx 7-1:0.0: failed to read eeprom (err=-5) [ 736.433953][ T5868] em28xx 7-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 736.493291][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 736.493307][ T30] audit: type=1400 audit(2000000430.586:2909): avc: denied { listen } for pid=14851 comm="syz.3.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 736.521668][ T5868] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 736.537557][ T5868] em28xx 7-1:0.0: dvb set to bulk mode. [ 736.545281][ T789] em28xx 7-1:0.0: Binding DVB extension [ 736.563592][ T5868] usb 7-1: USB disconnect, device number 17 [ 736.576986][ T30] audit: type=1400 audit(2000000430.628:2910): avc: denied { accept } for pid=14851 comm="syz.3.2141" lport=53435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 736.601515][T14845] pimreg: left allmulticast mode [ 736.638777][ T5868] em28xx 7-1:0.0: Disconnecting em28xx [ 736.725084][T14855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 736.960558][ T789] em28xx 7-1:0.0: Registering input extension [ 736.972165][ T5868] em28xx 7-1:0.0: Closing input extension [ 736.994174][ T5868] em28xx 7-1:0.0: Freeing device [ 737.117385][ T30] audit: type=1400 audit(2000000431.236:2911): avc: denied { name_bind } for pid=14854 comm="syz.4.2142" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 737.129800][T14861] netlink: 'syz.5.2143': attribute type 1 has an invalid length. [ 737.159168][T14861] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2143'. [ 737.185846][T14861] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2143'. [ 737.215715][T14861] netlink: 658 bytes leftover after parsing attributes in process `syz.5.2143'. [ 737.623922][T14866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.632872][T14866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.645511][T14866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.656758][T14866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.761772][ T30] audit: type=1400 audit(2000000431.919:2912): avc: denied { read } for pid=14859 comm="syz.6.2144" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 737.805620][ T30] audit: type=1400 audit(2000000431.919:2913): avc: denied { open } for pid=14859 comm="syz.6.2144" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 737.874241][ T30] audit: type=1400 audit(2000000431.950:2914): avc: denied { ioctl } for pid=14859 comm="syz.6.2144" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 737.916314][ T30] audit: type=1400 audit(2000000432.003:2915): avc: denied { create } for pid=14867 comm="syz.3.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 737.973321][ T30] audit: type=1400 audit(2000000432.139:2916): avc: denied { read write } for pid=14867 comm="syz.3.2146" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 738.051944][ T30] audit: type=1400 audit(2000000432.150:2917): avc: denied { open } for pid=14867 comm="syz.3.2146" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 738.080168][ T30] audit: type=1400 audit(2000000432.150:2918): avc: denied { map_create } for pid=14867 comm="syz.3.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 739.202916][T14886] (syz.6.2150,14886,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 739.264773][T14886] (syz.6.2150,14886,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 741.517056][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 741.517072][ T30] audit: type=1400 audit(2000000435.856:2958): avc: denied { create } for pid=14899 comm="syz.6.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 741.546972][ T30] audit: type=1400 audit(2000000435.898:2959): avc: denied { write } for pid=14896 comm="syz.1.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 741.607771][ T30] audit: type=1400 audit(2000000435.898:2960): avc: denied { listen } for pid=14899 comm="syz.6.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 741.763376][T14902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 741.807111][T14905] snd_dummy snd_dummy.0: control 0:0:1073741824:syz0:-4 is already present [ 741.820903][ T30] audit: type=1400 audit(2000000435.898:2961): avc: denied { accept } for pid=14899 comm="syz.6.2153" lport=41902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 741.871086][T14898] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2152'. [ 741.984256][ T30] audit: type=1400 audit(2000000436.002:2962): avc: denied { read } for pid=14899 comm="syz.6.2153" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 742.040220][ T30] audit: type=1400 audit(2000000436.002:2963): avc: denied { open } for pid=14899 comm="syz.6.2153" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 742.078028][ T30] audit: type=1400 audit(2000000436.044:2964): avc: denied { ioctl } for pid=14899 comm="syz.6.2153" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 742.128466][ T30] audit: type=1400 audit(2000000436.254:2965): avc: denied { write } for pid=14903 comm="syz.3.2154" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 742.158968][ T30] audit: type=1400 audit(2000000436.296:2966): avc: denied { create } for pid=14896 comm="syz.1.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 742.260796][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 742.304190][ T30] audit: type=1400 audit(2000000436.685:2967): avc: denied { append } for pid=14914 comm="syz.1.2157" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 742.931451][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 743.276478][ T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 743.285770][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.294957][ T9] usb 4-1: Product: syz [ 743.299138][ T9] usb 4-1: Manufacturer: syz [ 743.306919][ T9] usb 4-1: SerialNumber: syz [ 743.328059][ T9] usb 4-1: config 0 descriptor?? [ 743.578977][T14929] GUP no longer grows the stack in syz.6.2159 (14929): 200000006000-200000009000 (200000004000) [ 743.589989][T14929] CPU: 0 UID: 0 PID: 14929 Comm: syz.6.2159 Tainted: G L syzkaller #0 PREEMPT(full) [ 743.590023][T14929] Tainted: [L]=SOFTLOCKUP [ 743.590030][T14929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 743.590042][T14929] Call Trace: [ 743.590052][T14929] [ 743.590065][T14929] dump_stack_lvl+0x100/0x190 [ 743.590101][T14929] gup_vma_lookup.cold+0x83/0x96 [ 743.590131][T14929] fixup_user_fault+0x253/0x510 [ 743.590155][T14929] fault_in_user_writeable+0x70/0xe0 [ 743.590186][T14929] futex_lock_pi+0x682/0x7b0 [ 743.590213][T14929] ? __pfx_futex_lock_pi+0x10/0x10 [ 743.590233][T14929] ? preempt_schedule_common+0x42/0xc0 [ 743.590255][T14929] ? preempt_schedule_thunk+0x16/0x30 [ 743.590290][T14929] ? __pfx_try_to_wake_up+0x10/0x10 [ 743.590323][T14929] ? futex_private_hash_put+0x107/0x1c0 [ 743.590356][T14929] ? __pfx_futex_wake_mark+0x10/0x10 [ 743.590386][T14929] ? rcu_is_watching+0x12/0xc0 [ 743.590408][T14929] ? trace_sched_exit_tp+0x13a/0x180 [ 743.590440][T14929] do_futex+0x18a/0x350 [ 743.590460][T14929] ? __pfx_do_futex+0x10/0x10 [ 743.590487][T14929] __x64_sys_futex+0x34f/0x4d0 [ 743.590510][T14929] ? __pfx___x64_sys_futex+0x10/0x10 [ 743.590540][T14929] do_syscall_64+0x106/0xf80 [ 743.590560][T14929] ? clear_bhb_loop+0x40/0x90 [ 743.590583][T14929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.590602][T14929] RIP: 0033:0x7f084419c799 [ 743.590618][T14929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.590636][T14929] RSP: 002b:00007f0844f73028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 743.590656][T14929] RAX: ffffffffffffffda RBX: 00007f0844416180 RCX: 00007f084419c799 [ 743.590669][T14929] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 743.590686][T14929] RBP: 00007f0844232bd9 R08: 0000000000000000 R09: 0000000000000082 [ 743.590698][T14929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.590709][T14929] R13: 00007f0844416218 R14: 00007f0844416180 R15: 00007ffc62942188 [ 743.590735][T14929] [ 743.825931][T14928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.097507][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 744.106569][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 744.119765][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 744.127867][ T9] usb 4-1: media controller created [ 744.142830][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 744.732290][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 744.929923][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 745.017634][ T5813] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 745.141368][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 745.268714][ T9] usb 4-1: USB disconnect, device number 61 [ 746.591922][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 746.591938][ T30] audit: type=1400 audit(2000000441.188:2988): avc: denied { module_request } for pid=14942 comm="syz.6.2163" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 746.667537][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 746.678478][ T30] audit: type=1400 audit(2000000441.272:2989): avc: denied { sys_module } for pid=14942 comm="syz.6.2163" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 746.742251][ T30] audit: type=1400 audit(2000000441.325:2990): avc: denied { read write } for pid=14951 comm="syz.1.2164" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 746.802795][ T30] audit: type=1400 audit(2000000441.325:2991): avc: denied { open } for pid=14951 comm="syz.1.2164" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 746.837924][T14958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.846710][ T30] audit: type=1400 audit(2000000441.440:2992): avc: denied { ioctl } for pid=14951 comm="syz.1.2164" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=50317 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 746.878097][T14958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.946121][ T30] audit: type=1400 audit(2000000441.556:2993): avc: denied { setopt } for pid=14960 comm="syz.3.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 747.016214][ T30] audit: type=1400 audit(2000000441.587:2994): avc: denied { mount } for pid=14960 comm="syz.3.2165" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 747.038112][ T1559] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 747.085085][ T30] audit: type=1400 audit(2000000441.587:2995): avc: denied { read } for pid=14960 comm="syz.3.2165" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 747.123149][ T30] audit: type=1400 audit(2000000441.587:2996): avc: denied { open } for pid=14960 comm="syz.3.2165" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 747.148707][ T30] audit: type=1400 audit(2000000441.587:2997): avc: denied { ioctl } for pid=14960 comm="syz.3.2165" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 747.244418][ T1559] usb 7-1: Using ep0 maxpacket: 16 [ 747.252697][ T1559] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 747.263714][ T1559] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 747.274048][ T1559] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.282546][ T5889] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 747.290220][ T1559] usb 7-1: Product: syz [ 747.300202][ T1559] usb 7-1: Manufacturer: syz [ 747.305020][ T1559] usb 7-1: SerialNumber: syz [ 747.322005][ T1559] usb 7-1: config 0 descriptor?? [ 747.334776][ T1559] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 747.349743][ T1559] usb 7-1: Detected FT232R [ 747.434936][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 747.446826][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26374, setting to 1024 [ 747.458696][ T5889] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 747.480914][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.503114][ T5889] usb 2-1: config 0 descriptor?? [ 747.508561][T14963] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 747.547221][ T1559] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 747.557862][T14957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.570786][T14957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.878007][ T1559] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 747.920281][ T1559] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 747.960928][T14973] kvm: pic: level sensitive irq not supported [ 747.961180][T14973] kvm: pic: non byte read [ 747.971631][ T1559] usb 7-1: USB disconnect, device number 18 [ 747.992385][ T5889] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 748.020124][ T1559] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 748.033767][ T1559] ftdi_sio 7-1:0.0: device disconnected [ 749.587689][ T1559] usb 2-1: reset high-speed USB device number 81 using dummy_hcd [ 750.435207][T15004] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2179'. [ 751.010803][T15011] bridge_slave_0: left allmulticast mode [ 751.016485][T15011] bridge_slave_0: left promiscuous mode [ 751.029581][T15011] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.049989][T15013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.063406][T15013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.816750][ T1559] usb 2-1: device descriptor read/64, error -71 [ 751.877615][T15011] bridge_slave_1: left allmulticast mode [ 751.883928][T15011] bridge_slave_1: left promiscuous mode [ 751.889640][T15011] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.902037][T15011] bond0: (slave bond_slave_0): Releasing backup interface [ 751.948848][T15011] bond0: (slave bond_slave_1): Releasing backup interface [ 752.068004][T15011] team0: Port device team_slave_0 removed [ 752.086992][T15011] team0: Port device team_slave_1 removed [ 752.100442][T15011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.520083][ T1559] usb 2-1: reset high-speed USB device number 81 using dummy_hcd [ 752.533379][ T1559] usb 2-1: device reset changed ep0 maxpacket size! [ 752.541091][T15011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.552697][ T5889] usb 2-1: USB disconnect, device number 81 [ 752.567896][T15011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.577501][T15011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.590921][T15011] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 752.609047][T15016] team0: Mode changed to "activebackup" [ 752.693204][ T5889] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 752.866865][ T5889] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 752.889811][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 753.150866][ T5889] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 753.190948][ T5889] usb 2-1: string descriptor 0 read error: -71 [ 753.197168][ T5889] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 753.227041][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 753.227057][ T30] audit: type=1400 audit(2000000448.149:3014): avc: denied { mount } for pid=15035 comm="syz.4.2189" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 753.229067][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.260638][ T30] audit: type=1400 audit(2000000448.191:3015): avc: denied { create } for pid=15037 comm="syz.1.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 753.715057][ T30] audit: type=1400 audit(2000000448.674:3016): avc: denied { write } for pid=15037 comm="syz.1.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 753.742876][ T5889] usb 2-1: config 0 descriptor?? [ 753.754662][ T5889] usb 2-1: can't set config #0, error -71 [ 753.793342][ T5889] usb 2-1: USB disconnect, device number 82 [ 753.845860][ T30] audit: type=1400 audit(2000000448.800:3017): avc: denied { name_bind } for pid=15040 comm="syz.6.2191" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 753.930856][T15041] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 754.016775][ T30] audit: type=1400 audit(2000000448.800:3018): avc: denied { node_bind } for pid=15040 comm="syz.6.2191" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 754.083653][ T30] audit: type=1400 audit(2000000448.873:3019): avc: denied { read write } for pid=15040 comm="syz.6.2191" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 754.108832][ T30] audit: type=1400 audit(2000000448.884:3020): avc: denied { open } for pid=15040 comm="syz.6.2191" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 754.280813][ T30] audit: type=1400 audit(2000000449.041:3021): avc: denied { create } for pid=15035 comm="syz.4.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 754.647245][ T30] audit: type=1400 audit(2000000449.051:3022): avc: denied { setopt } for pid=15035 comm="syz.4.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 754.814679][ T30] audit: type=1400 audit(2000000449.818:3023): avc: denied { connect } for pid=15058 comm="syz.6.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 754.913729][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 755.285305][T15066] netlink: 328 bytes leftover after parsing attributes in process `syz.3.2197'. [ 756.313232][ T5812] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 756.536835][T15107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 756.933669][ T5813] Bluetooth: hci1: command 0x0c1a tx timeout [ 757.089200][ T5812] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 757.098548][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.116280][ T5812] usb 5-1: Product: syz [ 757.124236][ T5812] usb 5-1: Manufacturer: syz [ 757.134149][ T5812] usb 5-1: SerialNumber: syz [ 757.148344][ T5812] usb 5-1: config 0 descriptor?? [ 757.179160][T15076] pim6reg: entered allmulticast mode [ 757.390670][ T5812] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 758.692841][T15132] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 759.301599][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 759.301618][ T30] audit: type=1400 audit(2000000453.891:3034): avc: denied { mac_admin } for pid=15128 comm="syz.3.2217" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 759.342138][ T5812] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 759.602829][ T30] audit: type=1400 audit(2000000453.912:3035): avc: denied { relabelto } for pid=15128 comm="syz.3.2217" name="385" dev="tmpfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 759.630842][ T30] audit: type=1400 audit(2000000453.912:3036): avc: denied { associate } for pid=15128 comm="syz.3.2217" name="385" dev="tmpfs" ino=2097 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 759.659844][ T30] audit: type=1400 audit(2000000453.923:3037): avc: denied { mount } for pid=15128 comm="syz.3.2217" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 759.660915][ T5889] usb 5-1: USB disconnect, device number 67 [ 759.682211][ T30] audit: type=1400 audit(2000000453.933:3038): avc: denied { add_name } for pid=15128 comm="syz.3.2217" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 759.891715][ T30] audit: type=1400 audit(2000000453.933:3039): avc: denied { create } for pid=15128 comm="syz.3.2217" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 760.180704][ T30] audit: type=1400 audit(2000000453.933:3040): avc: denied { associate } for pid=15128 comm="syz.3.2217" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 760.206890][ T30] audit: type=1400 audit(2000000453.944:3041): avc: denied { append } for pid=15128 comm="syz.3.2217" name="frontend0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 760.850582][ T30] audit: type=1400 audit(2000000454.741:3042): avc: denied { setopt } for pid=15126 comm="syz.1.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 760.870203][ T30] audit: type=1400 audit(2000000454.857:3043): avc: denied { remove_name } for pid=5804 comm="syz-executor" name="bus" dev="tmpfs" ino=2103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 761.485963][T15158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2223'. [ 761.611197][T15163] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2224'. [ 761.621750][T15164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2223'. [ 761.632155][T15164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2223'. [ 761.871416][T15158] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2223'. [ 762.147559][T15169] netlink: 'syz.1.2227': attribute type 2 has an invalid length. [ 762.563252][T15186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.580752][T15186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.292447][T15198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2234'. [ 764.614628][T15218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.708519][T15218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.329129][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 765.329162][ T30] audit: type=1400 audit(2000000460.862:3057): avc: denied { create } for pid=15226 comm="syz.1.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 765.514815][ T30] audit: type=1400 audit(2000000460.862:3058): avc: denied { write } for pid=15226 comm="syz.1.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 765.777506][T15239] lo speed is unknown, defaulting to 1000 [ 765.783564][T15239] lo speed is unknown, defaulting to 1000 [ 765.794984][T15239] lo speed is unknown, defaulting to 1000 [ 765.848975][T15239] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 766.153671][ T30] audit: type=1400 audit(2000000461.534:3059): avc: denied { mount } for pid=15233 comm="syz.5.2245" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 766.161887][T15239] lo speed is unknown, defaulting to 1000 [ 766.183891][T15239] lo speed is unknown, defaulting to 1000 [ 766.190828][T15239] lo speed is unknown, defaulting to 1000 [ 766.198075][T15239] lo speed is unknown, defaulting to 1000 [ 766.204626][T15239] lo speed is unknown, defaulting to 1000 [ 766.802051][T15254] netlink: 'syz.1.2248': attribute type 1 has an invalid length. [ 766.881013][T15254] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2248'. [ 766.942076][T15254] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2248'. [ 766.952392][T15254] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2248'. [ 767.411659][ T30] audit: type=1400 audit(2000000463.045:3060): avc: denied { setopt } for pid=15260 comm="syz.6.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 767.575042][ T30] audit: type=1400 audit(2000000463.224:3061): avc: denied { set_context_mgr } for pid=15266 comm="syz.6.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 767.767087][ T30] audit: type=1400 audit(2000000463.350:3062): avc: denied { map } for pid=15266 comm="syz.6.2253" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 768.315253][ T5812] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 768.479731][ T5812] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 768.503603][ T5812] usb 2-1: config 0 has no interface number 0 [ 768.535377][ T5812] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 768.564347][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.601482][ T5812] usb 2-1: config 0 descriptor?? [ 768.627671][ T5812] usb 2-1: selecting invalid altsetting 1 [ 768.648758][ T5812] dvb_ttusb_budget: ttusb_init_controller: error [ 768.655092][ T5812] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 768.718534][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 768.796501][ T5812] DVB: Unable to find symbol cx22700_attach() [ 768.845749][ T30] audit: type=1400 audit(2000000464.547:3063): avc: denied { write } for pid=15259 comm="syz.1.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 769.906285][ T30] audit: type=1400 audit(2000000464.746:3064): avc: denied { create } for pid=15259 comm="syz.1.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 769.972931][ T30] audit: type=1400 audit(2000000464.778:3065): avc: denied { sys_admin } for pid=15259 comm="syz.1.2249" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 769.976614][ T5812] DVB: Unable to find symbol tda10046_attach() [ 770.108388][ T5812] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 770.134548][ T30] audit: type=1400 audit(2000000465.901:3066): avc: denied { name_bind } for pid=15283 comm="syz.3.2255" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 770.734291][ T5812] usb 2-1: USB disconnect, device number 83 [ 770.766876][ T30] audit: type=1400 audit(2000000466.573:3067): avc: denied { ioctl } for pid=15283 comm="syz.3.2255" path="socket:[51777]" dev="sockfs" ino=51777 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 771.887397][ T30] audit: type=1400 audit(2000000466.804:3068): avc: denied { bind } for pid=15296 comm="syz.5.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 772.125501][ T30] audit: type=1400 audit(2000000466.804:3069): avc: denied { name_bind } for pid=15296 comm="syz.5.2259" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 772.376509][ T30] audit: type=1400 audit(2000000466.804:3070): avc: denied { node_bind } for pid=15296 comm="syz.5.2259" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 772.459849][T15311] netlink: 'syz.4.2260': attribute type 1 has an invalid length. [ 772.498691][T15315] 8021q: VLANs not supported on gre0 [ 772.505298][T15311] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2260'. [ 772.519739][T15311] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2260'. [ 772.531736][T15311] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2260'. [ 772.565099][ T30] audit: type=1400 audit(2000000468.452:3071): avc: denied { block_suspend } for pid=15314 comm="syz.5.2263" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 772.802160][T15318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2257'. [ 773.430065][T15327] xt_l2tp: unknown flags: 17 [ 773.431345][ T30] audit: type=1400 audit(2000000469.365:3072): avc: denied { read write } for pid=15322 comm="syz.6.2266" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 773.503818][T15331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.515638][ T30] audit: type=1400 audit(2000000469.365:3073): avc: denied { open } for pid=15322 comm="syz.6.2266" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 773.542897][T15331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.592261][ T30] audit: type=1400 audit(2000000469.407:3074): avc: denied { ioctl } for pid=15322 comm="syz.6.2266" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 774.657678][ T30] audit: type=1400 audit(2000000469.565:3075): avc: denied { read write } for pid=15324 comm="syz.3.2264" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 776.248185][T15352] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 776.468974][ T1559] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 776.503387][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 776.503405][ T30] audit: type=1400 audit(2000000472.588:3078): avc: denied { write } for pid=15358 comm="syz.5.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 776.561382][ T30] audit: type=1400 audit(2000000472.588:3079): avc: denied { nlmsg_write } for pid=15358 comm="syz.5.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 776.622085][ T1559] usb 5-1: Using ep0 maxpacket: 32 [ 776.646223][ T1559] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 776.684074][ T1559] usb 5-1: config 0 has no interface number 0 [ 776.690631][ T30] audit: type=1400 audit(2000000472.787:3080): avc: denied { setopt } for pid=15360 comm="syz.5.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 776.719142][T15361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.737801][T15361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.739788][ T1559] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 776.772451][ T1559] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 776.803226][ T1559] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 776.835206][ T1559] usb 5-1: config 0 interface 196 has no altsetting 0 [ 776.874226][ T1559] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 776.923242][ T1559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.942890][ T1559] usb 5-1: Product: syz [ 776.947229][ T1559] usb 5-1: Manufacturer: syz [ 776.952219][ T1559] usb 5-1: SerialNumber: syz [ 776.983989][ T1559] usb 5-1: config 0 descriptor?? [ 776.989616][T15350] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 777.250034][ T5812] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 777.408646][T15368] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2272'. [ 777.417970][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'. [ 777.545627][ T30] audit: type=1400 audit(2000000473.575:3081): avc: denied { bind } for pid=15349 comm="syz.4.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 777.568910][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 777.583522][ T30] audit: type=1400 audit(2000000473.575:3082): avc: denied { name_bind } for pid=15349 comm="syz.4.2272" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 777.620532][ T5812] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 777.647136][ T30] audit: type=1400 audit(2000000473.575:3083): avc: denied { node_bind } for pid=15349 comm="syz.4.2272" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 777.687844][ T5812] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 777.697067][ T1559] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 777.704553][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.722707][ T1559] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 777.731046][ T5812] usb 2-1: Product: syz [ 777.740500][ T5812] usb 2-1: Manufacturer: syz [ 777.793158][ T5812] usb 2-1: SerialNumber: syz [ 777.801495][ T1559] usb 5-1: USB disconnect, device number 68 [ 777.842176][ T5812] usb 2-1: config 0 descriptor?? [ 777.863597][ T5812] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 777.889766][ T5812] usb 2-1: Detected FT232R [ 778.005281][ T30] audit: type=1400 audit(2000000474.173:3084): avc: denied { mounton } for pid=15374 comm="syz.6.2280" path="/133/file0" dev="tmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 778.043929][ T30] audit: type=1400 audit(2000000474.205:3085): avc: denied { mount } for pid=15374 comm="syz.6.2280" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 778.784473][T15364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.793101][T15364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.811073][ T5812] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 779.050424][ T789] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 779.207764][ T789] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 779.220185][ T789] usb 4-1: config 0 has no interface number 0 [ 779.240439][ T789] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 779.289826][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.320034][ T5812] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 779.329063][ T789] usb 4-1: config 0 descriptor?? [ 779.375922][ T789] usb 4-1: selecting invalid altsetting 1 [ 779.393612][ T789] dvb_ttusb_budget: ttusb_init_controller: error [ 779.415950][ T789] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 779.515725][ T789] DVB: Unable to find symbol cx22700_attach() [ 780.555653][ T789] DVB: Unable to find symbol tda10046_attach() [ 780.562885][ T789] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 780.898337][ T5812] usb 2-1: USB disconnect, device number 84 [ 780.898620][ T789] usb 4-1: USB disconnect, device number 62 [ 780.909115][ T5812] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 780.921025][ T5812] ftdi_sio 2-1:0.0: device disconnected [ 781.189113][ T30] audit: type=1400 audit(2000000477.512:3086): avc: denied { unmount } for pid=13134 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 781.340824][T15399] input: syz1 as /devices/virtual/input/input41 [ 781.346338][ T30] audit: type=1400 audit(2000000477.512:3087): avc: denied { create } for pid=15394 comm="syz.1.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 781.481996][ T30] audit: type=1400 audit(2000000477.512:3088): avc: denied { setopt } for pid=15394 comm="syz.1.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 781.667703][ T30] audit: type=1400 audit(2000000477.512:3089): avc: denied { write } for pid=15394 comm="syz.1.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 781.755028][ T30] audit: type=1400 audit(2000000477.554:3090): avc: denied { ioctl } for pid=15394 comm="syz.1.2285" path="socket:[52559]" dev="sockfs" ino=52559 ioctlcmd=0x52c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 781.873581][ T30] audit: type=1400 audit(2000000477.648:3091): avc: denied { ioctl } for pid=15397 comm="syz.5.2283" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 781.957744][ T30] audit: type=1400 audit(2000000477.837:3092): avc: denied { read } for pid=5162 comm="acpid" name="event4" dev="devtmpfs" ino=3888 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 782.024063][ T30] audit: type=1400 audit(2000000477.837:3093): avc: denied { open } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3888 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 782.090945][ T30] audit: type=1400 audit(2000000477.837:3094): avc: denied { ioctl } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3888 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 782.180441][ T30] audit: type=1800 audit(2000000477.984:3095): pid=15398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2283" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 782.249759][T15407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.280255][T15407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.402459][ T30] audit: type=1400 audit(2000000478.782:3096): avc: denied { mount } for pid=15410 comm="syz.6.2289" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 782.931386][ T5813] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 783.010663][T15420] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.017907][T15420] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.051331][T15420] bridge0: entered allmulticast mode [ 783.099215][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 783.113063][T15420] bridge_slave_1: left allmulticast mode [ 783.128322][T15420] bridge_slave_1: left promiscuous mode [ 783.129781][T15426] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 783.143830][T15420] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.164172][T15420] bridge_slave_0: left allmulticast mode [ 783.164737][T15421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.183664][T15420] bridge_slave_0: left promiscuous mode [ 783.184421][T15421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.202163][T15420] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.252066][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 783.258433][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 783.269332][ T9] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 783.299899][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.318063][ T9] usb 7-1: Product: syz [ 783.331771][T15429] fuse: blksize only supported for fuseblk [ 783.338100][ T9] usb 7-1: Manufacturer: syz [ 783.344000][ T9] usb 7-1: SerialNumber: syz [ 783.356108][ T9] usb 7-1: config 0 descriptor?? [ 783.384836][ T9] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 783.442241][ T9] usb 7-1: Detected FT232R [ 783.597843][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 783.610147][T15417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.633772][T15417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.666422][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 784.017059][ T9] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 784.035647][ T9] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 784.062220][ T9] usb 7-1: USB disconnect, device number 19 [ 784.081423][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 784.097742][ T9] ftdi_sio 7-1:0.0: device disconnected [ 784.160975][T15435] FAT-fs (loop7): unable to read boot sector [ 784.168844][T15442] netlink: 'syz.1.2295': attribute type 21 has an invalid length. [ 784.594781][ T5889] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 784.758121][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 784.778080][ T5889] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 784.804869][ T5889] usb 7-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 784.814159][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.824493][ T5889] usb 7-1: config 0 descriptor?? [ 784.884058][T15454] cgroup: noprefix used incorrectly [ 785.274621][ T5889] saitek 0003:06A3:0621.0014: unknown main item tag 0x0 [ 785.281813][ T5889] saitek 0003:06A3:0621.0014: unknown main item tag 0x0 [ 785.292775][ T5889] saitek 0003:06A3:0621.0014: unknown main item tag 0x0 [ 785.299864][ T5889] saitek 0003:06A3:0621.0014: unknown main item tag 0x0 [ 785.307730][ T5889] saitek 0003:06A3:0621.0014: unknown main item tag 0x0 [ 785.326605][ T5889] saitek 0003:06A3:0621.0014: unknown main item tag 0x0 [ 785.336361][ T5889] saitek 0003:06A3:0621.0014: unknown main item tag 0x0 [ 785.379583][ T5889] saitek 0003:06A3:0621.0014: unknown main item tag 0x0 [ 785.395236][ T5889] saitek 0003:06A3:0621.0014: unknown main item tag 0x0 [ 785.408471][ T5889] saitek 0003:06A3:0621.0014: unknown main item tag 0x0 [ 785.408536][T15462] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 785.483189][ T5889] saitek 0003:06A3:0621.0014: hidraw0: USB HID v0.fe Device [HID 06a3:0621] on usb-dummy_hcd.6-1/input0 [ 785.524589][ T5889] usb 7-1: USB disconnect, device number 20 [ 785.601569][T15463] fido_id[15463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 786.843372][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.873840][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.966562][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 786.966578][ T30] audit: type=1400 audit(2000000483.579:3104): avc: denied { unlink } for pid=5804 comm="syz-executor" name="file0" dev="tmpfs" ino=2147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 787.324515][ T30] audit: type=1400 audit(2000000483.611:3105): avc: denied { getopt } for pid=15481 comm="syz.5.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 787.375227][ T30] audit: type=1400 audit(2000000483.978:3106): avc: denied { ioctl } for pid=15481 comm="syz.5.2308" path="socket:[52754]" dev="sockfs" ino=52754 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 787.466512][ T30] audit: type=1400 audit(2000000483.978:3107): avc: denied { setopt } for pid=15481 comm="syz.5.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 787.584262][T15499] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 787.671786][ T789] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 787.718741][ T5812] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 787.833056][ T789] usb 4-1: Using ep0 maxpacket: 16 [ 787.841124][ T789] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 787.850456][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.858473][ T789] usb 4-1: Product: syz [ 787.861729][ T5812] usb 7-1: Using ep0 maxpacket: 8 [ 787.862783][ T789] usb 4-1: Manufacturer: syz [ 787.872277][ T789] usb 4-1: SerialNumber: syz [ 787.873968][ T5812] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 787.891642][ T5812] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 787.902863][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.911014][ T5812] usb 7-1: Product: syz [ 787.915175][ T5812] usb 7-1: Manufacturer: syz [ 787.920792][ T5812] usb 7-1: SerialNumber: syz [ 787.928762][ T5812] usb 7-1: config 0 descriptor?? [ 787.936756][ T5812] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 787.943567][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 787.964654][T15504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.976695][T15504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.133827][ T9] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 788.144183][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 788.298157][T15507] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2310'. [ 788.359646][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 788.380238][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.444118][ T9] usb 2-1: Product: syz [ 788.448333][ T9] usb 2-1: Manufacturer: syz [ 788.453288][ T9] usb 2-1: SerialNumber: syz [ 788.522444][ T789] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 788.573300][ T789] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 788.603105][ T789] usb 4-1: USB disconnect, device number 63 [ 788.615389][ T5812] gspca_zc3xx: reg_w_i err -71 [ 788.616733][T14904] udevd[14904]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.216991][ T5812] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 789.342922][ T5812] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 789.439796][ T30] audit: type=1400 audit(2000000486.172:3108): avc: denied { append } for pid=15524 comm="syz.5.2320" name="sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 789.464400][ T5813] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 789.520325][ T5812] usb 7-1: USB disconnect, device number 21 [ 789.680642][ T30] audit: type=1400 audit(2000000486.414:3109): avc: denied { write } for pid=15533 comm="syz.3.2322" name="ip_tables_targets" dev="proc" ino=4026533319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 789.724776][ T30] audit: type=1400 audit(2000000486.424:3110): avc: denied { create } for pid=15533 comm="syz.3.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 789.801033][ T30] audit: type=1400 audit(2000000486.424:3111): avc: denied { getopt } for pid=15533 comm="syz.3.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 789.846354][ T5812] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 789.873060][ T30] audit: type=1400 audit(2000000486.424:3112): avc: denied { create } for pid=15533 comm="syz.3.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 789.917023][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2324'. [ 790.045364][ T5812] usb 7-1: Using ep0 maxpacket: 32 [ 790.053673][ T5812] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 790.064264][ T5812] usb 7-1: config 0 has no interface number 0 [ 790.077444][ T5812] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 790.107247][ T5812] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 790.161291][ T5812] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 790.184886][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.195435][ T5812] usb 7-1: Product: syz [ 790.200506][ T5812] usb 7-1: Manufacturer: syz [ 790.213276][ T5812] usb 7-1: SerialNumber: syz [ 790.227745][ T5812] usb 7-1: config 0 descriptor?? [ 790.304772][T15553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.324433][T15553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.333151][ T30] audit: type=1400 audit(2000000487.096:3113): avc: denied { read write } for pid=15554 comm="syz.3.2326" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 790.539717][ T9] rtl8150 2-1:1.0: couldn't find required endpoints [ 790.547360][ T9] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 791.504008][ T5812] radio-si470x 7-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 791.525090][ T5812] radio-si470x 7-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 791.548121][ T9] usb 2-1: USB disconnect, device number 85 [ 791.867522][ T5812] radio-si470x 7-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 791.881502][ T5812] radio-si470x 7-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 791.901030][ T5812] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 791.932463][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 791.932479][ T30] audit: type=1400 audit(2000000488.786:3120): avc: denied { write } for pid=15559 comm="syz.1.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 791.939198][ T5812] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 791.996809][ T5812] usb 7-1: USB disconnect, device number 22 [ 792.149237][T15568] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 792.990323][T15579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2333'. [ 793.059040][ T30] audit: type=1400 audit(2000000489.962:3121): avc: denied { ioctl } for pid=15578 comm="syz.3.2333" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 793.362070][ T30] audit: type=1400 audit(2000000490.288:3122): avc: denied { ioctl } for pid=15585 comm="syz.3.2335" path="socket:[53669]" dev="sockfs" ino=53669 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 793.520696][ T5812] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 793.572669][T15595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.590447][T15595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.674197][ T5812] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 793.744600][ T5812] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 793.756443][ T5812] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 793.770075][ T5812] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 793.780134][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.757228][ T5812] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 794.765689][ T5812] usb 7-1: invalid MIDI out EP 0 [ 795.020354][ T30] audit: type=1400 audit(2000000492.030:3123): avc: denied { create } for pid=15590 comm="syz.6.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 795.040339][ T30] audit: type=1400 audit(2000000492.030:3124): avc: denied { listen } for pid=15590 comm="syz.6.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 795.060896][ T30] audit: type=1400 audit(2000000492.041:3125): avc: denied { accept } for pid=15590 comm="syz.6.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 795.116741][ T30] audit: type=1400 audit(2000000492.093:3126): avc: denied { append } for pid=15590 comm="syz.6.2336" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 795.182509][T15592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.192539][ T5812] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 795.193128][T15592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.253002][ T789] usb 7-1: USB disconnect, device number 23 [ 795.265662][ T30] audit: type=1400 audit(2000000492.293:3127): avc: denied { name_bind } for pid=15603 comm="syz.4.2339" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 795.352138][ T30] audit: type=1400 audit(2000000492.377:3128): avc: denied { getopt } for pid=15603 comm="syz.4.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 795.401696][ T30] audit: type=1400 audit(2000000492.429:3129): avc: denied { read } for pid=15604 comm="syz.3.2340" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 797.206829][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 798.320964][ T5875] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 798.499155][ T5875] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 798.524865][ T5875] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 798.570855][ T5875] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 798.597587][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.881179][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2355'. [ 798.902503][T15650] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2355'. [ 798.988084][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 798.988096][ T30] audit: type=1400 audit(2000000496.198:3133): avc: denied { ioctl } for pid=15648 comm="syz.5.2355" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 799.139975][ T5812] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 799.288365][ T5812] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 799.299740][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.310218][ T5812] usb 4-1: Product: syz [ 799.314709][ T5812] usb 4-1: Manufacturer: syz [ 799.420640][ T5812] usb 4-1: SerialNumber: syz [ 799.434810][ T5875] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 799.439050][ T5812] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 799.557793][ T30] audit: type=1326 audit(2000000496.744:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.1.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e93d9c799 code=0x7ffc0000 [ 799.964542][ T5875] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input44 [ 799.976931][ T30] audit: type=1326 audit(2000000496.744:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.1.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e93d9c799 code=0x7ffc0000 [ 800.001080][ T30] audit: type=1326 audit(2000000496.754:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.1.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9e93d9c799 code=0x7ffc0000 [ 800.030564][ T5875] input: failed to attach handler kbd to device input44, error: -5 [ 800.043912][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 800.053034][ T30] audit: type=1400 audit(2000000496.754:3137): avc: denied { mounton } for pid=15652 comm="syz.1.2343" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 800.109696][ T30] audit: type=1400 audit(2000000497.132:3138): avc: denied { remount } for pid=15652 comm="syz.1.2343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 800.164707][ T30] audit: type=1326 audit(2000000497.426:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.1.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e93d9c799 code=0x7ffc0000 [ 800.199784][ T5875] usb 7-1: USB disconnect, device number 24 [ 800.212685][ T30] audit: type=1326 audit(2000000497.426:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.1.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e93d9c799 code=0x7ffc0000 [ 800.477952][ T789] usb 4-1: USB disconnect, device number 64 [ 800.507604][T15667] use of bytesused == 0 is deprecated and will be removed in the future, [ 800.521235][T15667] use the actual size instead. [ 800.588534][T15673] veth0: entered promiscuous mode [ 800.593953][T15673] veth0: left promiscuous mode [ 800.602818][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c2d [ 800.611034][T15675] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2360'. [ 800.652661][T15678] tc_dump_action: action bad kind [ 800.806603][T15686] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2365'. [ 800.822845][ T30] audit: type=1400 audit(2000000498.119:3141): avc: denied { ioctl } for pid=15685 comm="syz.5.2365" path="socket:[54468]" dev="sockfs" ino=54468 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 801.019452][ T30] audit: type=1400 audit(2000000498.329:3142): avc: denied { create } for pid=15689 comm="syz.1.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 802.038966][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 802.064604][ T9] ath9k_htc: Failed to initialize the device [ 802.095710][ T789] usb 4-1: ath9k_htc: USB layer deinitialized [ 802.543879][T15708] No such timeout policy "syz1" [ 802.949596][T15710] syzkaller0: entered promiscuous mode [ 802.950217][T15712] FAULT_INJECTION: forcing a failure. [ 802.950217][T15712] name failslab, interval 1, probability 0, space 0, times 0 [ 802.955151][T15710] syzkaller0: entered allmulticast mode [ 803.064669][T15712] CPU: 0 UID: 0 PID: 15712 Comm: syz.1.2372 Tainted: G L syzkaller #0 PREEMPT(full) [ 803.064702][T15712] Tainted: [L]=SOFTLOCKUP [ 803.064708][T15712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 803.064720][T15712] Call Trace: [ 803.064726][T15712] [ 803.064733][T15712] dump_stack_lvl+0x100/0x190 [ 803.064767][T15712] should_fail_ex.cold+0x5/0xa [ 803.064791][T15712] should_failslab+0xc2/0x120 [ 803.064809][T15712] __kmalloc_cache_noprof+0x7a/0x6f0 [ 803.064830][T15712] ? v9fs_get_tree+0x9c/0xb50 [ 803.064860][T15712] v9fs_get_tree+0x9c/0xb50 [ 803.064884][T15712] ? rcu_is_watching+0x12/0xc0 [ 803.064906][T15712] ? __pfx_v9fs_get_tree+0x10/0x10 [ 803.064935][T15712] ? bpf_lsm_capable+0x9/0x10 [ 803.064953][T15712] ? security_capable+0x80/0x260 [ 803.064984][T15712] vfs_get_tree+0x92/0x320 [ 803.065009][T15712] path_mount+0x7d0/0x23d0 [ 803.065037][T15712] ? __pfx_path_mount+0x10/0x10 [ 803.065057][T15712] ? lockdep_hardirqs_on+0x78/0x100 [ 803.065081][T15712] ? putname+0xb1/0x110 [ 803.065100][T15712] ? kmem_cache_free+0x124/0x6a0 [ 803.065132][T15712] ? __x64_sys_mount+0x293/0x310 [ 803.065160][T15712] __x64_sys_mount+0x293/0x310 [ 803.065184][T15712] ? __pfx___x64_sys_mount+0x10/0x10 [ 803.065212][T15712] do_syscall_64+0x106/0xf80 [ 803.065231][T15712] ? clear_bhb_loop+0x40/0x90 [ 803.065253][T15712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.065270][T15712] RIP: 0033:0x7f9e93d9c799 [ 803.065287][T15712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.065303][T15712] RSP: 002b:00007f9e94d17028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 803.065321][T15712] RAX: ffffffffffffffda RBX: 00007f9e94015fa0 RCX: 00007f9e93d9c799 [ 803.065333][T15712] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 803.065343][T15712] RBP: 00007f9e94d17090 R08: 0000200000000180 R09: 0000000000000000 [ 803.065354][T15712] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000002 [ 803.065364][T15712] R13: 00007f9e94016038 R14: 00007f9e94015fa0 R15: 00007ffdf50707b8 [ 803.065389][T15712] [ 804.783233][T15739] ubi: mtd0 is already attached to ubi31 [ 805.967099][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 805.968122][ T30] audit: type=1400 audit(2000000503.505:3150): avc: denied { mount } for pid=15744 comm="syz.3.2382" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 806.549048][T15751] netlink: 328 bytes leftover after parsing attributes in process `syz.4.2383'. [ 806.636037][ T30] audit: type=1400 audit(2000000504.218:3151): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 807.619336][T15765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2387'. [ 807.703686][ T789] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 807.858038][ T789] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 807.893323][ T789] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 807.942935][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.379955][ T30] audit: type=1400 audit(2000000505.993:3152): avc: denied { map } for pid=15767 comm="syz.1.2389" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 810.086775][T15790] ubi: mtd0 is already attached to ubi31 [ 811.008628][ T789] usb 4-1: string descriptor 0 read error: -71 [ 811.047430][ T789] hub 4-1:32.0: bad descriptor, ignoring hub [ 811.053487][ T789] hub 4-1:32.0: probe with driver hub failed with error -5 [ 811.728159][ T789] usb 4-1: USB disconnect, device number 65 [ 812.080471][ T30] audit: type=1400 audit(2000000509.940:3153): avc: denied { relabelfrom } for pid=15809 comm="syz.5.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 812.187319][ T30] audit: type=1400 audit(2000000509.940:3154): avc: denied { relabelto } for pid=15809 comm="syz.5.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 812.263846][ T30] audit: type=1400 audit(2000000509.992:3155): avc: denied { ioctl } for pid=15809 comm="syz.5.2399" path="socket:[54946]" dev="sockfs" ino=54946 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 812.267631][T15811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 812.449464][T15811] veth0_to_team: mtu less than device minimum [ 813.118395][ T30] audit: type=1400 audit(2000000511.032:3156): avc: denied { read } for pid=15815 comm="syz.5.2401" path="socket:[55027]" dev="sockfs" ino=55027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 813.514139][T15825] FAULT_INJECTION: forcing a failure. [ 813.514139][T15825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.556605][T15825] CPU: 1 UID: 0 PID: 15825 Comm: syz.5.2404 Tainted: G L syzkaller #0 PREEMPT(full) [ 813.556637][T15825] Tainted: [L]=SOFTLOCKUP [ 813.556644][T15825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 813.556655][T15825] Call Trace: [ 813.556661][T15825] [ 813.556668][T15825] dump_stack_lvl+0x100/0x190 [ 813.556702][T15825] should_fail_ex.cold+0x5/0xa [ 813.556725][T15825] _copy_from_user+0x2e/0xd0 [ 813.556753][T15825] copy_msghdr_from_user+0x9f/0x4f0 [ 813.556780][T15825] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 813.556817][T15825] ___sys_sendmsg+0x106/0x1e0 [ 813.556842][T15825] ? __pfx____sys_sendmsg+0x10/0x10 [ 813.556897][T15825] __sys_sendmsg+0x170/0x220 [ 813.556917][T15825] ? __pfx___sys_sendmsg+0x10/0x10 [ 813.556952][T15825] do_syscall_64+0x106/0xf80 [ 813.556970][T15825] ? clear_bhb_loop+0x40/0x90 [ 813.556990][T15825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.557007][T15825] RIP: 0033:0x7fa69f59c799 [ 813.557022][T15825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.557039][T15825] RSP: 002b:00007fa6a03cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 813.557058][T15825] RAX: ffffffffffffffda RBX: 00007fa69f816090 RCX: 00007fa69f59c799 [ 813.557069][T15825] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 813.557080][T15825] RBP: 00007fa6a03cb090 R08: 0000000000000000 R09: 0000000000000000 [ 813.557090][T15825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.557101][T15825] R13: 00007fa69f816128 R14: 00007fa69f816090 R15: 00007ffc4d23a1b8 [ 813.557126][T15825] [ 814.647403][ T30] audit: type=1400 audit(2000000512.627:3157): avc: denied { read } for pid=15832 comm="syz.6.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 814.810108][T15841] netlink: 328 bytes leftover after parsing attributes in process `syz.5.2408'. [ 814.940331][T15836] batman_adv: batadv0: Removing interface: macvlan1 [ 815.400562][ T5812] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 815.554199][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 815.563836][ T5812] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 815.572582][ T5812] usb 2-1: config 179 has no interface number 0 [ 815.579127][ T5812] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 815.616408][ T5812] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 815.776411][ T5812] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 815.843194][ T5812] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 815.912123][ T5812] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 815.977839][ T5812] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 815.989167][T15852] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2411'. [ 815.998389][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.006652][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2411'. [ 816.022059][T15839] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 816.312063][ T5812] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 816.334948][ T5889] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input45 [ 816.434697][ T30] audit: type=1400 audit(2000000514.507:3158): avc: denied { getopt } for pid=15857 comm="syz.3.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 816.478280][ T5812] usb 7-1: unable to get BOS descriptor or descriptor too short [ 816.491185][ T5812] usb 7-1: New USB device found, idVendor=0930, idProduct=4700, bcdDevice= 0.40 [ 816.502002][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.511348][ T5812] usb 7-1: Product: syz [ 816.515767][ T5812] usb 7-1: Manufacturer: syz [ 816.520384][ T5812] usb 7-1: SerialNumber: syz [ 816.686206][ T5889] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 816.805965][ T9] usb 2-1: USB disconnect, device number 86 [ 816.806024][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 816.806069][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 816.896452][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 816.903992][ T5812] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 816.914034][ T5889] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 816.928711][ T5812] usb 7-1: MIDIStreaming interface descriptor not found [ 816.937728][ T5889] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 816.966393][ T5889] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 816.989830][ T5889] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 817.013331][ T5889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 817.024567][ T5812] usb 7-1: USB disconnect, device number 25 [ 817.030932][ T5889] usb 4-1: config 0 has no interface number 0 [ 817.046669][ T5889] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 817.059954][ T5889] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 817.070006][T14930] udevd[14930]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.070280][ T5889] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 817.116883][ T5889] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 817.135357][ T5889] usb 4-1: config 0 interface 125 has no altsetting 0 [ 817.143905][ T5889] usb 4-1: config 0 interface 125 has no altsetting 2 [ 817.152683][ T5889] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 817.167558][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.175969][ T5889] usb 4-1: Product: syz [ 817.182152][ T5889] usb 4-1: Manufacturer: syz [ 817.189403][ T5889] usb 4-1: SerialNumber: syz [ 817.219236][ T5889] usb 4-1: config 0 descriptor?? [ 817.244770][ T5889] usb 4-1: selecting invalid altsetting 2 [ 817.947258][ C0] usb 4-1: async_complete: urb error -71 [ 817.952984][ C0] usb 4-1: async_complete: urb error -71 [ 817.958642][ C0] usb 4-1: async_complete: urb error -71 [ 817.964292][ C0] usb 4-1: async_complete: urb error -71 [ 818.240221][T15880] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.2418' sets config #0 [ 818.513493][ T5889] get_1284_register: usb error -71 [ 818.518810][ T5889] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 818.531586][ T5889] usb 4-1: USB disconnect, device number 66 [ 818.567815][T15882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.596327][T15882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.643039][T15888] netlink: 328 bytes leftover after parsing attributes in process `syz.1.2419'. [ 818.655982][T15882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.665789][T15882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.680036][T15882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.695264][T15882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.953452][ T5812] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 819.177813][ T5812] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 819.186048][ T5812] usb 5-1: config 0 has no interface number 0 [ 819.192656][ T5812] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 819.837240][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.861615][ T5812] usb 5-1: config 0 descriptor?? [ 819.877918][ T5812] usb 5-1: selecting invalid altsetting 1 [ 819.888845][ T5812] dvb_ttusb_budget: ttusb_init_controller: error [ 819.895270][ T5812] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 819.987730][T15908] netlink: 'syz.6.2428': attribute type 1 has an invalid length. [ 820.053114][T15908] netlink: 760 bytes leftover after parsing attributes in process `syz.6.2428'. [ 820.054107][T15909] netlink: 'syz.5.2427': attribute type 1 has an invalid length. [ 820.063940][T15908] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2428'. [ 820.094512][ T5812] DVB: Unable to find symbol cx22700_attach() [ 820.139944][T15913] ext3: Unknown parameter 'barrier{—.‹h×nOŽšœGÆð.xK—)Š`66B6(ZX­.×' [ 820.168859][ T5812] DVB: Unable to find symbol tda10046_attach() [ 820.179296][ T5812] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 820.753485][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2433'. [ 820.817232][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2433'. [ 820.856425][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2433'. [ 820.868156][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2433'. [ 820.881896][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2433'. [ 820.892445][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2433'. [ 821.525493][T15925] ubi: mtd0 is already attached to ubi31 [ 822.238090][ T5889] usb 5-1: USB disconnect, device number 69 [ 822.322102][ T975] hid_parser_main: 28 callbacks suppressed [ 822.322121][ T975] hid-generic 8A53:0000:0000.0015: unknown main item tag 0x0 [ 822.392479][ T975] hid-generic 8A53:0000:0000.0015: unknown main item tag 0x0 [ 822.465433][ T975] hid-generic 8A53:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 823.478030][ T5889] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 823.735556][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 823.744693][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.795180][ T5889] usb 5-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 823.874254][ T5889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 823.949206][ T5889] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 823.964204][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.040838][ T5889] usb 5-1: config 0 descriptor?? [ 824.104832][ T5889] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 824.288642][ T30] audit: type=1400 audit(2000000522.758:3159): avc: denied { read } for pid=15958 comm="syz.6.2443" laddr=::1 lport=46475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 825.043622][ T975] usb 5-1: USB disconnect, device number 70 [ 825.447293][T15978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.492745][T15978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.546862][ T30] audit: type=1400 audit(2000000524.070:3160): avc: denied { bind } for pid=15958 comm="syz.6.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 825.583997][T15983] netlink: 'syz.5.2446': attribute type 5 has an invalid length. [ 825.823250][ T30] audit: type=1400 audit(2000000524.364:3161): avc: denied { append } for pid=15984 comm="syz.1.2447" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 826.424876][ T6304] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.450742][ T6304] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.541415][ T6304] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.562383][ T6304] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.247770][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 827.779263][T16002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 828.176524][ T5812] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 828.196290][T16012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2453'. [ 828.242131][ T30] audit: type=1400 audit(2000000526.863:3162): avc: denied { write } for pid=16014 comm="syz.3.2454" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 828.319739][ T30] audit: type=1400 audit(2000000526.863:3163): avc: denied { open } for pid=16014 comm="syz.3.2454" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 828.460492][ T5812] usb 7-1: Using ep0 maxpacket: 8 [ 828.481990][ T5812] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 828.571337][ T5812] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 828.583987][ T5812] usb 7-1: config 0 has no interface number 0 [ 828.593370][ T5812] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 828.605601][ T5812] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 828.631716][ T5812] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 829.054222][ T5812] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 829.074400][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 829.082844][ T5812] usb 7-1: Product: syz [ 829.088327][ T5812] usb 7-1: config 0 descriptor?? [ 829.113669][T16006] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 829.182029][ T30] audit: type=1400 audit(2000000527.891:3164): avc: denied { ioctl } for pid=16008 comm="syz.1.2453" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 829.278525][ T30] audit: type=1400 audit(2000000527.975:3165): avc: denied { read append } for pid=16014 comm="syz.3.2454" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 829.348379][ T30] audit: type=1400 audit(2000000527.975:3166): avc: denied { ioctl } for pid=16014 comm="syz.3.2454" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 829.698851][T16034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2457'. [ 829.805987][ T30] audit: type=1400 audit(2000000528.521:3167): avc: denied { connect } for pid=16030 comm="syz.1.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 830.061386][ T30] audit: type=1400 audit(2000000528.815:3168): avc: denied { append } for pid=16035 comm="syz.5.2458" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 830.102742][T16036] input: syz1 as /devices/virtual/input/input47 [ 830.126289][ T30] audit: type=1400 audit(2000000528.857:3169): avc: denied { ioctl } for pid=16035 comm="syz.5.2458" path="socket:[56455]" dev="sockfs" ino=56455 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 831.350936][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2461'. [ 831.434473][T16054] vivid-000: disconnect [ 831.742136][T16048] vivid-000: reconnect [ 832.582251][T16065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16065 comm=syz.6.2465 [ 832.594036][T16067] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2466'. [ 833.222639][ T30] audit: type=1326 audit(2000000532.101:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16070 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225199c799 code=0x7ffc0000 [ 833.260973][T16071] lo speed is unknown, defaulting to 1000 [ 833.397478][ T30] audit: type=1326 audit(2000000532.101:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16070 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225199c799 code=0x7ffc0000 [ 833.423464][ T30] audit: type=1326 audit(2000000532.101:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16070 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f225199c799 code=0x7ffc0000 [ 833.449075][ T30] audit: type=1326 audit(2000000532.101:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16070 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225199c799 code=0x7ffc0000 [ 833.680345][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2470'. [ 834.343471][T16098] SQUASHFS error: Failed to read block 0x0: -5 [ 835.153776][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 835.153809][ T30] audit: type=1400 audit(2000000534.127:3196): avc: denied { read } for pid=16097 comm="syz.4.2471" dev="sockfs" ino=57406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 835.182798][T16072] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 835.604044][ T30] audit: type=1326 audit(2000000534.201:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16070 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225199c799 code=0x7ffc0000 [ 835.654635][ T5812] usb 7-1: USB disconnect, device number 26 [ 835.777910][ T30] audit: type=1326 audit(2000000534.201:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16070 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225199c799 code=0x7ffc0000 [ 836.261764][ T30] audit: type=1400 audit(2000000535.314:3199): avc: denied { ioctl } for pid=16088 comm="syz.1.2468" path="socket:[56615]" dev="sockfs" ino=56615 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 836.290349][ T789] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 837.433271][ T789] usb 5-1: Using ep0 maxpacket: 8 [ 837.545761][ T30] audit: type=1400 audit(2000000535.314:3200): avc: denied { bind } for pid=16088 comm="syz.1.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 837.600076][ T789] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 837.623584][ T789] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 837.632018][ T789] usb 5-1: config 0 has no interface number 0 [ 837.662612][ T30] audit: type=1400 audit(2000000535.461:3201): avc: denied { bind } for pid=16111 comm="syz.3.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 837.717246][ T789] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 837.774502][ T30] audit: type=1400 audit(2000000535.461:3202): avc: denied { setopt } for pid=16111 comm="syz.3.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 837.805014][ T789] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 837.832289][ T789] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 837.872089][ T30] audit: type=1400 audit(2000000536.804:3203): avc: denied { mount } for pid=16121 comm="syz.6.2479" name="/" dev="autofs" ino=57448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 837.944424][ T30] audit: type=1400 audit(2000000536.941:3204): avc: denied { shutdown } for pid=16121 comm="syz.6.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 838.004828][ T789] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 838.039697][ T789] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 838.538626][ T789] usb 5-1: Product: syz [ 838.564371][ T789] usb 5-1: config 0 descriptor?? [ 838.579233][T16114] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 839.030487][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2483'. [ 840.153485][ T789] usb 5-1: USB disconnect, device number 71 [ 841.056556][ T30] audit: type=1400 audit(2000000540.363:3205): avc: denied { mounton } for pid=16162 comm="syz.1.2490" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 841.237809][ T30] audit: type=1400 audit(2000000540.552:3206): avc: denied { connect } for pid=16162 comm="syz.1.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 841.702631][T16172] netlink: 49 bytes leftover after parsing attributes in process `syz.1.2490'. [ 841.713076][ T30] audit: type=1400 audit(2000000541.024:3207): avc: denied { write } for pid=16162 comm="syz.1.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 842.077919][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2494'. [ 843.380093][ T789] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 843.388184][ T30] audit: type=1400 audit(2000000542.788:3208): avc: denied { view } for pid=16192 comm="syz.6.2499" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 843.577070][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 843.592264][ T789] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 843.601199][ T789] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 843.611484][ T789] usb 2-1: config 0 has no interface number 0 [ 843.620002][ T789] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 843.634789][ T789] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 843.654328][ T789] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 843.676924][ T789] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 843.688136][ T789] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 843.702688][ T789] usb 2-1: Product: syz [ 843.711822][ T789] usb 2-1: config 0 descriptor?? [ 843.737632][T16189] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 843.832461][T16205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 843.858239][T16205] autofs: Bad value for 'fd' [ 844.072099][T16191] ubi: mtd0 is already attached to ubi31 [ 844.118116][ T975] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 844.648142][ T975] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 844.661190][ T975] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 845.162524][ T975] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 845.186290][ T975] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 845.195658][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.211061][ T975] usb 4-1: Product: syz [ 845.222208][ T975] usb 4-1: Manufacturer: syz [ 845.227132][ T975] usb 4-1: SerialNumber: syz [ 845.241092][ T975] usb 4-1: config 0 descriptor?? [ 845.249335][T16207] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 845.261324][T16207] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 845.271755][ T975] usb 4-1: ucan: probing device on interface #0 [ 845.566072][ T789] usb 2-1: USB disconnect, device number 87 [ 845.713093][ T975] usb 4-1: ucan: failed to retrieve device info [ 845.719338][ T975] usb 4-1: ucan: probe failed; try to update the device firmware [ 846.234404][ T30] audit: type=1400 audit(2000000545.791:3209): avc: denied { create } for pid=16223 comm="syz.4.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 846.283161][ T30] audit: type=1400 audit(2000000545.843:3210): avc: denied { write } for pid=16223 comm="syz.4.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 846.317104][ T30] audit: type=1400 audit(2000000545.875:3211): avc: denied { append } for pid=16239 comm="syz.5.2513" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 846.513332][T16242] tmpfs: Unknown parameter 'fsr' [ 846.606725][ T30] audit: type=1400 audit(2000000546.116:3212): avc: denied { getopt } for pid=16239 comm="syz.5.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 846.859723][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'. [ 847.830777][ T5812] usb 4-1: USB disconnect, device number 67 [ 848.362472][ T30] audit: type=1326 audit(2000000548.027:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225199c799 code=0x7ffc0000 [ 848.457943][ T30] audit: type=1326 audit(2000000548.027:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225199c799 code=0x7ffc0000 [ 848.540463][ T30] audit: type=1326 audit(2000000548.058:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f225199c799 code=0x7ffc0000 [ 848.578617][ T30] audit: type=1326 audit(2000000548.058:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225199c799 code=0x7ffc0000 [ 848.662267][ T30] audit: type=1326 audit(2000000548.058:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225199c799 code=0x7ffc0000 [ 848.722745][ T30] audit: type=1326 audit(2000000548.069:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f225199c799 code=0x7ffc0000 [ 848.784624][T16266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.817559][T16266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.035181][ T5812] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 849.042990][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 849.330590][ T5812] usb 2-1: device descriptor read/64, error -32 [ 849.959323][ T5812] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 850.115926][T16275] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 850.140733][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 850.141074][ T789] ------------[ cut here ]------------ [ 850.151035][ T5812] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 850.151761][ T789] kernel BUG at net/core/skbuff.c:2306! [ 850.169729][T16275] bond0: (slave gre0): Error -95 calling set_mac_address [ 850.192061][ T789] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 850.198502][ T789] CPU: 1 UID: 0 PID: 789 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 850.209334][ T789] Tainted: [L]=SOFTLOCKUP [ 850.213634][ T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 850.223668][ T789] Workqueue: mld mld_ifc_work [ 850.228339][ T789] RIP: 0010:pskb_expand_head+0xa08/0xfe0 [ 850.233953][ T789] Code: 7e d4 ae f8 be 01 00 00 00 48 89 df e8 31 ec ff ff e9 ea f9 ff ff e8 67 d4 ae f8 90 0f 0b 90 45 31 ed eb 80 e8 59 d4 ae f8 90 <0f> 0b e8 51 d4 ae f8 90 0f 0b e8 49 d4 ae f8 81 cd 00 00 02 00 e9 [ 850.253539][ T789] RSP: 0018:ffffc900037d7620 EFLAGS: 00010293 [ 850.259584][ T789] RAX: 0000000000000000 RBX: ffff8880292e3a00 RCX: ffffffff8959dcce [ 850.267534][ T789] RDX: ffff88802688a4c0 RSI: ffffffff8959e607 RDI: ffff88802688a4c0 [ 850.275483][ T789] RBP: 0000000000000820 R08: 0000000000000005 R09: 0000000000000000 [ 850.283432][ T789] R10: 00000000961a7380 R11: 0000000000000000 R12: ffff8880292e3a00 [ 850.291394][ T789] R13: 00000000961a7a40 R14: dffffc0000000000 R15: 00000000961a7380 [ 850.299347][ T789] FS: 0000000000000000(0000) GS:ffff888124447000(0000) knlGS:0000000000000000 [ 850.308256][ T789] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 850.314820][ T789] CR2: 00007fe98214da08 CR3: 0000000061f60000 CR4: 00000000003526f0 [ 850.322771][ T789] Call Trace: [ 850.326028][ T789] [ 850.328939][ T789] ? __pfx_pskb_expand_head+0x10/0x10 [ 850.334292][ T789] ipgre_header+0xdd/0x540 [ 850.338688][ T789] ? __pfx_ipgre_header+0x10/0x10 [ 850.343691][ T789] neigh_connected_output+0x34d/0x5d0 [ 850.349044][ T789] ip6_finish_output2+0xb0f/0x1ce0 [ 850.354141][ T789] __ip6_finish_output+0x357/0xdf0 [ 850.359256][ T789] ip6_output+0x2aa/0xa60 [ 850.363567][ T789] ? __pfx_ip6_output+0x10/0x10 [ 850.368402][ T789] ? __pfx_ip6_finish_output+0x10/0x10 [ 850.373841][ T789] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 850.379111][ T789] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 850.384381][ T789] ? __pfx_ip6_output+0x10/0x10 [ 850.389212][ T789] NF_HOOK.constprop.0+0x115/0x5a0 [ 850.394308][ T789] ? __pfx_NF_HOOK.constprop.0+0x10/0x10 [ 850.399926][ T789] ? __pfx_dst_output+0x10/0x10 [ 850.404770][ T789] mld_sendpack+0x8f7/0xec0 [ 850.409259][ T789] ? __pfx_mld_sendpack+0x10/0x10 [ 850.414269][ T789] ? finish_task_switch.isra.0+0x200/0xb80 [ 850.420060][ T789] mld_ifc_work+0x75a/0xc10 [ 850.424548][ T789] process_one_work+0x9d7/0x1920 [ 850.429471][ T789] ? __pfx_process_one_work+0x10/0x10 [ 850.434824][ T789] ? __pfx_mld_ifc_work+0x10/0x10 [ 850.439833][ T789] worker_thread+0x5da/0xe40 [ 850.444406][ T789] ? kthread+0x13a/0x450 [ 850.448624][ T789] ? __pfx_worker_thread+0x10/0x10 [ 850.453711][ T789] kthread+0x370/0x450 [ 850.457756][ T789] ? __pfx_kthread+0x10/0x10 [ 850.462323][ T789] ret_from_fork+0x754/0xd80 [ 850.466891][ T789] ? __pfx_ret_from_fork+0x10/0x10 [ 850.471983][ T789] ? __switch_to+0x7b4/0x1120 [ 850.476643][ T789] ? __pfx_kthread+0x10/0x10 [ 850.481219][ T789] ret_from_fork_asm+0x1a/0x30 [ 850.485984][ T789] [ 850.488995][ T789] Modules linked in: [ 850.493494][ T789] ---[ end trace 0000000000000000 ]--- [ 850.828690][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 850.842532][ T789] RIP: 0010:pskb_expand_head+0xa08/0xfe0 [ 850.855235][ T789] Code: 7e d4 ae f8 be 01 00 00 00 48 89 df e8 31 ec ff ff e9 ea f9 ff ff e8 67 d4 ae f8 90 0f 0b 90 45 31 ed eb 80 e8 59 d4 ae f8 90 <0f> 0b e8 51 d4 ae f8 90 0f 0b e8 49 d4 ae f8 81 cd 00 00 02 00 e9 [ 850.875342][ T789] RSP: 0018:ffffc900037d7620 EFLAGS: 00010293 [ 850.876321][ T5812] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 850.881488][ T789] RAX: 0000000000000000 RBX: ffff8880292e3a00 RCX: ffffffff8959dcce [ 850.890813][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.914853][ T5812] usb 2-1: Product: syz [ 850.918262][ T789] RDX: ffff88802688a4c0 RSI: ffffffff8959e607 RDI: ffff88802688a4c0 [ 850.929878][ T789] RBP: 0000000000000820 R08: 0000000000000005 R09: 0000000000000000 [ 850.934172][ T5812] usb 2-1: Manufacturer: syz [ 850.943813][ T789] R10: 00000000961a7380 R11: 0000000000000000 R12: ffff8880292e3a00 [ 850.957793][ T5812] usb 2-1: SerialNumber: syz [ 850.959889][ T789] R13: 00000000961a7a40 R14: dffffc0000000000 R15: 00000000961a7380 [ 850.978366][ T789] FS: 0000000000000000(0000) GS:ffff888124447000(0000) knlGS:0000000000000000 [ 850.996506][ T5812] usb 2-1: config 0 descriptor?? [ 851.002649][ T789] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 851.013779][ T5812] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 851.036050][ T5812] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 851.036148][ T789] CR2: 0000001b2fc11ff8 CR3: 0000000080c17000 CR4: 00000000003526f0 [ 851.065843][ T789] Kernel panic - not syncing: Fatal exception [ 851.072138][ T789] Kernel Offset: disabled [ 851.076441][ T789] Rebooting in 86400 seconds..